last executing test programs: 31m38.41014083s ago: executing program 2 (id=366): add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000090000000005"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000000)=""/40, &(0x7f0000000200)=0x28) 31m33.982496921s ago: executing program 2 (id=374): mount$nfs(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000480), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x20, 0x9}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000300000000"], 0x20}}, 0x0) 31m32.553835547s ago: executing program 2 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="7496f4", 0x3}], 0x1}, 0x4) 31m19.038897106s ago: executing program 2 (id=395): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 31m15.809792658s ago: executing program 2 (id=400): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) socket$inet6_mptcp(0xa, 0x1, 0x106) 31m12.659444279s ago: executing program 2 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="7496f4", 0x3}], 0x1}, 0x4) 30m57.025571215s ago: executing program 32 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="7496f4", 0x3}], 0x1}, 0x4) 23m1.539508013s ago: executing program 4 (id=1298): mlockall(0x1) 22m59.947990413s ago: executing program 4 (id=1304): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 22m56.528404362s ago: executing program 4 (id=1313): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04060306c900502dc24b2113b33392b07bdfa8882e96170f34bbd31935245958c4d949b4e39e"], 0x6) write$P9_RREMOVE(r0, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40408d4) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040), 0x4) 22m56.365765057s ago: executing program 4 (id=1314): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000100)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r2 = dup(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000032b000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000002030500000071d2010000000000006553da5266c93a522fa6881c5deff71d22043794230e2d5193bdfd7bf641286210ce738d009a"], 0x3c}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x3554000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r2, 0x3, 0x4000000005, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x9d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x4c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff1d000000017c0000040042800c00018006000600820a0000140002800e001480040006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 22m54.329766382s ago: executing program 4 (id=1319): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 22m52.584110427s ago: executing program 4 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)={0x200}) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {0x0}], 0x2) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 22m37.493284397s ago: executing program 33 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)={0x200}) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}, {0x0}], 0x2) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 16.261072623s ago: executing program 3 (id=3951): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}], &(0x7f00000001c0)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 13.720719257s ago: executing program 3 (id=3955): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) 12.781399438s ago: executing program 3 (id=3957): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100), 0x0) 11.689056144s ago: executing program 5 (id=3958): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.396955274s ago: executing program 1 (id=3959): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xb09, @none, 0x0, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6914008000442f0020010000000000000000000000000001ff0200000000000000000000000000010c2088be000000000c000800080086dd080088be00000104162cfcfb010000000000007f080022eb0000000129019309020000000000000800c418120800655800000001498ce0831fbee21938b82053b0502fedf95d267f7ad57c2a88f9e835a08adb309ed99e081e20c8c8d0c2f4424b"], 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r3}) r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200)=r6, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r2, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) 9.924911982s ago: executing program 0 (id=3960): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 9.909113183s ago: executing program 1 (id=3961): sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000140000000000000200000008000300", @ANYRES32, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYBLOB="000125c87080fdd3df257c0000000ea54ae4d509f7001d0000000a000600ffffffffffff00000a000600ad989250f772f20a0a000800ea5cc7bc08021100000100000a000600ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x8cc5}, 0xc00c000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 9.524954275s ago: executing program 3 (id=3962): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) 9.470385367s ago: executing program 0 (id=3963): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}], &(0x7f00000001c0)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 8.260622527s ago: executing program 3 (id=3964): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xb09, @none, 0x0, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r3}) r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200)=r6, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r2, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) 8.16928543s ago: executing program 5 (id=3965): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) 6.932014741s ago: executing program 0 (id=3966): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_io_uring_setup(0x17af, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r1, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) 6.418057478s ago: executing program 5 (id=3967): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x6020400) syz_open_dev$media(&(0x7f0000000000), 0x7a, 0x181840) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) 6.272116843s ago: executing program 1 (id=3968): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="79bf8b6f9725602b530aa59ed8d4aaa48e7df8ecee50581466562ffa4f03040c9541b9d6be9d90bce6cb69831fe1c27fad91d0d0ebdbda4944", 0x39}, {&(0x7f0000000380)="5bd82353e8d8ef01a5e5ae06166e5bf4d3b9282488a8658b9d8924be58cf87f21a4bf1458d8525023e660179c32020c536ba29c1a2587e2d491fd89f47c89198b91d5bb7d81156ddf6b5ae6163f25d49b1362f1eec3a0146b70376f242f0dc605fa806a74207fbb76f8bd528e0cf83ff9defd7747ad28320d35cbee356adb2c3ec241851bb591188dbe0d5411429c511d86ea5ad738b80a3211381097cafaa20716ba2f48f102735189aad49eb42958ced30ae298726fc23217afbb569469493504b133005f4d36ec95a8061849f2ef92392610acb25a55530a584354169e8cbd7f657b37f076d1e8c", 0xe9}], 0x2}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000280)='^', 0x1}], 0x1}}], 0x2, 0x24048054) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 5.112957871s ago: executing program 5 (id=3969): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xb09, @none, 0x0, 0x1}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6914008000442f0020010000000000000000000000000001ff0200000000000000000000000000010c2088be000000000c000800080086dd080088be00000104162cfcfb010000000000007f080022eb0000000129019309020000000000000800c418120800655800000001498ce0831fbee21938b82053b0502fedf95d267f7ad57c2a88f9e835a08adb309ed99e081e20c8c8d0c2f4424b"], 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r3}) r5 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000200)=r6, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r2, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r7 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) 5.012637375s ago: executing program 0 (id=3970): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100), 0x0) 4.992063375s ago: executing program 1 (id=3971): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000680)={0x800100, 0x2, 0x7fffffff, 0x5, 0x6, 0xfffffff2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x401, 0x4) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) 2.606810584s ago: executing program 1 (id=3972): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) 2.606121844s ago: executing program 5 (id=3973): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="baf80c66b89481a88c66efbafc0ced660f9b1c2e0f8e1200baf80c66b8f430fd8766efbafc0ced0f20e16736660f7c4d40f3aa66b9b80a000066b8e300000066ba000000000f306766c7442400008000006766c7442402000000006766c744240600000000670f011c240f019b57f5", 0x6f}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) setpriority(0x0, 0x1, 0xa7a8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) 1.269519868s ago: executing program 1 (id=3974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9]}, {0x2, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}], &(0x7f00000001c0)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {0x0}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.061646145s ago: executing program 3 (id=3975): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100), 0x0) 1.029253966s ago: executing program 0 (id=3976): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) 42.233409ms ago: executing program 5 (id=3977): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x403, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) unshare(0x6020400) syz_open_dev$media(&(0x7f0000000000), 0x7a, 0x181840) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) pselect6(0x40, &(0x7f0000000240)={0x0, 0xa000000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fff, 0xffffffffffffffff, 0x9, 0x0, 0x9}, 0x0, 0x0) 0s ago: executing program 0 (id=3978): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_io_uring_setup(0x17af, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r3, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r1, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) syz_emit_vhci(&(0x7f0000001400)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{}, {0x1, 0xc9, 0xfa}}}, 0x11) kernel console output (not intermixed with test programs): p mac addresses unique to avoid problems! [ 1406.393843][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan8 [ 1406.403718][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.413662][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan9 [ 1406.423564][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.433520][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1406.444131][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.456901][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan10 [ 1406.476891][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.486744][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1406.505123][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.515046][T15342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.533585][T15342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.558482][T15342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.617384][T15342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.626139][T15342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.667502][T15342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.676283][T15342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.166007][T12581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.174123][T12581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.045817][T12577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.082694][T12577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.381564][T15701] nfs: Bad value for 'source' [ 1409.457517][T12048] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1409.597082][T15704] virtio-fs: tag not found [ 1409.608858][T15702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1409.752344][T12048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.877089][T12048] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1409.890395][T12048] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1409.925913][T12048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.961464][T12048] usb 4-1: config 0 descriptor?? [ 1409.973061][T12048] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1410.689086][T15061] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1410.699986][T15061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1410.736956][T15061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1410.748161][T15061] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1410.791119][T15061] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1410.804991][T15061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1411.317716][T12577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.512561][T12577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.830217][ T1191] usb 4-1: USB disconnect, device number 46 [ 1412.892611][T15061] Bluetooth: hci2: command tx timeout [ 1413.154374][T12577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.843052][T12577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.880632][T15753] nfs: Bad value for 'source' [ 1414.971123][T15061] Bluetooth: hci2: command tx timeout [ 1415.171942][T15753] virtio-fs: tag not found [ 1415.229553][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 1415.922199][T15724] chnl_net:caif_netlink_parms(): no params data found [ 1417.057015][ T5782] Bluetooth: hci2: command tx timeout [ 1417.162272][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1417.181400][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1417.589303][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1418.007693][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1418.026417][T15781] ceph: No mds server is up or the cluster is laggy [ 1418.344163][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.353336][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.386034][T15724] bridge_slave_0: entered allmulticast mode [ 1418.483663][T15724] bridge_slave_0: entered promiscuous mode [ 1419.137749][ T5782] Bluetooth: hci2: command tx timeout [ 1419.176314][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.244531][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.271604][T15804] nfs: Bad value for 'source' [ 1419.278522][T15724] bridge_slave_1: entered allmulticast mode [ 1419.285840][T15724] bridge_slave_1: entered promiscuous mode [ 1419.893359][T15806] virtio-fs: tag not found [ 1419.957872][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 1420.407142][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.433179][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.583053][T15724] team0: Port device team_slave_0 added [ 1420.684066][T15724] team0: Port device team_slave_1 added [ 1420.925330][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.934383][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.019979][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.062659][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.073811][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.137044][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.680054][T15724] hsr_slave_0: entered promiscuous mode [ 1421.689558][T15724] hsr_slave_1: entered promiscuous mode [ 1421.726954][T15724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.734534][T15724] Cannot create hsr debugfs directory [ 1421.857872][T12577] hsr_slave_0: left promiscuous mode [ 1421.866741][T12577] hsr_slave_1: left promiscuous mode [ 1421.880981][T12577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.889032][T12577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.906293][T12577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.928679][T12577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.943617][T12577] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1421.950964][T12577] batman_adv: batadv0: Removing interface: ipvlan2 [ 1421.962893][T12577] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1421.969889][T12577] batman_adv: batadv0: Removing interface: ipvlan3 [ 1421.987804][T12577] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 1421.995038][T12577] batman_adv: batadv0: Removing interface: ipvlan4 [ 1422.008554][T12577] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 1422.021537][T12577] batman_adv: batadv0: Removing interface: ipvlan5 [ 1422.030094][T12577] batman_adv: batadv0: Interface deactivated: ipvlan6 [ 1422.037224][T12577] batman_adv: batadv0: Removing interface: ipvlan6 [ 1422.044742][T12577] batman_adv: batadv0: Interface deactivated: ipvlan7 [ 1422.052063][T12577] batman_adv: batadv0: Removing interface: ipvlan7 [ 1422.059919][T12577] batman_adv: batadv0: Interface deactivated: ipvlan8 [ 1422.066751][T12577] batman_adv: batadv0: Removing interface: ipvlan8 [ 