last executing test programs: 22.711092261s ago: executing program 1 (id=871): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x200488cc) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 18.624776571s ago: executing program 1 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 15.702522592s ago: executing program 1 (id=893): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x5c1803) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x0, 0x3c, 0x60, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x1b, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @loopback, @remote]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1b0, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x2, 0xc, 0x204, 0x3, 0xe}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x6, 0x0}, 0x3501, 0x4, 0x3, 0x2, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x0, 0x2, 0x78, 0xfffffff7, 0x8, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.000714968s ago: executing program 4 (id=911): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20008004) 9.509697954s ago: executing program 4 (id=913): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x230) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r5 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x1000000d}) 9.364298392s ago: executing program 2 (id=914): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x12c, 0x65, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xfc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_ROUTE4_ACT={0xf0, 0x6, [@m_mpls={0x7c, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "f099bdc7979555704b394659ddae1af06a20daec7e5f4b020558ad8909fadef29a8fca081426290fe7364f3309b595c9f8c8255c0e36a34adf77ff5d648d31a397d28ea245ad15ef1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x44, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x48e}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x6, 0x6, '_c'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x12c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 8.971651062s ago: executing program 2 (id=916): inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x110) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_clone3(&(0x7f0000000400)={0x110000000, &(0x7f0000000140), 0x0, &(0x7f0000000240)=0x0, {0x29}, &(0x7f0000000280)=""/61, 0x3d, &(0x7f00000002c0)=""/40, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r2, 0x6) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d", 0x44}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) close_range(0xffffffffffffffff, r3, 0x2000000000000) 8.315650879s ago: executing program 1 (id=918): socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 8.296556629s ago: executing program 5 (id=919): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 8.013540976s ago: executing program 3 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) read$mtd(r0, &(0x7f00000003c0)=""/250, 0xfa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) kcmp(r3, 0x0, 0x2, r1, r0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) 7.538792267s ago: executing program 5 (id=921): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7}, @void, @val={0xc, 0x99, {0x10, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r5], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 7.507855754s ago: executing program 3 (id=922): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="e62cc9d6d55bb059db7429b90ead76c7bc6f991535cb33d98700799414c63bfed5d7ecaa1c408f574b9ec1dd7309d2fa0f1089578c4b0efe00"/69, 0x45}], 0x1, &(0x7f0000002380)=[@assoc={0x18, 0x117, 0x4, 0xfffff9ff}, @iv={0xc8, 0x117, 0x2, 0xaf, "59c885933c568ac2b5489390c2ce107ccdf6426c8255458f061cd832c1051322fa48211e255783fdbfe67c234391fe4ae89eef9b44e54911da9fc0972c157eff731acff8c695888e153c52ddd481b6e1453a31fa3c77fd457a12771e8ca3f98cd302302b6b446c4a2f93f689f61011ba76f7c3880205441fc56d06c14d4bf89e4d1058e246df02a175bf4c0e712bbe0045a79a0cb8f32ca54f303a8bcf8af998c3429a4362cc595e297c3ac92ebf46"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xa8, 0x117, 0x2, 0x90, "09bf75d86234e4ddd7f0c185ef690b1627647d42446f518af13fb0883a7944359a8b9ec6a6193a53ed364b71db3286af54ec67ab91c79dfd1f8b358d0ae0e610082f5545eb73a27c9377f5c1dc751fbf954e7ee3d7e75d46080d5006641a1105185d0bb0ea3f6ab8f273217678fa03db80de7dc26ca5824f2bac9c7ad6a1952bb7233d55b170ce3fd37cffff42a6cd76"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x108, 0x117, 0x2, 0xef, "a47265708d43fa51ddd53abd32ed2eb22e39a140341703a5376f90002cc001c1327ae116b9c557aaf60f9c1715a56d9899dc80b0f828143d20e198b6c90106b604d0fb084f0c2af8cb64f544f5e9868da6ef80719fc9cb3a837b627c427c249c8ed89fae4d28d8b7ce85fc015e1049fc4ad73bd05fece3d8a999c7fc9287217def5e53780c6305a579725e0a3ce3608e2298f18da49168a56386844b8de0ef1a498e76266b847336a9bde664e0ae21609c5c8a40eebc7d4b0e35056181586be161f25acf484edc3c07bb2158ed62fb8901482cfc451bfffbf1bce8d457841ab6d315b653368d89bfb4ecb803313b46"}, @assoc={0x18, 0x117, 0x4, 0xbe86}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "57a381a66f8bd2f46f46f29361d22bf3c82c174b5919030a3183f1fed16337f4d187e0586bcd2ec1d2d293f9627f48fad7b3f8377064d3799a8ef0360ba4c8d0745957031b16c8967afbd256a478339b26762fcf10f6eac6a4632873f799a46f6c7f37ced7b6738da5"}], 0x3a0, 0x8800}], 0x1, 0x20000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r4, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20082cbd7000fedbdf25700000000c0099000010ce006f2a5ee9"], 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/85, 0x55}, {&(0x7f0000000540)=""/120, 0x78}], 0x2}, 0x2001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) 7.328416805s ago: executing program 1 (id=923): r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000800) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000480), 0x2000000000000199) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) 6.877269293s ago: executing program 2 (id=924): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)=0x2) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, 0x0, 0x0) 6.255032922s ago: executing program 5 (id=925): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20008004) 5.967153348s ago: executing program 4 (id=926): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x80000) socket$kcm(0x11, 0x3, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) 5.830127145s ago: executing program 5 (id=927): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x1, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x800008, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12a, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc03e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 4.441158135s ago: executing program 2 (id=928): syz_clone(0x1008000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="9ac24b3c34551eccc15c94cd5067f7e3795319d9d6d8d8d63e517db2aa") r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, 0x0, 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 3.811735448s ago: executing program 0 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 3.746757161s ago: executing program 2 (id=930): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f00000001c0), 0x80) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x200000000000011, 0x2, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1000000000000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000700)={0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="4008b90000007243df614dfc95ba5adcd6"], 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000380)={0xc, &(0x7f0000000240)={0x40, 0xb, 0xf, {0xf, 0x8, "c1d3a3704f64d6c06603944816"}}, 0x0}, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 3.735144602s ago: executing program 4 (id=931): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="140000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000001"], 0x50) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f0000000080)=0x18) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000180)=r1) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x6, {0x4, 0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 3.638359891s ago: executing program 3 (id=932): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x8, 0x4, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket(0x2b, 0x80801, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) write$cgroup_int(r1, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 3.493618041s ago: executing program 0 (id=933): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 3.47456748s ago: executing program 5 (id=934): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000003b80)={@nfc={0x27, r1, 0xfffffffe, 0x6}, {&(0x7f0000000080)=""/73, 0x49}, &(0x7f00000001c0), 0x16}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r3, 0x5, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.090042204s ago: executing program 0 (id=935): socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 2.594489096s ago: executing program 0 (id=936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4008040) 2.277923869s ago: executing program 0 (id=937): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="ff0012ffffffaaaaaaaaaa2b08004502005800000000002f9078ac1414bbffffffff248065580000000000000800000086dd080088be08000000100000000100000000000000080022eb00000000200000000200000000000004000000000800655800000000"], 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) write$UHID_INPUT2(r1, &(0x7f0000000900), 0x6) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x210002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xa00) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1.648248683s ago: executing program 0 (id=938): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x230) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r5 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x1000000d}) 1.589139198s ago: executing program 4 (id=939): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf000, 0xd}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.398642164s ago: executing program 5 (id=940): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) 1.374793365s ago: executing program 3 (id=941): socket(0x11, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000019000100040000000000000080200009000400050000000008000300038e"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000280)=@default_ap_ssid, 0x6, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000000c0)=0x100001, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYRES16=r4], 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0xa, 0xb, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20008004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x8, 0x0, 0x7fff, 0x1, {{0x17, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @remote, {[@noop, @cipso={0x86, 0x1b, 0x2, [{0x6, 0x12, "b68280ada5f469068490ea27b0b505a5"}, {0x1, 0x3, "b3"}]}, @lsrr={0x83, 0xf, 0x6, [@empty, @loopback, @empty]}, @timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0x7, [{@broadcast, 0x95}, {@empty, 0x7f8}, {@loopback, 0x2}]}]}}}}}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 1.187537213s ago: executing program 4 (id=942): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48401, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="002ea6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x0}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) listen(r3, 0x1) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000000)) 815.430362ms ago: executing program 3 (id=943): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 409.948581ms ago: executing program 3 (id=944): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 254.157083ms ago: executing program 2 (id=945): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="3fbfdfb3bd5d42f43d5bf0326fad", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000000c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): 0x10 [ 163.082542][ T6933] ? inetdev_init+0x1fb/0x4d0 [ 163.082568][ T6933] ? inetdev_event+0x307/0x15e0 [ 163.082595][ T6933] ? notifier_call_chain+0x1a5/0x3d0 [ 163.082783][ T6933] ? register_netdevice+0x18a4/0x1eb0 [ 163.082819][ T6933] ? __ip_tunnel_create+0x3e8/0x550 [ 163.082852][ T6933] ? ip_tunnel_ctl+0x4fc/0xc50 [ 163.082880][ T6933] ? vif_add+0x372/0x1690 [ 163.082916][ T6933] ? ip_mroute_setsockopt+0xf8a/0x10d0 [ 163.082962][ T6933] ? do_ip_setsockopt+0xeba/0x2e30 [ 163.083000][ T6933] ? ip_setsockopt+0x66/0x110 [ 163.083033][ T6933] ? do_sock_setsockopt+0x17c/0x1b0 [ 163.083060][ T6933] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 163.083089][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.083126][ T6933] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.083157][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.083191][ T6933] devinet_sysctl_register+0xad/0x200 [ 163.083222][ T6933] inetdev_init+0x29e/0x4d0 [ 163.083251][ T6933] inetdev_event+0x307/0x15e0 [ 163.083293][ T6933] ? __pfx_inetdev_event+0x10/0x10 [ 163.083378][ T6933] notifier_call_chain+0x1a5/0x3d0 [ 163.083426][ T6933] register_netdevice+0x18a4/0x1eb0 [ 163.083479][ T6933] ? __pfx_register_netdevice+0x10/0x10 [ 163.083510][ T6933] ? alloc_netdev_mqs+0xd45/0x12b0 [ 163.083552][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.083580][ T6933] ? alloc_netdev_mqs+0xefc/0x12b0 [ 163.083684][ T6933] ? __ip_tunnel_create+0x3bb/0x550 [ 163.083732][ T6933] __ip_tunnel_create+0x3e8/0x550 [ 163.083772][ T6933] ? __pfx___ip_tunnel_create+0x10/0x10 [ 163.083807][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.083839][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.083876][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.083912][ T6933] ip_tunnel_ctl+0x4fc/0xc50 [ 163.083946][ T6933] vif_add+0x372/0x1690 [ 163.083995][ T6933] ? __pfx_vif_add+0x10/0x10 [ 163.084040][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084121][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084165][ T6933] ip_mroute_setsockopt+0xf8a/0x10d0 [ 163.084221][ T6933] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 163.084261][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084293][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084336][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084362][ T6933] ? __lock_acquire+0x683/0x2cf0 [ 163.084405][ T6933] do_ip_setsockopt+0xeba/0x2e30 [ 163.084454][ T6933] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 163.084489][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084520][ T6933] ? aa_sk_perm+0x6d5/0x900 [ 163.084567][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084602][ T6933] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.084638][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084667][ T6933] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.084694][ T6933] ? aa_sock_opt_perm+0xff/0x1a0 [ 163.084723][ T6933] ip_setsockopt+0x66/0x110 [ 163.084759][ T6933] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.084804][ T6933] do_sock_setsockopt+0x17c/0x1b0 [ 163.084835][ T6933] __x64_sys_setsockopt+0x13d/0x1b0 [ 163.084859][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.084879][ T6933] do_syscall_64+0x174/0x580 [ 163.084903][ T6933] ? trace_irq_disable+0x3b/0x140 [ 163.084931][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.084950][ T6933] RIP: 0033:0x7f33f059e0d9 [ 163.084970][ T6933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.084984][ T6933] RSP: 002b:00007f33f143c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.085003][ T6933] RAX: ffffffffffffffda RBX: 00007f33f0826090 RCX: 00007f33f059e0d9 [ 163.085016][ T6933] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 000000000000000e [ 163.085027][ T6933] RBP: 00007f33f0635024 R08: 0000000000000010 R09: 0000000000000000 [ 163.085038][ T6933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.085049][ T6933] R13: 00007f33f0826128 R14: 00007f33f0826090 R15: 00007ffea8510398 [ 163.085091][ T6933] [ 163.673893][ T6933] memory: usage 96kB, limit 96kB, failcnt 42 [ 163.726274][ T6933] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 163.742496][ T6933] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 163.757549][ T6933] Memory cgroup stats for /syz1/test: [ 163.758097][ T6933] cache 0 [ 163.784722][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.793487][ T6933] rss 0 [ 163.812289][ T6933] rss_huge 0 [ 163.822773][ T6933] shmem 0 [ 163.836307][ T6933] mapped_file 0 [ 163.859190][ T6933] dirty 0 [ 163.880639][ T6933] writeback 0 [ 163.899791][ T6933] workingset_refault_anon 0 [ 163.942562][ T6933] workingset_refault_file 0 [ 163.960842][ T6933] swap 0 [ 163.971511][ T6933] swapcached 0 [ 163.975865][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 163.994274][ T6933] pgpgin 0 [ 163.998414][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.015507][ T6933] pgpgout 0 [ 164.026232][ T6933] pgfault 1 [ 164.034812][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 164.050115][ T6933] pgmajfault 0 [ 164.056135][ T6933] inactive_anon 0 [ 164.066100][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.079599][ T6933] active_anon 0 [ 164.091416][ T6933] inactive_file 0 [ 164.095997][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.109158][ T6933] active_file 0 [ 164.117187][ T6933] unevictable 0 [ 164.120864][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.137629][ T6933] hierarchical_memory_limit 98304 [ 164.147801][ T6933] hierarchical_memsw_limit 9223372036854771712 [ 164.159158][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.167655][ T6933] total_cache 0 [ 164.173594][ T6933] total_rss 0 [ 164.179542][ T6933] total_rss_huge 0 [ 164.202953][ T6933] total_shmem 0 [ 164.209263][ T6933] total_mapped_file 0 [ 164.219672][ T6933] total_dirty 0 [ 164.226531][ T6933] total_writeback 0 [ 164.232574][ T6933] total_workingset_refault_anon 0 [ 164.241620][ T6933] total_workingset_refault_file 0 [ 164.251969][ T6933] total_swap 0 [ 164.261174][ T6933] total_swapcached 0 [ 164.267850][ T6933] total_pgpgin 0 [ 164.276449][ T6933] total_pgpgout 0 [ 164.282112][ T6933] total_pgfault 1 [ 164.288766][ T6933] total_pgmajfault 0 [ 164.299653][ T6933] total_inactive_anon 0 [ 164.309192][ T6933] total_active_anon 0 [ 164.316485][ T6933] total_inactive_file 0 [ 164.325396][ T6933] total_active_file 0 [ 164.329750][ T6933] total_unevictable 0 [ 164.336937][ T6933] anon_cost 0 [ 164.340524][ T6933] file_cost 0 [ 164.344820][ T6933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.304,pid=6923,uid=0 [ 164.377609][ T6933] Memory cgroup out of memory: Killed process 6933 (syz.1.304) total-vm:102384kB, anon-rss:1424kB, file-rss:23224kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 164.409946][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 164.418499][ T10] usbtmc 5-1:16.0: can't read capabilities [ 164.614112][ T6933] dvmrp0: entered allmulticast mode [ 164.646909][ T186] usb 5-1: USB disconnect, device number 4 [ 165.300985][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.317'. [ 165.379185][ T6934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.416767][ T6976] Set syz1 is full, maxelem 1029 reached [ 165.526078][ T6978] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 165.536660][ T6984] Set syz1 is full, maxelem 1029 reached [ 165.621596][ T6978] bond2 (unregistering): Released all slaves [ 166.147992][ T6995] netlink: 'syz.2.322': attribute type 4 has an invalid length. [ 166.453187][ T1208] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 166.483194][ T5862] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.618209][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 166.635637][ T1208] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.647122][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.677374][ T5862] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.694005][ T1208] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 166.710798][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.732974][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.745236][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.757225][ T1208] usb 6-1: Product: syz [ 166.761678][ T1208] usb 6-1: Manufacturer: syz [ 166.766956][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.785401][ T1208] usb 6-1: SerialNumber: syz [ 166.806219][ T1208] usb 6-1: config 0 descriptor?? [ 166.815821][ T6999] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.827835][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.852427][ T5862] usb 1-1: Product: syz [ 166.866361][ T5862] usb 1-1: Manufacturer: syz [ 166.966285][ T7010] dvmrp0: entered allmulticast mode [ 166.983722][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 167.026120][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 167.071017][ T5862] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 167.105234][ T5862] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.228229][ T5763] usb 1-1: USB disconnect, device number 9 [ 167.587464][ T7030] netlink: 184 bytes leftover after parsing attributes in process `syz.3.331'. [ 167.621154][ T7028] syz.1.332 (7028): drop_caches: 2 [ 168.112900][ T7040] geneve2: entered promiscuous mode [ 168.303740][ T5862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.503917][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.530599][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.612129][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 168.631064][ T5862] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 168.648639][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.768532][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.132005][ T10] usb 6-1: USB disconnect, device number 7 [ 169.334920][ T186] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.490659][ T5862] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 169.520219][ T186] usb 1-1: Using ep0 maxpacket: 32 [ 169.540449][ T186] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 169.565065][ T186] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 169.594077][ T5862] usb 5-1: USB disconnect, device number 5 [ 169.645192][ T186] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 169.687801][ T186] usb 1-1: Product: syz [ 169.710236][ T186] usb 1-1: Manufacturer: syz [ 169.732842][ T186] usb 1-1: SerialNumber: syz [ 169.792155][ T186] usb 1-1: config 0 descriptor?? [ 169.815254][ T7060] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 170.191944][ T7070] dvmrp0: entered allmulticast mode [ 170.396028][ T5763] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 170.447765][ T7076] netlink: 184 bytes leftover after parsing attributes in process `syz.1.343'. [ 170.625587][ T5763] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.701441][ T5763] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.760052][ T5763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.793971][ T5763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.813235][ T5763] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.852318][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.873467][ T5763] usb 5-1: Product: syz [ 170.889871][ T5763] usb 5-1: Manufacturer: syz [ 170.955094][ T5763] cdc_wdm 5-1:1.0: skipping garbage [ 170.982607][ T5763] cdc_wdm 5-1:1.0: skipping garbage [ 171.014717][ T5763] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 171.030745][ T5763] cdc_wdm 5-1:1.0: Unknown control protocol [ 171.166743][ T5763] usb 5-1: USB disconnect, device number 6 [ 171.223880][ T5862] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 171.225574][ T186] usb 1-1: USB disconnect, device number 10 [ 171.465661][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 171.484833][ T5862] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 171.498132][ T5862] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 171.514735][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.523205][ T5862] usb 6-1: Product: syz [ 171.529680][ T5862] usb 6-1: Manufacturer: syz [ 171.553369][ T5862] usb 6-1: SerialNumber: syz [ 171.624746][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.660382][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.997430][ T5862] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 172.098362][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 172.134642][ T1208] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 172.325182][ T1208] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.348385][ T5862] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 172.368257][ T1208] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 172.399130][ T1208] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.420062][ T5862] usb 6-1: USB disconnect, device number 8 [ 172.432526][ T1208] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.470463][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.519359][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.553139][ T5749] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.592972][ T1208] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.625743][ T1208] usb 4-1: invalid MIDI out EP 0 [ 172.763232][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 172.787871][ T5749] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 172.835737][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.899674][ T5749] usb 3-1: config 0 descriptor?? [ 172.958265][ T5749] gspca_main: sunplus-2.14.0 probing 041e:400b [ 173.196955][ T1208] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 173.273775][ T1208] usb 4-1: USB disconnect, device number 17 [ 174.014877][ T5763] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.193185][ T5763] usb 4-1: Using ep0 maxpacket: 32 [ 174.211206][ T5763] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 174.251349][ T5763] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 174.288739][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 174.312070][ T5763] usb 4-1: Product: syz [ 174.334797][ T5763] usb 4-1: Manufacturer: syz [ 174.357047][ T5763] usb 4-1: SerialNumber: syz [ 174.388140][ T5749] gspca_sunplus: reg_w_riv err -71 [ 174.408533][ T5763] usb 4-1: config 0 descriptor?? [ 174.415534][ T5749] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 174.428423][ T7092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.453491][ T7118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.481296][ T5749] usb 3-1: USB disconnect, device number 9 [ 175.307979][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 175.337493][ T5763] usb 4-1: USB disconnect, device number 18 [ 175.873180][ T5749] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 175.913130][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.044179][ T5749] usb 6-1: Using ep0 maxpacket: 32 [ 176.066066][ T5749] usb 6-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 176.094058][ T7138] netlink: 'syz.1.360': attribute type 10 has an invalid length. [ 176.094121][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.098192][ T5862] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.130193][ T5749] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 176.150486][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.186225][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.204003][ T5749] usb 6-1: Product: syz [ 176.212838][ T5749] usb 6-1: Manufacturer: syz [ 176.253227][ T5749] usb 6-1: SerialNumber: syz [ 176.283724][ T5862] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.367049][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.401640][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.424094][ T5862] usb 1-1: invalid MIDI out EP 0 [ 176.904290][ T5862] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 176.914658][ T5749] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 177.008247][ T5862] usb 1-1: USB disconnect, device number 11 [ 177.260047][ T5749] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.352548][ T5749] usb 6-1: USB disconnect, device number 9 [ 177.508521][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.334361][ T7200] netlink: 184 bytes leftover after parsing attributes in process `syz.3.372'. [ 178.403368][ T5749] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 178.598765][ T5749] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.639655][ T5749] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.682155][ T5749] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.734876][ T5749] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.777564][ T5749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.831464][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.875402][ T5749] usb 6-1: Product: syz [ 178.906992][ T5749] usb 6-1: Manufacturer: syz [ 178.967298][ T7203] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 179.023386][ T5749] cdc_wdm 6-1:1.0: skipping garbage [ 179.050636][ T5749] cdc_wdm 6-1:1.0: skipping garbage [ 179.098517][ T5749] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 179.124594][ T5749] cdc_wdm 6-1:1.0: Unknown control protocol [ 179.192148][ T5749] usb 6-1: USB disconnect, device number 10 [ 179.945663][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 180.043168][ T5720] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 180.217221][ T5720] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.278001][ T5720] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.330303][ T5720] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.367100][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.438464][ T7250] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 180.500526][ T5720] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.793642][ T5862] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.974418][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 181.000775][ T5862] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.038626][ T5862] usb 5-1: config 0 has no interfaces? [ 181.058362][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.112707][ T5862] usb 5-1: config 0 descriptor?? [ 181.130874][ T10] usb 6-1: USB disconnect, device number 11 [ 181.380850][ T7276] dvmrp0: entered allmulticast mode [ 181.435100][ T5720] usb 5-1: USB disconnect, device number 7 [ 181.843320][ T5862] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.923187][ T1208] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.930998][ T5749] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.015696][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.059019][ T5862] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.099177][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.113264][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 182.118534][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 182.136555][ T5749] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 182.146128][ T1208] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 182.156964][ T5862] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.176461][ T5749] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.188438][ T1208] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 182.202068][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.212830][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.225645][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.235807][ T1208] usb 2-1: Product: syz [ 182.246046][ T5749] usb 3-1: config 0 descriptor?? [ 182.270745][ T1208] usb 2-1: Manufacturer: syz [ 182.277293][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.287803][ T1208] usb 2-1: SerialNumber: syz [ 182.296059][ T5862] usb 1-1: invalid MIDI out EP 0 [ 182.771336][ T7301] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 182.851205][ T5862] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 182.894165][ T5862] usb 1-1: USB disconnect, device number 12 [ 183.403702][ T7307] bridge5: entered promiscuous mode [ 183.730661][ T1208] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 183.966220][ T1208] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 184.046278][ T1208] usb 2-1: USB disconnect, device number 13 [ 184.120316][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.263373][ T5749] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.424197][ T5749] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.461167][ T5749] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.475396][ T5749] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.498925][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.557730][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 184.567433][ T5749] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.581219][ T5749] usb 5-1: invalid MIDI out EP 0 [ 184.806973][ T5763] usb 3-1: USB disconnect, device number 10 [ 184.934295][ T5749] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 185.073746][ T5749] usb 5-1: USB disconnect, device number 8 [ 185.444815][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 185.617248][ T24] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 185.698170][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.750776][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.803688][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.830215][ T24] usb 4-1: Product: syz [ 185.845872][ T24] usb 4-1: Manufacturer: syz [ 185.869868][ T24] usb 4-1: SerialNumber: syz [ 185.908341][ T24] usb 4-1: config 0 descriptor?? [ 186.178780][ T7347] netlink: 184 bytes leftover after parsing attributes in process `syz.1.401'. [ 186.316221][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'. [ 186.340143][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 186.547014][ T7351] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 186.610811][ T7351] bond1 (unregistering): Released all slaves [ 186.741254][ T5749] usb 4-1: USB disconnect, device number 19 [ 187.319163][ T5749] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 187.320238][ T7365] loop4: detected capacity change from 0 to 512 [ 187.451535][ T7365] EXT4-fs (loop4): Test dummy encryption mode enabled [ 187.488829][ T7365] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 187.523573][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 187.534625][ T7367] loop2: detected capacity change from 0 to 512 [ 187.547427][ T7365] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.578760][ T5749] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 187.619737][ T7367] EXT4-fs (loop2): Test dummy encryption mode enabled [ 187.650847][ T5749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.693541][ T7367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.697371][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.796314][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.830521][ T5749] usb 4-1: Product: syz [ 187.841101][ T7365] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 187.841291][ T7367] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 187.871145][ T5749] usb 4-1: Manufacturer: syz [ 187.885047][ T7367] EXT4-fs (loop2): 1 truncate cleaned up [ 187.900182][ T5749] usb 4-1: SerialNumber: syz [ 187.928374][ T7367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.949739][ T7365] EXT4-fs (loop4): 1 truncate cleaned up [ 187.975848][ T7365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.027492][ T5749] usb 4-1: config 0 descriptor?? [ 188.143588][ T5749] usb 4-1: can't set config #0, error -71 [ 188.321663][ T5749] usb 4-1: USB disconnect, device number 20 [ 190.359033][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.368899][ T5607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.713187][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 190.826454][ T7380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.949474][ T7380] bond1: entered promiscuous mode [ 190.970330][ T7380] bond1: entered allmulticast mode [ 191.505516][ T5749] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.603580][ T7384] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 191.673895][ T5749] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.692268][ T5749] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.712903][ T5749] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.738706][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.766755][ T7409] loop0: detected capacity change from 0 to 3904 [ 191.778551][ T7399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.797721][ T5749] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.831486][ T7409] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 191.844431][ T7409] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 191.879770][ T7409] loop0: [ 192.140089][ T5749] usb 3-1: USB disconnect, device number 11 [ 192.931920][ T5749] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 193.114456][ T5749] usb 1-1: Using ep0 maxpacket: 8 [ 193.145891][ T5749] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 193.195889][ T5749] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 193.231536][ T5749] usb 1-1: config 0 has no interface number 0 [ 193.258181][ T5749] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.283170][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 193.302392][ T5749] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 193.311121][ T7440] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 193.328483][ T5749] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.367350][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 193.371230][ T5749] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 193.414471][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.483290][ T5749] usb 1-1: config 0 descriptor?? [ 193.536780][ T5749] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 193.591784][ T7442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.665529][ T7444] bridge1: entered promiscuous mode [ 193.728598][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.736937][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.911057][ T1208] usb 1-1: USB disconnect, device number 13 [ 193.936397][ T1208] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 194.073160][ T5763] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.253976][ T5763] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.282395][ T5763] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 194.304256][ T5763] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 194.327130][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.359950][ T7447] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.373220][ T5763] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.473878][ T1208] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 194.501062][ T7450] netlink: 'syz.5.433': attribute type 10 has an invalid length. [ 194.665012][ T1208] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 194.699759][ T1208] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.731567][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.779820][ T1208] as10x_usb: device has been detected [ 194.803828][ T1208] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 194.837653][ T1208] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 194.891067][ T1208] as10x_usb: error during firmware upload part1 [ 194.907405][ T1208] Registered device Abilis Systems DVB-Titan [ 194.959414][ T5763] usb 5-1: USB disconnect, device number 9 [ 195.666814][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.447'. [ 195.694567][ T5763] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 195.854557][ T5763] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.886558][ T5763] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 195.918372][ T5763] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.950239][ T5763] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.976223][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.039228][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 196.052746][ T5763] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.063539][ T7495] geneve2: entered promiscuous mode [ 196.072551][ T5763] usb 4-1: invalid MIDI out EP 0 [ 196.477065][ T5763] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 196.535100][ T5763] usb 4-1: USB disconnect, device number 21 [ 196.764615][ T1208] usb 1-1: USB disconnect, device number 14 [ 196.854517][ T1208] Unregistered device Abilis Systems DVB-Titan [ 196.868070][ T1208] as10x_usb: device has been disconnected [ 197.043159][ T5735] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.215827][ T5735] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 197.241240][ T5735] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.269605][ T5735] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 197.289107][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.316785][ T7524] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.361860][ T5735] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.908763][ T24] usb 2-1: USB disconnect, device number 14 [ 198.390321][ T7550] geneve2: entered promiscuous mode [ 198.416602][ T95] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.448375][ T95] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.498106][ T5902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.553404][ T186] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 198.570003][ T5902] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.454174][ T186] usb 1-1: Using ep0 maxpacket: 16 [ 199.474776][ T186] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 199.501373][ T186] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 199.528558][ T186] usb 1-1: config 0 has no interface number 0 [ 199.587086][ T186] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.769984][ T186] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 199.782569][ T186] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 199.791099][ T186] usb 1-1: Product: syz [ 199.795723][ T186] usb 1-1: SerialNumber: syz [ 199.803789][ T186] usb 1-1: config 0 descriptor?? [ 199.816635][ T186] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 199.842547][ T7565] netlink: 184 bytes leftover after parsing attributes in process `syz.5.466'. [ 199.856399][ T186] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input14 [ 200.583150][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 200.795194][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 200.834951][ T24] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 200.884254][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 200.945164][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.980036][ T24] usb 4-1: Product: syz [ 200.988307][ T5749] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.999729][ T24] usb 4-1: Manufacturer: syz [ 201.990321][ T24] usb 4-1: SerialNumber: syz [ 202.163138][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 202.220157][ T5749] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 202.275058][ T5749] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.303338][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 202.308003][ T5862] usb 1-1: USB disconnect, device number 15 [ 202.310523][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 202.360934][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.428532][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.452433][ T5862] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.482666][ T5749] usb 5-1: config 0 descriptor?? [ 202.580511][ T5749] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 202.698697][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 202.820060][ T7591] tipc: Started in network mode [ 202.836015][ T7591] tipc: Node identity 12e4c88c92eb, cluster identity 4711 [ 202.853761][ T7591] tipc: Enabled bearer , priority 0 [ 202.883120][ T5862] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 202.894933][ T7591] tipc: Resetting bearer [ 202.946174][ T7590] tipc: Disabling bearer [ 203.023481][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.054628][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 203.092897][ T5862] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 203.146898][ T24] usb 4-1: USB disconnect, device number 22 [ 203.156129][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.221341][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.281833][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.322208][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.399275][ T5862] usb 1-1: config 0 descriptor?? [ 203.733878][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 203.827603][ T5862] usbhid 1-1:0.0: can't add hid device: -32 [ 203.852786][ T5862] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 203.878608][ T5749] usb 5-1: USB disconnect, device number 10 [ 203.906443][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 203.930167][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.974891][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 204.021251][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 204.051331][ T24] usb 4-1: Product: syz [ 204.071128][ T24] usb 4-1: Manufacturer: syz [ 204.089248][ T24] usb 4-1: SerialNumber: syz [ 204.133831][ T24] usb 4-1: config 0 descriptor?? [ 204.156731][ T7598] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.039174][ T7611] geneve2: entered promiscuous mode [ 205.650718][ T7627] netlink: 'syz.5.485': attribute type 1 has an invalid length. [ 205.699722][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.5.485'. [ 205.777459][ T5763] usb 1-1: USB disconnect, device number 16 [ 205.819525][ T7632] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 205.880551][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 205.916087][ T7628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.971531][ T7631] bridge1: entered promiscuous mode [ 206.065753][ T7633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.130730][ T7636] bridge1: entered promiscuous mode [ 206.462520][ T7650] netlink: 'syz.1.489': attribute type 16 has an invalid length. [ 206.507561][ T7650] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.489'. [ 206.545280][ T5749] usb 4-1: USB disconnect, device number 23 [ 207.959006][ T7622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.994194][ T7618] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 209.577194][ T7688] netlink: 'syz.1.500': attribute type 12 has an invalid length. [ 209.635327][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 209.943148][ T5735] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 210.143083][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 210.164876][ T5735] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 210.221705][ T5735] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.266298][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 210.302732][ T5735] usb 3-1: Product: syz [ 210.322215][ T5735] usb 3-1: Manufacturer: syz [ 210.348079][ T5735] usb 3-1: SerialNumber: syz [ 210.401850][ T5735] usb 3-1: config 0 descriptor?? [ 210.435160][ T7691] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.943278][ T5735] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.134017][ T5735] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.162765][ T5735] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.204194][ T5735] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.239216][ T7683] Bluetooth: hci5: command 0x0405 tx timeout [ 211.249260][ T7683] Bluetooth: hci4: command 0x0406 tx timeout [ 211.256512][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 211.262611][ T7683] Bluetooth: hci1: command 0x0406 tx timeout [ 211.297411][ T5735] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.313324][ T4922] Bluetooth: hci3: command 0x0406 tx timeout [ 211.359036][ T5735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.426109][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.456905][ T5735] usb 2-1: Product: syz [ 211.491518][ T5735] usb 2-1: Manufacturer: syz [ 211.570602][ T5735] cdc_wdm 2-1:1.0: skipping garbage [ 211.621628][ T5735] cdc_wdm 2-1:1.0: skipping garbage [ 211.663895][ T5735] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 211.689829][ T5735] cdc_wdm 2-1:1.0: Unknown control protocol [ 211.916696][ T5735] usb 2-1: USB disconnect, device number 15 [ 212.946451][ T24] usb 3-1: USB disconnect, device number 12 [ 212.962326][ T7730] netlink: 'syz.5.514': attribute type 1 has an invalid length. [ 212.980070][ T7728] syzkaller1: entered promiscuous mode [ 213.020139][ T7728] syzkaller1: entered allmulticast mode [ 213.021325][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.514'. [ 213.359821][ T7731] bridge2: entered promiscuous mode [ 213.443992][ T7736] bridge3: entered promiscuous mode [ 213.791729][ T7747] netlink: 'syz.5.518': attribute type 1 has an invalid length. [ 213.864039][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.518'. [ 214.924339][ T7749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.998325][ T7752] bridge4: entered promiscuous mode [ 217.097498][ T7766] overlay: Unknown parameter '/' [ 217.176766][ T7766] overlayfs: overlapping lowerdir path [ 217.220320][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 217.220343][ T30] audit: type=1326 audit(1787052715.424:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4114597e57 code=0x7ffc0000 [ 217.336707][ T30] audit: type=1326 audit(1787052715.474:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411453f459 code=0x7ffc0000 [ 217.452388][ T30] audit: type=1326 audit(1787052715.474:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4114597e57 code=0x7ffc0000 [ 217.574027][ T30] audit: type=1326 audit(1787052715.474:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411453f459 code=0x7ffc0000 [ 218.504798][ T30] audit: type=1326 audit(1787052715.474:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4114597e57 code=0x7ffc0000 [ 218.586872][ T30] audit: type=1326 audit(1787052715.474:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411453f459 code=0x7ffc0000 [ 218.660022][ T30] audit: type=1326 audit(1787052715.474:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4114597e57 code=0x7ffc0000 [ 218.735040][ T30] audit: type=1326 audit(1787052715.474:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411453f459 code=0x7ffc0000 [ 218.802820][ T30] audit: type=1326 audit(1787052715.474:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4114597e57 code=0x7ffc0000 [ 218.841013][ T7777] loop4: detected capacity change from 0 to 512 [ 218.852016][ T7777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 218.875239][ T7777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.893127][ T30] audit: type=1326 audit(1787052715.484:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.523" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411453f459 code=0x7ffc0000 [ 218.952863][ T7777] EXT4-fs (loop4): 1 truncate cleaned up [ 218.965095][ T7777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.544461][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.623916][ T5749] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.725791][ T7799] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 220.785308][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 220.823335][ T5749] usb 1-1: Using ep0 maxpacket: 16 [ 220.846305][ T5749] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 220.933867][ T5749] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.040434][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.067059][ T7804] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.082766][ T5749] usb 1-1: Product: syz [ 221.144208][ T5749] usb 1-1: Manufacturer: syz [ 221.176787][ T5749] usb 1-1: SerialNumber: syz [ 221.192135][ T7808] bridge5: entered promiscuous mode [ 221.425498][ T5749] usb 1-1: config 0 descriptor?? [ 221.815261][ T186] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 222.724494][ T186] usb 6-1: Using ep0 maxpacket: 32 [ 222.749832][ T186] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.798792][ T186] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.835262][ T186] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.864505][ T186] usb 6-1: Product: syz [ 222.885361][ T186] usb 6-1: Manufacturer: syz [ 222.907228][ T186] usb 6-1: SerialNumber: syz [ 222.939397][ T186] usb 6-1: config 0 descriptor?? [ 222.964460][ T7816] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 223.031045][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 223.031063][ T30] audit: type=1326 audit(1787052721.234:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 223.142690][ T30] audit: type=1326 audit(1787052721.274:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 223.203120][ T30] audit: type=1326 audit(1787052721.274:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 223.233215][ T30] audit: type=1326 audit(1787052721.274:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 223.259075][ T30] audit: type=1326 audit(1787052721.274:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 223.332141][ T30] audit: type=1326 audit(1787052721.274:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 223.422805][ T30] audit: type=1326 audit(1787052721.274:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 223.569255][ T30] audit: type=1326 audit(1787052721.274:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 223.691187][ T30] audit: type=1326 audit(1787052721.274:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 223.784073][ T30] audit: type=1326 audit(1787052721.274:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.542" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 223.895642][ T186] usb 1-1: USB disconnect, device number 17 [ 225.544241][ T5749] usb 6-1: USB disconnect, device number 12 [ 226.969080][ T7867] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 228.273592][ T5763] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 228.343324][ T7884] netlink: 'syz.2.556': attribute type 1 has an invalid length. [ 228.393433][ T186] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.453138][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 228.480356][ T5763] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 228.541931][ T5763] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 228.585319][ T5763] usb 6-1: config 0 has no interface number 0 [ 228.603426][ T186] usb 5-1: Using ep0 maxpacket: 32 [ 228.623332][ T5763] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.642016][ T186] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 228.667688][ T5763] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.679882][ T186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.706394][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 228.715798][ T186] usb 5-1: config 0 descriptor?? [ 228.732127][ T5763] usb 6-1: Product: syz [ 228.762221][ T7887] bridge1: entered promiscuous mode [ 228.771792][ T5763] usb 6-1: SerialNumber: syz [ 228.778798][ T186] as10x_usb: device has been detected [ 228.799414][ T186] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 228.830427][ T5763] usb 6-1: config 0 descriptor?? [ 228.889056][ T5763] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 228.912383][ T186] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 229.001137][ T5763] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15 [ 229.014558][ T186] as10x_usb: error during firmware upload part1 [ 229.049679][ T186] Registered device nBox DVB-T Dongle [ 229.057706][ T186] usb 5-1: USB disconnect, device number 11 [ 229.465927][ T186] Unregistered device nBox DVB-T Dongle [ 229.515927][ T186] as10x_usb: device has been disconnected [ 230.517876][ T186] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 230.873134][ T186] usb 5-1: Using ep0 maxpacket: 32 [ 230.879666][ T186] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.901958][ T186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 231.734702][ T186] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 231.744238][ T186] usb 5-1: Product: syz [ 231.748483][ T186] usb 5-1: Manufacturer: syz [ 231.753422][ T186] usb 5-1: SerialNumber: syz [ 231.767966][ T186] usb 5-1: config 0 descriptor?? [ 231.792025][ T7918] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 232.057607][ T5749] usb 5-1: USB disconnect, device number 12 [ 232.217295][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 232.217966][ T5862] usb 6-1: USB disconnect, device number 13 [ 232.224480][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 232.341704][ T5862] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 233.344499][ T186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 233.513409][ T186] usb 2-1: Using ep0 maxpacket: 32 [ 233.531274][ T186] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 233.561663][ T186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.590968][ T186] usb 2-1: config 0 descriptor?? [ 233.624278][ T186] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 234.028053][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.074027][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.567844][ T186] gspca_nw80x: reg_w err -71 [ 234.582844][ T186] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 234.610978][ T186] usb 2-1: USB disconnect, device number 16 [ 235.113168][ T186] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 235.296993][ T186] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 235.300740][ T7935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.367687][ T186] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.409098][ T186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.646317][ T186] as10x_usb: device has been detected [ 235.652803][ T186] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 236.419599][ T186] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 236.486238][ T186] as10x_usb: error during firmware upload part1 [ 236.519637][ T186] Registered device Abilis Systems DVB-Titan [ 238.462697][ T186] usb 1-1: USB disconnect, device number 18 [ 239.449459][ T186] Unregistered device Abilis Systems DVB-Titan [ 239.463350][ T186] as10x_usb: device has been disconnected [ 241.454298][ T5763] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.557095][ T8057] netlink: 324 bytes leftover after parsing attributes in process `syz.0.602'. [ 241.663993][ T5763] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.700384][ T5763] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.738587][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.795543][ T5763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.853331][ T5763] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.927258][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.959330][ T5763] usb 2-1: Product: syz [ 241.990580][ T5763] usb 2-1: Manufacturer: syz [ 242.085089][ T5763] cdc_wdm 2-1:1.0: skipping garbage [ 242.118325][ T5763] cdc_wdm 2-1:1.0: skipping garbage [ 242.151175][ T5763] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.180913][ T5763] cdc_wdm 2-1:1.0: Unknown control protocol [ 242.338923][ T5749] usb 2-1: USB disconnect, device number 17 [ 242.454294][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 245.649553][ T8065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.505980][ T7874] syz.0.551 (7874) used greatest stack depth: 18624 bytes left [ 246.845543][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.663463][ T5735] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.863163][ T5735] usb 4-1: Using ep0 maxpacket: 32 [ 247.904449][ T5735] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 247.971105][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.023142][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.061807][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.118217][ T5735] usb 4-1: config 0 descriptor?? [ 248.616682][ T5735] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 248.639052][ T5735] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 248.778816][ T5735] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 248.822016][ T5735] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -32 [ 251.421569][ T5763] usb 4-1: USB disconnect, device number 24 [ 252.133081][ T186] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.303984][ T186] usb 1-1: Using ep0 maxpacket: 8 [ 252.315936][ T186] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 252.342813][ T186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.396687][ T186] pvrusb2: Hardware description: Terratec Grabster AV400 [ 252.413686][ T186] pvrusb2: ********** [ 252.421697][ T186] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 252.444344][ T186] pvrusb2: Important functionality might not be entirely working. [ 252.461228][ T186] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 252.479528][ T186] pvrusb2: ********** [ 252.608436][ T2351] pvrusb2: Invalid write control endpoint [ 252.761657][ T2351] pvrusb2: Invalid write control endpoint [ 252.781932][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 252.834049][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 