last executing test programs: 1m32.077907397s ago: executing program 2 (id=4724): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m31.22778454s ago: executing program 2 (id=4726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, &(0x7f0000000340)}) 1m31.227410594s ago: executing program 2 (id=4727): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800000000000b80000003600"/24], 0x18}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100), 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) syz_open_dev$evdev(0x0, 0x8b, 0x0) 1m30.348852238s ago: executing program 2 (id=4730): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m30.287025957s ago: executing program 2 (id=4731): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x20c01, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x4f) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="2900000014000d200d69a51d54efbdeb0101b6ff02", 0x15) 1m29.327303833s ago: executing program 2 (id=4738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m21.66684141s ago: executing program 1 (id=4769): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x14, 0x2d, 0x1}, 0x14}}, 0x0) r8 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 1m20.814154516s ago: executing program 1 (id=4771): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x2, 0xfffffffd, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) read(r1, &(0x7f0000001bc0)=""/4096, 0x1000) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x1) 1m19.917938412s ago: executing program 1 (id=4774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x2a0800, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, 0xffffffffffffffff, 0x2000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40402) madvise(&(0x7f0000bd6000/0x1000)=nil, 0x1000, 0x65) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000706fb0200000000000000000073797a33000000006eb26d70eee9cacb4ee59e17729c4d18c5"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008855) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b000100000000"], 0x0) 1m16.939759353s ago: executing program 1 (id=4784): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xc4) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r3, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/133], 0x18}}, 0x2000c050) 1m16.037748217s ago: executing program 1 (id=4787): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x20c01, 0x0) r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0xa, 0x3, 0x73) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000003440)=""/4087, &(0x7f0000001080)=0xff7) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x4f) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="2900000014000d200d69a51d54efbdeb0101b6ff02", 0x15) 1m15.176660187s ago: executing program 1 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f38437", 0x7}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m13.95561687s ago: executing program 32 (id=4738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m0.052857579s ago: executing program 33 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f38437", 0x7}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.737153726s ago: executing program 4 (id=5058): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.907189227s ago: executing program 4 (id=5062): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ddffff94"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 6.937194919s ago: executing program 4 (id=5067): socket(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002200)='net/netstat\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 6.0949704s ago: executing program 4 (id=5073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000280)={0x8, 0x7fffffff, 0x3, 0x0, 0x0, [{{r0}, 0x3}, {{r1}, 0x9}, {{r3}, 0x9}]}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="14000200ff020000000000000000000000000001080008000206"], 0x34}, 0x1, 0x0, 0x0, 0x20048810}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8800) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x70) renameat2(0xffffffffffffffff, 0x0, r9, &(0x7f0000000240)='./file0\x00', 0x1) bpf$PROG_LOAD(0x2, 0x0, 0x0) 5.536620949s ago: executing program 3 (id=5077): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000800) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10}], 0x10}], 0x1, 0x40800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x8, 0x80, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x88}}, 0x0) recvmsg(r4, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 4.995396601s ago: executing program 0 (id=5079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xc4) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r3, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/133], 0x18}}, 0x2000c050) 4.670665515s ago: executing program 3 (id=5080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.090007331s ago: executing program 5 (id=5081): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) writev(r2, 0x0, 0x0) userfaultfd(0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.089736718s ago: executing program 3 (id=5082): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x14, 0x2d, 0x1}, 0x14}}, 0x0) r7 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x8000}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xff000000], 'veth0_virt_wifi\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x9, 0xf6, {0x938f}}}}, {{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x39], 0x9, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x1, 0xa1a9, 0x7, 0x7, 0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) r10 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.088294186s ago: executing program 0 (id=5089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xc4) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r3, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/133], 0x18}}, 0x2000c050) 3.185436838s ago: executing program 0 (id=5083): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.158096418s ago: executing program 3 (id=5084): socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) listen(0xffffffffffffffff, 0x0) unshare(0x28040680) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 3.093013527s ago: executing program 5 (id=5085): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.054805399s ago: executing program 5 (id=5086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x0, 0x0, 0x1000}}}}}}, 0x0) 3.052114694s ago: executing program 4 (id=5087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$full(0xffffff9c, &(0x7f00000001c0), 0x2a0800, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40402) madvise(&(0x7f0000bd6000/0x1000)=nil, 0x1000, 0x65) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000706fb0200000000000000000073797a33000000006eb26d70eee9cacb4ee59e17729c4d18c5"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008855) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b000100000000"], 0x0) 3.050371512s ago: executing program 5 (id=5088): r0 = creat(0x0, 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f00000005c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de505000000000000007190ba2b6d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33c42b0592c958e8ae79b29152d8b50314d61f068badd9531f07babbe641a1a76e121a8b0c0604a15b2738afc9bd635fa6496716c0a1e9f2da35a4b6cef320f0095f9b9d77417f3fa278563ef8f50e01504fa1763858af3bb0a73e478d115c", 0x9f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 2.966839856s ago: executing program 5 (id=5090): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2.900701912s ago: executing program 5 (id=5091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0xb430, @mcast2, 0x1}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYBLOB="cf0300000000000000000000000002000000", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.317196625s ago: executing program 0 (id=5092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xc4) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r3, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/133], 0x18}}, 0x2000c050) 1.494828373s ago: executing program 0 (id=5093): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x6096}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.494561107s ago: executing program 3 (id=5094): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x4, 0xa6}) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 525.346717ms ago: executing program 0 (id=5095): r0 = socket$nl_crypto(0x10, 0x3, 0x15) accept4(r0, &(0x7f0000000100)=@ieee802154={0x24, @long}, &(0x7f0000000180)=0x80, 0x800) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) syz_pidfd_open(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 307.290459ms ago: executing program 3 (id=5096): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ddffff94"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 0s ago: executing program 4 (id=5097): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) writev(r2, 0x0, 0x0) userfaultfd(0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) kernel console output (not intermixed with test programs): ][ T60] usb 6-1: Product: syz [ 875.802419][ T60] usb 6-1: Manufacturer: syz [ 875.804856][ T60] usb 6-1: SerialNumber: syz [ 875.807932][ T60] usb 6-1: config 0 descriptor?? [ 875.816881][ T60] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 875.829212][T15076] udevd[15076]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.013027][ T3248] usb 6-1: USB disconnect, device number 21 [ 877.845642][T11432] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 877.997134][T11432] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.000537][T11432] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 878.003505][T11432] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.007610][T11432] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.010295][T11432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.015316][T11432] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 879.834972][T18874] fuse: Bad value for 'fd' [ 879.928044][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'. [ 880.611671][ T24] usb 6-1: USB disconnect, device number 22 [ 881.725668][T11432] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 881.865587][T11432] usb 6-1: device descriptor read/64, error -71 [ 882.105654][T11432] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 882.235745][T11432] usb 6-1: device descriptor read/64, error -71 [ 882.355709][T11432] usb usb6-port1: attempt power cycle [ 882.705685][T11432] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 882.726314][T11432] usb 6-1: device descriptor read/8, error -71 [ 882.765785][T12619] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 882.916922][T12619] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.920097][T12619] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.924484][T12619] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.928099][T12619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.965606][T11432] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 882.986025][T11432] usb 6-1: device descriptor read/8, error -71 [ 883.137444][T11432] usb usb6-port1: unable to enumerate USB device [ 883.138362][T12619] usb 5-1: usb_control_msg returned -32 [ 883.168726][T12619] usbtmc 5-1:16.0: can't read capabilities [ 883.489272][T18936] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 883.492032][T11432] usb 5-1: USB disconnect, device number 33 [ 885.855322][T18983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'. [ 885.873478][T18983] vlan0: entered allmulticast mode [ 886.135638][T12619] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 886.176202][ T24] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 886.296774][T12619] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 886.299943][T12619] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.304918][T12619] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 886.309020][T12619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.316257][ T24] usb 7-1: device descriptor read/64, error -71 [ 886.526887][T12619] usb 8-1: usb_control_msg returned -32 [ 886.529268][T12619] usbtmc 8-1:16.0: can't read capabilities [ 886.555674][ T24] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 886.685726][ T24] usb 7-1: device descriptor read/64, error -71 [ 886.795795][ T24] usb usb7-port1: attempt power cycle [ 886.879198][T19002] usbtmc 8-1:16.0: usbtmc_ioctl_request failed -32 [ 886.884117][T11432] usb 8-1: USB disconnect, device number 29 [ 887.135680][ T24] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 887.156110][ T24] usb 7-1: device descriptor read/8, error -71 [ 887.395726][ T24] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 887.430682][ T24] usb 7-1: device descriptor read/8, error -71 [ 887.547721][ T24] usb usb7-port1: unable to enumerate USB device [ 888.626822][T19024] cgroup: fork rejected by pids controller in /syz3 [ 890.735513][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 891.787137][T19195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.802934][T19195] vlan0: entered allmulticast mode [ 891.804588][T19195] macvtap0: entered allmulticast mode [ 891.806384][T19195] veth0_macvtap: entered allmulticast mode [ 891.809514][T19195] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 893.215972][T19222] syzkaller0: entered promiscuous mode [ 893.218204][T19222] syzkaller0: entered allmulticast mode [ 895.414525][T19267] pim6reg: entered allmulticast mode [ 895.420217][T19267] macvlan0: entered allmulticast mode [ 895.421980][T19267] veth1_vlan: entered allmulticast mode [ 895.495628][T11432] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 895.625676][T11432] usb 8-1: device descriptor read/64, error -71 [ 895.885676][T11432] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 896.015628][T11432] usb 8-1: device descriptor read/64, error -71 [ 896.125807][T11432] usb usb8-port1: attempt power cycle [ 896.443298][T19283] pim6reg: entered allmulticast mode [ 896.448605][T19283] macvlan0: entered allmulticast mode [ 896.450365][T19283] veth1_vlan: entered allmulticast mode [ 896.465777][T11432] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 896.496015][T11432] usb 8-1: device descriptor read/8, error -71 [ 896.736185][T11432] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 896.756263][T11432] usb 8-1: device descriptor read/8, error -71 [ 896.865780][T11432] usb usb8-port1: unable to enumerate USB device [ 897.841202][T19308] binder: 19307:19308 ioctl c0306201 0 returned -14 [ 899.549747][T19338] binder: 19337:19338 ioctl c0306201 0 returned -14 [ 901.650941][T19488] fuse: Bad value for 'group_id' [ 901.652865][T19488] fuse: Bad value for 'group_id' [ 902.005597][T14157] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 902.165590][T14157] usb 6-1: Using ep0 maxpacket: 8 [ 902.168646][T14157] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 902.171902][T14157] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.176106][T14157] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 902.178954][T14157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.183197][T14157] usbtmc 6-1:16.0: bulk endpoints not found [ 902.387615][T14157] usb 6-1: USB disconnect, device number 27 [ 904.815688][T12619] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 904.975651][T12619] usb 7-1: Using ep0 maxpacket: 8 [ 904.978579][T12619] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 904.982096][T12619] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.985420][T12619] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.988759][T12619] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 904.992898][T12619] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 904.996003][T12619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.003090][T12619] usbtmc 7-1:16.0: bulk endpoints not found [ 905.206044][T12619] usb 7-1: USB disconnect, device number 32 [ 907.557967][ T6004] IPVS: starting estimator thread 0... [ 907.608541][T19585] pim6reg: entered allmulticast mode [ 907.614186][T19585] macvlan0: entered allmulticast mode [ 907.617933][T19585] veth1_vlan: entered allmulticast mode [ 907.668735][T19581] IPVS: using max 57 ests per chain, 136800 per kthread [ 909.388077][T19626] binder: 19625:19626 ioctl c0306201 0 returned -14 [ 911.616776][T19788] syzkaller0: entered promiscuous mode [ 911.618645][T19788] syzkaller0: entered allmulticast mode [ 911.693224][T19790] binder: 19789:19790 ioctl c0306201 0 returned -14 [ 911.815693][T11432] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 911.985774][T11432] usb 8-1: Using ep0 maxpacket: 8 [ 911.990242][T11432] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.993486][T11432] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.997599][T11432] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.001274][T11432] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.005798][T11432] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 912.008724][T11432] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.014049][T11432] usbtmc 8-1:16.0: bulk endpoints not found [ 912.177195][T19808] fuse: Bad value for 'fd' [ 912.215465][T14157] usb 8-1: USB disconnect, device number 34 [ 912.726491][T19815] syzkaller0: entered promiscuous mode [ 912.728895][T19815] syzkaller0: entered allmulticast mode [ 912.833392][T19817] infiniband syz1: set active [ 912.835493][T19817] infiniband syz1: added syz_tun [ 912.850819][T19817] RDS/IB: syz1: added [ 912.852229][T19817] smc: adding ib device syz1 with port count 1 [ 912.854580][T19817] smc: ib device syz1 port 1 has pnetid [ 913.185865][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3557'. [ 913.943511][T11432] IPVS: starting estimator thread 0... [ 914.045606][T19849] syzkaller0: entered promiscuous mode [ 914.047636][T19849] syzkaller0: entered allmulticast mode [ 914.094001][T19843] IPVS: using max 58 ests per chain, 139200 per kthread [ 915.157340][T19865] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 915.188457][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 915.726198][T19876] syzkaller0: entered promiscuous mode [ 915.728422][T19876] syzkaller0: entered allmulticast mode [ 916.136345][T19887] fuse: Unknown parameter 'grou00000000000000000000' [ 916.295191][T19889] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 916.519723][T19892] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 918.567480][T20255] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 919.314167][T20372] binder: 20371:20372 ioctl c0306201 80000680 returned -14 [ 920.373210][T20707] fuse: Unknown parameter 'group_i00000000000000000000' [ 920.801644][T20723] fuse: Unknown parameter 'group_id00000000000000000000' [ 921.028417][T20727] syzkaller0: entered promiscuous mode [ 921.030307][T20727] syzkaller0: entered allmulticast mode [ 922.178850][T20754] fuse: Unknown parameter 'group_id00000000000000000000' [ 922.525594][T14157] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 922.755662][T14157] usb 6-1: Using ep0 maxpacket: 8 [ 922.759151][T14157] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.762745][T14157] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.766204][T14157] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 922.769420][T14157] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 922.772913][T14157] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.777464][T14157] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 922.780371][T14157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.791594][T14157] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 922.991566][T14157] usb 6-1: USB disconnect, device number 28 [ 923.344171][T20781] fuse: Unknown parameter 'group_id00000000000000000000' [ 924.227798][T20811] binder_alloc: 20810: pid 20810 spamming oneway? 1 buffers allocated for a total size of 4096 [ 924.231530][T20811] binder: 20810:20811 ioctl c0306201 0 returned -14 [ 924.251063][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 924.535730][ T6026] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 924.705787][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 924.714713][ T6026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 924.718405][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 924.721472][ T6026] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 924.725112][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.729396][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 924.732954][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.947267][ T6026] usb 5-1: usb_control_msg returned -71 [ 924.949179][ T6026] usbtmc 5-1:16.0: can't read capabilities [ 924.953753][ T6026] usb 5-1: USB disconnect, device number 34 [ 925.698702][T20982] syzkaller0: entered promiscuous mode [ 925.700688][T20982] syzkaller0: entered allmulticast mode [ 925.909021][T21062] bridge_slave_0: left allmulticast mode [ 925.910931][T21062] bridge_slave_0: left promiscuous mode [ 925.913163][T21062] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.925212][T21062] bridge_slave_1: left allmulticast mode [ 925.927432][T21062] bridge_slave_1: left promiscuous mode [ 925.929365][T21062] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.935365][T21062] bond0: (slave bond_slave_0): Releasing backup interface [ 925.942574][T21062] bond0: (slave bond_slave_1): Releasing backup interface [ 925.950343][T21062] team0: Port device team_slave_0 removed [ 925.956537][T21062] team0: Port device team_slave_1 removed [ 925.960264][T21062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.962637][T21062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.966814][T21062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.969277][T21062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.198814][T21084] syzkaller0: entered promiscuous mode [ 927.200663][T21084] syzkaller0: entered allmulticast mode [ 928.148809][T21099] fuse: Bad value for 'fd' [ 928.807618][T21112] syz1: rxe_newlink: already configured on syz_tun [ 928.832429][T21114] syzkaller0: entered promiscuous mode [ 928.834292][T21114] syzkaller0: entered allmulticast mode [ 929.149143][T21122] syzkaller0: entered promiscuous mode [ 929.150902][T21122] syzkaller0: entered allmulticast mode [ 929.482319][T21127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.134757][T21241] syzkaller0: entered promiscuous mode [ 930.136816][T21241] syzkaller0: entered allmulticast mode [ 930.645251][T21380] syzkaller0: entered promiscuous mode [ 930.647158][T21380] syzkaller0: entered allmulticast mode [ 930.768883][T21458] fuse: Bad value for 'fd' [ 931.117100][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.119251][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.516673][T21610] syzkaller0: entered promiscuous mode [ 933.518620][T21610] syzkaller0: entered allmulticast mode [ 935.239753][T21962] syzkaller0: entered promiscuous mode [ 935.241345][T21962] syzkaller0: entered allmulticast mode [ 935.515950][ T6026] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 935.676844][ T6026] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 935.680049][ T6026] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.684070][ T6026] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 935.687340][ T6026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.893787][ T6026] usb 6-1: usb_control_msg returned -32 [ 935.895722][ T6026] usbtmc 6-1:16.0: can't read capabilities [ 936.448036][T11432] usb 6-1: USB disconnect, device number 29 [ 936.484607][T22088] fuse: Invalid rootmode [ 936.705713][ T3248] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 936.875616][ T3248] usb 7-1: Using ep0 maxpacket: 8 [ 936.878403][ T3248] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.881721][ T3248] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 936.884748][ T3248] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 936.889162][ T3248] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.892550][ T3248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.899289][ T3248] usbtmc 7-1:16.0: bulk endpoints not found [ 939.460955][ T29] usb 7-1: USB disconnect, device number 33 [ 939.481034][T22360] binder_alloc: 22359: binder_alloc_buf, no vma [ 940.125697][ T29] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 940.276825][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 940.280574][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 940.283564][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.286467][ T29] usb 5-1: Product: syz [ 940.287949][ T29] usb 5-1: Manufacturer: syz [ 940.289497][ T29] usb 5-1: SerialNumber: syz [ 940.925944][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 940.932603][ T29] usb 5-1: USB disconnect, device number 35 [ 940.937541][ T29] usblp0: removed [ 941.235771][ T9534] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 941.397425][ T9534] usb 8-1: config 1 interface 0 has no altsetting 0 [ 941.402185][ T9534] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 941.405237][ T9534] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.408108][ T9534] usb 8-1: Product: syz [ 941.409480][ T9534] usb 8-1: Manufacturer: syz [ 941.411015][ T9534] usb 8-1: SerialNumber: syz [ 941.725602][T11432] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 941.876757][T11432] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 941.880249][T11432] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 941.883482][T11432] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 941.887770][T11432] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 941.890755][T11432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.896785][T11432] usbtmc 5-1:16.0: bulk endpoints not found [ 942.021629][ T9534] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 942.025862][ T9534] usb 8-1: USB disconnect, device number 35 [ 942.028755][ T9534] usblp0: removed [ 944.496677][ T29] usb 5-1: USB disconnect, device number 36 [ 944.929572][T22746] syzkaller0: entered promiscuous mode [ 944.931449][T22746] syzkaller0: entered allmulticast mode [ 945.079121][T22748] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 945.087274][T22748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.815712][T12619] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 945.977098][T12619] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 945.981405][T12619] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.985905][T12619] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 945.991184][T12619] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 945.996268][T12619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.007967][T12619] usbtmc 8-1:16.0: bulk endpoints not found [ 946.131042][T22772] fuse: Unknown parameter 'use00000000000000000000' [ 948.576550][ T6026] usb 8-1: USB disconnect, device number 36 [ 949.034956][T22819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3800'. [ 949.038749][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3800'. [ 949.046964][T22819] hsr_slave_1 (unregistering): left promiscuous mode [ 949.145144][T22821] syzkaller0: entered promiscuous mode [ 949.147131][T22821] syzkaller0: entered allmulticast mode [ 949.353859][T22828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 949.355948][T22828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 949.358620][T22828] vhci_hcd vhci_hcd.0: Device attached [ 949.605692][T12619] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 950.210778][T22829] vhci_hcd: connection reset by peer [ 950.212846][ T1142] vhci_hcd: stop threads [ 950.214550][ T1142] vhci_hcd: release socket [ 950.216990][ T1142] vhci_hcd: disconnect device [ 950.595630][ T1330] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 950.766840][ T1330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.770888][ T1330] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.776425][ T1330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 950.780016][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.891683][T22845] syzkaller0: entered promiscuous mode [ 950.893817][T22845] syzkaller0: entered allmulticast mode [ 950.989356][ T1330] usb 5-1: usb_control_msg returned -32 [ 950.991270][ T1330] usbtmc 5-1:16.0: can't read capabilities [ 951.543645][T11432] usb 5-1: USB disconnect, device number 37 [ 952.748096][T22981] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 952.787808][T22980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 953.058394][T22992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 953.060631][T22992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 953.063239][T22992] vhci_hcd vhci_hcd.0: Device attached [ 953.466036][ T60] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 953.912384][T22993] vhci_hcd: connection reset by peer [ 953.926620][ T59] vhci_hcd: stop threads [ 953.928221][ T59] vhci_hcd: release socket [ 953.929875][ T59] vhci_hcd: disconnect device [ 954.452184][T23019] netlink: 'syz.2.3827': attribute type 1 has an invalid length. [ 954.459843][T23019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.472551][T23019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3827'. [ 954.583306][T23029] fuse: Unknown parameter 'user_id00000000000000000000' [ 954.715917][T12619] vhci_hcd: vhci_device speed not set [ 954.763988][T23031] syzkaller0: entered promiscuous mode [ 954.766334][T23031] syzkaller0: entered allmulticast mode [ 955.199368][T23139] syzkaller0: entered promiscuous mode [ 955.201156][T23139] syzkaller0: entered allmulticast mode [ 955.835199][T23261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.975664][ T24] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 956.127429][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.130693][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.134844][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 956.138653][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.345912][ T24] usb 6-1: usb_control_msg returned -32 [ 956.347747][ T24] usbtmc 6-1:16.0: can't read capabilities [ 956.373545][T23268] fuse: Unknown parameter 'user_i00000000000000000000' [ 956.900042][ T6004] usb 6-1: USB disconnect, device number 30 [ 957.822825][T23298] syzkaller0: entered promiscuous mode [ 957.825214][T23298] syzkaller0: entered allmulticast mode [ 957.872795][T23304] fuse: Unknown parameter 'user_id00000000000000000000' [ 958.965689][ T60] vhci_hcd: vhci_device speed not set [ 959.081035][T23438] fuse: Unknown parameter 'user_id00000000000000000000' [ 962.388610][T23712] fuse: Bad value for 'fd' [ 962.635462][T23717] binder: BINDER_SET_CONTEXT_MGR already set [ 962.637873][T23717] binder: 23716:23717 ioctl 4018620d 800002c0 returned -16 [ 962.796829][T23719] syzkaller0: entered promiscuous mode [ 962.798599][T23719] syzkaller0: entered allmulticast mode [ 963.064603][T23722] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 963.067397][T23722] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 963.070958][T23722] vhci_hcd vhci_hcd.0: Device attached [ 963.315690][T11432] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 963.960797][T23843] fuse: Bad value for 'fd' [ 963.977755][T23723] vhci_hcd: connection reset by peer [ 963.988066][ T12] vhci_hcd: stop threads [ 963.991888][ T12] vhci_hcd: release socket [ 963.995938][ T12] vhci_hcd: disconnect device [ 964.228381][T23873] syzkaller0: entered promiscuous mode [ 964.230661][T23873] syzkaller0: entered allmulticast mode [ 965.398489][T24068] fuse: Bad value for 'fd' [ 965.553074][T24084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 965.576303][T24084] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 965.581557][T24084] bond3: (slave macvlan4): Enslaving as an active interface with an up link [ 966.171737][T24198] fuse: Bad value for 'fd' [ 966.787556][T24216] fuse: Unknown parameter '0x0000000000000005' [ 966.915614][ T9534] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 966.921107][T24220] fuse: Unknown parameter '0x0000000000000005' [ 967.087012][ T9534] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.090435][ T9534] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.096033][ T9534] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 967.099879][ T9534] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.306699][ T9534] usb 7-1: usb_control_msg returned -32 [ 967.308567][ T9534] usbtmc 7-1:16.0: can't read capabilities [ 967.320198][T24231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 967.453910][T24237] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 967.456842][T24237] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 967.475923][T24237] vhci_hcd vhci_hcd.0: Device attached [ 967.745588][T12619] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 967.860691][ T3248] usb 7-1: USB disconnect, device number 34 [ 968.249714][T24238] vhci_hcd: connection reset by peer [ 968.251687][ T1142] vhci_hcd: stop threads [ 968.253160][ T1142] vhci_hcd: release socket [ 968.257132][ T1142] vhci_hcd: disconnect device [ 968.389596][T24247] fuse: Unknown parameter '0x0000000000000005' [ 968.455735][T11432] vhci_hcd: vhci_device speed not set [ 968.535294][T24251] fuse: Unknown parameter '0x0000000000000005' [ 968.774205][T24258] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 968.777509][T24258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 968.781319][T24258] vhci_hcd vhci_hcd.0: Device attached [ 969.055635][ T6004] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 969.125716][T14157] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 969.286821][T14157] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.289998][T14157] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 969.293597][T14157] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.298461][T14157] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.301426][T14157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.307564][T14157] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 969.610591][T24259] vhci_hcd: connection reset by peer [ 969.612506][ T1141] vhci_hcd: stop threads [ 969.614112][ T1141] vhci_hcd: release socket [ 969.615681][ T1141] vhci_hcd: disconnect device [ 970.104368][T24276] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 970.231460][T24281] fuse: Unknown parameter '0x0000000000000005' [ 971.281721][T24304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 971.283826][T24304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 971.286769][T24304] vhci_hcd vhci_hcd.0: Device attached [ 971.608348][T24294] Set syz1 is full, maxelem 65536 reached [ 971.651172][T24308] fuse: Unknown parameter '0x0000000000000005' [ 971.888877][T14157] usb 5-1: USB disconnect, device number 38 [ 972.103691][T24305] vhci_hcd: connection closed [ 972.104273][ T1184] vhci_hcd: stop threads [ 972.108085][ T1184] vhci_hcd: release socket [ 972.109755][ T1184] vhci_hcd: disconnect device [ 972.866138][T12619] vhci_hcd: vhci_device speed not set [ 972.983464][T24327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 972.985600][T24327] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 972.988406][T24327] vhci_hcd vhci_hcd.0: Device attached [ 973.770943][T24328] vhci_hcd: connection closed [ 973.771086][ T1184] vhci_hcd: stop threads [ 973.774033][ T1184] vhci_hcd: release socket [ 973.776452][ T1184] vhci_hcd: disconnect device [ 974.135660][ T6004] vhci_hcd: vhci_device speed not set [ 974.565673][ T838] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 974.716698][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.719803][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 974.723021][ T838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.727599][ T838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 974.730459][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.736206][ T838] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 975.311927][T24363] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 975.314018][T24363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 975.316594][T24363] vhci_hcd vhci_hcd.0: Device attached [ 975.586317][ T9534] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 976.110225][T24365] vhci_hcd: connection reset by peer [ 976.112157][ T12] vhci_hcd: stop threads [ 976.113602][ T12] vhci_hcd: release socket [ 976.115133][ T12] vhci_hcd: disconnect device [ 977.309407][ T6004] usb 8-1: USB disconnect, device number 37 [ 978.127350][T24389] Set syz1 is full, maxelem 65536 reached [ 980.703746][ T9534] vhci_hcd: vhci_device speed not set [ 982.386000][T24793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 982.388138][T24793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 982.390620][T24793] vhci_hcd vhci_hcd.0: Device attached [ 982.685757][ T10] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 983.077396][T24804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 983.079534][T24804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.082104][T24804] vhci_hcd vhci_hcd.0: Device attached [ 983.220079][T24794] vhci_hcd: connection reset by peer [ 983.221975][ T1141] vhci_hcd: stop threads [ 983.223622][ T1141] vhci_hcd: release socket [ 983.225229][ T1141] vhci_hcd: disconnect device [ 983.325788][ T9534] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 983.942168][T24817] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 983.944302][T24817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.947127][T24817] vhci_hcd vhci_hcd.0: Device attached [ 983.990412][T24805] vhci_hcd: connection reset by peer [ 983.992766][ T1260] vhci_hcd: stop threads [ 983.994425][ T1260] vhci_hcd: release socket [ 984.001354][ T1260] vhci_hcd: disconnect device [ 984.625713][T11432] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 984.915983][T24819] vhci_hcd: connection reset by peer [ 984.920235][ T59] vhci_hcd: stop threads [ 984.923898][ T59] vhci_hcd: release socket [ 984.925591][ T59] vhci_hcd: disconnect device [ 985.526217][T24942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 985.528325][T24942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 985.530859][T24942] vhci_hcd vhci_hcd.0: Device attached [ 986.354660][T24943] vhci_hcd: connection closed [ 986.355003][ T59] vhci_hcd: stop threads [ 986.359125][ T59] vhci_hcd: release socket [ 986.361091][ T59] vhci_hcd: disconnect device [ 987.825631][ T10] vhci_hcd: vhci_device speed not set [ 987.868579][T25302] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 987.870782][T25302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.873350][T25302] vhci_hcd vhci_hcd.0: Device attached [ 987.878031][T25301] syzkaller0: entered promiscuous mode [ 987.879943][T25301] syzkaller0: entered allmulticast mode [ 988.596718][T25320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 988.598875][T25320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 988.602114][T25320] vhci_hcd vhci_hcd.0: Device attached [ 988.656160][T25303] vhci_hcd: connection reset by peer [ 988.658006][ T1184] vhci_hcd: stop threads [ 988.659594][ T1184] vhci_hcd: release socket [ 988.661069][ T1184] vhci_hcd: disconnect device [ 988.725631][ T9534] vhci_hcd: vhci_device speed not set [ 988.925656][T14157] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 989.369721][T25321] vhci_hcd: connection reset by peer [ 989.371543][ T12] vhci_hcd: stop threads [ 989.373063][ T12] vhci_hcd: release socket [ 989.374639][ T12] vhci_hcd: disconnect device [ 989.605976][T25341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 989.608092][T25341] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 989.610619][T25341] vhci_hcd vhci_hcd.0: Device attached [ 989.755804][T11432] vhci_hcd: vhci_device speed not set [ 990.085723][ T1330] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 990.366472][T25343] vhci_hcd: connection reset by peer [ 990.368439][ T1184] vhci_hcd: stop threads [ 990.369847][ T1184] vhci_hcd: release socket [ 990.371318][ T1184] vhci_hcd: disconnect device [ 992.546939][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.548990][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.689423][T25603] syzkaller0: entered promiscuous mode [ 992.691754][T25603] syzkaller0: entered allmulticast mode [ 992.828824][T25706] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 993.345367][T25829] syzkaller0: entered promiscuous mode [ 993.347160][T25829] syzkaller0: entered allmulticast mode [ 994.055600][T14157] vhci_hcd: vhci_device speed not set [ 995.185585][ T1330] vhci_hcd: vhci_device speed not set [ 995.188249][T26083] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 996.636764][T26107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 996.640983][T26107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4078'. [ 997.130881][T26127] syzkaller0: entered promiscuous mode [ 997.132747][T26127] syzkaller0: entered allmulticast mode [ 998.561604][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 998.567097][T26160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4096'. [ 999.198644][T26168] binder: BINDER_SET_CONTEXT_MGR already set [ 999.200678][T26168] binder: 26167:26168 ioctl 4018620d 800002c0 returned -16 [ 1000.653995][T26190] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 1000.844219][T26299] binder: BINDER_SET_CONTEXT_MGR already set [ 1000.846342][T26299] binder: 26298:26299 ioctl 4018620d 800002c0 returned -16 [ 1000.968647][T26304] bond3: (slave macvlan4): Releasing backup interface [ 1001.078292][T26408] binder: 26407:26408 unknown command 0 [ 1001.080206][T26408] binder: 26407:26408 ioctl c0306201 80000080 returned -22 [ 1001.083404][T26408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 1001.123030][T26410] syzkaller0: entered promiscuous mode [ 1001.124900][T26410] syzkaller0: entered allmulticast mode [ 1001.566296][T26518] bond1: (slave vlan0): Releasing backup interface [ 1001.880975][T26628] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 1003.541209][T26642] syzkaller0: entered promiscuous mode [ 1003.543644][T26642] syzkaller0: entered allmulticast mode [ 1003.878801][T26651] fuse: Unknown parameter '0x0000000000000003' [ 1004.695806][T26672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1004.697948][T26672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1004.700430][T26672] vhci_hcd vhci_hcd.0: Device attached [ 1004.965614][ T838] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1004.968482][T26677] tipc: Enabling of bearer rejected, failed to enable media [ 1005.007639][T26683] fuse: Unknown parameter '0x0000000000000003' [ 1005.049814][T26689] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4138'. [ 1005.450820][T26674] vhci_hcd: connection reset by peer [ 1005.463748][ T59] vhci_hcd: stop threads [ 1005.465426][ T59] vhci_hcd: release socket [ 1005.467318][ T59] vhci_hcd: disconnect device [ 1006.072706][T27014] fuse: Unknown parameter '0x0000000000000003' [ 1006.486859][T27126] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1006.774030][T27019] Set syz1 is full, maxelem 65536 reached [ 1007.055683][T11432] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1007.206879][T11432] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.211103][T11432] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.216729][T11432] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1007.220512][T11432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.430206][T11432] usb 5-1: usb_control_msg returned -32 [ 1007.432199][T11432] usbtmc 5-1:16.0: can't read capabilities [ 1007.985005][ T9534] usb 5-1: USB disconnect, device number 39 [ 1008.986052][T27185] Set syz1 is full, maxelem 65536 reached [ 1010.066290][ T838] vhci_hcd: vhci_device speed not set [ 1011.300524][T27307] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1012.978980][T27435] syzkaller0: entered promiscuous mode [ 1012.980738][T27435] syzkaller0: entered allmulticast mode [ 1014.685976][T27576] syzkaller0: entered promiscuous mode [ 1014.687825][T27576] syzkaller0: entered allmulticast mode [ 1014.984424][T27584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1015.892886][T27599] syzkaller0: entered promiscuous mode [ 1015.894663][T27599] syzkaller0: entered allmulticast mode [ 1016.933045][T27621] fuse: Unknown parameter 'fd0x0000000000000003' [ 1017.467455][T27633] syzkaller0: entered promiscuous mode [ 1017.469295][T27633] syzkaller0: entered allmulticast mode [ 1019.143837][T27668] syzkaller0: entered promiscuous mode [ 1019.145806][T27668] syzkaller0: entered allmulticast mode [ 1019.314109][T27677] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1019.316188][T27677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1019.318986][T27677] vhci_hcd vhci_hcd.0: Device attached [ 1019.575916][T14157] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 1019.912979][T27793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1019.915097][T27793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1019.917806][T27793] vhci_hcd vhci_hcd.0: Device attached [ 1020.134262][T27678] vhci_hcd: connection reset by peer [ 1020.137693][ T1193] vhci_hcd: stop threads [ 1020.139605][ T1193] vhci_hcd: release socket [ 1020.141285][ T1193] vhci_hcd: disconnect device [ 1020.596860][T27796] vhci_hcd: connection closed [ 1020.600869][ T1184] vhci_hcd: stop threads [ 1020.604137][ T1184] vhci_hcd: release socket [ 1020.606221][ T1184] vhci_hcd: disconnect device [ 1021.007443][T28018] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1021.779066][T28137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1021.781195][T28137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1021.783883][T28137] vhci_hcd vhci_hcd.0: Device attached [ 1022.016161][ T6058] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 1022.592225][T28138] vhci_hcd: connection reset by peer [ 1022.594367][ T1193] vhci_hcd: stop threads [ 1022.598052][ T1193] vhci_hcd: release socket [ 1022.599780][ T1193] vhci_hcd: disconnect device [ 1023.301645][T28168] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1023.304418][T28168] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1023.307669][T28168] vhci_hcd vhci_hcd.0: Device attached [ 1023.360329][T28171] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1023.363026][T28171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1023.365821][T28171] vhci_hcd vhci_hcd.0: Device attached [ 1023.575613][T25316] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 1024.120097][T28169] vhci_hcd: connection reset by peer [ 1024.122527][ T13] vhci_hcd: stop threads [ 1024.123930][ T13] vhci_hcd: release socket [ 1024.125705][ T13] vhci_hcd: disconnect device [ 1024.256763][T28172] vhci_hcd: connection closed [ 1024.257792][ T13] vhci_hcd: stop threads [ 1024.260890][ T13] vhci_hcd: release socket [ 1024.262602][ T13] vhci_hcd: disconnect device [ 1024.695678][T14157] vhci_hcd: vhci_device speed not set [ 1024.757948][T28182] syzkaller0: entered promiscuous mode [ 1024.759726][T28182] syzkaller0: entered allmulticast mode [ 1025.739568][T28407] syzkaller0: entered promiscuous mode [ 1025.741364][T28407] syzkaller0: entered allmulticast mode [ 1026.473616][T28431] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1026.475680][T28431] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1026.478201][T28431] vhci_hcd vhci_hcd.0: Device attached [ 1027.275158][T28432] vhci_hcd: connection reset by peer [ 1027.277609][ T13] vhci_hcd: stop threads [ 1027.279005][ T13] vhci_hcd: release socket [ 1027.280476][ T13] vhci_hcd: disconnect device [ 1027.345651][ T6058] vhci_hcd: vhci_device speed not set [ 1028.162092][T28578] binder: 28577:28578 ioctl 4018620d 0 returned -22 [ 1028.695635][T25316] vhci_hcd: vhci_device speed not set [ 1029.088085][T28596] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1031.008398][T28614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1031.046325][T28618] binder: 28617:28618 ioctl 4018620d 0 returned -22 [ 1031.679453][T28620] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1031.681595][T28620] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1031.684098][T28620] vhci_hcd vhci_hcd.0: Device attached [ 1031.800897][T28625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1031.803540][T28625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1031.806741][T28625] vhci_hcd vhci_hcd.0: Device attached [ 1031.925604][ T9534] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 1032.045718][ T1330] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 1032.620084][T28626] vhci_hcd: connection reset by peer [ 1032.622393][ T12] vhci_hcd: stop threads [ 1032.623776][ T12] vhci_hcd: release socket [ 1032.625712][ T12] vhci_hcd: disconnect device [ 1032.954530][T28621] vhci_hcd: connection reset by peer [ 1032.962577][ T1142] vhci_hcd: stop threads [ 1032.964367][ T1142] vhci_hcd: release socket [ 1032.966406][ T1142] vhci_hcd: disconnect device [ 1036.660666][T29018] binder: 29017:29018 ioctl 4018620d 0 returned -22 [ 1036.663511][T29018] binder: 29017:29018 unknown command 0 [ 1036.665264][T29018] binder: 29017:29018 ioctl c0306201 80000080 returned -22 [ 1036.668782][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 1037.025645][ T9534] vhci_hcd: vhci_device speed not set [ 1037.185619][ T1330] vhci_hcd: vhci_device speed not set [ 1038.704091][T29150] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1038.706919][T29150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1038.710439][T29150] vhci_hcd vhci_hcd.0: Device attached [ 1038.955606][ T6058] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 1039.617988][T29151] vhci_hcd: connection reset by peer [ 1039.619882][ T1142] vhci_hcd: stop threads [ 1039.621329][ T1142] vhci_hcd: release socket [ 1039.622805][ T1142] vhci_hcd: disconnect device [ 1042.711316][T29530] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1042.713425][T29530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1042.716167][T29530] vhci_hcd vhci_hcd.0: Device attached [ 1042.955644][ T10] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 1043.504086][T29531] vhci_hcd: connection reset by peer [ 1043.507086][ T1142] vhci_hcd: stop threads [ 1043.508567][ T1142] vhci_hcd: release socket [ 1043.510072][ T1142] vhci_hcd: disconnect device [ 1044.055582][ T6058] vhci_hcd: vhci_device speed not set [ 1046.542004][T30035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1046.544126][T30035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1046.547262][T30035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1046.549298][T30035] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1046.553164][T30035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1046.555140][T30035] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1046.559277][T30035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1046.561316][T30035] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1048.055608][ T10] vhci_hcd: vhci_device speed not set [ 1048.555649][ T5978] Bluetooth: hci4: command 0x0406 tx timeout [ 1048.625656][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 1048.626292][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 1048.635671][ T5978] Bluetooth: hci3: command 0x0406 tx timeout [ 1049.839097][T30194] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1049.842710][T30194] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1049.845210][T30194] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1049.847773][T30194] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1051.755628][ T5982] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.915626][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1051.915725][ T5978] Bluetooth: hci3: command 0x0406 tx timeout [ 1051.917635][T17738] Bluetooth: hci0: command 0x0406 tx timeout [ 1053.997041][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.999046][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.715618][ T10] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1054.867534][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1054.870916][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.875265][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1054.878497][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.088500][ T10] usb 6-1: usb_control_msg returned -32 [ 1055.090445][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1055.641356][ T10] usb 6-1: USB disconnect, device number 31 [ 1058.063896][T30401] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1058.066080][T30401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1058.068112][T30401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1058.070108][T30401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1059.625896][ T6058] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1059.777256][ T6058] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1059.780334][ T6058] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.785667][ T6058] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1059.788609][ T6058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.998319][ T6058] usb 8-1: usb_control_msg returned -32 [ 1060.002517][ T6058] usbtmc 8-1:16.0: can't read capabilities [ 1060.075615][T17738] Bluetooth: hci4: command 0x0406 tx timeout [ 1060.145686][ T5978] Bluetooth: hci3: command 0x0406 tx timeout [ 1060.145710][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 1060.147699][T17738] Bluetooth: hci2: command 0x0406 tx timeout [ 1060.554272][T14157] usb 8-1: USB disconnect, device number 38 [ 1061.221024][T30540] binder: 30539:30540 ioctl c0306201 0 returned -14 [ 1062.835675][ T53] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1062.996940][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1063.000653][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1063.006059][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1063.009387][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.218634][ T53] usb 6-1: usb_control_msg returned -32 [ 1063.220490][ T53] usbtmc 6-1:16.0: can't read capabilities [ 1063.223625][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1063.772914][ T53] usb 6-1: USB disconnect, device number 32 [ 1064.143623][T31095] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1065.871507][T31132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1066.065630][ T1330] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 1066.226903][ T1330] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.230170][ T1330] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.234247][ T1330] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1066.237964][ T1330] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.446615][ T1330] usb 8-1: usb_control_msg returned -32 [ 1066.448371][ T1330] usbtmc 8-1:16.0: can't read capabilities [ 1066.999999][ T1330] usb 8-1: USB disconnect, device number 39 [ 1067.571386][T31166] fuse: Bad value for 'fd' [ 1069.025665][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1069.105643][ T5982] Bluetooth: hci4: command 0x0406 tx timeout [ 1069.105730][T31160] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1069.943388][T31160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1069.946185][T31160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1069.948756][T31160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1070.515642][T14157] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1070.667294][T14157] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.670412][T14157] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.674415][T14157] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1070.677310][T14157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.884966][T14157] usb 7-1: usb_control_msg returned -32 [ 1070.892824][T14157] usbtmc 7-1:16.0: can't read capabilities [ 1071.185662][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.438911][ T6058] usb 7-1: USB disconnect, device number 35 [ 1071.985629][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.987539][T17738] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.022919][T31529] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1074.660113][T31671] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1074.765611][T14157] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1074.926752][T14157] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1074.930253][T14157] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.934160][T14157] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1074.937371][T14157] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.144452][T14157] usb 8-1: usb_control_msg returned -32 [ 1075.146381][T14157] usbtmc 8-1:16.0: can't read capabilities [ 1075.698749][ T53] usb 8-1: USB disconnect, device number 40 [ 1076.163779][T31688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1076.165972][T31688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1076.168016][T31688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.170128][T31688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1078.155693][ T5982] Bluetooth: hci4: command 0x0406 tx timeout [ 1078.225680][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1078.235694][T17738] Bluetooth: hci0: command 0x0406 tx timeout [ 1078.237644][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 1080.273267][T31947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1080.276367][T31947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1080.278379][T31947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1080.280578][T31947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1082.225716][ T5982] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.305687][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1082.308668][T17738] Bluetooth: hci3: command 0x0406 tx timeout [ 1082.308709][ T5978] Bluetooth: hci0: command 0x0406 tx timeout [ 1083.072619][T32099] program syz.0.4521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1083.325662][T14157] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1083.495623][T14157] usb 5-1: Using ep0 maxpacket: 16 [ 1083.498664][T14157] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.501782][T14157] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1083.503956][T14157] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1083.507808][T14157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.511298][T14157] usb 5-1: config 0 descriptor?? [ 1083.733064][T32099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.736183][T32099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.797802][T14157] usbhid 5-1:0.0: can't add hid device: -71 [ 1083.799870][T14157] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1083.803308][T14157] usb 5-1: USB disconnect, device number 40 [ 1088.605987][ T5982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1088.611434][ T5982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1088.613847][ T5982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1088.618044][ T5982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1088.620819][ T5982] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.721425][ T341] chnl_net:caif_netlink_parms(): no params data found [ 1088.744697][T29175] smc: removing ib device syz1 [ 1088.748943][T25316] syz1: Port: 1 Link DOWN [ 1088.769113][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.771456][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.773747][ T341] bridge_slave_0: entered allmulticast mode [ 1088.777305][ T341] bridge_slave_0: entered promiscuous mode [ 1088.779945][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.782206][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.784487][ T341] bridge_slave_1: entered allmulticast mode [ 1088.788433][ T341] bridge_slave_1: entered promiscuous mode [ 1088.855423][ T341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.861569][ T341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.895286][ T341] team0: Port device team_slave_0 added [ 1088.901909][ T341] team0: Port device team_slave_1 added [ 1088.929566][ T341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.931782][ T341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.940771][ T341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.945026][ T341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.947774][ T341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.955969][ T341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.002145][ T341] hsr_slave_0: entered promiscuous mode [ 1089.004902][ T341] hsr_slave_1: entered promiscuous mode [ 1089.007047][ T341] debugfs: 'hsr0' already exists in 'hsr' [ 1089.008882][ T341] Cannot create hsr debugfs directory [ 1089.096138][ T341] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.274272][ T341] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.371567][ T341] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.481963][ T341] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.653047][ T341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1089.656620][ T341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1089.661964][ T341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1089.665390][ T341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1089.697584][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.699838][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.702197][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.704416][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.724631][ T341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.732077][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.735226][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.778338][ T341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.786208][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.788428][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.791463][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.793687][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.907616][ T341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.927595][ T341] veth0_vlan: entered promiscuous mode [ 1089.933083][ T341] veth1_vlan: entered promiscuous mode [ 1089.946218][ T341] veth0_macvtap: entered promiscuous mode [ 1089.955745][ T341] veth1_macvtap: entered promiscuous mode [ 1089.962996][ T341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.968829][ T341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.977140][T24398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.980240][T24398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.982986][T24398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.987326][T24398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.029325][T24398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.032527][T24398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.055193][T24398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.061562][T24398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.636080][ T5982] Bluetooth: hci1: command tx timeout [ 1090.871711][ T1142] bond0 (unregistering): Released all slaves [ 1090.877410][ T1142] bond1 (unregistering): Released all slaves [ 1091.120476][ T1142] hsr_slave_0: left promiscuous mode [ 1091.122590][ T1142] hsr_slave_1: left promiscuous mode [ 1091.126560][ T1142] veth1_macvtap: left promiscuous mode [ 1091.128336][ T1142] veth0_macvtap: left promiscuous mode [ 1091.130178][ T1142] veth1_vlan: left allmulticast mode [ 1091.131889][ T1142] veth1_vlan: left promiscuous mode [ 1091.133581][ T1142] veth0_vlan: left promiscuous mode [ 1091.145798][ T386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1091.159610][ T1142] pim6reg (unregistering): left allmulticast mode [ 1091.181541][ T1142] macvlan0 (unregistering): left allmulticast mode [ 1091.807649][ T396] binder: 395:396 unknown command 0 [ 1091.809387][ T396] binder: 395:396 ioctl c0306201 80000080 returned -22 [ 1091.851673][ T400] binder: 399:400 unknown command 0 [ 1091.853399][ T400] binder: 399:400 ioctl c0306201 80000080 returned -22 [ 1092.198352][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 1092.705679][ T5982] Bluetooth: hci1: command tx timeout [ 1093.260075][ T425] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1093.262298][ T425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1093.265032][ T425] vhci_hcd vhci_hcd.0: Device attached [ 1093.518809][ T53] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 1094.131237][ T426] vhci_hcd: connection reset by peer [ 1094.133634][T29175] vhci_hcd: stop threads [ 1094.135705][T29175] vhci_hcd: release socket [ 