1422.091822][T12577] batman_adv: batadv0: Interface deactivated: ipvlan9 [ 1422.104523][T12577] batman_adv: batadv0: Removing interface: ipvlan9 [ 1422.115299][T12577] batman_adv: batadv0: Interface deactivated: ipvlan10 [ 1422.131486][T12577] batman_adv: batadv0: Removing interface: ipvlan10 [ 1422.141407][T12577] bridge_slave_1: left allmulticast mode [ 1422.150146][T12577] bridge_slave_1: left promiscuous mode [ 1422.156340][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.167478][T12577] bridge_slave_0: left allmulticast mode [ 1422.185838][T12577] bridge_slave_0: left promiscuous mode [ 1422.275213][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.503229][T12577] veth1_macvtap: left promiscuous mode [ 1422.555911][T12577] veth0_macvtap: left promiscuous mode [ 1422.587713][T12577] veth1_vlan: left promiscuous mode [ 1422.623844][T12577] veth0_vlan: left promiscuous mode [ 1423.301607][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.308287][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.157871][T15845] nfs: Bad value for 'source' [ 1425.780346][T15847] virtio-fs: tag not found [ 1425.845213][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2502'. [ 1426.549962][T12577] team0 (unregistering): Port device team_slave_1 removed [ 1426.667708][T12577] team0 (unregistering): Port device team_slave_0 removed [ 1426.770172][T12577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.922547][T12577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.669262][T12577] bond0 (unregistering): Released all slaves [ 1427.903391][T15831] pim6reg: entered allmulticast mode [ 1427.934694][T15833] team0: entered allmulticast mode [ 1427.941575][T15833] team_slave_0: entered allmulticast mode [ 1427.947850][T15833] team_slave_1: entered allmulticast mode [ 1427.960862][T15836] team0: left allmulticast mode [ 1427.965933][T15836] team_slave_0: left allmulticast mode [ 1427.972464][T15836] team_slave_1: left allmulticast mode [ 1427.981767][T15836] pim6reg: left allmulticast mode [ 1428.372229][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 1428.387318][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 1428.510337][ T1191] libceph: connect (1)[c::]:6789 error -101 [ 1428.516399][ T1191] libceph: mon0 (1)[c::]:6789 connect error [ 1429.175765][ T1191] libceph: connect (1)[c::]:6789 error -101 [ 1429.183611][ T1191] libceph: mon0 (1)[c::]:6789 connect error [ 1429.292528][T15851] ceph: No mds server is up or the cluster is laggy [ 1429.384136][T12577] IPVS: stop unused estimator thread 0... [ 1431.313241][T15724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1431.346054][T15724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1431.817554][T15724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1431.853272][T15724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1432.949657][T15898] nfs: Bad value for 'source' [ 1433.698095][T15898] virtio-fs: tag not found [ 1433.724506][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.805419][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 1433.890650][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.937273][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.944529][ T7499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.048613][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.055759][ T9869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.265096][T15724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.162185][T15724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.734991][T15724] veth0_vlan: entered promiscuous mode [ 1436.793158][T15724] veth1_vlan: entered promiscuous mode [ 1436.891254][T15933] nfs: Bad value for 'source' [ 1436.897671][T15724] veth0_macvtap: entered promiscuous mode [ 1436.955673][T15724] veth1_macvtap: entered promiscuous mode [ 1437.010828][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.825883][T15933] virtio-fs: tag not found [ 1438.017226][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.027520][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1438.040617][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.088082][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1438.167898][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.180940][T15724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.188785][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2519'. [ 1438.202100][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1438.239513][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.264442][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1438.331449][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.398526][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 1438.417051][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.452040][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 1438.527167][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.670085][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5 [ 1438.686143][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.728493][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1438.739316][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.767086][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1438.801237][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.819208][T15724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.842274][T15939] pim6reg: entered allmulticast mode [ 1440.151943][T15940] team0: entered allmulticast mode [ 1440.213812][T15940] team_slave_0: entered allmulticast mode [ 1440.220906][T15940] team_slave_1: entered allmulticast mode [ 1440.237406][T15941] team0: left allmulticast mode [ 1440.330419][T15941] team_slave_0: left allmulticast mode [ 1440.335938][T15941] team_slave_1: left allmulticast mode [ 1440.372656][T15941] pim6reg: left allmulticast mode [ 1440.569536][T15724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.606907][T15724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.630310][T15724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.657022][T15724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.984165][ T7499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.042371][ T7499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.158699][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.222108][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.857846][T15997] nfs: Bad value for 'source' [ 1444.758513][T16003] virtio-fs: tag not found [ 1445.377850][T16013] pim6reg: entered allmulticast mode [ 1445.479931][T16013] team0: entered allmulticast mode [ 1445.486497][T16013] team_slave_0: entered allmulticast mode [ 1445.496418][T16013] team_slave_1: entered allmulticast mode [ 1445.518230][T16013] team0: left allmulticast mode [ 1445.526002][T16013] team_slave_0: left allmulticast mode [ 1445.546975][T16013] team_slave_1: left allmulticast mode [ 1445.611373][T16013] pim6reg: left allmulticast mode [ 1445.784675][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1448.364666][T16037] syzkaller0: entered promiscuous mode [ 1448.370485][T16037] syzkaller0: entered allmulticast mode [ 1450.297207][ T5782] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 1452.253765][T16060] nfs: Bad value for 'source' [ 1453.186058][T16060] virtio-fs: tag not found [ 1453.203733][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2543'. [ 1454.654006][T16082] syzkaller0: entered promiscuous mode [ 1454.688833][T16082] syzkaller0: entered allmulticast mode [ 1456.816278][T16098] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1456.848743][T16098] overlayfs: failed to look up (tracing) for ino (-66) [ 1458.117812][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1458.436915][ T5812] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1458.973446][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.984813][ T5812] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1459.050276][ T5812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.059777][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.068806][ T5812] usb 2-1: Product: syz [ 1459.074292][ T5812] usb 2-1: Manufacturer: syz [ 1459.089188][ T5812] usb 2-1: SerialNumber: syz [ 1459.168659][ T5812] cdc_mbim 2-1:1.0: skipping garbage [ 1459.193049][T16114] syzkaller0: entered promiscuous mode [ 1459.257980][T16114] syzkaller0: entered allmulticast mode [ 1459.447707][T16112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1460.134742][T16112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1460.185391][ T5812] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1460.244210][ T5812] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1460.325684][ T5812] wwan wwan0: port wwan0mbim0 attached [ 1461.220251][T15061] Bluetooth: hci1: command 0x0406 tx timeout [ 1463.428754][ T5812] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, a2:0c:24:04:bd:da [ 1463.452043][ T5812] usb 2-1: USB disconnect, device number 50 [ 1463.462942][ T5812] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1463.600704][ T5812] wwan wwan0: port wwan0mbim0 disconnected [ 1463.621890][T16153] syz_tun: entered allmulticast mode [ 1463.663791][T16153] pimreg: entered allmulticast mode [ 1463.701242][T16151] syz_tun: left allmulticast mode [ 1464.267721][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1464.280440][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1464.548248][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1464.557128][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1464.894176][T16165] ceph: No mds server is up or the cluster is laggy [ 1466.120583][T16182] syzkaller0: entered promiscuous mode [ 1466.126208][T16182] syzkaller0: entered allmulticast mode [ 1466.153789][ T5782] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 1466.174451][T16195] syzkaller0: entered promiscuous mode [ 1466.190744][T16195] syzkaller0: entered allmulticast mode [ 1466.576993][ T27] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1466.779215][ T27] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1466.789976][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.803568][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1466.842039][ T27] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1466.852232][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.860862][ T27] usb 6-1: Product: syz [ 1466.865621][ T27] usb 6-1: Manufacturer: syz [ 1466.873927][ T27] usb 6-1: SerialNumber: syz [ 1466.940884][ T27] usb 6-1: selecting invalid altsetting 1 [ 1466.959156][ T27] usb 6-1: unit 6 not found! [ 1467.218921][ T27] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1467.408612][ T27] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1467.513783][ T1191] usb 6-1: USB disconnect, device number 37 [ 1467.515926][T16033] udevd[16033]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.617007][ T5782] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1467.629617][ T5782] Bluetooth: hci0: Injecting HCI hardware error event [ 1467.644186][T15061] Bluetooth: hci0: hardware error 0x00 [ 1469.208255][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1469.214467][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1470.440985][T15061] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1470.450348][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1470.456456][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1470.626659][T16214] ceph: No mds server is up or the cluster is laggy [ 1471.133250][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1476.057949][T16270] syzkaller0: entered promiscuous mode [ 1476.149726][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1476.152130][T16270] syzkaller0: entered allmulticast mode [ 1476.175566][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1476.448191][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1476.466677][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1476.801883][T16275] ceph: No mds server is up or the cluster is laggy [ 1477.148932][T16294] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1480.186936][T12048] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1480.497100][T12048] usb 4-1: Using ep0 maxpacket: 32 [ 1480.517025][T12048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.537013][T12048] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1480.576449][T12048] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1480.585998][T12048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.594678][T12048] usb 4-1: Product: syz [ 1480.607744][T12048] usb 4-1: Manufacturer: syz [ 1480.614984][T12048] usb 4-1: SerialNumber: syz [ 1480.627984][T12048] usb 4-1: config 0 descriptor?? [ 1482.346580][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1482.352846][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1482.364925][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1482.371553][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1482.372384][ T5812] IPVS: starting estimator thread 0... [ 1482.392531][ T9] usb 4-1: USB disconnect, device number 47 [ 1482.486926][ T27] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1482.506947][T16331] IPVS: using max 36 ests per chain, 86400 per kthread [ 1482.522172][T16326] ceph: No mds server is up or the cluster is laggy [ 1482.674736][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.689514][ T27] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1482.706144][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1482.715348][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.724609][ T27] usb 1-1: Product: syz [ 1482.729012][ T27] usb 1-1: Manufacturer: syz [ 1482.733707][ T27] usb 1-1: SerialNumber: syz [ 1482.749351][ T27] cdc_mbim 1-1:1.0: skipping garbage [ 1482.894723][T16337] syzkaller0: entered promiscuous mode [ 1482.900543][T16337] syzkaller0: entered allmulticast mode [ 1482.961490][T16328] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1484.885417][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.891882][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.086225][ T27] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 1485.094455][ T27] cdc_mbim 1-1:1.0: bind() failure [ 1485.125294][ T27] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1485.134284][ T27] cdc_ncm 1-1:1.1: bind() failure [ 1485.159907][ T27] usb 1-1: USB disconnect, device number 46 [ 1486.114866][T16367] syzkaller0: entered promiscuous mode [ 1486.129639][T16367] syzkaller0: entered allmulticast mode [ 1487.148300][T16374] nfs: Bad value for 'source' [ 1488.160491][T16374] virtio-fs: tag not found [ 1488.401146][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2626'. [ 1489.076981][T14241] libceph: connect (1)[c::]:6789 error -101 [ 1489.084538][T14241] libceph: mon0 (1)[c::]:6789 connect error [ 1489.119914][T14241] libceph: connect (1)[c::]:6789 error -101 [ 1489.125949][T14241] libceph: mon0 (1)[c::]:6789 connect error [ 1489.250358][T16390] fuse: Bad value for 'group_id' [ 1489.407736][T14241] libceph: connect (1)[c::]:6789 error -101 [ 1489.472683][T14241] libceph: mon0 (1)[c::]:6789 connect error [ 1489.682490][T16382] ceph: No mds server is up or the cluster is laggy [ 1490.050917][T16406] nfs: Bad value for 'source' [ 1490.216966][ T5815] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1491.111691][T16406] virtio-fs: tag not found [ 1491.350758][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'. [ 1491.448806][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.471130][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.482372][ T5815] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1491.494762][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.496972][ T23] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1491.515182][ T5815] usb 6-1: config 0 descriptor?? [ 1491.725760][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1491.734478][ T23] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1491.748759][ T23] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1491.767599][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1491.801393][ T23] usb 1-1: config 1 has no interface number 0 [ 1491.827092][ T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1491.873841][ T23] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1491.916555][ T23] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1491.940711][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1491.959885][ T5815] usbhid 6-1:0.0: can't add hid device: -71 [ 1491.965932][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.972350][ T5815] usbhid: probe of 6-1:0.0 failed with error -71 [ 1492.006498][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1492.068265][ T5815] usb 6-1: USB disconnect, device number 38 [ 1492.214036][ T23] snd_usb_pod 1-1:1.1: invalid control EP [ 1492.229508][ T23] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1492.239245][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1492.251456][ T23] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 1492.950595][T16419] fuse: Bad value for 'group_id' [ 1493.037042][ T5812] usb 1-1: USB disconnect, device number 47 [ 1494.196132][T16430] nfs: Bad value for 'source' [ 1494.857162][T16433] virtio-fs: tag not found [ 1495.029362][T16430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1495.610645][T16445] fuse: Bad value for 'group_id' [ 1495.731033][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1495.737194][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1495.745860][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1495.752525][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1495.943344][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1496.019366][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1496.740883][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1496.852530][T16441] ceph: No mds server is up or the cluster is laggy [ 1497.776205][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1497.821112][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1498.019304][T16459] nfs: Bad value for 'source' [ 1499.197154][T16464] virtio-fs: tag not found [ 1499.374692][T16459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1499.967311][T14241] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1500.166976][T14241] usb 1-1: Using ep0 maxpacket: 32 [ 1500.188616][T14241] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1500.215951][T14241] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1500.247566][T14241] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1500.256580][T14241] usb 1-1: config 1 has no interface number 0 [ 1500.290968][T14241] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1500.332607][T14241] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1500.359177][T14241] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1500.403151][T14241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.797744][T14241] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1501.123371][T14241] snd_usb_pod 1-1:1.1: invalid control EP [ 1501.208902][T14241] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 1501.277698][T14241] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1501.319723][T14241] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 1502.612298][T16491] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1502.619582][T16493] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1502.945808][ T9] usb 1-1: USB disconnect, device number 48 [ 1502.985931][T16495] nfs: Bad value for 'source' [ 1504.054811][T16503] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1504.097191][T16503] overlayfs: overlapping lowerdir path [ 1504.697260][T16504] virtio-fs: tag not found [ 1504.870161][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1509.167107][ T23] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1509.368101][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1509.405874][ T23] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1509.424787][ T23] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1509.455593][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1509.475472][ T23] usb 1-1: config 1 has no interface number 0 [ 1509.497555][ T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1509.527325][ T23] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1509.549443][ T23] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1509.588975][ T23] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1509.609627][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.663795][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1509.867965][ T23] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 1509.884967][ T23] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1509.915684][ T23] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 1511.269907][T16541] nfs: Bad value for 'source' [ 1511.466251][ T5815] usb 1-1: USB disconnect, device number 49 [ 1511.879704][T16548] virtio-fs: tag not found [ 1511.939134][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1514.147891][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1514.198258][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1515.514823][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1515.523407][T16562] ceph: No mds server is up or the cluster is laggy [ 1515.575163][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1517.230175][ T5815] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1517.277075][T14241] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1517.357103][ T1191] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1517.439223][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 1517.446617][ T5815] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1517.467662][ T5815] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1517.483226][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1517.503150][T14241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.757196][ T5815] usb 4-1: config 1 has no interface number 0 [ 1518.769077][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.793819][T14241] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1518.804075][ T5815] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1518.835856][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.846456][ T5815] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1518.857732][ T1191] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1518.876758][ T5815] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1518.890066][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.901529][T14241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1518.911899][ T1191] usb 2-1: config 0 descriptor?? [ 1518.916966][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.924976][T14241] usb 1-1: Product: syz [ 1518.929262][ T5815] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1518.956914][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.966355][T14241] usb 1-1: Manufacturer: syz [ 1518.976867][T14241] usb 1-1: SerialNumber: syz [ 1518.990460][ T5815] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1519.006983][T14241] cdc_mbim 1-1:1.0: skipping garbage [ 1519.203571][ T5815] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 1519.214915][T16580] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1519.227442][ T5815] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1519.235273][ T5815] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 1519.388006][ T1191] usbhid 2-1:0.0: can't add hid device: -71 [ 1519.400887][ T1191] usbhid: probe of 2-1:0.0 failed with error -71 [ 1519.450147][ T1191] usb 2-1: USB disconnect, device number 51 [ 1519.795966][ T1191] usb 4-1: USB disconnect, device number 48 [ 1519.854501][T16580] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1519.871494][T14241] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1519.886886][T14241] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 1520.147622][T14241] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1520.181241][T14241] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1520.335113][T14241] wwan wwan0: port wwan0mbim0 attached [ 1520.504129][T14241] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, be:2e:9b:15:db:64 [ 1520.539489][T14241] usb 1-1: USB disconnect, device number 50 [ 1520.546443][T14241] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1520.722697][T16595] nfs: Bad value for 'source' [ 1520.732550][T14241] wwan wwan0: port wwan0mbim0 disconnected [ 1522.411770][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1522.434864][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1522.747290][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 1522.761656][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 1522.769136][T16611] virtio-fs: tag not found [ 1522.828684][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'. [ 1522.869513][T16604] ceph: No mds server is up or the cluster is laggy [ 1525.026401][T16624] fuse: Bad value for 'group_id' [ 1527.566944][T14241] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1527.826952][T14241] usb 4-1: Using ep0 maxpacket: 32 [ 1527.898813][T14241] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1527.937149][T14241] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1527.945769][T14241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1528.001927][T14241] usb 4-1: config 1 has no interface number 0 [ 1528.017114][T14241] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1528.060594][T14241] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1528.096168][T14241] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1528.142860][T14241] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1528.173962][T14241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.232659][T14241] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1528.425356][T14241] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 1528.453000][T14241] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1528.471788][T14241] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 1528.690915][T14241] libceph: connect (1)[c::]:6789 error -101 [ 1528.697068][T14241] libceph: mon0 (1)[c::]:6789 connect error [ 1528.936461][T16653] nfs: Bad value for 'source' [ 1528.957839][T14241] libceph: connect (1)[c::]:6789 error -101 [ 1528.964007][T14241] libceph: mon0 (1)[c::]:6789 connect error [ 1529.397818][T16645] ceph: No mds server is up or the cluster is laggy [ 1530.168158][ T27] usb 4-1: USB disconnect, device number 49 [ 1531.805103][T16662] virtio-fs: tag not found [ 1531.971884][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2708'. [ 1532.967103][T14241] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1533.171485][T14241] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.205150][T14241] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1533.241663][T14241] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1533.254423][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.288106][T14241] usb 1-1: Product: syz [ 1533.300926][T14241] usb 1-1: Manufacturer: syz [ 1533.313779][T14241] usb 1-1: SerialNumber: syz [ 1533.550274][T16683] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1533.594144][T14241] usb 1-1: 0:1 : does not exist [ 1533.780137][T14241] usb 1-1: USB disconnect, device number 51 [ 1533.910662][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1536.486376][ T1191] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1536.797000][ T1191] usb 6-1: Using ep0 maxpacket: 32 [ 1536.977754][ T1191] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1536.986158][ T1191] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1537.004780][T16710] nfs: Bad value for 'source' [ 1537.037024][ T1191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1537.046036][ T1191] usb 6-1: config 1 has no interface number 0 [ 1537.883162][T16714] virtio-fs: tag not found [ 1537.890772][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'. [ 1538.567184][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1538.677206][ T1191] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1538.694887][ T1191] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1538.717160][ T1191] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1538.726253][ T1191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.958548][ T1191] usb 6-1: can't set config #1, error -71 [ 1538.997895][ T1191] usb 6-1: USB disconnect, device number 39 [ 1543.590933][ T787] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1543.811415][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.856995][ T787] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1543.875198][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1543.890689][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.907002][ T787] usb 4-1: Product: syz [ 1543.920009][ T787] usb 4-1: Manufacturer: syz [ 1543.935243][ T787] usb 4-1: SerialNumber: syz [ 1543.954135][ T787] cdc_mbim 4-1:1.0: skipping garbage [ 1544.158795][T16744] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1544.176951][ T1191] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1544.407090][ T1191] usb 2-1: Using ep0 maxpacket: 32 [ 1544.830712][ T787] cdc_mbim 4-1:1.0: bind() failure [ 1545.053393][ T787] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1545.151640][ T787] cdc_ncm 4-1:1.1: bind() failure [ 1545.173281][ T1191] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1545.196896][ T1191] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1545.205599][ T1191] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1545.226527][ T1191] usb 2-1: config 1 has no interface number 0 [ 1545.232694][ T787] usb 4-1: USB disconnect, device number 50 [ 1545.232746][ T1191] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1545.249695][ T1191] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1545.262886][ T1191] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1545.272362][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.302719][ T1191] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1545.321709][T16766] nfs: Bad value for 'source' [ 1545.522127][T16766] virtio-fs: tag not found [ 1545.528903][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2738'. [ 1546.418614][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.424973][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.520532][ T1191] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1546.823428][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1547.621269][ T1191] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1549.467471][ T5815] usb 2-1: USB disconnect, device number 52 [ 1549.489813][ T5815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1551.916449][T16804] nfs: Bad value for 'source' [ 1552.126195][ T1191] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1552.192328][T16804] virtio-fs: tag not found [ 1552.199536][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1552.420379][T16809] pim6reg: entered allmulticast mode [ 1552.599073][T16809] pim6reg: left allmulticast mode [ 1552.647797][ T1191] usb 6-1: Using ep0 maxpacket: 32 [ 1553.530750][ T1191] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.555507][ T1191] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1554.297432][ T1191] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1554.318544][ T1191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.348838][ T1191] usb 6-1: Product: syz [ 1554.353030][ T1191] usb 6-1: Manufacturer: syz [ 1554.366940][ T1191] usb 6-1: SerialNumber: syz [ 1554.379698][ T1191] usb 6-1: config 0 descriptor?? [ 1554.419372][T16817] fuse: Bad value for 'user_id' [ 1554.720494][ T27] IPVS: starting estimator thread 0... [ 1555.667200][T16819] IPVS: using max 18 ests per chain, 43200 per kthread [ 1557.142994][ T1191] usb 6-1: USB disconnect, device number 40 [ 1557.341601][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1557.547235][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1557.622110][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1557.831016][T16840] nfs: Bad value for 'source' [ 1558.023066][T16840] virtio-fs: tag not found [ 1558.029653][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1558.642145][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1558.648370][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1558.655146][T16830] ceph: No mds server is up or the cluster is laggy [ 1558.878290][T16846] fuse: Bad value for 'user_id' [ 1559.227052][ T5812] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1559.457085][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 1559.479717][ T5812] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.521883][ T5812] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1559.541940][ T5812] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1559.552395][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.562556][ T5812] usb 6-1: Product: syz [ 1559.567119][ T5812] usb 6-1: Manufacturer: syz [ 1559.571823][ T5812] usb 6-1: SerialNumber: syz [ 1559.604111][ T5812] usb 6-1: config 0 descriptor?? [ 1559.616966][ T5815] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1559.796921][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 1559.832382][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.847955][ T5815] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1559.868713][ T5815] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1559.889001][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.900999][ T5815] usb 1-1: Product: syz [ 1559.905185][ T5815] usb 1-1: Manufacturer: syz [ 1559.910152][ T5815] usb 1-1: SerialNumber: syz [ 1559.923699][ T5815] usb 1-1: config 0 descriptor?? [ 1561.785970][ T787] usb 6-1: USB disconnect, device number 41 [ 1562.751696][ T1191] usb 1-1: USB disconnect, device number 52 [ 1564.157413][T16867] nfs: Bad value for 'source' [ 1564.371754][T16867] virtio-fs: tag not found [ 1564.378275][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 1565.836028][T16877] fuse: Bad value for 'user_id' [ 1565.872633][ T787] libceph: connect (1)[c::]:6789 error -101 [ 1565.878765][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 1566.794025][ T787] libceph: connect (1)[c::]:6789 error -101 [ 1566.815495][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 1566.912596][T16878] ceph: No mds server is up or the cluster is laggy [ 1568.232024][T16897] nfs: Bad value for 'source' [ 1568.417200][T16900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1568.424218][T16900] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1568.553679][T16900] vhci_hcd vhci_hcd.0: Device attached [ 1568.567838][T16901] virtio-fs: tag not found [ 1568.578011][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 1568.699501][T16900] Bluetooth: MGMT ver 1.22 [ 1568.731670][T16902] vhci_hcd: connection closed [ 1568.734664][ T9869] vhci_hcd: stop threads [ 1568.765383][ T9869] vhci_hcd: release socket [ 1568.791565][ T9869] vhci_hcd: disconnect device [ 1568.876997][T14241] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1569.076917][T14241] usb 6-1: Using ep0 maxpacket: 8 [ 1569.086942][T14241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.100550][T14241] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1569.107654][ T5815] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1569.120946][T14241] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1569.149791][T14241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.158086][T14241] usb 6-1: Product: syz [ 1569.162424][T14241] usb 6-1: Manufacturer: syz [ 1569.167372][T14241] usb 6-1: SerialNumber: syz [ 1569.174984][T14241] usb 6-1: config 0 descriptor?? [ 1569.193328][T14241] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1569.237288][ T787] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1569.296921][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 1569.313805][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.366257][ T5815] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1569.407297][T14241] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1569.422062][ T5815] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1569.432418][T14241] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1569.440309][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.540618][T14241] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 1570.548054][ T5815] usb 2-1: Product: syz [ 1570.552270][ T5815] usb 2-1: Manufacturer: syz [ 1570.596712][ T5815] usb 2-1: SerialNumber: syz [ 1570.605047][T14241] usb 6-1: USB disconnect, device number 42 [ 1570.610474][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.622598][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.632743][ T787] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1570.645463][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.650231][ T5815] usb 2-1: config 0 descriptor?? [ 1570.656268][ T787] usb 4-1: config 0 descriptor?? [ 1571.594467][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1571.704305][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1572.129063][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1572.215030][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1572.417746][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1572.584964][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1572.710717][ T787] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 1573.075684][ T787] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1573.091681][ T5812] usb 2-1: USB disconnect, device number 53 [ 1573.164349][T12048] libceph: connect (1)[c::]:6789 error -101 [ 1573.199934][T12048] libceph: mon0 (1)[c::]:6789 connect error [ 1573.207158][ T787] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 1573.247549][ C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 1573.261640][ T787] usb 4-1: USB disconnect, device number 51 [ 1573.374270][T16925] fido_id[16925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1573.498124][ T787] libceph: connect (1)[c::]:6789 error -101 [ 1573.498229][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 1574.007246][ T787] libceph: connect (1)[c::]:6789 error -101 [ 1574.223855][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 1574.252113][T16920] ceph: No mds server is up or the cluster is laggy [ 1574.935800][T16933] fuse: Bad value for 'fd' [ 1575.206638][T16939] syzkaller0: entered promiscuous mode [ 1575.212820][T16939] syzkaller0: entered allmulticast mode [ 1575.468132][T16941] nfs: Bad value for 'source' [ 1576.750026][T16949] virtio-fs: tag not found [ 1576.791915][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 1578.455430][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1579.097105][ T5812] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1579.337181][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 1579.379304][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.390084][ T5812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1579.533536][ T5812] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1579.542732][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.561423][ T5812] usb 2-1: Product: syz [ 1579.565728][ T5812] usb 2-1: Manufacturer: syz [ 1579.572828][ T5812] usb 2-1: SerialNumber: syz [ 1579.606803][ T5812] usb 2-1: config 0 descriptor?? [ 1581.866111][T14241] usb 2-1: USB disconnect, device number 54 [ 1581.956628][T16969] fuse: Bad value for 'fd' [ 1582.035144][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 1582.053580][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'. [ 1582.100028][T16978] syzkaller0: entered promiscuous mode [ 1582.105707][T16978] syzkaller0: entered allmulticast mode [ 1582.157050][ T5812] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1583.347189][ T5815] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1583.436918][ T5812] usb 4-1: device descriptor read/64, error -71 [ 1583.569407][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.664909][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.743365][ T5815] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1583.812738][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.928945][ T5815] usb 6-1: config 0 descriptor?? [ 1584.313864][T16988] nfs: Bad value for 'source' [ 1584.830464][T16989] virtio-fs: tag not found [ 1584.867577][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1585.782753][ T5815] usbhid 6-1:0.0: can't add hid device: -71 [ 1585.824121][ T5815] usbhid: probe of 6-1:0.0 failed with error -71 [ 1585.880242][ T5815] usb 6-1: USB disconnect, device number 43 [ 1586.387476][ T5812] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1586.587218][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 1586.618511][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.635391][T17001] fuse: Unknown parameter 'group_id00000000000000000000' [ 1586.676129][ T5812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.746673][ T5812] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1586.776370][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.804933][ T5812] usb 4-1: Product: syz [ 1586.815077][ T5812] usb 4-1: Manufacturer: syz [ 1586.845324][ T5812] usb 4-1: SerialNumber: syz [ 1586.865134][ T5812] usb 4-1: config 0 descriptor?? [ 1586.925073][T17003] fuse: Bad value for 'fd' [ 1587.835426][ T5812] usb 4-1: USB disconnect, device number 53 [ 1589.158942][T17014] syzkaller0: entered promiscuous mode [ 1589.164547][T17014] syzkaller0: entered allmulticast mode [ 1589.220373][T17017] nfs: Bad value for 'source' [ 1589.699802][T17018] virtio-fs: tag not found [ 1589.742519][T17018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1591.507325][T17025] fuse: Unknown parameter 'group_id00000000000000000000' [ 1593.428017][T11487] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1593.683643][T11487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.786384][T11487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.257063][T11487] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1595.284654][T11487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.304265][T11487] usb 4-1: config 0 descriptor?? [ 1595.537591][T17050] nfs: Bad value for 'source' [ 1596.151246][T17053] virtio-fs: tag not found [ 1596.190417][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1597.108006][T11487] usbhid 4-1:0.0: can't add hid device: -71 [ 1597.114107][T11487] usbhid: probe of 4-1:0.0 failed with error -71 [ 1597.149047][T11487] usb 4-1: USB disconnect, device number 54 [ 1597.225930][T17058] fuse: Unknown parameter 'group_id00000000000000000000' [ 1598.672351][T17066] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1598.678932][T17066] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1598.718386][T17066] vhci_hcd vhci_hcd.0: Device attached [ 1598.739502][T17068] vhci_hcd: connection closed [ 1598.740776][T12577] vhci_hcd: stop threads [ 1598.762791][T12577] vhci_hcd: release socket [ 1598.767368][T12577] vhci_hcd: disconnect device [ 1600.449609][T17081] nfs: Bad value for 'source' [ 1601.443906][T17083] virtio-fs: tag not found [ 1601.497681][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2834'. [ 1602.148326][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1603.072125][T17091] syzkaller0: entered promiscuous mode [ 1603.107326][T17091] syzkaller0: entered allmulticast mode [ 1604.689846][T17104] dns_resolver: Unsupported content type (152) [ 1607.612090][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.695518][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.902386][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1609.054943][T17139] nfs: Bad value for 'source' [ 1610.019520][T17142] syzkaller0: entered promiscuous mode [ 1610.025013][T17142] syzkaller0: entered allmulticast mode [ 1610.520736][T17144] virtio-fs: tag not found [ 1610.561782][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1614.424092][T17172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1614.430631][T17172] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1614.476969][T17172] vhci_hcd vhci_hcd.0: Device attached [ 1614.501266][T17173] vhci_hcd: connection closed [ 1614.524248][ T1090] vhci_hcd: stop threads [ 1614.536888][ T1090] vhci_hcd: release socket [ 1614.548804][ T1090] vhci_hcd: disconnect device [ 1614.734778][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1616.139733][T17187] virtio-fs: tag not found [ 1616.193575][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1617.647235][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1620.464109][T17213] pim6reg: entered allmulticast mode [ 1620.486792][T17212] team0: entered allmulticast mode [ 1620.492197][T17212] team_slave_0: entered allmulticast mode [ 1620.498055][T17212] team_slave_1: entered allmulticast mode [ 1620.509773][T17212] team0: left allmulticast mode [ 1620.514679][T17212] team_slave_0: left allmulticast mode [ 1620.520416][T17212] team_slave_1: left allmulticast mode [ 1620.525938][T17212] pim6reg: left allmulticast mode [ 1621.259908][T17218] virtio-fs: tag not found [ 1621.298930][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 1624.022063][T17239] fuse: Bad value for 'fd' [ 1624.572632][T17244] fuse: Unknown parameter 'use00000000000000000000' [ 1626.019676][T17254] virtio-fs: tag not found [ 1626.060119][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2880'. [ 1629.638617][T17270] fuse: Bad value for 'fd' [ 1630.356593][T17281] fuse: Unknown parameter 'use00000000000000000000' [ 1630.907613][T17290] binder: 17289:17290 ioctl 4018620d 0 returned -22 [ 1631.019901][T17292] syzkaller0: entered promiscuous mode [ 1631.025438][T17292] syzkaller0: entered allmulticast mode [ 1632.998483][T17310] fuse: Bad value for 'fd' [ 1634.167162][ T23] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1634.362054][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1634.393289][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1634.423643][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1634.438310][ T23] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1634.447770][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.455949][ T23] usb 1-1: Product: syz [ 1634.461072][ T23] usb 1-1: Manufacturer: syz [ 1634.465996][ T23] usb 1-1: SerialNumber: syz [ 1634.556057][ T23] usb 1-1: selecting invalid altsetting 1 [ 1634.594686][T17333] loop9: detected capacity change from 0 to 524287936 [ 1634.644874][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1634.824236][T17324] udevd[17324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1635.042267][T17335] syzkaller0: entered promiscuous mode [ 1635.056612][T17335] syzkaller0: entered allmulticast mode [ 1637.162709][ T787] usb 1-1: USB disconnect, device number 53 [ 1637.288251][T17350] fuse: Bad value for 'fd' [ 1638.954918][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1640.459683][T17378] pim6reg: entered allmulticast mode [ 1640.560511][T17380] team0: entered allmulticast mode [ 1640.565719][T17380] team_slave_0: entered allmulticast mode [ 1640.577669][T17380] team_slave_1: entered allmulticast mode [ 1640.584195][T17381] team0: left allmulticast mode [ 1640.589193][T17381] team_slave_0: left allmulticast mode [ 1640.597678][T17381] team_slave_1: left allmulticast mode [ 1640.609307][T17381] pim6reg: left allmulticast mode [ 1640.740155][T17388] fuse: Bad value for 'fd' [ 1640.889481][T12048] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1640.910370][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1641.127521][T12048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1641.364532][T12048] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.482009][T12048] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1641.606391][T12048] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1641.927063][T12048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.935520][T12048] usb 6-1: Product: syz [ 1641.944091][T12048] usb 6-1: Manufacturer: syz [ 1641.950932][T12048] usb 6-1: SerialNumber: syz [ 1642.007077][T12048] usb 6-1: selecting invalid altsetting 1 [ 1642.026949][T12048] usb 6-1: unit 6 not found! [ 1642.031775][T12048] usb 6-1: unit 2 not found! [ 1642.315220][T12048] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1642.461877][T17324] udevd[17324]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1642.969333][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1643.221220][T17410] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1643.234685][T17410] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1643.296167][T17410] vhci_hcd vhci_hcd.0: Device attached [ 1643.343675][T17411] vhci_hcd: connection closed [ 1643.345171][ T9869] vhci_hcd: stop threads [ 1643.354987][ T9869] vhci_hcd: release socket [ 1643.367831][ T9869] vhci_hcd: disconnect device [ 1643.624635][T17420] pim6reg: entered allmulticast mode [ 1643.754103][T17420] team0: entered allmulticast mode [ 1643.759566][T17420] team_slave_0: entered allmulticast mode [ 1643.765454][T17420] team_slave_1: entered allmulticast mode [ 1643.793385][T17420] team0: left allmulticast mode [ 1643.800846][T17420] team_slave_0: left allmulticast mode [ 1643.806417][T17420] team_slave_1: left allmulticast mode [ 1643.812713][T17420] pim6reg: left allmulticast mode [ 1644.026386][ T9] usb 6-1: USB disconnect, device number 44 [ 1644.115449][T17424] fuse: Bad value for 'fd' [ 1644.622780][T17432] dns_resolver: Unsupported content type (152) [ 1646.267063][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1648.663296][T17458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1648.676772][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1648.696123][T17458] vhci_hcd vhci_hcd.0: Device attached [ 1648.704729][T17462] vhci_hcd: connection closed [ 1648.723046][T17464] fuse: Invalid rootmode [ 1648.761548][T12588] vhci_hcd: stop threads [ 1648.765959][T12588] vhci_hcd: release socket [ 1648.775068][T12588] vhci_hcd: disconnect device [ 1648.849933][T17467] dns_resolver: Unsupported