252.851830][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 252.869273][ T2351] pvrusb2: Device being rendered inoperable [ 252.886436][ T8155] pvrusb2: Attempted to execute control transfer when device not ok [ 252.910993][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 252.926310][ T5763] usb 1-1: USB disconnect, device number 19 [ 252.949159][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 252.974643][ T2351] pvrusb2: Attached sub-driver cx25840 [ 252.983103][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 253.001803][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 254.861593][ T8185] device-mapper: ioctl: name not supplied when creating device [ 255.214273][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220865][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.573871][ T5862] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 255.755010][ T5862] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 255.782942][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.823480][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.961976][ T5862] as10x_usb: device has been detected [ 255.983496][ T5862] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 256.062122][ T5862] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 256.073573][ T186] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 256.097345][ T5862] as10x_usb: error during firmware upload part1 [ 256.130191][ T5862] Registered device Abilis Systems DVB-Titan [ 256.223339][ T5763] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 256.276224][ T186] usb 6-1: Using ep0 maxpacket: 16 [ 256.306827][ T186] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.341282][ T186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.356576][ T186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.369163][ T186] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 256.380417][ T186] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.389210][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 256.396100][ T186] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.411594][ T186] usb 6-1: Manufacturer: syz [ 256.417371][ T5763] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.430025][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.642'. [ 256.431745][ T5763] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 256.451313][ T186] usb 6-1: config 0 descriptor?? [ 256.457940][ T5763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.461259][ T8207] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.469484][ T5763] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.491789][ T5763] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.508363][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.517583][ T5763] usb 1-1: Product: syz [ 256.522305][ T5763] usb 1-1: Manufacturer: syz [ 256.544784][ T5763] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 256.608321][ T8209] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 256.633890][ T8209] bond2 (unregistering): Released all slaves [ 256.729040][ T8213] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 256.770940][ T5763] usb 1-1: USB disconnect, device number 20 [ 256.940131][ T8213] bridge6: entered promiscuous mode [ 257.105023][ T8224] bridge6: entered promiscuous mode [ 258.023237][ T5749] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.062443][ T186] usb 4-1: USB disconnect, device number 25 [ 258.145957][ T186] Unregistered device Abilis Systems DVB-Titan [ 258.165052][ T186] as10x_usb: device has been disconnected [ 258.293211][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 258.306436][ T5749] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 258.336473][ T5749] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 258.350723][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.359314][ T5749] usb 3-1: Product: syz [ 258.363743][ T5749] usb 3-1: Manufacturer: syz [ 258.368429][ T5749] usb 3-1: SerialNumber: syz [ 258.569771][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.722093][ T5749] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 258.821208][ T1208] usb 6-1: USB disconnect, device number 14 [ 258.897330][ T5749] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 258.948178][ T5749] usb 3-1: USB disconnect, device number 13 [ 259.014178][ T186] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 259.032357][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.203894][ T186] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 259.215036][ T186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.225800][ T186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.263772][ T186] as10x_usb: device has been detected [ 259.277713][ T186] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 259.315601][ T186] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 259.316960][ T1208] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 259.340360][ T186] as10x_usb: error during firmware upload part1 [ 259.348489][ T186] Registered device Abilis Systems DVB-Titan [ 259.974930][ T8228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.299965][ T1208] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.434750][ T1208] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.444690][ T1208] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.455442][ T1208] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.464617][ T1208] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.480424][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.488811][ T1208] usb 6-1: Product: syz [ 260.493309][ T1208] usb 6-1: Manufacturer: syz [ 260.627052][ T8283] netlink: 92 bytes leftover after parsing attributes in process `syz.2.664'. [ 260.772659][ T1208] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 261.449789][ T186] usb 6-1: USB disconnect, device number 15 [ 261.629615][ T5735] usb 4-1: USB disconnect, device number 26 [ 261.738587][ T5735] Unregistered device Abilis Systems DVB-Titan [ 261.770911][ T5735] as10x_usb: device has been disconnected [ 261.785162][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 261.937414][ T8302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.003373][ T186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 262.006128][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 262.025289][ T5862] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.036275][ T5862] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.044629][ T5862] usb 3-1: config 0 has no interface number 0 [ 262.051312][ T5862] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.064051][ T5862] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.076282][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.151744][ T5862] usb 3-1: Product: syz [ 262.174335][ T186] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.195314][ T5862] usb 3-1: SerialNumber: syz [ 262.212355][ T186] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 262.249056][ T186] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.270973][ T8317] netlink: 'syz.4.672': attribute type 10 has an invalid length. [ 262.295227][ T5862] usb 3-1: config 0 descriptor?? [ 262.320152][ T186] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.379716][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.427157][ T186] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.428820][ T5862] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 262.472624][ T186] usb 6-1: invalid MIDI out EP 0 [ 262.488450][ T5862] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 262.974637][ T8307] udevd[8307]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.051478][ T186] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 263.081108][ T8334] netlink: 'syz.3.677': attribute type 1 has an invalid length. [ 263.192589][ T186] usb 6-1: USB disconnect, device number 16 [ 263.418011][ T8335] bridge2: entered promiscuous mode [ 263.458201][ T8335] bond3: (slave bridge2): making interface the new active one [ 263.520655][ T8335] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 263.659609][ T8337] bridge3: entered promiscuous mode [ 263.717707][ T8337] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 263.765518][ T8346] netlink: 92 bytes leftover after parsing attributes in process `syz.5.679'. [ 265.363133][ T5862] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 265.553741][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 265.560039][ T5862] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 265.571418][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.597510][ T5862] usb 1-1: config 0 descriptor?? [ 265.620881][ T5862] as10x_usb: device has been detected [ 265.627884][ T5862] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 265.647633][ T5862] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 265.689321][ T5862] as10x_usb: error during firmware upload part1 [ 265.698560][ T5862] Registered device nBox DVB-T Dongle [ 265.735356][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 265.841064][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 265.841599][ T186] usb 3-1: USB disconnect, device number 14 [ 265.848105][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 265.928961][ T1208] usb 1-1: USB disconnect, device number 21 [ 266.023467][ T186] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 266.050428][ T1208] Unregistered device nBox DVB-T Dongle [ 266.082003][ T1208] as10x_usb: device has been disconnected [ 266.241489][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.686'. [ 266.315866][ T8374] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.370671][ T8343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.815489][ T8393] netlink: 92 bytes leftover after parsing attributes in process `syz.0.693'. [ 266.860265][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 266.874004][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.905114][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.933242][ T5763] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 268.150535][ T5763] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.162177][ T5763] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.173305][ T5763] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.183242][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.199027][ T8388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 268.210974][ T5763] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.767212][ T10] usb 3-1: USB disconnect, device number 15 [ 269.353476][ T5862] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 269.425671][ T8381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.570099][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 269.584490][ T5862] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 269.648194][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.682004][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 269.682026][ T30] audit: type=1326 audit(1787052767.884:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 269.723524][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.749224][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.792457][ T5862] usb 4-1: config 0 descriptor?? [ 269.822560][ T30] audit: type=1326 audit(1787052767.884:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 269.881599][ T30] audit: type=1326 audit(1787052767.884:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 269.908157][ T30] audit: type=1326 audit(1787052767.884:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 269.935916][ T30] audit: type=1326 audit(1787052767.924:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 269.960961][ T30] audit: type=1326 audit(1787052767.924:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 270.146845][ T30] audit: type=1326 audit(1787052767.924:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 270.300679][ T30] audit: type=1326 audit(1787052767.924:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 270.409948][ T30] audit: type=1326 audit(1787052767.924:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 270.490302][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 270.520933][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 270.530420][ T30] audit: type=1326 audit(1787052767.924:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.4.699" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 270.574781][ T1208] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 270.653833][ T5862] usb 4-1: USB disconnect, device number 27 [ 270.692093][ T8448] netlink: 116 bytes leftover after parsing attributes in process `syz.1.706'. [ 270.773179][ T1208] usb 1-1: Using ep0 maxpacket: 32 [ 270.779434][ T1208] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 270.842389][ T1208] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 270.902143][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 270.951498][ T1208] usb 1-1: Product: syz [ 270.979908][ T1208] usb 1-1: Manufacturer: syz [ 271.044597][ T1208] usb 1-1: SerialNumber: syz [ 271.100965][ T1208] usb 1-1: config 0 descriptor?? [ 271.145443][ T8437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 271.753182][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 271.936156][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.978235][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.016499][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.061399][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.121968][ T8453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.197365][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.114065][ T24] usb 4-1: USB disconnect, device number 28 [ 273.405178][ T8441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.934045][ T5763] usb 1-1: USB disconnect, device number 22 [ 274.140934][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 274.365300][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 274.371662][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 274.398682][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 274.416662][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 274.427862][ T10] usb 3-1: Product: syz [ 274.432152][ T10] usb 3-1: Manufacturer: syz [ 274.444315][ T10] usb 3-1: SerialNumber: syz [ 274.465114][ T10] usb 3-1: config 0 descriptor?? [ 274.480568][ T8470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 274.800718][ T8485] bridge6: entered promiscuous mode [ 274.908243][ T8485] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 275.113851][ T1208] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.289560][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 275.321746][ T1208] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.362136][ T1208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.401714][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.445032][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.498755][ T1208] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.546585][ T1208] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.614459][ T1208] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.650484][ T1208] usb 1-1: Manufacturer: syz [ 275.772529][ T1208] usb 1-1: config 0 descriptor?? [ 275.787252][ T30] kauditd_printk_skb: 