1094.138303][T29175] vhci_hcd: disconnect device [ 1094.785977][ T5982] Bluetooth: hci1: command tx timeout [ 1096.699872][ T461] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1096.701993][ T461] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1096.704626][ T461] vhci_hcd vhci_hcd.0: Device attached [ 1096.875672][ T5982] Bluetooth: hci1: command tx timeout [ 1097.495157][ T462] vhci_hcd: connection closed [ 1097.495328][ T1193] vhci_hcd: stop threads [ 1097.499216][ T1193] vhci_hcd: release socket [ 1097.501157][ T1193] vhci_hcd: disconnect device [ 1098.019228][ T478] binder: 477:478 ioctl c0306201 80000680 returned -14 [ 1098.615770][ T53] vhci_hcd: vhci_device speed not set [ 1098.906300][ T500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4592'. [ 1100.845076][ T519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4597'. [ 1103.289814][ T562] program syz.2.4609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.535599][ T1330] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1103.705716][ T1330] usb 7-1: Using ep0 maxpacket: 16 [ 1103.710923][ T1330] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.713988][ T1330] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1103.716246][ T1330] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1103.719085][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.722290][ T1330] usb 7-1: config 0 descriptor?? [ 1103.948274][ T562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.951345][ T562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.020965][ T1330] usbhid 7-1:0.0: can't add hid device: -71 [ 1104.022906][ T1330] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1104.026278][ T1330] usb 7-1: USB disconnect, device number 36 [ 1104.648981][ T583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1104.651007][ T583] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1104.653502][ T583] vhci_hcd vhci_hcd.0: Device attached [ 1104.896012][ T1330] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 1105.477328][ T596] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1105.521376][ T584] vhci_hcd: connection reset by peer [ 1105.524558][ T59] vhci_hcd: stop threads [ 1105.526625][ T59] vhci_hcd: release socket [ 1105.528071][ T59] vhci_hcd: disconnect device [ 1105.822980][ T607] binder: 606:607 ioctl c0306201 80000680 returned -14 [ 1106.315647][T12619] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1106.417525][ T619] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1106.419743][ T619] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1106.422212][ T619] vhci_hcd vhci_hcd.0: Device attached [ 1106.486898][T12619] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1106.490104][T12619] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.494232][T12619] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1106.497197][T12619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.695609][T24282] usb 39-1: new high-speed USB device number 7 using vhci_hcd [ 1106.706683][T12619] usb 7-1: usb_control_msg returned -32 [ 1106.708672][T12619] usbtmc 7-1:16.0: can't read capabilities [ 1107.216122][ T620] vhci_hcd: connection reset by peer [ 1107.219176][T29175] vhci_hcd: stop threads [ 1107.220688][T29175] vhci_hcd: release socket [ 1107.222244][T29175] vhci_hcd: disconnect device [ 1107.262717][ T6058] usb 7-1: USB disconnect, device number 37 [ 1108.793696][ T651] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1108.795782][ T651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1108.798271][ T651] vhci_hcd vhci_hcd.0: Device attached [ 1109.065709][T12619] usb 43-1: new high-speed USB device number 7 using vhci_hcd [ 1109.255623][T25316] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1109.405668][T25316] usb 7-1: Using ep0 maxpacket: 16 [ 1109.408530][T25316] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.412129][T25316] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1109.417303][T25316] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1109.420195][T25316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.422756][T25316] usb 7-1: Product: syz [ 1109.424111][T25316] usb 7-1: Manufacturer: syz [ 1109.426283][T25316] usb 7-1: SerialNumber: syz [ 1109.430210][T25316] usb 7-1: config 0 descriptor?? [ 1109.615699][ T10] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1109.777082][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.780359][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.784494][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1109.787389][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.853231][ T652] vhci_hcd: connection reset by peer [ 1109.855165][ T12] vhci_hcd: stop threads [ 1109.856738][ T12] vhci_hcd: release socket [ 1109.858235][ T12] vhci_hcd: disconnect device [ 1109.985712][ T1330] vhci_hcd: vhci_device speed not set [ 1109.993702][ T10] usb 5-1: usb_control_msg returned -32 [ 1109.995675][ T10] usbtmc 5-1:16.0: can't read capabilities [ 1111.818065][ T10] usb 7-1: USB disconnect, device number 38 [ 1111.825631][T24282] vhci_hcd: vhci_device speed not set [ 1111.837783][ T683] binder: 682:683 ioctl c0306201 80000680 returned -14 [ 1112.382032][ T1330] usb 5-1: USB disconnect, device number 41 [ 1112.719694][ T708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4647'. [ 1112.760103][ T712] binder: 711:712 ioctl c0306201 0 returned -14 [ 1114.005647][T24282] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1114.166790][T24282] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1114.170769][T24282] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.175825][T24282] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1114.179592][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.225635][T12619] vhci_hcd: vhci_device speed not set [ 1114.386682][T24282] usb 6-1: usb_control_msg returned -32 [ 1114.388941][T24282] usbtmc 6-1:16.0: can't read capabilities [ 1115.076900][ T737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1115.427020][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.429569][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.766907][ T9534] usb 6-1: USB disconnect, device number 33 [ 1116.820895][ T769] binder: 768:769 ioctl c0306201 0 returned -14 [ 1117.155665][ T9534] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1117.315567][ T9534] usb 6-1: Using ep0 maxpacket: 16 [ 1117.318459][ T9534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1117.322886][ T9534] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1117.325692][ T9534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.328182][ T9534] usb 6-1: Product: syz [ 1117.329503][ T9534] usb 6-1: Manufacturer: syz [ 1117.330941][ T9534] usb 6-1: SerialNumber: syz [ 1117.334088][ T9534] usb 6-1: config 0 descriptor?? [ 1117.337119][ T9534] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1117.339831][ T9534] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1117.943856][ T9534] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1118.353216][ T9534] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1118.355691][ T9534] em28xx 6-1:0.0: board has no eeprom [ 1118.415671][ T9534] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1118.417885][ T9534] em28xx 6-1:0.0: dvb set to bulk mode. [ 1118.420676][T25316] em28xx 6-1:0.0: Binding DVB extension [ 1118.422699][ T9534] usb 6-1: USB disconnect, device number 34 [ 1118.425097][ T9534] em28xx 6-1:0.0: Disconnecting em28xx [ 1118.441819][T25316] em28xx 6-1:0.0: Registering input extension [ 1118.443806][ T9534] em28xx 6-1:0.0: Closing input extension [ 1118.447509][ T9534] em28xx 6-1:0.0: Freeing device [ 1118.833157][ T812] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.835771][ T812] binder: 810:812 ioctl 4018620d 80000100 returned -16 [ 1118.842985][ T812] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.845985][ T812] binder: 810:812 ioctl 4018620d 800002c0 returned -16 [ 1119.919909][ T844] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.922038][ T844] binder: 843:844 ioctl 4018620d 80000100 returned -16 [ 1119.926105][ T844] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.927936][ T844] binder: 843:844 ioctl 4018620d 800002c0 returned -16 [ 1119.963494][ T848] program syz.1.4690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.965763][T12619] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1120.115618][T12619] usb 7-1: Using ep0 maxpacket: 32 [ 1120.118859][T12619] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1120.121392][T12619] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1120.123930][T12619] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1120.126739][T12619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1120.129634][T12619] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1120.132543][T12619] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1120.136574][T12619] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1120.139297][T12619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.142509][T12619] usb 7-1: config 0 descriptor?? [ 1120.205650][ T53] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1120.350981][T12619] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1120.355630][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 1120.358781][ T53] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.361680][ T53] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1120.363621][ T53] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1120.366528][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.370343][ T53] usb 6-1: config 0 descriptor?? [ 1120.550886][T12619] usb 7-1: USB disconnect, device number 39 [ 1120.554358][T12619] usblp0: removed [ 1120.592794][ T848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.595489][ T848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.679618][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 1120.681554][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1120.684734][ T53] usb 6-1: USB disconnect, device number 35 [ 1121.073721][ T870] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.076333][ T870] binder: 868:870 ioctl 4018620d 80000100 returned -16 [ 1121.081116][ T870] binder: BINDER_SET_CONTEXT_MGR already set [ 1121.083116][ T870] binder: 868:870 ioctl 4018620d 800002c0 returned -16 [ 1124.495677][ T53] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1124.655836][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 1124.659109][ T53] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1124.662344][ T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1124.666211][ T53] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1124.669701][ T53] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1124.673909][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1124.677608][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1124.681305][ T53] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1124.684858][ T53] usb 7-1: Product: syz [ 1124.687085][ T53] usb 7-1: Manufacturer: syz [ 1124.688973][ T53] usb 7-1: SerialNumber: syz [ 1124.692019][ T53] usb 7-1: config 0 descriptor?? [ 1124.706755][ T933] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1124.708844][ T933] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1124.711317][ T933] vhci_hcd vhci_hcd.0: Device attached [ 1124.739869][ T53] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1124.755043][ T53] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1124.976219][T12619] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 1125.015089][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 1125.018058][ T923] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1125.020698][T25316] usb 7-1: USB disconnect, device number 40 [ 1125.023959][T25316] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1125.114675][ T943] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.117570][ T943] binder: 941:943 ioctl 4018620d 80000100 returned -16 [ 1125.123108][ T943] binder: BINDER_SET_CONTEXT_MGR already set [ 1125.125764][ T943] binder: 941:943 ioctl 4018620d 800002c0 returned -16 [ 1126.006431][ T934] vhci_hcd: connection reset by peer [ 1126.009093][T29175] vhci_hcd: stop threads [ 1126.010953][T29175] vhci_hcd: release socket [ 1126.012922][T29175] vhci_hcd: disconnect device [ 1126.585724][T25316] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1126.735600][T25316] usb 6-1: Using ep0 maxpacket: 16 [ 1126.738846][T25316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.742175][T25316] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.746720][T25316] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1126.750349][T25316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.753540][T25316] usb 6-1: Product: syz [ 1126.754925][T25316] usb 6-1: Manufacturer: syz [ 1126.756625][T25316] usb 6-1: SerialNumber: syz [ 1126.762129][T25316] usb 6-1: config 0 descriptor?? [ 1127.641065][ T996] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.643063][ T996] binder: 995:996 ioctl 4018620d 80000100 returned -16 [ 1127.646946][ T996] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.648930][ T996] binder: 995:996 ioctl 4018620d 800002c0 returned -16 [ 1129.002713][ T1017] fuse: Unknown parameter 'user_i00000000000000000000' [ 1129.084695][ T53] usb 6-1: USB disconnect, device number 36 [ 1129.538681][ T1037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4738'. [ 1130.075634][T12619] vhci_hcd: vhci_device speed not set [ 1130.185652][ T838] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1130.336726][ T838] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1130.339285][ T838] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1130.342827][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1130.346255][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1130.349672][ T838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1130.353634][ T838] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1130.356491][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.359849][ T838] usb 8-1: config 0 descriptor?? [ 1130.361814][ T1044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1130.974807][ T838] usbhid 8-1:0.0: can't add hid device: -71 [ 1130.976866][ T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1130.981370][ T838] usb 8-1: USB disconnect, device number 41 [ 1132.613337][ T1089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1132.616179][ T1089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1132.618922][ T1089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1132.621725][ T1089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1132.624389][ T1089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1132.628816][ T1089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1132.809130][ T1098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1132.812098][ T1098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1132.814243][ T1098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1132.816694][ T1098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1132.936463][ T1111] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1134.865688][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1134.865728][ T5982] Bluetooth: hci2: command 0x0406 tx timeout [ 1134.867618][T17738] Bluetooth: hci3: command 0x0406 tx timeout [ 1135.430099][ T1151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1135.432141][ T1151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1135.434122][ T1151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1135.436875][ T1151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1135.955770][T12619] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1136.105594][T12619] usb 8-1: Using ep0 maxpacket: 16 [ 1136.108612][T12619] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.112408][T12619] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1136.117175][T12619] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1136.120094][T12619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.122606][T12619] usb 8-1: Product: syz [ 1136.124040][T12619] usb 8-1: Manufacturer: syz [ 1136.125682][T12619] usb 