content type (152) [ 1653.089812][T17502] dns_resolver: Unsupported content type (152) [ 1653.127212][T17500] fuse: Invalid rootmode [ 1654.984344][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1659.479732][T17541] dns_resolver: Unsupported content type (152) [ 1660.339215][T17545] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1660.345886][T17545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1660.355492][T17547] fuse: Invalid rootmode [ 1660.408174][T17545] vhci_hcd vhci_hcd.0: Device attached [ 1661.686901][T17548] vhci_hcd: connection closed [ 1661.687436][ T2986] vhci_hcd: stop threads [ 1661.696430][ T2986] vhci_hcd: release socket [ 1661.716208][ T2986] vhci_hcd: disconnect device [ 1662.378852][T17556] dns_resolver: Unsupported content type (152) [ 1665.328948][T17565] dns_resolver: Unsupported content type (152) [ 1666.979004][T17571] syzkaller0: entered promiscuous mode [ 1666.997021][T17571] syzkaller0: entered allmulticast mode [ 1667.534976][T17574] pim6reg: entered allmulticast mode [ 1667.545579][T17576] team0: entered allmulticast mode [ 1667.556110][T17576] team_slave_0: entered allmulticast mode [ 1667.562147][T17576] team_slave_1: entered allmulticast mode [ 1667.662978][T17579] team0: left allmulticast mode [ 1667.672636][T17579] team_slave_0: left allmulticast mode [ 1667.684637][T17579] team_slave_1: left allmulticast mode [ 1667.697137][T17579] pim6reg: left allmulticast mode [ 1667.865235][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1669.052890][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.067129][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.573911][T17601] binder: 17600:17601 ioctl 4018620d 0 returned -22 [ 1677.079951][T17611] dns_resolver: Unsupported content type (152) [ 1680.277145][T17622] syzkaller0: entered promiscuous mode [ 1680.286347][T17624] fuse: Bad value for 'rootmode' [ 1680.291789][T17622] syzkaller0: entered allmulticast mode [ 1681.020549][T17634] fuse: Bad value for 'rootmode' [ 1681.679393][T17636] pim6reg: entered allmulticast mode [ 1681.707163][T17632] team0: entered allmulticast mode [ 1681.712315][T17632] team_slave_0: entered allmulticast mode [ 1681.718136][T17632] team_slave_1: entered allmulticast mode [ 1681.730890][T17632] team0: left allmulticast mode [ 1681.735774][T17632] team_slave_0: left allmulticast mode [ 1681.741315][T17632] team_slave_1: left allmulticast mode [ 1681.746901][T17632] pim6reg: left allmulticast mode [ 1685.156090][T17656] syzkaller0: entered promiscuous mode [ 1685.175838][T17656] syzkaller0: entered allmulticast mode [ 1686.038703][T17663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1686.045288][T17663] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1686.113143][T17663] vhci_hcd vhci_hcd.0: Device attached [ 1686.427650][ T5812] usb 44-1: SetAddress Request (2) to port 0 [ 1686.434859][ T5812] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1686.550929][T17664] vhci_hcd: connection reset by peer [ 1686.566739][T12581] vhci_hcd: stop threads [ 1686.575443][T12581] vhci_hcd: release socket [ 1686.586505][T12581] vhci_hcd: disconnect device [ 1688.781375][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1690.788559][T17688] fuse: Bad value for 'rootmode' [ 1692.048300][ T5812] usb 44-1: device descriptor read/8, error -110 [ 1693.107384][ T5812] usb usb44-port1: attempt power cycle [ 1694.361922][ T5812] usb usb44-port1: unable to enumerate USB device [ 1696.318779][T17725] loop9: detected capacity change from 0 to 524287936 [ 1696.537908][T17731] fuse: Bad value for 'rootmode' [ 1696.592756][T17734] syzkaller0: entered promiscuous mode [ 1696.606958][T17734] syzkaller0: entered allmulticast mode [ 1698.371569][T17746] vivid-000: kernel_thread() failed [ 1699.698219][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1699.931868][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1700.773508][T17770] fuse: Unknown parameter 'use00000000000000000000' [ 1700.831596][T17771] syzkaller0: entered promiscuous mode [ 1700.856928][T17771] syzkaller0: entered allmulticast mode [ 1703.759834][T17797] binder: 17795:17797 ioctl c0306201 0 returned -14 [ 1703.845503][T17800] syzkaller0: entered promiscuous mode [ 1703.851492][T17800] syzkaller0: entered allmulticast mode [ 1707.111084][T17831] binder: 17830:17831 ioctl c0306201 0 returned -14 [ 1707.302901][T17842] nfs: Bad value for 'source' [ 1707.482540][T17842] virtio-fs: tag not found [ 1707.489110][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3050'. [ 1708.276981][T11487] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1708.633232][T11487] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.644892][T11487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.707076][T11487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1708.746902][T11487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.864535][T11487] usb 2-1: Product: syz [ 1708.938968][T11487] usb 2-1: Manufacturer: syz [ 1708.943724][T11487] usb 2-1: SerialNumber: syz [ 1709.719505][T11487] cdc_mbim 2-1:1.0: skipping garbage [ 1709.724863][T11487] usb 2-1: selecting invalid altsetting 1 [ 1710.000233][T11487] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1710.751313][T15061] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 1710.887047][T11487] cdc_mbim 2-1:1.0: bind() failure [ 1710.968164][T17866] binder: 17865:17866 ioctl c0306201 0 returned -14 [ 1711.471087][T17880] nfs: Bad value for 'source' [ 1711.801578][T11487] usb 2-1: USB disconnect, device number 55 [ 1713.686399][T17888] virtio-fs: tag not found [ 1713.768702][T17880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3061'. [ 1713.896040][T17898] loop9: detected capacity change from 0 to 524287936 [ 1713.952799][T17900] fuse: Unknown parameter 'user_i00000000000000000000' [ 1715.131561][T17912] fuse: Unknown parameter 'user_i00000000000000000000' [ 1717.841868][T17938] fuse: Unknown parameter 'user_i00000000000000000000' [ 1724.280263][T17979] nfs: Bad value for 'source' [ 1725.419509][T17989] fuse: Unknown parameter 'user_i00000000000000000000' [ 1725.620083][T17991] fuse: Unknown parameter 'fd0x0000000000000005' [ 1727.443731][T18007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1727.526930][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'. [ 1728.723044][T18001] virtio-fs: tag not found [ 1728.982095][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1729.176169][T18025] fuse: Unknown parameter 'user_id00000000000000000000' [ 1730.653913][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.660474][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.928105][T18039] fuse: Unknown parameter 'fd0x0000000000000005' [ 1734.440356][T18065] nfs: Bad value for 'source' [ 1735.495140][T18079] fuse: Unknown parameter 'fd0x0000000000000005' [ 1736.550040][T18087] pim6reg: entered allmulticast mode [ 1736.579862][T18087] team0: entered allmulticast mode [ 1736.585150][T18087] team_slave_0: entered allmulticast mode [ 1736.591244][T18087] team_slave_1: entered allmulticast mode [ 1736.610574][T18087] team0: left allmulticast mode [ 1736.615550][T18087] team_slave_0: left allmulticast mode [ 1736.622491][T18087] team_slave_1: left allmulticast mode [ 1736.637613][T18087] pim6reg: left allmulticast mode [ 1742.653350][T18134] nfs: Bad value for 'source' [ 1744.717160][T18143] virtio-fs: tag not found [ 1744.927149][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1747.764476][T18173] fuse: Bad value for 'fd' [ 1750.619020][T15061] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 1750.913175][T18195] fuse: Bad value for 'fd' [ 1751.033772][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1752.502447][T18215] nfs: Bad value for 'source' [ 1754.087193][T18219] virtio-fs: tag not found [ 1754.257765][T18215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3145'. [ 1754.657171][T15061] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1754.666800][T15061] Bluetooth: hci4: Injecting HCI hardware error event [ 1754.675706][T15061] Bluetooth: hci4: hardware error 0x00 [ 1756.292873][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1756.727559][T15061] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1759.823486][T18271] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3169'. [ 1760.865855][T18282] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1760.872431][T18282] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1761.029938][T18282] vhci_hcd vhci_hcd.0: Device attached [ 1761.340523][ T5812] usb 34-1: SetAddress Request (3) to port 0 [ 1761.393883][ T5812] usb 34-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1761.483299][T18283] vhci_hcd: connection closed [ 1761.483682][ T7499] vhci_hcd: stop threads [ 1761.503503][ T7499] vhci_hcd: release socket [ 1761.518622][ T7499] vhci_hcd: disconnect device [ 1761.640369][T18289] fuse: Unknown parameter '0x0000000000000005' [ 1761.667652][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1761.866915][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1762.968290][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.008263][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1763.080703][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.098043][ T9] usb 4-1: Product: syz [ 1763.107263][ T9] usb 4-1: Manufacturer: syz [ 1763.112137][ T9] usb 4-1: SerialNumber: syz [ 1763.136274][ T9] usb 4-1: config 0 descriptor?? [ 1763.181558][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1763.290600][ T9] usb 4-1: selecting invalid altsetting 1 [ 1763.492063][ T9] gspca_stk014: init reg: 0x00 [ 1763.501527][ T9] stk014: probe of 4-1:0.0 failed with error -5 [ 1764.587722][T18304] dns_resolver: Unsupported content type (152) [ 1764.755431][ T787] usb 4-1: USB disconnect, device number 55 [ 1766.885835][ T5812] usb 34-1: device descriptor read/8, error -110 [ 1766.970286][T18319] fuse: Unknown parameter '0x0000000000000005' [ 1767.356266][T18329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1767.362851][T18329] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1767.377934][ T5812] usb usb34-port1: attempt power cycle [ 1767.407299][T18329] vhci_hcd vhci_hcd.0: Device attached [ 1767.449377][T18333] vhci_hcd: connection closed [ 1767.452913][ T3422] vhci_hcd: stop threads [ 1767.470390][ T3422] vhci_hcd: release socket [ 1767.877140][T18337] dns_resolver: Unsupported content type (152) [ 1768.297003][ T3422] vhci_hcd: disconnect device [ 1769.348950][ T5812] usb usb34-port1: unable to enumerate USB device [ 1770.798305][T18357] fuse: Unknown parameter '0x0000000000000005' [ 1771.437148][T18363] dns_resolver: Unsupported content type (152) [ 1772.361239][T18367] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1774.715725][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1775.843184][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1777.791549][T18404] fuse: Unknown parameter '0x0000000000000005' [ 1782.956124][T18437] fuse: Unknown parameter '0x0000000000000005' [ 1783.865405][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1787.404490][T18472] fuse: Unknown parameter '0x0000000000000005' [ 1791.933599][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.940256][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.534081][T18506] fuse: Unknown parameter 'fd0x0000000000000005' [ 1794.010233][T18514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3243'. [ 1794.912596][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1798.276232][T18545] fuse: Unknown parameter 'fd0x0000000000000005' [ 1800.596363][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1804.227328][T18579] dns_resolver: Unsupported content type (152) [ 1805.354471][T18587] fuse: Unknown parameter 'fd0x0000000000000005' [ 1805.445216][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1807.284663][T18605] capability: warning: `syz.0.3261' uses 32-bit capabilities (legacy support in use) [ 1808.006359][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1808.847857][T18604] orangefs_mount: mount request failed with -4 [ 1809.437371][T18623] dns_resolver: Unsupported content type (152) [ 1814.289834][T18651] dns_resolver: Unsupported content type (152) [ 1816.369846][T18674] syz.3.3287 (18674): /proc/18674/oom_adj is deprecated, please use /proc/18674/oom_score_adj instead. [ 1817.909288][T18680] syzkaller0: entered promiscuous mode [ 1817.942018][T18680] syzkaller0: entered allmulticast mode [ 1819.031285][T18698] dns_resolver: Unsupported content type (152) [ 1819.602820][T18701] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1819.609400][T18701] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1819.656549][T18701] vhci_hcd vhci_hcd.0: Device attached [ 1819.738156][T18702] vhci_hcd: connection closed [ 1819.741789][T12577] vhci_hcd: stop threads [ 1819.751436][T12577] vhci_hcd: release socket [ 1819.755933][T12577] vhci_hcd: disconnect device [ 1822.566285][T18740] dns_resolver: Unsupported content type (152) [ 1823.439497][T18738] affs: No valid root block on device nullb0 [ 1825.254053][T18768] syzkaller0: entered promiscuous mode [ 1825.268129][T18768] syzkaller0: entered allmulticast mode [ 1825.440275][T18771] dns_resolver: Unsupported content type (152) [ 1825.703715][T18773] netlink: 'syz.1.3314': attribute type 39 has an invalid length. [ 1827.582567][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1827.691889][ T1191] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1828.456894][ T1191] usb 1-1: Using ep0 maxpacket: 32 [ 1828.465576][T18802] dns_resolver: Unsupported content type (152) [ 1828.610751][ T1191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.620999][T18801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1828.628361][T18801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1828.699751][ T1191] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1828.803236][ T1191] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1828.888180][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.895140][T18801] vhci_hcd vhci_hcd.0: Device attached [ 1828.990425][T18803] vhci_hcd: connection closed [ 1828.990622][T12591] vhci_hcd: stop threads [ 1828.991073][ T1191] usb 1-1: Product: syz [ 1828.995344][T12591] vhci_hcd: release socket [ 1829.009185][T12591] vhci_hcd: disconnect device [ 1829.017013][ T1191] usb 1-1: Manufacturer: syz [ 1829.027039][ T1191] usb 1-1: SerialNumber: syz [ 1829.041627][ T1191] usb 1-1: config 0 descriptor?? [ 1829.376877][T18809] dns_resolver: Unsupported content type (152) [ 1829.578100][ T1191] IPVS: starting estimator thread 0... [ 1830.447470][T18812] IPVS: using max 24 ests per chain, 57600 per kthread [ 1830.900199][ T787] usb 1-1: USB disconnect, device number 54 [ 1831.488350][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1834.805857][T18843] dns_resolver: Unsupported content type (152) [ 1836.209153][T18853] netlink: 'syz.1.3339': attribute type 39 has an invalid length. [ 1836.357078][ T9363] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1836.424682][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1836.537009][ T9363] usb 6-1: Using ep0 maxpacket: 32 [ 1837.197614][ T9363] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.216970][ T9363] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1837.229627][ T9363] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1837.239569][ T9363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.249332][ T9363] usb 6-1: Product: syz [ 1837.253774][ T9363] usb 6-1: Manufacturer: syz [ 1837.258558][ T9363] usb 6-1: SerialNumber: syz [ 1837.277637][ T9363] usb 6-1: config 0 descriptor?? [ 1839.402835][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1840.207390][T14241] usb 6-1: USB disconnect, device number 45 [ 1840.305164][T18868] netlink: 'syz.0.3342': attribute type 39 has an invalid length. [ 1841.160781][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1842.333908][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1842.557321][ T9363] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1843.331651][ T9363] usb 1-1: Using ep0 maxpacket: 32 [ 1843.372659][ T9363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1843.424112][ T9363] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1844.053099][ T9363] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1844.305131][ T9363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.313990][ T9363] usb 1-1: Product: syz [ 1844.319106][ T9363] usb 1-1: Manufacturer: syz [ 1844.323768][ T9363] usb 1-1: SerialNumber: syz [ 1844.343936][ T9363] usb 1-1: config 0 descriptor?? [ 1846.463153][ T1191] usb 1-1: USB disconnect, device number 55 [ 