229 callbacks suppressed [ 275.787280][ T30] audit: type=1326 audit(1787052773.994:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 275.882901][ T30] audit: type=1326 audit(1787052774.024:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 275.969510][ T30] audit: type=1326 audit(1787052774.024:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 276.086679][ T30] audit: type=1326 audit(1787052774.024:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 276.152010][ T30] audit: type=1326 audit(1787052774.024:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 276.216004][ T30] audit: type=1326 audit(1787052774.024:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 276.292044][ T30] audit: type=1326 audit(1787052774.024:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 276.375706][ T30] audit: type=1326 audit(1787052774.024:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 276.449713][ T30] audit: type=1326 audit(1787052774.034:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3ef7397e57 code=0x7ffc0000 [ 276.527010][ T30] audit: type=1326 audit(1787052774.034:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3ef733f459 code=0x7ffc0000 [ 277.029015][ T8473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.187914][ T5862] usb 3-1: USB disconnect, device number 16 [ 278.013084][ T1208] rc_core: IR keymap rc-hauppauge not found [ 278.039573][ T5862] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.048477][ T1208] Registered IR keymap rc-empty [ 278.062481][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.121299][ T8526] netlink: 116 bytes leftover after parsing attributes in process `syz.0.727'. [ 278.131596][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.193310][ T1208] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 278.237384][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 278.243159][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 278.286680][ T1208] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 278.304424][ T5862] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.328711][ T5862] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.347342][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.369554][ T5862] usb 3-1: config 0 has no interface number 0 [ 278.396877][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.408312][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.453609][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.462422][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.495943][ T8528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.522853][ T5862] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.543386][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.550801][ T8529] bond4: entered promiscuous mode [ 278.556711][ T8529] bond4: entered allmulticast mode [ 278.579640][ T5862] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.599332][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.633188][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.640000][ T8533] netlink: 'syz.0.729': attribute type 16 has an invalid length. [ 278.650578][ T5862] usb 3-1: config 0 descriptor?? [ 278.656862][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.680442][ T5862] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 278.690033][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.713998][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.733193][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.751887][ T8533] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.729'. [ 278.769828][ T1208] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 278.815256][ T1208] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 278.827831][ T1208] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 278.939986][ T1208] usb 1-1: USB disconnect, device number 23 [ 279.040113][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 279.581908][ T8537] 8021q: adding VLAN 0 to HW filter on device bond14 [ 279.661176][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.817865][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.825158][ T8541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.864871][ T8541] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 280.803559][ T8514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.938055][ T5862] usb 3-1: USB disconnect, device number 17 [ 280.996957][ T5862] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 281.857642][ T8577] netlink: 116 bytes leftover after parsing attributes in process `syz.2.741'. [ 282.378948][ T8587] syzkaller0: entered promiscuous mode [ 282.405705][ T8587] syzkaller0: entered allmulticast mode [ 282.408379][ T8588] netlink: 'syz.3.743': attribute type 16 has an invalid length. [ 282.513549][ T8588] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.743'. [ 284.070916][ T8560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.094968][ T8582] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 284.644205][ T8614] geneve2: entered promiscuous mode [ 284.663377][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.707660][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.735234][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.765105][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.508083][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.5.757'. [ 285.545332][ T5862] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 285.561696][ T8629] netlink: 56 bytes leftover after parsing attributes in process `syz.5.757'. [ 285.743801][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 285.757266][ T5862] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 285.787469][ T5862] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 285.838271][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.872682][ T5862] usb 4-1: Product: syz [ 285.897489][ T5862] usb 4-1: Manufacturer: syz [ 285.920307][ T5862] usb 4-1: SerialNumber: syz [ 286.442868][ T5862] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 286.467321][ T8641] netlink: 184 bytes leftover after parsing attributes in process `syz.1.760'. [ 286.670916][ T5862] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 286.776537][ T5862] usb 4-1: USB disconnect, device number 29 [ 286.817851][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.361610][ T8609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.970816][ T8664] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 288.762056][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 288.821620][ T8679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.773'. [ 290.812588][ T8690] ======================================================= [ 290.812588][ T8690] WARNING: The mand mount option has been deprecated and [ 290.812588][ T8690] and is ignored by this kernel. Remove the mand [ 290.812588][ T8690] option from the mount to silence this warning. [ 290.812588][ T8690] ======================================================= [ 292.373737][ T5735] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 292.594341][ T5735] usb 6-1: Using ep0 maxpacket: 32 [ 292.641038][ T5735] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 292.739507][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.763743][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.775596][ T5735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.790770][ T5735] usb 6-1: config 0 descriptor?? [ 293.081723][ T8713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.147371][ T8731] loop1: detected capacity change from 0 to 512 [ 293.180212][ T8731] EXT4-fs (loop1): Test dummy encryption mode enabled [ 293.212742][ T8731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.295553][ T5735] usbhid 6-1:0.0: can't add hid device: -71 [ 293.358513][ T5735] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 293.400827][ T8731] EXT4-fs (loop1): 1 truncate cleaned up [ 293.455399][ T5735] usb 6-1: USB disconnect, device number 17 [ 293.567728][ T8731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.373735][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.470891][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 295.478843][ T5735] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 295.634620][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 295.644656][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 295.657007][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 295.673574][ T5862] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 295.680255][ T5735] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 295.693795][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 295.707203][ T10] usb 6-1: config 0 has no interface number 0 [ 295.714125][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.728451][ T5735] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 295.738986][ T5735] usb 4-1: config 0 has no interface number 0 [ 295.751264][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 295.762576][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 295.776064][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 295.789001][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.809790][ T5735] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.822677][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.866728][ T5735] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 295.894289][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.920568][ T10] usb 6-1: config 0 descriptor?? [ 295.936021][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.953198][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 295.995332][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 296.014433][ T5735] usb 4-1: config 0 descriptor?? [ 296.032583][ T5862] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 296.080121][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.111562][ T5735] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 296.115008][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.167016][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.192807][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.219254][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.228881][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.242503][ T5862] usb 5-1: Product: syz [ 296.268905][ T5862] usb 5-1: Manufacturer: syz [ 296.278580][ T24] usb 3-1: config 0 descriptor?? [ 296.285349][ T5862] usb 5-1: SerialNumber: syz [ 296.319363][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 296.331430][ T5862] usb 5-1: config 0 descriptor?? [ 296.349265][ T5860] usb 6-1: USB disconnect, device number 18 [ 296.397799][ T8746] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -19 [ 296.486573][ T5860] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 296.528116][ T5862] usb 4-1: USB disconnect, device number 30 [ 296.581338][ T5862] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 296.711680][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 296.750425][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 296.768950][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 296.777277][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 296.786936][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 296.802534][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 296.821960][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 296.838552][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 296.860094][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 296.879432][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 296.898723][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 296.917035][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 296.952045][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 296.963118][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 296.970711][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 296.982789][ T8765] geneve2: entered promiscuous mode [ 297.002134][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 297.032885][ T5860] usb 5-1: USB disconnect, device number 13 [ 297.071946][ T24] pwc: Registered as video103. [ 297.113363][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 297.169352][ T24] usb 3-1: USB disconnect, device number 18 [ 297.575239][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 297.770277][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 297.782330][ T5860] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 297.809573][ T5860] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.832433][ T5860] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.864280][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.884348][ T5860] usb 5-1: Product: syz [ 297.896783][ T5860] usb 5-1: Manufacturer: syz [ 297.910228][ T5860] usb 5-1: SerialNumber: syz [ 297.931650][ T5860] usb 5-1: config 0 descriptor?? [ 298.037101][ T8780] syzkaller0: entered promiscuous mode [ 298.067714][ T8780] syzkaller0: entered allmulticast mode [ 298.294759][ T5860] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 298.493839][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 298.508606][ T5860] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 298.547918][ T8751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.561573][ T5860] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 298.579438][ T5860] usb 4-1: config 0 has no interface number 0 [ 298.616520][ T5860] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.644159][ T5860] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 298.686754][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 298.715939][ T5860] usb 4-1: Product: syz [ 298.725586][ T5860] usb 4-1: SerialNumber: syz [ 298.776759][ T5860] usb 4-1: config 0 descriptor?? [ 298.822902][ T5860] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 298.858777][ T5860] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input19 [ 299.451226][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.807'. [ 299.627617][ T5862] usb 5-1: USB disconnect, device number 14 [ 300.012530][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 301.401327][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.408700][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.415947][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.423245][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.430503][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.437993][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.447656][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.454869][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.462038][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.469239][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 301.479557][ T5860] usb 4-1: USB disconnect, device number 31 [ 301.485566][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 301.540444][ T5860] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 303.540694][ T8800] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 303.546086][ T8812] netlink: 'syz.4.810': attribute type 12 has an invalid length. [ 303.815004][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'. [ 304.991982][ T8832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.078704][ T8846] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 305.494714][ T5862] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 305.621088][ T8834] netlink: 'syz.2.814': attribute type 10 has an invalid length. [ 305.646364][ T8866] loop4: detected capacity change from 0 to 512 [ 305.663077][ T5338] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 305.681177][ T8866] EXT4-fs (loop4): Test dummy encryption mode enabled [ 305.701579][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.721855][ T8866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 305.744783][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.772843][ T5862] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 305.805113][ T8866] EXT4-fs (loop4): 1 truncate cleaned up [ 305.818695][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.841144][ T8866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.884090][ T8855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.935861][ T5338] usb 1-1: Using ep0 maxpacket: 8 [ 305.937574][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.947714][ T5338] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.126131][ T5338] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 306.137654][ T5338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 306.147921][ T5338] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.158235][ T5338] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.174257][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.483008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 306.512060][ T5338] usb 1-1: GET_CAPABILITIES returned 0 [ 306.554992][ T5338] usbtmc 1-1:16.0: can't read capabilities [ 306.778416][ T5338] usb 4-1: USB disconnect, device number 32 [ 306.811011][ T10] usb 1-1: USB disconnect, device number 24 [ 307.057230][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.907258][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 309.020849][ T8923] netlink: 184 bytes leftover after parsing attributes in process `syz.2.839'. [ 309.105681][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.132814][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.163799][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 309.193218][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.229745][ T8914] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 309.250603][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.704965][ T10] usb 6-1: USB disconnect, device number 19 [ 309.815066][ T8929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.903325][ T5862] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 311.031649][ T8902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.059842][ T8893] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 311.088361][ T5862] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 311.146687][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.181533][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.232236][ T5862] usb 6-1: config 0 descriptor?? [ 311.318215][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 311.721706][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 311.768185][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 311.805272][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 311.836227][ T5862] pwc: recv_control_msg error -32 req 04 val 1000 [ 311.867324][ T5862] pwc: recv_control_msg error -32 req 04 val 1300 [ 311.909609][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 311.946744][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 311.972320][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 312.004255][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 312.028598][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 312.056165][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 312.084887][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 312.107344][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 312.146329][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 312.190858][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 312.227941][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 312.338777][ T5862] pwc: Registered as video103. [ 312.413363][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 312.550325][ T5862] usb 6-1: USB disconnect, device number 20 [ 312.574472][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 312.764048][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 312.786761][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.831127][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 312.937059][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.990414][ T10] usb 1-1: Product: syz [ 313.012798][ T10] usb 1-1: Manufacturer: syz [ 313.048679][ T10] usb 1-1: SerialNumber: syz [ 313.107164][ T10] usb 1-1: config 0 descriptor?? [ 313.138825][ T8958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.623723][ T5763] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 314.839008][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 314.864125][ T5763] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 314.876451][ T5763] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 314.891302][ T5763] usb 3-1: config 0 has no interface number 0 [ 314.899020][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.913835][ T5763] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.968409][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 315.031292][ T5763] usb 3-1: Product: syz [ 315.046011][ T5763] usb 3-1: SerialNumber: syz [ 315.070566][ T5763] usb 3-1: config 0 descriptor?? [ 315.105960][ T5763] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 315.171360][ T5763] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input21 [ 315.247484][ T5860] usb 1-1: USB disconnect, device number 25 [ 316.594810][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.602554][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.673706][ T5763] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 316.866061][ T5763] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.927107][ T5763] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.989140][ T5763] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.052198][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.135675][ T9001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.194309][ T5763] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.473903][ T5862] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 317.788657][ T5862] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.962538][ T5862] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.120398][ T5862] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 318.176993][ C0] cm109_urb_ctl_callback: 19 callbacks suppressed [ 318.177024][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 318.180614][ T5860] usb 3-1: USB disconnect, device number 19 [ 318.183532][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 318.337749][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.013421][ T9009] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 319.365483][ T5860] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 319.394704][ T5862] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.409536][ T5763] usb 1-1: USB disconnect, device number 26 [ 319.929372][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 319.958073][ T9024] Set syz1 is full, maxelem 1029 reached [ 320.247451][ T5862] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 320.457899][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.491080][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.528127][ T5862] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.573814][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.593662][ T9027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.735378][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.799553][ T5338] usb 6-1: USB disconnect, device number 21 [ 321.113465][ T5763] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 321.325323][ T5763] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.387505][ T5763] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 321.447771][ T5763] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.491969][ T5763] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.565002][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.933124][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 322.013206][ T5862] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 322.133195][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 322.156996][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 322.183494][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 322.208299][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.234088][ T5862] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 322.267345][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.298449][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.311822][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.347464][ T10] usb 3-1: config 0 descriptor?? [ 322.377162][ T5862] usb 4-1: config 0 descriptor?? [ 322.457384][ T5862] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 322.873464][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.893757][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 322.913407][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 322.937961][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.990659][ T5763] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.028299][ T5763] usb 1-1: invalid MIDI out EP 0 [ 323.033971][ T10] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 323.183461][ T5860] usb 5-1: USB disconnect, device number 15 [ 323.234807][ T10] ft260 0003:0403:6030.0002: failed to retrieve system status [ 323.275880][ T10] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 323.555292][ T5862] gspca_nw80x: reg_w err -110 [ 323.580780][ T5862] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 323.665723][ T5763] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 323.772420][ T5763] usb 1-1: USB disconnect, device number 27 [ 324.066413][ T5338] usb 4-1: USB disconnect, device number 33 [ 325.016865][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.881'. [ 325.620823][ T9087] netlink: 76 bytes leftover after parsing attributes in process `syz.3.884'. [ 325.655576][ T5763] usb 3-1: USB disconnect, device number 20 [ 327.524020][ T5763] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 327.571740][ T9113] netlink: 184 bytes leftover after parsing attributes in process `syz.4.890'. [ 327.672107][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'. [ 327.724601][ T5763] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.744241][ T5763] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 327.794898][ T5763] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.870011][ T5763] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.945824][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.961881][ T9118] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.015809][ T5763] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.036273][ T9122] bond5: entered promiscuous mode [ 328.051913][ T5763] usb 3-1: invalid MIDI out EP 0 [ 328.086414][ T9122] bond5: entered allmulticast mode [ 328.417756][ T5763] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 328.489407][ T5763] usb 3-1: USB disconnect, device number 21 [ 328.599069][ T9119] netlink: 184 bytes leftover after parsing attributes in process `syz.1.893'. [ 329.053313][ T5338] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 329.244032][ T5338] usb 4-1: device descriptor read/64, error -71 [ 329.493059][ T5338] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 329.653466][ T5338] usb 4-1: device descriptor read/64, error -71 [ 329.834740][ T5338] usb usb4-port1: attempt power cycle [ 330.205469][ T5338] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 330.256174][ T5338] usb 4-1: device descriptor read/8, error -71 [ 330.513116][ T5338] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 330.564244][ T5338] usb 4-1: device descriptor read/8, error -71 [ 330.703786][ T5338] usb usb4-port1: unable to enumerate USB device [ 331.208834][ T9146] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 331.268682][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.901'. [ 331.383528][ T9146] bridge2: entered promiscuous mode [ 332.004621][ T5735] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.216160][ T5735] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 332.241140][ T5735] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 332.285389][ T5735] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 332.315042][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.344599][ T9155] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 332.364604][ T5735] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 332.543265][ T5749] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 332.734214][ T5749] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 332.788278][ T5749] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.818786][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.832904][ T9172] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 332.904475][ T5749] usb 6-1: config 0 descriptor?? [ 332.922146][ T5862] usb 3-1: USB disconnect, device number 22 [ 333.012622][ T5749] pwc: Askey VC010 type 2 USB webcam detected. [ 333.177484][ T9172] bond4: entered promiscuous mode [ 333.195641][ T9172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.323846][ T9175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.346840][ T9175] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 333.389143][ T5749] pwc: recv_control_msg error -32 req 02 val 2b00 [ 333.409195][ T9175] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 333.426027][ T5749] pwc: recv_control_msg error -32 req 02 val 2700 [ 333.449226][ T5749] pwc: recv_control_msg error -32 req 02 val 2c00 [ 333.472846][ T5749] pwc: recv_control_msg error -32 req 04 val 1000 [ 333.498055][ T5749] pwc: recv_control_msg error -32 req 04 val 1300 [ 333.507622][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 333.531676][ T5749] pwc: recv_control_msg error -32 req 04 val 1400 [ 333.556960][ T5749] pwc: recv_control_msg error -32 req 02 val 2000 [ 333.587503][ T5749] pwc: recv_control_msg error -32 req 02 val 2100 [ 333.604214][ T5749] pwc: recv_control_msg error -32 req 04 val 1500 [ 333.622646][ T5749] pwc: recv_control_msg error -32 req 02 val 2500 [ 333.693105][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 333.709151][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 333.747803][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.795296][ T24] usb 4-1: config 0 descriptor?? [ 333.835720][ T24] as10x_usb: device has been detected [ 333.856798][ T5749] pwc: recv_control_msg error -71 req 02 val 2600 [ 333.869979][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 333.894272][ T5749] pwc: recv_control_msg error -71 req 02 val 2900 [ 333.937301][ T5749] pwc: recv_control_msg error -71 req 02 val 2800 [ 333.956694][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 