8-1: SerialNumber: syz [ 1136.127935][T12619] usb 8-1: config 0 descriptor?? [ 1136.705595][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 1137.505652][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 1137.505692][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1137.505726][T17738] Bluetooth: hci2: command 0x0406 tx timeout [ 1138.466759][T25316] usb 8-1: USB disconnect, device number 42 [ 1138.570275][ T1199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1138.572396][ T1199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1138.574371][ T1199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1138.576577][ T1199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.434026][ T1213] fuse: Unknown parameter '0x0000000000000004' [ 1140.545643][ T5982] Bluetooth: hci0: command 0x0406 tx timeout [ 1140.625586][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 1140.635625][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 1140.635673][ T5978] Bluetooth: hci2: command 0x0406 tx timeout [ 1141.370361][ T1234] fuse: Unknown parameter '0x0000000000000004' [ 1142.715703][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1142.848218][ T1256] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1143.734936][ T1277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1143.868609][ T1274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1143.870788][ T1274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1143.872816][ T1274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1143.874817][ T1274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1145.045985][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1145.048569][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1145.050994][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1145.054225][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1145.057362][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1145.128392][ T1289] chnl_net:caif_netlink_parms(): no params data found [ 1145.164195][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.167857][ T1289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.170217][ T1289] bridge_slave_0: entered allmulticast mode [ 1145.172750][ T1289] bridge_slave_0: entered promiscuous mode [ 1145.175430][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.177816][ T1289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.180087][ T1289] bridge_slave_1: entered allmulticast mode [ 1145.182528][ T1289] bridge_slave_1: entered promiscuous mode [ 1145.201225][ T1289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.205166][ T1289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.224373][ T1289] team0: Port device team_slave_0 added [ 1145.229433][ T1289] team0: Port device team_slave_1 added [ 1145.246986][ T1289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.249303][ T1289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.257810][ T1289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.261768][ T1289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.263913][ T1289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.272960][ T1289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.295148][ T1289] hsr_slave_0: entered promiscuous mode [ 1145.299116][ T1289] hsr_slave_1: entered promiscuous mode [ 1145.301210][ T1289] debugfs: 'hsr0' already exists in 'hsr' [ 1145.302993][ T1289] Cannot create hsr debugfs directory [ 1145.342371][ T1193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.369928][ T1289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1145.376833][ T1289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1145.380386][ T1289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1145.383902][ T1289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1145.394018][ T1289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.396613][ T1289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.398943][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.401189][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.406566][ T1193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.427455][ T1289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.433195][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.437324][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.443391][ T1289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.447904][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.450173][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.454701][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.456982][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.478570][ T1193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.530389][ T1289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.578146][ T1193] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.617931][ T1289] veth0_vlan: entered promiscuous mode [ 1145.621782][ T1289] veth1_vlan: entered promiscuous mode [ 1145.633934][ T1289] veth0_macvtap: entered promiscuous mode [ 1145.637129][ T1289] veth1_macvtap: entered promiscuous mode [ 1145.643905][ T1289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.653668][ T1289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.659485][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.668879][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.672956][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.677726][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.803392][ T1193] bond0 (unregistering): Released all slaves [ 1145.810570][ T1193] bond1 (unregistering): Released all slaves [ 1145.824200][ T1193] bond2 (unregistering): Released all slaves [ 1145.825709][ T5978] Bluetooth: hci0: command 0x0406 tx timeout [ 1145.831580][ T1193] bond3 (unregistering): Released all slaves [ 1145.905176][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.907645][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1145.907676][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 1145.909844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.921287][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.924071][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.063264][ T1193] hsr_slave_0: left promiscuous mode [ 1146.067746][ T1193] veth1_macvtap: left promiscuous mode [ 1146.069492][ T1193] veth0_macvtap: left allmulticast mode [ 1146.071254][ T1193] veth0_macvtap: left promiscuous mode [ 1146.073055][ T1193] veth1_vlan: left promiscuous mode [ 1146.074708][ T1193] veth0_vlan: left promiscuous mode [ 1146.645302][ T1193] IPVS: stop unused estimator thread 0... [ 1147.115699][ T5978] Bluetooth: hci2: command tx timeout [ 1147.128990][ T1377] bridge_slave_0: left allmulticast mode [ 1147.134944][ T1377] bridge_slave_0: left promiscuous mode [ 1147.137847][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.143466][ T1377] bridge_slave_1: left allmulticast mode [ 1147.146434][ T1377] bridge_slave_1: left promiscuous mode [ 1147.148870][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.155400][ T1377] bond0: (slave bond_slave_0): Releasing backup interface [ 1147.162280][ T1377] bond0: (slave bond_slave_1): Releasing backup interface [ 1147.165626][T24282] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1147.171537][ T1377] team0: Port device team_slave_0 removed [ 1147.177995][ T1377] team0: Port device team_slave_1 removed [ 1147.181076][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.184077][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.189897][ T1377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.192983][ T1377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.325663][T24282] usb 5-1: Using ep0 maxpacket: 16 [ 1147.328477][T24282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.331681][T24282] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1147.335877][T24282] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1147.338825][T24282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.341380][T24282] usb 5-1: Product: syz [ 1147.342751][T24282] usb 5-1: Manufacturer: syz [ 1147.344270][T24282] usb 5-1: SerialNumber: syz [ 1147.349906][T24282] usb 5-1: config 0 descriptor?? [ 1147.985666][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1149.185651][ T5978] Bluetooth: hci2: command tx timeout [ 1149.718214][T25316] usb 5-1: USB disconnect, device number 42 [ 1150.921354][ T1402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1150.923330][ T1402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1150.925277][ T1402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1150.927656][ T1402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1150.929689][ T1402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1150.932407][ T1402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1151.944059][ T1427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4811'. [ 1152.865689][ T5978] Bluetooth: hci0: command 0x0406 tx timeout [ 1152.945656][ T5978] Bluetooth: hci2: command 0x0419 tx timeout [ 1152.947258][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 1152.947321][T17738] Bluetooth: hci3: command 0x0406 tx timeout [ 1153.960824][ T1448] syzkaller0: entered promiscuous mode [ 1153.962806][ T1448] syzkaller0: entered allmulticast mode [ 1153.963212][ T1451] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1154.779263][ T1458] syz.4.4818 (1458): drop_caches: 2 [ 1154.785247][ T1458] syz.4.4818 (1458): drop_caches: 2 [ 1154.930710][ T1465] syz.0.4819 (1465): drop_caches: 2 [ 1154.935079][ T1465] syz.0.4819 (1465): drop_caches: 2 [ 1154.978871][ T1466] syz.4.4820 (1466): drop_caches: 2 [ 1154.980932][ T1466] syz.4.4820 (1466): drop_caches: 2 [ 1155.025596][ T5982] Bluetooth: hci2: command 0x0419 tx timeout [ 1156.767475][ T1492] netlink: 'syz.3.4827': attribute type 6 has an invalid length. [ 1156.778779][ T1490] syzkaller0: entered promiscuous mode [ 1156.780646][ T1490] syzkaller0: entered allmulticast mode [ 1156.785428][ T1492] netlink: 'syz.3.4827': attribute type 6 has an invalid length. [ 1157.115754][ T5982] Bluetooth: hci2: command 0x0419 tx timeout [ 1157.596322][ T1513] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1157.921457][ T1533] syz.3.4834 (1533): drop_caches: 2 [ 1157.923675][ T1533] syz.3.4834 (1533): drop_caches: 2 [ 1158.918763][ T5978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1158.921197][ T5978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1158.923475][ T5978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1158.926318][ T5978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1158.928707][ T5978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1158.987531][ T1553] chnl_net:caif_netlink_parms(): no params data found [ 1159.146662][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.148962][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.151329][ T1553] bridge_slave_0: entered allmulticast mode [ 1159.155664][ T1553] bridge_slave_0: entered promiscuous mode [ 1159.161145][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.163649][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.166441][ T1553] bridge_slave_1: entered allmulticast mode [ 1159.169004][ T1553] bridge_slave_1: entered promiscuous mode [ 1159.185796][ T5978] Bluetooth: hci2: command 0x0419 tx timeout [ 1159.192449][ T1553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.198578][ T1553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.227998][ T1553] team0: Port device team_slave_0 added [ 1159.230901][ T1553] team0: Port device team_slave_1 added [ 1159.261513][ T1553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.265736][ T1553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.275908][ T1553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.280383][ T1553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.282535][ T1553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.295652][ T1553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.339195][ T1553] hsr_slave_0: entered promiscuous mode [ 1159.341397][ T1553] hsr_slave_1: entered promiscuous mode [ 1159.343341][ T1553] debugfs: 'hsr0' already exists in 'hsr' [ 1159.347272][ T1553] Cannot create hsr debugfs directory [ 1159.784940][ T1553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1159.792372][ T1553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1159.795789][ T1553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1159.799343][ T1553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1159.821010][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.823308][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.825703][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.827892][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.847905][ T1553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.853432][ T1193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.857050][ T1193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.863210][ T1553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1159.870359][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.872655][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.878765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.881094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.981549][T29175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.989001][ T1553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.038883][T29175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.092875][ T1553] veth0_vlan: entered promiscuous mode [ 1160.097586][ T1553] veth1_vlan: entered promiscuous mode [ 1160.112610][T29175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.117613][ T1553] veth0_macvtap: entered promiscuous mode [ 1160.121110][ T1553] veth1_macvtap: entered promiscuous mode [ 1160.128722][ T1553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.133623][ T1553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.140082][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.143084][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.147244][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.150435][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.174960][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.177715][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.184890][T29175] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.194320][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.197012][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.329430][T29175] bond0 (unregistering): Released all slaves [ 1160.337133][T29175] bond1 (unregistering): Released all slaves [ 1160.349543][T29175] bond2 (unregistering): Released all slaves [ 1160.356004][T29175] bond3 (unregistering): Released all slaves [ 1160.587182][T29175] hsr_slave_0: left promiscuous mode [ 1160.592212][T29175] veth1_macvtap: left promiscuous mode [ 1160.595163][T29175] veth0_macvtap: left allmulticast mode [ 1160.599874][T29175] veth0_macvtap: left promiscuous mode [ 1160.601687][T29175] veth1_vlan: left allmulticast mode [ 1160.603609][T29175] veth1_vlan: left promiscuous mode [ 1160.605349][T29175] veth0_vlan: left promiscuous mode [ 1160.642878][T29175] pim6reg (unregistering): left allmulticast mode [ 1160.670424][T29175] macvlan0 (unregistering): left allmulticast mode [ 1160.955697][ T5978] Bluetooth: hci4: command tx timeout [ 1161.275647][ T5978] Bluetooth: hci2: command 0x0419 tx timeout [ 1161.291113][ T1652] syz.0.4848 (1652): drop_caches: 2 [ 1161.293230][ T1652] syz.0.4848 (1652): drop_caches: 2 [ 1162.035583][ T10] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1162.184738][ T1670] syz.0.4852 (1670): drop_caches: 2 [ 1162.188359][ T1670] syz.0.4852 (1670): drop_caches: 2 [ 1162.195590][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1162.205173][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.208461][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1162.212550][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1162.215318][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.217901][ T10] usb 8-1: Product: syz [ 1162.219220][ T10] usb 8-1: Manufacturer: syz [ 1162.220701][ T10] usb 8-1: SerialNumber: syz [ 1162.222819][ T10] usb 8-1: config 0 descriptor?? [ 1162.426426][ T1675] syz.4.4854 (1675): drop_caches: 2 [ 1162.428775][ T1675] syz.4.4854 (1675): drop_caches: 2 [ 1163.035624][ T5978] Bluetooth: hci4: command tx timeout [ 1164.355259][ T1711] bridge_slave_0: left allmulticast mode [ 1164.357197][ T1711] bridge_slave_0: left promiscuous mode [ 1164.359121][ T1711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.370198][ T1711] bridge_slave_1: left allmulticast mode [ 1164.374500][ T1711] bridge_slave_1: left promiscuous mode [ 1164.380063][ T1711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.390735][ T1711] bond0: (slave bond_slave_0): Releasing backup interface [ 1164.401145][ T1711] bond0: (slave bond_slave_1): Releasing backup interface [ 1164.409794][ T1711] team0: Port device team_slave_0 removed [ 1164.414701][ T1711] team0: Port device team_slave_1 removed [ 1164.417615][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.420054][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.423054][ T1711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.425495][ T1711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.613007][ T838] usb 8-1: USB disconnect, device number 43 [ 1165.105876][ T5978] Bluetooth: hci4: command tx timeout [ 1165.354394][ T1727] bridge_slave_0: left allmulticast mode [ 1165.356523][ T1727] bridge_slave_0: left promiscuous mode [ 1165.358401][ T1727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.362043][ T1727] bridge_slave_1: left allmulticast mode [ 1165.363891][ T1727] bridge_slave_1: left promiscuous mode [ 1165.366429][ T1727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.371078][ T1727] bond0: (slave bond_slave_0): Releasing backup interface [ 1165.374877][ T1727] bond0: (slave bond_slave_1): Releasing backup interface [ 1165.380371][ T1727] team0: Port device team_slave_0 removed [ 1165.384092][ T1727] team0: Port device team_slave_1 removed [ 1165.386652][ T1727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.389106][ T1727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.392107][ T1727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.394455][ T1727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.185689][ T5978] Bluetooth: hci4: command tx timeout [ 1167.303298][ T1761] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1167.786064][T12619] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1167.935617][T12619] usb 8-1: Using ep0 maxpacket: 16 [ 1167.938599][T12619] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.942037][T12619] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1167.946671][T12619] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1167.949625][T12619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.952232][T12619] usb 8-1: Product: syz [ 1167.953608][T12619] usb 8-1: Manufacturer: syz [ 1167.955119][T12619] usb 8-1: SerialNumber: syz [ 1167.958080][T12619] usb 8-1: config 0 descriptor?? [ 1168.413954][ T1785] syz.5.4882 (1785): drop_caches: 2 [ 1168.423954][ T1785] syz.5.4882 (1785): drop_caches: 2 [ 1168.460071][ T1782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1168.462137][ T1782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1168.464158][ T1782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1168.468477][ T1782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1168.470534][ T1782] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1168.473070][ T1782] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1169.472724][ T1796] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1170.322935][ T24] usb 8-1: USB disconnect, device number 44 [ 1170.385830][ T5978] Bluetooth: hci0: command 0x0406 tx timeout [ 1170.464080][ T1812] syz.0.4888 (1812): drop_caches: 2 [ 1170.469879][ T1812] syz.0.4888 (1812): drop_caches: 2 [ 1170.481472][ T1813] syz.3.4889 (1813): drop_caches: 2 [ 1170.483567][ T1813] syz.3.4889 (1813): drop_caches: 2 [ 1170.491689][ T5978] Bluetooth: hci2: command 0x0419 tx timeout [ 1170.493637][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1170.545714][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 1170.917315][ T1815] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1171.215196][ T1825] program syz.3.4891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1171.355055][ T1831] syz.0.4892 (1831): drop_caches: 2 [ 1171.359498][ T1831] syz.0.4892 (1831): drop_caches: 2 [ 1171.455625][T12619] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1171.495589][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1171.615693][T12619] usb 8-1: Using ep0 maxpacket: 16 [ 1171.618405][T12619] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.621290][T12619] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1171.623366][T12619] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1171.626442][T12619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.629396][T12619] usb 8-1: config 0 descriptor?? [ 1171.675659][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1171.678815][ T10] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1171.681947][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.685780][ T10] usb 9-1: config 0 descriptor?? [ 1171.688741][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1171.691928][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb9/9-1/input/input10 [ 1171.838815][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.841626][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.849168][T12619] usbhid 8-1:0.0: can't add hid device: -71 [ 1171.854160][T12619] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1171.864869][T12619] usb 8-1: USB disconnect, device number 45 [ 1171.892175][ T9534] usb 9-1: USB disconnect, device number 2 [ 1172.173580][ T1847] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1172.639148][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 1172.885616][T12619] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1172.905623][T14157] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1173.026186][ T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1173.045660][T12619] usb 8-1: Using ep0 maxpacket: 16 [ 1173.049386][T12619] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.053702][T12619] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.059265][T12619] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1173.063000][T12619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.065626][T14157] usb 9-1: Using ep0 maxpacket: 16 [ 1173.066655][T12619] usb 8-1: Product: syz [ 1173.069783][T12619] usb 8-1: Manufacturer: syz [ 1173.071081][T14157] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.071756][T12619] usb 8-1: SerialNumber: syz [ 1173.074927][T14157] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.078088][T12619] usb 8-1: config 0 descriptor?? [ 1173.082465][T14157] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1173.085388][T14157] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.087924][T14157] usb 9-1: Product: syz [ 1173.089241][T14157] usb 9-1: Manufacturer: syz [ 1173.090722][T14157] usb 9-1: SerialNumber: syz [ 1173.092959][T14157] usb 9-1: config 0 descriptor?? [ 1173.201523][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1173.206132][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1173.210120][ T10] usb 10-1: can't read configurations, error -71 [ 1174.035668][ T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1174.195640][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1174.200291][ T10] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1174.204002][ T10] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1174.207335][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.210873][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1174.213814][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1174.217203][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1174.221716][ T10] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1174.224727][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.228812][ T10] usb 10-1: config 0 descriptor?? [ 1174.715615][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 1175.397968][ T838] usb 8-1: USB disconnect, device number 46 [ 1175.422898][T14157] usb 9-1: USB disconnect, device number 3 [ 1176.561322][ T1911] syzkaller0: entered promiscuous mode [ 1176.563105][ T1911] syzkaller0: entered allmulticast mode [ 1176.733129][T12619] usb 10-1: USB disconnect, device number 3 [ 1176.869065][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.871703][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.586383][ T1925] syz.4.4910 (1925): drop_caches: 2 [ 1177.593627][ T1925] syz.4.4910 (1925): drop_caches: 2 [ 1178.600874][ T1934] syz.3.4912 (1934): drop_caches: 2 [ 1178.602719][ T1934] syz.3.4912 (1934): drop_caches: 2 [ 1179.453376][ T1944] syzkaller0: entered promiscuous mode [ 1179.455426][ T1944] syzkaller0: entered allmulticast mode [ 1179.903795][ T1948] syz.5.4916 (1948): drop_caches: 2 [ 1179.911063][ T1948] syz.5.4916 (1948): drop_caches: 2 [ 1180.128645][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1180.131170][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1180.134481][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1180.137942][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1180.143122][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.351423][ T1954] chnl_net:caif_netlink_parms(): no params data found [ 1180.399377][ T1954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.401618][ T1954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.403881][ T1954] bridge_slave_0: entered allmulticast mode [ 1180.506766][ T1954] bridge_slave_0: entered promiscuous mode [ 1180.509434][ T1954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.511652][ T1954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.513796][ T1954] bridge_slave_1: entered allmulticast mode [ 1180.516077][ T1954] bridge_slave_1: entered promiscuous mode [ 1180.546885][T24398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.552663][ T1954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.557501][ T1954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.604111][ T1958] syzkaller0: entered promiscuous mode [ 1180.626285][ T1958] syzkaller0: entered allmulticast mode [ 1180.636394][ T1954] team0: Port device team_slave_0 added [ 1180.639538][ T1954] team0: Port device team_slave_1 added [ 1180.653212][T24398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.696302][ T1954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.698883][ T1954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.708274][ T1954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.712434][ T1954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.714675][ T1954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.723751][ T1954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.740818][T24398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.755012][ T1954] hsr_slave_0: entered promiscuous mode [ 1180.757198][ T1954] hsr_slave_1: entered promiscuous mode [ 1180.800690][T24398] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.875673][T12619] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1181.018456][T24398] bond0 (unregistering): Released all slaves [ 1181.023823][T24398] bond1 (unregistering): Released all slaves [ 1181.029002][T24398] bond2 (unregistering): Released all slaves [ 1181.055722][T12619] usb 9-1: Using ep0 maxpacket: 16 [ 1181.063924][T12619] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.072958][T12619] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1181.084992][T12619] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1181.088800][T12619] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.092069][T12619] usb 9-1: Product: syz [ 1181.093713][T12619] usb 9-1: Manufacturer: syz [ 1181.095201][T12619] usb 9-1: SerialNumber: syz [ 1181.104537][T12619] usb 9-1: config 0 descriptor?? [ 1181.512638][T24398] hsr_slave_0: left promiscuous mode [ 1181.518059][T24398] veth1_macvtap: left promiscuous mode [ 1181.519877][T24398] veth0_macvtap: left allmulticast mode [ 1181.521652][T24398] veth0_macvtap: left promiscuous mode [ 1181.523408][T24398] veth1_vlan: left allmulticast mode [ 1181.525331][T24398] veth1_vlan: left promiscuous mode [ 1181.527787][T24398] veth0_vlan: left promiscuous mode [ 1181.549899][T24398] pim6reg (unregistering): left allmulticast mode [ 1181.565375][T24398] macvlan0 (unregistering): left allmulticast mode [ 1181.963158][T24398] IPVS: stop unused estimator thread 0... [ 1182.037159][ T1954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1182.042263][ T1954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1182.072662][ T1954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1182.080183][ T1954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1182.165992][ T1954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.177433][ T1954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.181712][T24398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.183973][T24398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.188488][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.190715][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.225724][ T5982] Bluetooth: hci3: command tx timeout [ 1182.298363][ T1954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.312704][ T1954] veth0_vlan: entered promiscuous mode [ 1182.316625][ T1954] veth1_vlan: entered promiscuous mode [ 1182.325962][ T1954] veth0_macvtap: entered promiscuous mode [ 1182.328988][ T1954] veth1_macvtap: entered promiscuous mode [ 1182.335106][ T1954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.340286][ T1954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.346724][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.349664][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.352446][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.355083][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.370476][T29175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.372916][T29175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.380068][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.382388][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.636040][ T838] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1182.785640][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 1182.788587][ T838] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1182.791082][ T838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1182.794095][ T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1182.800616][ T838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1182.805144][ T838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1182.809223][ T838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1182.811964][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.015295][ T2031] syzkaller0: entered promiscuous mode [ 1183.017236][ T2031] syzkaller0: entered allmulticast mode [ 1183.026405][ T838] usb 5-1: usb_control_msg returned -71 [ 1183.030955][ T838] usbtmc 5-1:16.0: can't read capabilities [ 1183.038172][ T838] usb 5-1: USB disconnect, device number 43 [ 1183.361604][T14157] usb 9-1: USB disconnect, device number 4 [ 1184.021011][ T2048] block device autoloading is deprecated and will be removed. [ 1184.026287][ T2048] syz.5.4935: attempt to access beyond end of device [ 1184.026287][ T2048] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1184.305709][ T5982] Bluetooth: hci3: command tx timeout [ 1184.604838][ T2066] program syz.0.4940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.855649][T12619] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1185.015713][T12619] usb 5-1: Using ep0 maxpacket: 16 [ 1185.027673][T12619] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.030698][T12619] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.032746][T12619] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1185.035446][T12619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.055876][T12619] usb 5-1: config 0 descriptor?? [ 1185.275057][ T2066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.278621][ T2066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.347715][T12619] usbhid 5-1:0.0: can't add hid device: -71 [ 1185.349821][T12619] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1185.353435][T12619] usb 5-1: USB disconnect, device number 44 [ 1186.345613][T14157] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1186.385639][ T5982] Bluetooth: hci3: command tx timeout [ 1186.505608][T14157] usb 5-1: Using ep0 maxpacket: 16 [ 1186.509544][T14157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.515782][T14157] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1186.520795][T14157] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1186.523866][T14157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.526780][T14157] usb 5-1: Product: syz [ 1186.529650][T14157] usb 5-1: Manufacturer: syz [ 1186.532611][T14157] usb 5-1: SerialNumber: syz [ 1186.535298][T14157] usb 5-1: config 0 descriptor?? [ 1186.605023][ T2112] syzkaller0: entered promiscuous mode [ 1186.606902][ T2112] syzkaller0: entered allmulticast mode [ 1188.465619][ T5982] Bluetooth: hci3: command tx timeout [ 1188.890060][ T3248] usb 5-1: USB disconnect, device number 45 [ 1189.489351][ T2140] syz.4.4961 (2140): drop_caches: 2 [ 1189.492425][ T2140] syz.4.4961 (2140): drop_caches: 2 [ 1190.840834][ T2174] syzkaller0: entered promiscuous mode [ 1190.843074][ T2174] syzkaller0: entered allmulticast mode [ 1191.797531][ T2190] bridge_slave_0: left allmulticast mode [ 1191.799897][ T2190] bridge_slave_0: left promiscuous mode [ 1191.802349][ T2190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.807645][ T2190] bridge_slave_1: left allmulticast mode [ 1191.809456][ T2190] bridge_slave_1: left promiscuous mode [ 1191.811454][ T2190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.816734][ T2190] bond0: (slave bond_slave_0): Releasing backup interface [ 1191.821567][ T2190] bond0: (slave bond_slave_1): Releasing backup interface [ 1191.860221][ T2190] team0: Port device team_slave_0 removed [ 1191.864857][ T2190] team0: Port device team_slave_1 removed [ 1191.867451][ T2190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.869894][ T2190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.873699][ T2190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.876482][ T2190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.120152][ T2223] syz.3.4981: attempt to access beyond end of device [ 1195.120152][ T2223] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1196.322898][ T2247] syzkaller0: entered promiscuous mode [ 1196.324756][ T2247] syzkaller0: entered allmulticast mode [ 1198.163296][ T2294] syz.5.5000 (2294): drop_caches: 2 [ 1198.173265][ T2294] syz.5.5000 (2294): drop_caches: 2 [ 1200.845012][ T2353] syz.5.5015 (2353): drop_caches: 2 [ 1200.849873][ T2353] syz.5.5015 (2353): drop_caches: 2 [ 1201.538987][ T2363] syz.3.5017: attempt to access beyond end of device [ 1201.538987][ T2363] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1201.762923][ T2371] syz.5.5020 (2371): drop_caches: 2 [ 1201.767357][ T2371] syz.5.5020 (2371): drop_caches: 2 [ 1202.009556][ T2376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1202.011647][ T2376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1202.013687][ T2376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1202.015900][ T2376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1202.017829][ T2376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1202.020772][ T2376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1202.265688][T24282] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1202.425591][T24282] usb 10-1: Using ep0 maxpacket: 16 [ 1202.428623][T24282] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.431830][T24282] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1202.436302][T24282] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1202.439201][T24282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.441671][T24282] usb 10-1: Product: syz [ 1202.443001][T24282] usb 10-1: Manufacturer: syz [ 1202.444464][T24282] usb 10-1: SerialNumber: syz [ 1202.448641][T24282] usb 10-1: config 0 descriptor?? [ 1202.779046][ T2393] syz.4.5025 (2393): drop_caches: 2 [ 1202.784883][ T2393] syz.4.5025 (2393): drop_caches: 2 [ 1203.985675][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 1204.065662][ T5982] Bluetooth: hci4: command 0x0c1a tx timeout [ 1204.065700][ T5978] Bluetooth: hci2: command 0x0419 tx timeout [ 1204.065784][T17738] Bluetooth: hci3: command 0x0405 tx timeout [ 1204.154450][ T2413] syz.3.5029 (2413): drop_caches: 2 [ 1204.159131][ T2413] syz.3.5029 (2413): drop_caches: 2 [ 1204.823512][T24282] usb 10-1: USB disconnect, device number 4 [ 1205.051646][ T2428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1205.053754][ T2428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1205.055989][ T2428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1205.058104][ T2428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1206.438660][ T2468] syz.4.5043 (2468): drop_caches: 2 [ 1206.441603][ T2468] syz.4.5043 (2468): drop_caches: 2 [ 1207.036223][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 1207.105622][ T5978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1207.105708][ T5982] Bluetooth: hci2: command 0x0419 tx timeout [ 1207.105765][T17738] Bluetooth: hci3: command 0x0405 tx timeout [ 1207.187882][ T2474] program syz.3.5046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1207.435433][ T2480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1207.438046][ T24] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1207.441745][ T2480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1207.443802][ T2480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1207.446112][ T2480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1207.595912][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1207.599117][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.602332][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1207.604580][ T24] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1207.608131][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.611251][ T24] usb 8-1: config 0 descriptor?? [ 1207.835291][ T2474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.838799][ T2474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.918126][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 1207.920174][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1207.923144][ T24] usb 8-1: USB disconnect, device number 47 [ 1209.425639][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 1209.462735][ T2520] syz.3.5055: attempt to access beyond end of device [ 1209.462735][ T2520] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1209.505958][ T5982] Bluetooth: hci3: command 0x0405 tx timeout [ 1209.505985][ T5978] Bluetooth: hci4: command 0x0c1a tx timeout [ 1209.508188][ T5982] Bluetooth: hci2: command 0x0419 tx timeout [ 1210.106026][ T2523] fuse: Unknown parameter 'user_i00000000000000000000' [ 1211.585610][ T5982] Bluetooth: hci3: command 0x0405 tx timeout [ 1212.631008][ T2594] syz.3.5072 (2594): drop_caches: 2 [ 1212.638637][ T2594] syz.3.5072 (2594): drop_caches: 2 [ 1213.205692][ T10] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1213.226647][ T2613] syz.0.5076: attempt to access beyond end of device [ 1213.226647][ T2613] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1213.389371][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1213.392959][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1213.395378][ T10] usb 10-1: can't read configurations, error -71 [ 1213.665726][ T5982] Bluetooth: hci3: command 0x0405 tx timeout [ 1217.416325][ T2696] program syz.3.5094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.655581][ T838] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1217.805612][ T838] usb 8-1: Using ep0 maxpacket: 16 [ 1217.808452][ T838] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.811594][ T838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1217.813704][ T838] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1217.816748][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.821146][ T838] usb 8-1: config 0 descriptor?? [ 1218.029611][ T2696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.033925][ T2696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.043622][ T838] usbhid 8-1:0.0: can't add hid device: -71 [ 1218.045770][ T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1218.048915][ T838] usb 8-1: USB disconnect, device number 48 [ 1218.510867][ T2707] syz.0.5095 (2707): drop_caches: 2 [ 1218.513341][ T2707] syz.0.5095 (2707): drop_caches: 2 [ 1218.995677][ T2708] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 1218.998336][ T2708] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 2708, name: syz.3.5096 [ 1219.002293][ T2708] preempt_count: 1, expected: 0 [ 1219.004551][ T2708] RCU nest depth: 0, expected: 0 [ 1219.006168][ T2708] INFO: lockdep is turned off. [ 1219.007683][ T2708] Preemption disabled at: [ 1219.007689][ T2708] [] schedule+0xe0/0x3a0 [ 1219.010754][ T2708] CPU: 1 UID: 0 PID: 2708 Comm: syz.3.5096 Not tainted syzkaller #0 PREEMPT(full) [ 1219.010768][ T2708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1219.010775][ T2708] Call Trace: [ 1219.010779][ T2708] [ 1219.010783][ T2708] dump_stack_lvl+0x16c/0x1f0 [ 1219.010797][ T2708] __might_resched+0x3c0/0x5e0 [ 1219.010808][ T2708] ? __pfx___might_resched+0x10/0x10 [ 1219.010818][ T2708] ? pcpu_block_update+0x562/0x660 [ 1219.010834][ T2708] ? pcpu_chunk_relocate+0x126/0x190 [ 1219.010845][ T2708] vfree+0x75/0xb50 [ 1219.010867][ T2708] ? rcu_is_watching+0x12/0xc0 [ 1219.010877][ T2708] ? kfree+0x24f/0x4d0 [ 1219.010886][ T2708] ? free_percpu+0x6db/0x13c0 [ 1219.010898][ T2708] futex_hash_free+0x98/0xc0 [ 1219.010910][ T2708] __mmdrop+0x33f/0x580 [ 1219.010922][ T2708] ? rcu_is_watching+0x12/0xc0 [ 1219.010932][ T2708] finish_task_switch.isra.0+0x7a4/0xc10 [ 1219.010942][ T2708] ? __switch_to+0x7a5/0x11a0 [ 1219.010955][ T2708] __schedule+0x1198/0x5de0 [ 1219.010966][ T2708] ? lock_release+0x201/0x2f0 [ 1219.010979][ T2708] ? ktime_get+0xb1/0x310 [ 1219.010993][ T2708] ? __pfx___schedule+0x10/0x10 [ 1219.011003][ T2708] ? hrtimer_reprogram+0x27b/0x450 [ 1219.011019][ T2708] ? schedule+0x2d7/0x3a0 [ 1219.011029][ T2708] ? rcu_is_watching+0x12/0xc0 [ 1219.011039][ T2708] ? lock_release+0x201/0x2f0 [ 1219.011052][ T2708] schedule+0xe7/0x3a0 [ 1219.011062][ T2708] do_nanosleep+0x21a/0x570 [ 1219.011072][ T2708] ? __pfx_do_nanosleep+0x10/0x10 [ 1219.011081][ T2708] ? __asan_memset+0x23/0x50 [ 1219.011091][ T2708] ? __hrtimer_setup+0x176/0x280 [ 1219.011106][ T2708] hrtimer_nanosleep+0x155/0x380 [ 1219.011116][ T2708] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1219.011127][ T2708] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1219.011142][ T2708] ? get_old_timespec32+0xda/0x130 [ 1219.011155][ T2708] ? __pfx_get_old_timespec32+0x10/0x10 [ 1219.011168][ T2708] common_nsleep+0xa1/0xd0 [ 1219.011180][ T2708] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 1219.011192][ T2708] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 1219.011204][ T2708] ? rcu_is_watching+0x12/0xc0 [ 1219.011214][ T2708] __do_fast_syscall_32+0x7c/0x3a0 [ 1219.011228][ T2708] do_fast_syscall_32+0x32/0x80 [ 1219.011241][ T2708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.011254][ T2708] RIP: 0023:0xf70be579 [ 1219.011263][ T2708] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1219.011289][ T2708] RSP: 002b:00000000ffe49990 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 1219.011305][ T2708] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 1219.011311][ T2708] RDX: 00000000ffe499c4 RSI: 00000000ffe499bc RDI: 00000000ffe499c4 [ 1219.011317][ T2708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.011323][ T2708] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1219.011329][ T2708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.011338][ T2708] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1219.635481][T24398] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.729425][T24398] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.879657][T24398] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.978565][T24398] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.112110][T24398] bond0 (unregistering): Released all slaves [ 1220.352398][T24398] hsr_slave_0: left promiscuous mode [ 1220.354638][T24398] hsr_slave_1: left promiscuous mode [ 1220.358967][T24398] veth1_macvtap: left promiscuous mode [ 1220.360765][T24398] veth0_macvtap: left promiscuous mode [ 1220.362531][T24398] veth1_vlan: left promiscuous mode [ 1220.364359][T24398] veth0_vlan: left promiscuous mode [ 1220.929353][T24398] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.989276][T24398] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.058359][T24398] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.168650][T24398] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.241060][T24398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.278639][T24398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.351444][T24398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.419645][T24398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.496654][T24398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.559804][T24398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.618969][T24398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.687150][T24398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.907860][T24398] bond0 (unregistering): Released all slaves [ 1222.057787][T24398] bond0 (unregistering): Released all slaves [ 1222.149724][T24398] bond0 (unregistering): Released all slaves [ 1222.709725][T24398] hsr_slave_0: left promiscuous mode [ 1222.711917][T24398] hsr_slave_1: left promiscuous mode [ 1222.715290][T24398] hsr_slave_0: left promiscuous mode [ 1222.717419][T24398] hsr_slave_1: left promiscuous mode [ 1222.720729][T24398] hsr_slave_0: left promiscuous mode [ 1222.722645][T24398] hsr_slave_1: left promiscuous mode [ 1222.728763][T24398] veth1_macvtap: left promiscuous mode [ 1222.730841][T24398] veth0_macvtap: left promiscuous mode [ 1222.732726][T24398] veth1_vlan: left promiscuous mode [ 1222.734405][T24398] veth0_vlan: left promiscuous mode [ 1222.737907][T24398] veth1_macvtap: left promiscuous mode [ 1222.740200][T24398] veth0_macvtap: left promiscuous mode [ 1222.742400][T24398] veth1_vlan: left promiscuous mode [ 1222.744154][T24398] veth0_vlan: left promiscuous mode [ 1222.747665][T24398] veth1_macvtap: left promiscuous mode [ 1222.749971][T24398] veth0_macvtap: left promiscuous mode [ 1222.751854][T24398] veth1_vlan: left promiscuous mode [ 1222.753582][T24398] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 00:00:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000002c3179c RBX=0000000000000000 RCX=ffffffff8b908bf9 RDX=ffffed1005646656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=ffff88802b23b298 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800f9018 CR3=0000000063359000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90002f9f3f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=00000000581fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000001a7d1bc RBX=0000000000000002 RCX=ffffffff8b908bf9 RDX=ffffed1005686656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003a5b910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000001 R12=0000000000000002 R13=ffff88801d2dc880 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7133b10 CR3=000000006c92a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88804d365500 RCX=ffffffff8a3660ed RDX=ffff8880122a2440 RSI=ffffffff8a366797 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90002fbf828 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000080000002 R14=0000000000000000 R15=00000000ffffffa1 RIP=ffffffff81bb0e21 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008009b018 CR3=0000000063359000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000