1846.826918][ T5815] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1850.439211][ T5815] usb 2-1: unable to read config index 0 descriptor/all [ 1850.496973][ T5815] usb 2-1: can't read configurations, error -71 [ 1851.435591][T18961] syzkaller0: entered promiscuous mode [ 1851.441335][T18961] syzkaller0: entered allmulticast mode [ 1852.247161][ T9363] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1852.467371][ T9363] usb 6-1: Using ep0 maxpacket: 32 [ 1852.560156][ T9363] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.674739][ T9363] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1852.808580][ T9363] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1852.906604][ T9363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.993873][ T9363] usb 6-1: Product: syz [ 1853.039626][ T9363] usb 6-1: Manufacturer: syz [ 1853.075611][ T9363] usb 6-1: SerialNumber: syz [ 1853.111778][ T9363] usb 6-1: config 0 descriptor?? [ 1853.376663][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.402900][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.127005][ T1191] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1855.381338][ T1191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.424490][ T5815] usb 6-1: USB disconnect, device number 46 [ 1855.442126][ T1191] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1855.496104][ T1191] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.570243][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.687148][ T1191] usb 4-1: Product: syz [ 1855.741486][ T1191] usb 4-1: Manufacturer: syz [ 1855.800694][ T1191] usb 4-1: SerialNumber: syz [ 1856.112684][ T1191] cdc_mbim 4-1:1.0: skipping garbage [ 1856.717807][ T1191] cdc_mbim 4-1:1.0: bind() failure [ 1856.743068][ T1191] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1856.765156][ T1191] cdc_ncm 4-1:1.1: bind() failure [ 1856.802718][ T1191] usb 4-1: USB disconnect, device number 56 [ 1858.217303][T19020] netlink: 'syz.0.3387': attribute type 39 has an invalid length. [ 1860.276957][ T787] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1861.106934][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 1861.191227][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.264688][ T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1861.328451][ T787] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1861.338268][T19044] nfs: Bad value for 'source' [ 1861.351373][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.901158][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3393'. [ 1862.631623][ T787] usb 1-1: Product: syz [ 1862.635815][ T787] usb 1-1: Manufacturer: syz [ 1862.687879][ T787] usb 1-1: SerialNumber: syz [ 1862.717915][ T787] usb 1-1: config 0 descriptor?? [ 1863.017004][ T787] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1864.348578][T14241] usb 1-1: USB disconnect, device number 56 [ 1864.638065][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.675349][ T787] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1864.744510][ T787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1864.777580][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.836947][ T787] usb 2-1: Product: syz [ 1864.851436][ T787] usb 2-1: Manufacturer: syz [ 1864.856095][ T787] usb 2-1: SerialNumber: syz [ 1864.941315][ T787] cdc_mbim 2-1:1.0: skipping garbage [ 1865.147295][T19054] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1865.591590][ T787] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1865.600717][ T787] cdc_mbim 2-1:1.0: bind() failure [ 1865.636059][ T787] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1865.697166][ T787] cdc_ncm 2-1:1.1: bind() failure [ 1865.849045][T19069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3399'. [ 1868.154883][T14241] usb 2-1: USB disconnect, device number 58 [ 1869.977588][T19085] nfs: Bad value for 'source' [ 1870.562644][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1873.285414][T19098] netlink: 'syz.3.3409': attribute type 39 has an invalid length. [ 1877.217073][T12048] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1877.409304][T12048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1877.432879][T12048] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1877.456560][T12048] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1877.471873][T12048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.496949][T12048] usb 1-1: Product: syz [ 1877.501175][T12048] usb 1-1: Manufacturer: syz [ 1877.516361][T12048] usb 1-1: SerialNumber: syz [ 1877.557689][T12048] cdc_mbim 1-1:1.0: skipping garbage [ 1877.762093][T19114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1878.638670][T12048] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 1878.644873][T12048] cdc_mbim 1-1:1.0: bind() failure [ 1878.667506][T12048] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1878.676954][T12048] cdc_ncm 1-1:1.1: bind() failure [ 1880.182779][T19135] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1880.608226][T14241] usb 1-1: USB disconnect, device number 57 [ 1881.461078][T19147] dns_resolver: Unsupported content type (152) [ 1886.777131][ T787] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1887.037672][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.050345][ T787] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1887.074342][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1887.085033][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.093246][ T787] usb 6-1: Product: syz [ 1887.097574][ T787] usb 6-1: Manufacturer: syz [ 1887.102683][ T787] usb 6-1: SerialNumber: syz [ 1887.158979][ T787] cdc_mbim 6-1:1.0: skipping garbage [ 1887.367242][T19177] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1887.799801][ T787] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 1887.806010][ T787] cdc_mbim 6-1:1.0: bind() failure [ 1887.821949][ T787] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1887.828893][ T787] cdc_ncm 6-1:1.1: bind() failure [ 1889.514867][T14241] usb 6-1: USB disconnect, device number 47 [ 1891.338046][T19202] netlink: 'syz.1.3433': attribute type 39 has an invalid length. [ 1894.077046][T12048] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1894.270767][T12048] usb 2-1: Using ep0 maxpacket: 8 [ 1894.303160][T12048] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1894.325810][T12048] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1894.354414][T12048] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1894.391571][T12048] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.431586][T12048] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1894.458880][T12048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.625723][T19230] netlink: 'syz.3.3437': attribute type 39 has an invalid length. [ 1895.029592][T12048] usb 2-1: GET_CAPABILITIES returned 0 [ 1895.035380][T12048] usbtmc 2-1:16.0: can't read capabilities [ 1895.266610][T14241] usb 2-1: USB disconnect, device number 59 [ 1897.733222][ T787] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1897.918834][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.993891][ T787] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1898.033599][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1898.043198][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.071597][ T787] usb 4-1: Product: syz [ 1898.075821][ T787] usb 4-1: Manufacturer: syz [ 1898.097065][ T787] usb 4-1: SerialNumber: syz [ 1898.105923][ T787] cdc_mbim 4-1:1.0: skipping garbage [ 1898.707013][T19255] dns_resolver: Unsupported content type (152) [ 1899.207385][T19244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1899.684323][ T787] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 1899.703821][ T787] cdc_mbim 4-1:1.0: bind() failure [ 1899.775625][ T787] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1899.785155][ T787] cdc_ncm 4-1:1.1: bind() failure [ 1900.111473][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1901.802211][ T5815] usb 4-1: USB disconnect, device number 57 [ 1904.458210][T19284] fuse: Unknown parameter 'group_i00000000000000000000' [ 1905.335505][ T23] IPVS: starting estimator thread 0... [ 1906.934284][T19300] IPVS: using max 22 ests per chain, 52800 per kthread [ 1906.997192][ T23] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1907.271572][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1907.377670][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.505995][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1907.641603][ T23] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1907.723055][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.774232][ T23] usb 4-1: Product: syz [ 1907.781647][T19308] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1907.788206][T19308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1908.618421][ T23] usb 4-1: Manufacturer: syz [ 1908.623175][ T23] usb 4-1: SerialNumber: syz [ 1909.867123][T19308] vhci_hcd vhci_hcd.0: Device attached [ 1909.873993][ T23] usb 4-1: config 0 descriptor?? [ 1909.906135][ T23] usb 4-1: can't set config #0, error -71 [ 1909.928579][ T23] usb 4-1: USB disconnect, device number 58 [ 1909.952980][T19309] vhci_hcd: connection closed [ 1909.959655][T12591] vhci_hcd: stop threads [ 1909.985069][T12591] vhci_hcd: release socket [ 1909.994562][T12591] vhci_hcd: disconnect device [ 1910.039099][T19320] fuse: Unknown parameter 'group_id00000000000000000000' [ 1914.813333][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.829049][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.029997][T19366] fuse: Unknown parameter 'group_id00000000000000000000' [ 1922.634158][T19398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1922.640747][T19398] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1922.673667][T19398] vhci_hcd vhci_hcd.0: Device attached [ 1922.692100][T19402] fuse: Unknown parameter 'group_id00000000000000000000' [ 1922.751863][T19399] vhci_hcd: connection closed [ 1922.752109][ T2986] vhci_hcd: stop threads [ 1922.761592][ T2986] vhci_hcd: release socket [ 1922.766043][ T2986] vhci_hcd: disconnect device [ 1923.056260][T19407] netlink: 'syz.3.3489': attribute type 39 has an invalid length. [ 1926.590583][T19435] fuse: Bad value for 'user_id' [ 1927.573907][T19442] netlink: 'syz.1.3498': attribute type 39 has an invalid length. [ 1927.697349][T19444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1927.703930][T19444] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1927.739659][T19444] vhci_hcd vhci_hcd.0: Device attached [ 1927.820480][T19446] vhci_hcd: connection closed [ 1927.821021][ T2986] vhci_hcd: stop threads [ 1927.853127][ T2986] vhci_hcd: release socket [ 1927.875872][ T2986] vhci_hcd: disconnect device [ 1931.530206][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1934.051156][T19497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1934.064666][T19497] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1934.103590][T19497] vhci_hcd vhci_hcd.0: Device attached [ 1934.183461][T19498] vhci_hcd: connection closed [ 1934.192811][T12577] vhci_hcd: stop threads [ 1934.221396][T12577] vhci_hcd: release socket [ 1934.266418][T12577] vhci_hcd: disconnect device [ 1935.427684][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1938.618981][T19531] xt_hashlimit: size too large, truncated to 1048576 [ 1939.688056][T19537] dns_resolver: Unsupported content type (152) [ 1946.687975][T19569] dns_resolver: Unsupported content type (152) [ 1947.394130][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1949.462815][T19586] netlink: 'syz.5.3537': attribute type 39 has an invalid length. [ 1952.047545][T19607] netlink: 'syz.5.3542': attribute type 39 has an invalid length. [ 1952.634601][T19615] dns_resolver: Unsupported content type (152) [ 1953.464618][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1954.422294][T19628] autofs4:pid:19628:autofs_fill_super: called with bogus options [ 1955.509305][T19632] netlink: 'syz.1.3552': attribute type 39 has an invalid length. [ 1956.931884][T19641] dns_resolver: Unsupported content type (152) [ 1960.208979][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1961.024079][ T27] kworker/dying (27) used greatest stack depth: 19288 bytes left [ 1962.078237][T19664] tipc: Started in network mode [ 1962.093508][T19664] tipc: Node identity fe79611fdfaf, cluster identity 4711 [ 1962.107250][T19664] tipc: Enabled bearer , priority 0 [ 1962.143027][T19667] tipc: Disabling bearer [ 1966.779624][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1967.310123][T19706] netlink: 'syz.3.3571': attribute type 39 has an invalid length. [ 1968.607642][T14241] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1969.102927][T14241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1969.556983][T14241] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1969.578171][T14241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1969.587446][T14241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.597175][T14241] usb 1-1: Product: syz [ 1969.606891][T14241] usb 1-1: Manufacturer: syz [ 1969.616885][T14241] usb 1-1: SerialNumber: syz [ 1969.637363][T14241] cdc_mbim 1-1:1.0: skipping garbage [ 1969.984573][T19716] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1971.048172][T19716] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1971.190438][T14241] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1971.224220][T14241] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 1971.419538][T14241] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 1971.571823][T14241] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 1971.658221][T14241] wwan wwan0: port wwan0mbim0 attached [ 1971.692825][T14241] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 56:58:a2:1b:b2:7b [ 1972.314287][T14241] usb 1-1: USB disconnect, device number 58 [ 1972.321279][T14241] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 1972.448920][T14241] wwan wwan0: port wwan0mbim0 disconnected [ 1974.979530][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1976.253189][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.854305][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.276660][T19795] netlink: 'syz.1.3597': attribute type 39 has an invalid length. [ 1980.129355][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1980.983631][T15061] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 1982.466215][T19832] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1982.479683][T19832] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1982.488067][T19832] vhci_hcd vhci_hcd.0: Device attached [ 1982.535884][T19833] vhci_hcd: connection closed [ 1982.538804][T12581] vhci_hcd: stop threads [ 1982.551402][T12581] vhci_hcd: release socket [ 1982.555956][T12581] vhci_hcd: disconnect device [ 1989.530888][T19879] netlink: 'syz.3.3611': attribute type 39 has an invalid length. [ 1990.855772][T19888] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1990.862351][T19888] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1990.880203][T19888] vhci_hcd vhci_hcd.0: Device attached [ 1991.107261][T11487] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1991.197935][T14241] usb 40-1: SetAddress Request (2) to port 0 [ 1991.238687][T14241] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1991.342318][T19889] vhci_hcd: connection closed [ 1991.352074][ T3479] vhci_hcd: stop threads [ 1991.387035][T11487] usb 2-1: Using ep0 maxpacket: 32 [ 1991.432490][T11487] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.457239][ T3479] vhci_hcd: release socket [ 1991.496185][ T3479] vhci_hcd: disconnect device [ 1991.529092][T11487] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1991.635986][T11487] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1991.724320][T11487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.765166][T11487] usb 2-1: Product: syz [ 1991.785873][T11487] usb 2-1: Manufacturer: syz [ 1991.818739][T11487] usb 2-1: SerialNumber: syz [ 1991.868507][T11487] usb 2-1: config 0 descriptor?? [ 1992.103865][T15061] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1992.942986][T11487] usb 2-1: USB disconnect, device number 60 [ 1994.580912][T19912] netlink: 'syz.5.3630': attribute type 39 has an invalid length. [ 1996.597014][T14241] usb 40-1: device descriptor read/8, error -110 [ 1998.049357][T14241] usb usb40-port1: attempt power cycle [ 1998.130880][T19931] fuse: Invalid rootmode [ 1998.146938][ T9363] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1998.337039][ T9363] usb 6-1: Using ep0 maxpacket: 16 [ 1998.354109][ T9363] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.387258][ T9363] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1998.393944][ T9363] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1998.426938][ T9363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.441348][ T9363] usb 6-1: config 0 descriptor?? [ 1998.691309][T14241] usb usb40-port1: unable to enumerate USB device [ 1999.518526][ T9363] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1999.735592][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 1999.897803][ T9363] usb 6-1: USB disconnect, device number 48 [ 2001.275152][T18225] Bluetooth: hci2: command 0x0406 tx timeout [ 2001.446977][T11487] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2001.687016][T11487] usb 1-1: Using ep0 maxpacket: 32 [ 2001.825583][T11487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.962569][T11487] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2002.133437][T11487] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2002.253112][T11487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.287046][T11487] usb 1-1: Product: syz [ 2002.291275][T11487] usb 1-1: Manufacturer: syz [ 2002.295892][T11487] usb 1-1: SerialNumber: syz [ 2002.357620][T11487] usb 1-1: config 0 descriptor?? [ 2003.650633][ T9363] usb 1-1: USB disconnect, device number 59 [ 2003.753648][T19962] fuse: Invalid rootmode [ 2004.152245][ T2986] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.605880][ T2986] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.007589][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2005.020370][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2005.034559][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2005.059457][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2005.073308][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2005.085135][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2005.185950][ T2986] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.555161][ T2986] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.762502][T18225] Bluetooth: hci0: command tx timeout [ 2008.047137][T19983] dns_resolver: Unsupported content type (152) [ 2009.354850][T19971] chnl_net:caif_netlink_parms(): no params data found [ 2009.848038][T18225] Bluetooth: hci0: command tx timeout [ 2012.021677][T18225] Bluetooth: hci0: command tx timeout [ 2012.269058][T19971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.348759][T19971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.458513][T19971] bridge_slave_0: entered allmulticast mode [ 2012.741476][T19971] bridge_slave_0: entered promiscuous mode [ 2013.038003][T19971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.045173][T19971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.108086][T19971] bridge_slave_1: entered allmulticast mode [ 2013.156540][T19971] bridge_slave_1: entered promiscuous mode [ 2013.419140][T19971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2014.089153][T18225] Bluetooth: hci0: command tx timeout [ 2014.118084][T19971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2014.473179][T19971] team0: Port device team_slave_0 added [ 2014.530493][T19971] team0: Port device team_slave_1 added [ 2014.642313][T20037] fuse: Invalid rootmode [ 2014.651496][T19971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2014.696964][ T23] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2014.717276][T19971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2014.764192][T19971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2014.803467][T19971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2014.820010][T19971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.120434][T19971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2016.536934][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 2016.544175][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.556952][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2016.573878][ T23] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2016.583122][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.596988][ T23] usb 1-1: Product: syz [ 2016.601214][ T23] usb 1-1: Manufacturer: syz [ 2016.605872][ T23] usb 1-1: SerialNumber: syz [ 2016.617697][ T23] usb 1-1: config 0 descriptor?? [ 2016.701789][T19971] hsr_slave_0: entered promiscuous mode [ 2016.717751][T19971] hsr_slave_1: entered promiscuous mode [ 2016.737059][T19971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2016.755784][T19971] Cannot create hsr debugfs directory [ 2016.977568][T20055] dns_resolver: Unsupported content type (152) [ 2017.730559][ T23] usb 1-1: USB disconnect, device number 60 [ 2017.736580][ T2986] hsr_slave_0: left promiscuous mode [ 2017.784307][ T2986] hsr_slave_1: left promiscuous mode [ 2017.887616][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2017.895096][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.977930][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2017.985417][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.067833][ T2986] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 2018.074918][ T2986] batman_adv: batadv0: Removing interface: ipvlan2 [ 2018.133286][ T2986] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 2018.162835][ T2986] batman_adv: batadv0: Removing interface: ipvlan3 [ 2018.188822][ T2986] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 2018.195677][ T2986] batman_adv: batadv0: Removing interface: ipvlan4 [ 2018.290060][ T2986] batman_adv: batadv0: Interface deactivated: ipvlan5 [ 2018.360425][ T2986] batman_adv: batadv0: Removing interface: ipvlan5 [ 2018.445023][ T2986] bridge_slave_1: left allmulticast mode [ 2018.511680][ T2986] bridge_slave_1: left promiscuous mode [ 2018.574744][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.713125][ T2986] bridge_slave_0: left allmulticast mode [ 2018.754279][ T2986] bridge_slave_0: left promiscuous mode [ 2018.812472][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.091324][ T2986] veth1_macvtap: left promiscuous mode [ 2019.110340][ T2986] veth0_macvtap: left promiscuous mode [ 2019.115924][ T2986] veth1_vlan: left promiscuous mode [ 2019.181226][ T2986] veth0_vlan: left promiscuous mode [ 2020.855651][ T2986] bond1 (unregistering): (slave veth3): Releasing active interface [ 2021.740211][ T2986] bond1 (unregistering): Released all slaves [ 2023.327868][T20082] fuse: Bad value for 'rootmode' [ 2026.786995][ T787] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2026.996950][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 2027.021216][ T787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2027.029980][ T787] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 2027.039514][ T787] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 2027.076876][ T787] usb 1-1: config 14 has no interface number 0 [ 2027.083351][ T787] usb 1-1: config 14 has no interface number 1 [ 2027.117186][ T787] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 2027.157390][ T787] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 2027.196898][ T787] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 2027.228698][ T787] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2027.256922][ T787] usb 1-1: config 14 interface 57 has no altsetting 0 [ 2027.275381][ T787] usb 1-1: config 14 interface 228 has no altsetting 0 [ 2027.295366][ T787] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 2027.317626][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.327480][ T787] usb 1-1: Product: syz [ 2027.332111][ T787] usb 1-1: Manufacturer: syz [ 2027.351721][ T787] usb 1-1: SerialNumber: syz [ 2027.729154][T20102] dns_resolver: Unsupported content type (152) [ 2029.402817][ T787] legousbtower 1-1:14.57: interrupt endpoints not found [ 2029.575256][ T787] legousbtower 1-1:14.228: interrupt endpoints not found [ 2029.636223][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 2030.231156][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 2030.653664][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2030.738285][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2031.987582][ T787] usb 1-1: USB disconnect, device number 61 [ 2035.284934][ T2986] bond0 (unregistering): Released all slaves [ 2036.615041][T20126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2036.621632][T20126] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2036.630694][T20126] vhci_hcd vhci_hcd.0: Device attached [ 2036.652014][T20127] vhci_hcd: connection closed [ 2036.662931][T15835] vhci_hcd: stop threads [ 2036.672401][T15835] vhci_hcd: release socket [ 2036.687144][T15835] vhci_hcd: disconnect device [ 2037.692238][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.699076][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.118134][ T2986] IPVS: stop unused estimator thread 0... [ 2038.326066][T20145] netlink: 'syz.3.3680': attribute type 39 has an invalid length. [ 2038.442125][T20148] autofs4:pid:20148:autofs_fill_super: called with bogus options [ 2039.974472][T19971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2040.006582][T19971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2040.048479][T19971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2041.286959][T19971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2043.092775][T19971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2043.840454][T19971] 8021q: adding VLAN 0 to HW filter on device team0 [ 2044.394800][T15835] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.402017][T15835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2044.518355][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.525704][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2045.574928][T19971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2045.778643][T20189] netlink: 'syz.1.3682': attribute type 39 has an invalid length. [ 2048.403656][T20214] fuse: Unknown parameter 'use00000000000000000000' [ 2048.568278][T19971] veth0_vlan: entered promiscuous mode [ 2048.609475][T19971] veth1_vlan: entered promiscuous mode [ 2049.917820][T19971] veth0_macvtap: entered promiscuous mode [ 2049.979568][T19971] veth1_macvtap: entered promiscuous mode [ 2050.054433][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.107058][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.141043][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.179954][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.207087][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2050.229593][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.264833][T19971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2050.299089][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2050.336929][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.376945][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2050.421336][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.447005][T19971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2050.475383][T19971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2050.508325][T19971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2050.555954][T19971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.596887][T19971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.605646][T19971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2050.656872][T19971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.146946][ T9869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.154812][ T9869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.189221][T20236] netlink: 'syz.1.3690': attribute type 39 has an invalid length. [ 2051.530467][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.545948][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2053.275630][T20254] netlink: 'syz.1.3696': attribute type 39 has an invalid length. [ 2054.567403][T20281] netlink: 'syz.5.3704': attribute type 39 has an invalid length. [ 2059.227966][T20326] netlink: 'syz.0.3716': attribute type 39 has an invalid length. [ 2061.152635][T20344] netlink: 'syz.5.3710': attribute type 39 has an invalid length. [ 2067.447589][T20385] netlink: 'syz.3.3730': attribute type 39 has an invalid length. [ 2067.610259][T20391] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 2068.675948][T20403] dns_resolver: Unsupported content type (152) [ 2070.822621][T20416] netlink: 'syz.0.3740': attribute type 39 has an invalid length. [ 2071.817600][T20422] netlink: 'syz.0.3742': attribute type 39 has an invalid length. [ 2075.637124][T20447] dns_resolver: Unsupported content type (152) [ 2078.882510][T20459] netlink: 'syz.0.3751': attribute type 39 has an invalid length. [ 2080.062282][T20472] netlink: 'syz.5.3754': attribute type 39 has an invalid length. [ 2082.427140][T20485] dns_resolver: Unsupported content type (152) [ 2082.836486][T20489] mmap: syz.0.3760 (20489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2086.517268][T20507] netlink: 'syz.1.3763': attribute type 39 has an invalid length. [ 2090.317126][T20527] dns_resolver: Unsupported content type (152) [ 2092.271095][ T5815] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2092.517042][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 2092.548032][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.994965][ T5815] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2094.027152][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.035214][ T5815] usb 4-1: Product: syz [ 2094.068317][ T5815] usb 4-1: config 0 descriptor?? [ 2094.087635][ T5815] usb 4-1: can't set config #0, error -71 [ 2094.118385][ T5815] usb 4-1: USB disconnect, device number 59 [ 2094.208818][T20549] netlink: 'syz.3.3778': attribute type 39 has an invalid length. [ 2094.229762][T20551] netlink: 'syz.0.3767': attribute type 39 has an invalid length. [ 2096.217119][T20564] dns_resolver: Unsupported content type (152) [ 2099.427042][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.433475][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.609301][T20591] netlink: 'syz.0.3788': attribute type 39 has an invalid length. [ 2102.177029][T20595] dns_resolver: Unsupported content type (152) [ 2105.003983][T20611] netlink: 'syz.1.3787': attribute type 39 has an invalid length. [ 2108.367058][T20634] dns_resolver: Unsupported content type (152) [ 2115.335744][T20675] netlink: 'syz.1.3809': attribute type 39 has an invalid length. [ 2119.584228][T20705] autofs4:pid:20705:autofs_fill_super: called with bogus options [ 2121.805265][T20716] netlink: 'syz.0.3821': attribute type 39 has an invalid length. [ 2123.878061][ T787] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2124.077031][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 2124.094351][ T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2124.114179][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.159191][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2124.176903][ T787] pvrusb2: ********** [ 2124.181031][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2124.211782][ T787] pvrusb2: Important functionality might not be entirely working. [ 2124.226910][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2124.251484][ T787] pvrusb2: ********** [ 2124.368892][ T2322] pvrusb2: Invalid write control endpoint [ 2124.529072][ T2322] pvrusb2: Invalid write control endpoint [ 2124.579158][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2124.711541][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2124.796302][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2124.917287][ T2322] pvrusb2: Device being rendered inoperable [ 2125.006475][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2125.051485][T20723] pvrusb2: Attempted to execute control transfer when device not ok [ 2125.136422][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2125.192609][ T23] usb 1-1: USB disconnect, device number 62 [ 2125.378273][ T2322] pvrusb2: Attached sub-driver cx25840 [ 2125.384068][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2125.472796][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2126.848408][T20753] autofs4:pid:20753:autofs_fill_super: called with bogus options [ 2127.168579][T20756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2127.175245][T20756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2128.411751][T20756] vhci_hcd vhci_hcd.0: Device attached [ 2128.441100][T20758] vhci_hcd: connection closed [ 2128.441349][T12591] vhci_hcd: stop threads [ 2128.453934][T12591] vhci_hcd: release socket [ 2128.481242][T12591] vhci_hcd: disconnect device [ 2130.367086][T20774] dns_resolver: Unsupported content type (152) [ 2133.774683][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 2133.803321][T20795] autofs4:pid:20795:autofs_fill_super: called with bogus options [ 2137.673468][T20820] Bluetooth: MGMT ver 1.22 [ 2138.617680][T20822] netlink: 'syz.0.3847': attribute type 39 has an invalid length. [ 2140.917052][T20834] dns_resolver: Unsupported content type (152) [ 2143.457232][ T5815] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2143.668513][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 2143.702752][ T5815] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2143.716931][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.762827][ T5815] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2143.787141][ T5815] pvrusb2: ********** [ 2143.803068][ T5815] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2143.845543][ T5815] pvrusb2: Important functionality might not be entirely working. [ 2143.859696][ T5815] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2143.911223][ T5815] pvrusb2: ********** [ 2143.920877][T20857] netlink: 'syz.1.3851': attribute type 39 has an invalid length. [ 2145.142386][ T2322] pvrusb2: Invalid write control endpoint [ 2145.359264][ T2322] pvrusb2: Invalid write control endpoint [ 2145.393662][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2145.403656][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2145.414556][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2145.424949][ T2322] pvrusb2: Device being rendered inoperable [ 2145.482195][T20847] pvrusb2: Attempted to execute control transfer when device not ok [ 2145.493172][ T5815] usb 4-1: USB disconnect, device number 60 [ 2145.502282][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2145.531372][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2145.560061][ T2322] pvrusb2: Attached sub-driver cx25840 [ 2145.570892][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2145.581691][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2147.570750][T20867] netlink: 'syz.0.3858': attribute type 39 has an invalid length. [ 2152.148959][T20895] netlink: 'syz.5.3865': attribute type 39 has an invalid length. [ 2154.494925][T20908] netlink: 'syz.5.3870': attribute type 39 has an invalid length. [ 2161.043507][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.050003][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.117420][T20942] netlink: 'syz.1.3878': attribute type 39 has an invalid length. [ 2161.240619][T20947] netlink: 'syz.5.3880': attribute type 39 has an invalid length. [ 2166.371184][T20985] netlink: 'syz.5.3889': attribute type 39 has an invalid length. [ 2166.429522][T20988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2167.447609][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2170.920014][T21015] netlink: 'syz.0.3891': attribute type 39 has an invalid length. [ 2172.821264][T21021] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 2172.940368][T21028] netlink: 'syz.0.3901': attribute type 39 has an invalid length. [ 2178.521501][T21058] netlink: 'syz.0.3911': attribute type 39 has an invalid length. [ 2179.781521][T21071] netlink: 'syz.3.3909': attribute type 39 has an invalid length. [ 2182.593416][T21098] netlink: 'syz.5.3921': attribute type 39 has an invalid length. [ 2186.644205][T21118] netlink: 'syz.0.3926': attribute type 39 has an invalid length. [ 2187.850713][T21142] netlink: 'syz.0.3932': attribute type 39 has an invalid length. [ 2187.925195][T18225] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 2193.498396][ T787] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2193.817060][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 2193.861131][ T787] usb 4-1: no configurations [ 2193.894606][ T787] usb 4-1: can't read configurations, error -22 [ 2194.927036][ T787] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2195.057877][T21193] netlink: 'syz.0.3945': attribute type 39 has an invalid length. [ 2195.130972][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 2195.148591][ T787] usb 4-1: no configurations [ 2195.166660][ T787] usb 4-1: can't read configurations, error -22 [ 2195.182737][ T787] usb usb4-port1: attempt power cycle [ 2195.626938][ T787] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2196.187366][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 2196.200546][ T787] usb 4-1: no configurations [ 2196.217143][ T787] usb 4-1: can't read configurations, error -22 [ 2197.313547][T18225] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 2199.803393][T18225] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 2201.691018][T21232] netlink: 'syz.5.3956': attribute type 39 has an invalid length. [ 2201.916952][ T23] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2202.756969][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 2202.768271][ T23] usb 4-1: no configurations [ 2202.776930][ T23] usb 4-1: can't read configurations, error -22 [ 2202.937055][ T23] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2203.063197][T18225] Bluetooth: hci2: unexpected event 0x05 length: 14 > 4 [ 2204.296929][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 2204.368236][ T23] usb 4-1: no configurations [ 2204.372902][ T23] usb 4-1: can't read configurations, error -22 [ 2204.381830][ T23] usb usb4-port1: attempt power cycle [ 2208.915654][T21275] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 2209.460052][T18225] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 2209.646979][ T1191] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2212.982265][ T1191] usb 1-1: Using ep0 maxpacket: 32 [ 2213.029784][T21294] netlink: 'syz.5.3973': attribute type 39 has an invalid length. [ 2213.107932][T18225] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 2213.256968][ T1191] usb 1-1: device descriptor read/all, error -71 [ 2214.238297][ T5860] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2214.440000][T21311] ================================================================== [ 2214.448189][T21311] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 2214.456064][T21311] Read of size 8 at addr ffff888026c90e18 by task syz.5.3977/21311 [ 2214.464028][T21311] [ 2214.466441][T21311] CPU: 1 PID: 21311 Comm: syz.5.3977 Not tainted syzkaller #0 [ 2214.473953][T21311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2214.484036][T21311] Call Trace: [ 2214.487395][T21311] [ 2214.487874][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 2214.490438][T21311] dump_stack_lvl+0x18c/0x250 [ 2214.500287][T21311] ? __lock_acquire+0x7d40/0x7d40 [ 2214.505439][T21311] ? show_regs_print_info+0x20/0x20 [ 2214.510660][T21311] ? load_image+0x420/0x420 [ 2214.515208][T21311] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 2214.520762][T21311] ? __virt_addr_valid+0x18c/0x540 [ 2214.525951][T21311] ? __virt_addr_valid+0x469/0x540 [ 2214.531090][T21311] print_report+0xa8/0x210 [ 2214.535531][T21311] ? dvb_device_open+0xca/0x370 [ 2214.540422][T21311] kasan_report+0x117/0x150 [ 2214.545011][T21311] ? chrdev_open+0x3e3/0x6a0 [ 2214.549628][T21311] ? dvb_device_open+0xca/0x370 [ 2214.554508][T21311] dvb_device_open+0xca/0x370 [ 2214.559211][T21311] ? do_raw_spin_unlock+0x121/0x230 [ 2214.564438][T21311] chrdev_open+0x5cc/0x6a0 [ 2214.568880][T21311] ? cd_forget+0x160/0x160 [ 2214.573313][T21311] ? fsnotify_perm+0x3ed/0x5e0 [ 2214.578144][T21311] ? cd_forget+0x160/0x160 [ 2214.582580][T21311] do_dentry_open+0x8c6/0x1500 [ 2214.587372][T21311] path_openat+0x27f1/0x3230 [ 2214.591991][T21311] ? do_sys_openat2+0xda/0x1d0 [ 2214.596778][T21311] ? verify_lock_unused+0x140/0x140 [ 2214.601993][T21311] ? do_filp_open+0x430/0x430 [ 2214.606696][T21311] ? __virt_addr_valid+0x18c/0x540 [ 2214.611831][T21311] do_filp_open+0x1f5/0x430 [ 2214.616357][T21311] ? vfs_tmpfile+0x490/0x490 [ 2214.620970][T21311] ? _raw_spin_unlock+0x28/0x40 [ 2214.625841][T21311] ? alloc_fd+0x58f/0x630 [ 2214.630218][T21311] do_sys_openat2+0x134/0x1d0 [ 2214.634917][T21311] ? do_sys_open+0xe0/0xe0 [ 2214.639358][T21311] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2214.645359][T21311] ? lock_chain_count+0x20/0x20 [ 2214.650228][T21311] __x64_sys_openat+0x139/0x160 [ 2214.655104][T21311] do_syscall_64+0x55/0xb0 [ 2214.659543][T21311] ? clear_bhb_loop+0x40/0x90 [ 2214.664324][T21311] ? clear_bhb_loop+0x40/0x90 [ 2214.669016][T21311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.675093][T21311] RIP: 0033:0x7fbb44d5d68e [ 2214.679583][T21311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2214.699272][T21311] RSP: 002b:00007fbb45ce9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2214.708029][T21311] RAX: ffffffffffffffda RBX: 00007fbb45cea6c0 RCX: 00007fbb44d5d68e [ 2214.716044][T21311] RDX: 0000000000040002 RSI: 00007fbb45ce9c00 RDI: ffffffffffffff9c [ 2214.724046][T21311] RBP: 00007fbb45ce9c00 R08: 0000000000000000 R09: 0000000000000000 [ 2214.732042][T21311] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2214.740043][T21311] R13: 00007fbb45016128 R14: 00007fbb45016090 R15: 00007ffd2614a008 [ 2214.748038][T21311] [ 2214.751066][T21311] [ 2214.753394][T21311] Allocated by task 1: [ 2214.757560][T21311] kasan_set_track+0x4e/0x70 [ 2214.762179][T21311] __kasan_kmalloc+0x8f/0xa0 [ 2214.767004][T21311] dvb_register_device+0x2fd/0x2210 [ 2214.772227][T21311] dvb_register_frontend+0x649/0x930 [ 2214.777525][T21311] vidtv_bridge_probe+0x9ab/0xf80 [ 2214.782668][T21311] platform_probe+0x13b/0x1c0 [ 2214.787406][T21311] really_probe+0x25b/0xb20 [ 2214.792030][T21311] __driver_probe_device+0x1ef/0x390 [ 2214.797340][T21311] driver_probe_device+0x4f/0x420 [ 2214.802383][T21311] __driver_attach+0x451/0x6e0 [ 2214.807161][T21311] bus_for_each_dev+0x235/0x2b0 [ 2214.812031][T21311] bus_add_driver+0x340/0x630 [ 2214.816715][T21311] driver_register+0x23a/0x310 [ 2214.821491][T21311] vidtv_bridge_init+0x3d/0x70 [ 2214.826424][T21311] do_one_initcall+0x242/0x790 [ 2214.831223][T21311] do_initcall_level+0x137/0x1f0 [ 2214.836205][T21311] do_initcalls+0x69/0xd0 [ 2214.840554][T21311] kernel_init_freeable+0x3ed/0x580 [ 2214.845769][T21311] kernel_init+0x1d/0x1c0 [ 2214.850204][T21311] ret_from_fork+0x48/0x80 [ 2214.854641][T21311] ret_from_fork_asm+0x11/0x20 [ 2214.859433][T21311] [ 2214.861765][T21311] Freed by task 21275: [ 2214.865936][T21311] kasan_set_track+0x4e/0x70 [ 2214.870556][T21311] kasan_save_free_info+0x2e/0x50 [ 2214.875598][T21311] ____kasan_slab_free+0x126/0x1e0 [ 2214.880745][T21311] slab_free_freelist_hook+0x130/0x1a0 [ 2214.886220][T21311] __kmem_cache_free+0xba/0x1e0 [ 2214.891098][T21311] dvb_device_open+0x2ee/0x370 [ 2214.895881][T21311] chrdev_open+0x5cc/0x6a0 [ 2214.900333][T21311] do_dentry_open+0x8c6/0x1500 [ 2214.905199][T21311] path_openat+0x27f1/0x3230 [ 2214.909801][T21311] do_filp_open+0x1f5/0x430 [ 2214.914313][T21311] do_sys_openat2+0x134/0x1d0 [ 2214.919006][T21311] __x64_sys_openat+0x139/0x160 [ 2214.923873][T21311] do_syscall_64+0x55/0xb0 [ 2214.928300][T21311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.934208][T21311] [ 2214.936535][T21311] The buggy address belongs to the object at ffff888026c90e00 [ 2214.936535][T21311] which belongs to the cache kmalloc-256 of size 256 [ 2214.950679][T21311] The buggy address is located 24 bytes inside of [ 2214.950679][T21311] freed 256-byte region [ffff888026c90e00, ffff888026c90f00) [ 2214.964420][T21311] [ 2214.966749][T21311] The buggy address belongs to the physical page: [ 2214.973255][T21311] page:ffffea00009b2400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26c90 [ 2214.983419][T21311] head:ffffea00009b2400 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2214.992370][T21311] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2215.000374][T21311] page_type: 0xffffffff() [ 2215.004709][T21311] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 2215.013304][T21311] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 2215.021890][T21311] page dumped because: kasan: bad access detected [ 2215.028322][T21311] page_owner tracks the page as allocated [ 2215.034037][T21311] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11972941476, free_ts 0 [ 2215.053836][T21311] post_alloc_hook+0x1c1/0x200 [ 2215.058676][T21311] get_page_from_freelist+0x1951/0x19e0 [ 2215.064238][T21311] __alloc_pages+0x1f0/0x460 [ 2215.068837][T21311] alloc_page_interleave+0x24/0x1e0 [ 2215.074044][T21311] alloc_slab_page+0x5d/0x160 [ 2215.078739][T21311] new_slab+0x87/0x2d0 [ 2215.082836][T21311] ___slab_alloc+0xc5d/0x12f0 [ 2215.087532][T21311] __kmem_cache_alloc_node+0x19e/0x250 [ 2215.093015][T21311] kmalloc_trace+0x2a/0xe0 [ 2215.097453][T21311] bus_add_driver+0x162/0x630 [ 2215.102137][T21311] driver_register+0x23a/0x310 [ 2215.106912][T21311] usb_register_driver+0x206/0x3d0 [ 2215.112081][T21311] do_one_initcall+0x242/0x790 [ 2215.116860][T21311] do_initcall_level+0x137/0x1f0 [ 2215.121811][T21311] do_initcalls+0x69/0xd0 [ 2215.126178][T21311] kernel_init_freeable+0x3ed/0x580 [ 2215.131393][T21311] page_owner free stack trace missing [ 2215.136763][T21311] [ 2215.139115][T21311] Memory state around the buggy address: [ 2215.144830][T21311] ffff888026c90d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2215.152900][T21311] ffff888026c90d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2215.160968][T21311] >ffff888026c90e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2215.169032][T21311] ^ [ 2215.173891][T21311] ffff888026c90e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2215.181961][T21311] ffff888026c90f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2215.190114][T21311] ================================================================== [ 2215.199855][T21311] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2215.207080][T21311] CPU: 1 PID: 21311 Comm: syz.5.3977 Not tainted syzkaller #0 [ 2215.214633][T21311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2215.224699][T21311] Call Trace: [ 2215.227986][T21311] [ 2215.230925][T21311] dump_stack_lvl+0x18c/0x250 [ 2215.235709][T21311] ? show_regs_print_info+0x20/0x20 [ 2215.240922][T21311] ? load_image+0x420/0x420 [ 2215.245440][T21311] panic+0x2dc/0x730 [ 2215.249387][T21311] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2215.255559][T21311] ? bpf_jit_dump+0xd0/0xd0 [ 2215.260091][T21311] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2215.266093][T21311] ? _raw_spin_unlock+0x40/0x40 [ 2215.270973][T21311] ? dvb_device_open+0xca/0x370 [ 2215.275839][T21311] check_panic_on_warn+0x84/0xa0 [ 2215.280836][T21311] ? dvb_device_open+0xca/0x370 [ 2215.285702][T21311] end_report+0x6f/0x130 [ 2215.289954][T21311] kasan_report+0x128/0x150 [ 2215.294470][T21311] ? chrdev_open+0x3e3/0x6a0 [ 2215.299091][T21311] ? dvb_device_open+0xca/0x370 [ 2215.303960][T21311] dvb_device_open+0xca/0x370 [ 2215.308658][T21311] ? do_raw_spin_unlock+0x121/0x230 [ 2215.313878][T21311] chrdev_open+0x5cc/0x6a0 [ 2215.318309][T21311] ? cd_forget+0x160/0x160 [ 2215.322736][T21311] ? fsnotify_perm+0x3ed/0x5e0 [ 2215.327509][T21311] ? cd_forget+0x160/0x160 [ 2215.331941][T21311] do_dentry_open+0x8c6/0x1500 [ 2215.336729][T21311] path_openat+0x27f1/0x3230 [ 2215.341339][T21311] ? do_sys_openat2+0xda/0x1d0 [ 2215.346128][T21311] ? verify_lock_unused+0x140/0x140 [ 2215.351360][T21311] ? do_filp_open+0x430/0x430 [ 2215.356047][T21311] ? __virt_addr_valid+0x18c/0x540 [ 2215.361192][T21311] do_filp_open+0x1f5/0x430 [ 2215.365707][T21311] ? vfs_tmpfile+0x490/0x490 [ 2215.370329][T21311] ? _raw_spin_unlock+0x28/0x40 [ 2215.375209][T21311] ? alloc_fd+0x58f/0x630 [ 2215.379557][T21311] do_sys_openat2+0x134/0x1d0 [ 2215.384248][T21311] ? do_sys_open+0xe0/0xe0 [ 2215.388676][T21311] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2215.394669][T21311] ? lock_chain_count+0x20/0x20 [ 2215.399535][T21311] __x64_sys_openat+0x139/0x160 [ 2215.404406][T21311] do_syscall_64+0x55/0xb0 [ 2215.408835][T21311] ? clear_bhb_loop+0x40/0x90 [ 2215.413518][T21311] ? clear_bhb_loop+0x40/0x90 [ 2215.418203][T21311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2215.424124][T21311] RIP: 0033:0x7fbb44d5d68e [ 2215.428551][T21311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2215.448178][T21311] RSP: 002b:00007fbb45ce9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2215.456606][T21311] RAX: ffffffffffffffda RBX: 00007fbb45cea6c0 RCX: 00007fbb44d5d68e [ 2215.464599][T21311] RDX: 0000000000040002 RSI: 00007fbb45ce9c00 RDI: ffffffffffffff9c [ 2215.472580][T21311] RBP: 00007fbb45ce9c00 R08: 0000000000000000 R09: 0000000000000000 [ 2215.480563][T21311] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2215.488544][T21311] R13: 00007fbb45016128 R14: 00007fbb45016090 R15: 00007ffd2614a008 [ 2215.496530][T21311] [ 2215.499850][T21311] Kernel Offset: disabled [ 2215.504184][T21311] Rebooting in 86400 seconds..