333.969131][ T5749] pwc: recv_control_msg error -71 req 04 val 1100 [ 333.988833][ T5749] pwc: recv_control_msg error -71 req 04 val 1200 [ 334.030463][ T24] as10x_usb: error during firmware upload part1 [ 334.069872][ T24] Registered device nBox DVB-T Dongle [ 334.080992][ T5749] pwc: Registered as video103. [ 334.100792][ T24] usb 4-1: USB disconnect, device number 38 [ 334.156767][ T5749] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 334.180441][ T24] Unregistered device nBox DVB-T Dongle [ 334.184797][ T24] as10x_usb: device has been disconnected [ 334.265088][ T5749] usb 6-1: USB disconnect, device number 22 [ 334.363060][ T5860] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 334.563129][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 334.597047][ T5860] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 334.645193][ T5860] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 334.680331][ T5860] usb 1-1: config 0 has no interface number 0 [ 334.716612][ T5860] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 334.786399][ T5860] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.801597][ T9198] netlink: 'syz.5.919': attribute type 1 has an invalid length. [ 334.850210][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.919'. [ 334.867437][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 334.886922][ T5860] usb 1-1: Product: syz [ 334.904485][ T5860] usb 1-1: SerialNumber: syz [ 334.969071][ T5860] usb 1-1: config 0 descriptor?? [ 334.991222][ T9198] bridge5: entered promiscuous mode [ 335.034395][ T5860] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 335.080039][ T5860] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input23 [ 338.758557][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.765803][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.773150][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.780335][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.787706][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.795133][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.802319][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.809456][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.816797][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.824071][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.895155][ T5735] usb 1-1: USB disconnect, device number 28 [ 338.895293][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 338.960726][ T5735] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 339.559484][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'. [ 339.583338][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 339.612081][ T9251] bridge2: entered promiscuous mode [ 339.653080][ T5338] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 339.754226][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.783661][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.815830][ T5338] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 339.817204][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.869889][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.882795][ T5338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.926883][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.960871][ T9242] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.012779][ T5338] as10x_usb: device has been detected [ 340.018947][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.046183][ T5338] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 340.097178][ T5338] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 340.194030][ T5338] as10x_usb: error during firmware upload part1 [ 340.226115][ T5338] Registered device Abilis Systems DVB-Titan [ 340.602008][ T5338] usb 5-1: USB disconnect, device number 16 [ 340.751108][ T9261] loop0: detected capacity change from 0 to 512 [ 340.825741][ T9261] EXT4-fs (loop0): Test dummy encryption mode enabled [ 340.853795][ T9261] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.926944][ T9261] EXT4-fs (loop0): 1 truncate cleaned up [ 340.958974][ T9261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.298283][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.949228][ T5749] usb 3-1: USB disconnect, device number 23 [ 341.956757][ T5860] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 342.012072][ T5749] Unregistered device Abilis Systems DVB-Titan [ 342.017780][ T5749] as10x_usb: device has been disconnected [ 342.153129][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 342.161101][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 342.172219][ T5860] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 342.208139][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.219715][ T5860] usb 6-1: Product: syz [ 342.228385][ T5860] usb 6-1: Manufacturer: syz [ 342.239177][ T5860] usb 6-1: SerialNumber: syz [ 342.258967][ T5860] usb 6-1: config 0 descriptor?? [ 342.308098][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 342.343140][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 342.354700][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 342.369884][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.422147][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.467013][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.506788][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.569959][ T24] usb 5-1: config 0 descriptor?? [ 342.669066][ T9286] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 342.701745][ T5860] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 342.759818][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.808970][ T5860] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 342.847982][ T5860] usb 6-1: media controller created [ 342.900524][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.926707][ T9279] ------------[ cut here ]------------ [ 342.935856][ T9279] usb 6-1: BOGUS control dir, pipe 80001780 doesn't match bRequestType c0 [ 342.945336][ T9279] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.5.940/9279 [ 342.955929][ T9279] Modules linked in: [ 342.962601][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.5.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.974084][ T9279] Tainted: [L]=SOFTLOCKUP [ 342.978605][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.989209][ T9279] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 342.995289][ T9279] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 343.015257][ T9279] RSP: 0018:ffffc9000369f718 EFLAGS: 00010246 [ 343.021720][ T9279] RAX: 0000000000000000 RBX: ffff888033a50400 RCX: 0000000080001780 [ 343.029865][ T9279] RDX: ffff8880217a2960 RSI: ffffffff8ca2ee20 RDI: ffffffff90658040 [ 343.037901][ T9279] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 343.045978][ T9279] R10: dffffc0000000000 R11: fffff520006d3f0c R12: 1ffff11004ae210c [ 343.054196][ T9279] R13: ffff888025710860 R14: ffff8880217a2960 R15: 0000000080001780 [ 343.062385][ T9279] FS: 00007f63339496c0(0000) GS:ffff888124f45000(0000) knlGS:0000000000000000 [ 343.071448][ T9279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.078120][ T9279] CR2: 00007f546a83fab7 CR3: 0000000029da3000 CR4: 0000000000350ef0 [ 343.086221][ T9279] Call Trace: [ 343.086341][ T24] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 343.089504][ T9279] [ 343.089551][ T9279] usb_start_wait_urb+0x13f/0x5b0 [ 343.104557][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.110316][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.116225][ T9279] ? trace_kmalloc+0x2a/0xf0 [ 343.120876][ T9279] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 343.126571][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.132246][ T9279] usb_control_msg+0x234/0x3e0 [ 343.137199][ T9279] dtv5100_i2c_msg+0x231/0x2f0 [ 343.138183][ T24] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 343.141999][ T9279] dtv5100_i2c_xfer+0x1a5/0x610 [ 343.142043][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.159644][ T9279] __i2c_transfer+0x7be/0x1fe0 [ 343.165712][ T9279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.171739][ T9279] ? lockdep_hardirqs_on+0x7a/0x110 [ 343.177100][ T9279] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 343.184930][ T9279] ? rt_mutex_lock_nested+0x156/0x1c0 [ 343.190364][ T9279] ? i2c_transfer+0xc8/0x2d0 [ 343.195111][ T9279] i2c_transfer+0x1cc/0x2d0 [ 343.199650][ T9279] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 343.205572][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.211269][ T9279] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 343.217616][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.223363][ T9279] ? _copy_from_user+0x94/0xb0 [ 343.228143][ T9279] i2cdev_write+0x113/0x1e0 [ 343.232699][ T9279] vfs_writev+0x4bb/0x990 [ 343.237344][ T9279] ? __pfx_i2cdev_write+0x10/0x10 [ 343.242454][ T9279] ? __pfx_vfs_writev+0x10/0x10 [ 343.247704][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.254287][ T9279] ? __fget_files+0x2a/0x420 [ 343.259092][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.264911][ T9279] ? __fget_files+0x3a2/0x420 [ 343.269648][ T9279] ? __fget_files+0x2a/0x420 [ 343.274339][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.279990][ T9279] do_writev+0x154/0x2e0 [ 343.284296][ T9279] ? __pfx_do_writev+0x10/0x10 [ 343.289110][ T9279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.295293][ T9279] do_syscall_64+0x174/0x580 [ 343.299903][ T9279] ? trace_irq_disable+0x3b/0x140 [ 343.304998][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.311591][ T9279] RIP: 0033:0x7f633299e0d9 [ 343.316206][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.335927][ T9279] RSP: 002b:00007f6333949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.344915][ T9279] RAX: ffffffffffffffda RBX: 00007f6332c25fa0 RCX: 00007f633299e0d9 [ 343.353164][ T9279] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 343.361273][ T9279] RBP: 00007f6332a35024 R08: 0000000000000000 R09: 0000000000000000 [ 343.369309][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.377428][ T9279] R13: 00007f6332c26038 R14: 00007f6332c25fa0 R15: 00007ffe9de19838 [ 343.385473][ T9279] [ 343.388514][ T9279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.395867][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.5.940 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.406640][ T9279] Tainted: [L]=SOFTLOCKUP [ 343.411496][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.421706][ T9279] Call Trace: [ 343.425004][ T9279] [ 343.428011][ T9279] vpanic+0x56c/0xa60 [ 343.432104][ T9279] ? __pfx__printk+0x10/0x10 [ 343.436728][ T9279] ? __pfx_vpanic+0x10/0x10 [ 343.441475][ T9279] ? is_bpf_text_address+0x292/0x2b0 [ 343.446905][ T9279] ? is_bpf_text_address+0x26/0x2b0 [ 343.452133][ T9279] panic+0xc5/0xd0 [ 343.455875][ T9279] ? __pfx_panic+0x10/0x10 [ 343.460401][ T9279] __warn+0x315/0x4c0 [ 343.464564][ T9279] ? usb_submit_urb+0x1057/0x18b0 [ 343.469616][ T9279] ? usb_submit_urb+0x1057/0x18b0 [ 343.474922][ T9279] __report_bug+0x276/0x570 [ 343.479465][ T9279] ? usb_submit_urb+0x1057/0x18b0 [ 343.484558][ T9279] ? __pfx___report_bug+0x10/0x10 [ 343.489681][ T9279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.495589][ T9279] ? __kmalloc_noprof+0x1ad/0x720 [ 343.500624][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.506253][ T9279] ? kasan_save_track+0x4f/0x80 [ 343.511137][ T9279] report_bug_entry+0x19a/0x290 [ 343.516034][ T9279] ? usb_submit_urb+0x1100/0x18b0 [ 343.521098][ T9279] ? usb_submit_urb+0x1105/0x18b0 [ 343.526178][ T9279] handle_bug+0xce/0x200 [ 343.530477][ T9279] exc_invalid_op+0x1a/0x50 [ 343.535010][ T9279] asm_exc_invalid_op+0x1a/0x20 [ 343.539886][ T9279] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 343.545648][ T9279] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 343.565678][ T9279] RSP: 0018:ffffc9000369f718 EFLAGS: 00010246 [ 343.571763][ T9279] RAX: 0000000000000000 RBX: ffff888033a50400 RCX: 0000000080001780 [ 343.579745][ T9279] RDX: ffff8880217a2960 RSI: ffffffff8ca2ee20 RDI: ffffffff90658040 [ 343.587723][ T9279] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 343.595918][ T9279] R10: dffffc0000000000 R11: fffff520006d3f0c R12: 1ffff11004ae210c [ 343.603908][ T9279] R13: ffff888025710860 R14: ffff8880217a2960 R15: 0000000080001780 [ 343.612262][ T9279] ? usb_submit_urb+0x1091/0x18b0 [ 343.617501][ T9279] usb_start_wait_urb+0x13f/0x5b0 [ 343.622569][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.628306][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.634138][ T9279] ? trace_kmalloc+0x2a/0xf0 [ 343.638905][ T9279] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 343.644521][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.650270][ T9279] usb_control_msg+0x234/0x3e0 [ 343.655043][ T9279] dtv5100_i2c_msg+0x231/0x2f0 [ 343.659997][ T9279] dtv5100_i2c_xfer+0x1a5/0x610 [ 343.664858][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.670520][ T9279] __i2c_transfer+0x7be/0x1fe0 [ 343.675288][ T9279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.681087][ T9279] ? lockdep_hardirqs_on+0x7a/0x110 [ 343.686278][ T9279] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 343.692081][ T9279] ? rt_mutex_lock_nested+0x156/0x1c0 [ 343.697455][ T9279] ? i2c_transfer+0xc8/0x2d0 [ 343.702046][ T9279] i2c_transfer+0x1cc/0x2d0 [ 343.706554][ T9279] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 343.712211][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.717858][ T9279] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 343.724040][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.729671][ T9279] ? _copy_from_user+0x94/0xb0 [ 343.734473][ T9279] i2cdev_write+0x113/0x1e0 [ 343.739014][ T9279] vfs_writev+0x4bb/0x990 [ 343.743362][ T9279] ? __pfx_i2cdev_write+0x10/0x10 [ 343.748413][ T9279] ? __pfx_vfs_writev+0x10/0x10 [ 343.753286][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.758998][ T9279] ? __fget_files+0x2a/0x420 [ 343.763586][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.769235][ T9279] ? __fget_files+0x3a2/0x420 [ 343.773948][ T9279] ? __fget_files+0x2a/0x420 [ 343.778643][ T9279] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.784279][ T9279] do_writev+0x154/0x2e0 [ 343.788526][ T9279] ? __pfx_do_writev+0x10/0x10 [ 343.793312][ T9279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.799456][ T9279] do_syscall_64+0x174/0x580 [ 343.804058][ T9279] ? trace_irq_disable+0x3b/0x140 [ 343.809110][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.815031][ T9279] RIP: 0033:0x7f633299e0d9 [ 343.819463][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.839182][ T9279] RSP: 002b:00007f6333949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 343.847616][ T9279] RAX: ffffffffffffffda RBX: 00007f6332c25fa0 RCX: 00007f633299e0d9 [ 343.855668][ T9279] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 343.863682][ T9279] RBP: 00007f6332a35024 R08: 0000000000000000 R09: 0000000000000000 [ 343.871675][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.879721][ T9279] R13: 00007f6332c26038 R14: 00007f6332c25fa0 R15: 00007ffe9de19838 [ 343.887704][ T9279] [ 343.891159][ T9279] Kernel Offset: disabled [ 343.895495][ T9279] Rebooting in 86400 seconds..