last executing test programs: 7.964525209s ago: executing program 0 (id=4494): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0xaa, 0x4, 0x1, 0xd, {0x8e, "b9c14eb34a453e91054d1b090826aed497169b450263c5e39ac1fd26c58951c06427b8b91ed1c09adde8860e9a6c6173169a93917fb7d233fa998efb2df358a3db4b4248449f0dd26daa0fc479d46302ab5fe6bdac5a3c83e202dbd6f051544ebd64e0bbd3bbb784e4e9925c46bfd93a8c8ec7db2ae0dcf97dc4d81ea61170492762c92df48396029557f150ad5a"}}}, 0x97) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x600000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x1000000, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000b900009c000100000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 6.548756893s ago: executing program 1 (id=4504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x4, 0x3}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x40280) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 6.414469384s ago: executing program 0 (id=4506): sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0xc0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.582741371s ago: executing program 1 (id=4507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.333264201s ago: executing program 3 (id=4508): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYBLOB="170900"], 0x6c}, 0x1, 0x0, 0x0, 0x21}, 0x0) 4.942509462s ago: executing program 3 (id=4512): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 4.859473039s ago: executing program 4 (id=4513): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x9, 0x0, 0x0, 0x0, 0xfd, 0x5}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x6}, 0x8) 4.776042296s ago: executing program 4 (id=4514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 4.757249758s ago: executing program 3 (id=4515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 4.687408333s ago: executing program 2 (id=4516): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0xaa, 0x4, 0x1, 0xd, {0x8e, "b9c14eb34a453e91054d1b090826aed497169b450263c5e39ac1fd26c58951c06427b8b91ed1c09adde8860e9a6c6173169a93917fb7d233fa998efb2df358a3db4b4248449f0dd26daa0fc479d46302ab5fe6bdac5a3c83e202dbd6f051544ebd64e0bbd3bbb784e4e9925c46bfd93a8c8ec7db2ae0dcf97dc4d81ea61170492762c92df48396029557f150ad5a"}}}, 0x97) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x600000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x1000000, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000b900009c000100000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 4.615245929s ago: executing program 1 (id=4517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x3}}]}}]}, 0x48}}, 0x0) 4.534066646s ago: executing program 3 (id=4518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x4, 0x3}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x40280) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r7, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 3.620979388s ago: executing program 4 (id=4519): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900f33bdcbf1a8f803790af851588482ae4ef7a61d5ef84ece1921ce1099b56b9c6ff1e2a3a6b0453f284e85be32666e8786a2a87fb9dc5db109e323d09bf240fabddfee5887ff64f710fee", 0x63}, {&(0x7f00000007c0)="a46c19f56c4f8a21e8068c6321387f24cd64e0033d354a3ad77b959b6c9ec188b030e82549fd347d6f75b4f6367b391d3b4f4e793639cec69bd182a1bce37cb7e65f2a6054c10433a515bad93b2c8c77304a068535e722206ba8e6aa6fafb5f4dad1379af983edb195bd25b112a6a2dd73a551ee40d3c38b19d9f5be464435eaef871c46ab6c85f58e91ec5d2e330b61e429ae", 0x93}], 0x3, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x78}, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.884256488s ago: executing program 3 (id=4520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 2.817005453s ago: executing program 2 (id=4521): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0x1f}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e20, 0x3, 0xa}, {0x0, 0x800000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}]}, 0x70}}, 0x0) 2.767030017s ago: executing program 0 (id=4522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2f6b83, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x1000}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000440)='fsi_master_gpio_clock_zeros\x00', r2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffffffffffffac) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.899528537s ago: executing program 4 (id=4523): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x7fff, 0x3, 0x2, 0x5, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x200, @local, 0x3}}, 0xd9a, 0x4, 0x9, 0x3ff, 0x1e8}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) 1.817431544s ago: executing program 2 (id=4524): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) 1.803113225s ago: executing program 3 (id=4525): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) 1.772802008s ago: executing program 1 (id=4526): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900f33bdcbf1a8f803790af851588482ae4ef7a61d5ef84ece1921ce1099b56b9c6ff1e2a3a6b0453f284e85be32666e8786a2a87fb9dc5db109e323d09bf240fabddfee5887ff64f710fee", 0x63}, {&(0x7f00000007c0)="a46c19f56c4f8a21e8068c6321387f24cd64e0033d354a3ad77b959b6c9ec188b030e82549fd347d6f75b4f6367b391d3b4f4e793639cec69bd182a1bce37cb7e65f2a6054c10433a515bad93b2c8c77304a068535e722206ba8e6aa6fafb5f4dad1379af983edb195bd25b112a6a2dd73a551ee40d3c38b19d9f5be464435eaef871c46ab6c85f58e91ec5d2e330b61e429ae434a72fdb365bfd96007528fb67386722fb09ecc76", 0xa8}], 0x3, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x90}, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.685133265s ago: executing program 0 (id=4527): sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1.61397634s ago: executing program 4 (id=4528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.586405093s ago: executing program 1 (id=4529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 1.531362587s ago: executing program 2 (id=4530): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7be"], 0x18}}], 0x1, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900f33bdcbf1a8f803790af851588482ae4ef7a61d5ef84ece1921ce1099b56b9c6ff1e2a3a6b0453f284e85be32666e8786a2a", 0x4b}], 0x2, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x90}, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.451807433s ago: executing program 0 (id=4531): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0xaa, 0x4, 0x1, 0xd, {0x8e, "b9c14eb34a453e91054d1b090826aed497169b450263c5e39ac1fd26c58951c06427b8b91ed1c09adde8860e9a6c6173169a93917fb7d233fa998efb2df358a3db4b4248449f0dd26daa0fc479d46302ab5fe6bdac5a3c83e202dbd6f051544ebd64e0bbd3bbb784e4e9925c46bfd93a8c8ec7db2ae0dcf97dc4d81ea61170492762c92df48396029557f150ad5a"}}}, 0x97) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x600000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x1000000, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000b900009c000100000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 1.323727134s ago: executing program 2 (id=4532): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2a0, 0x268, 0x300, 0x0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0xd9, 0x1, 0x5, 0x5b, 0x6}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x800002d2, 0xfffffffd, 0x1, 0x4, 0xd59f80, 0x7, 0x9, 0x9, 0x8, 0x8, 0x71e, 0x13, 0x7, 0x7f, 0x3f, 0x37, {0x0, 0x1ff}, 0x3, 0xed}}) 933.818915ms ago: executing program 2 (id=4533): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900f33bdcbf1a8f803790af851588482ae4ef7a61d5ef84ece1921ce1099b56b9c6ff1e2a3a6b0453f284e85be32666e8786a2a87fb9dc5db109e323d09bf240fabddfee5887ff64f710fee", 0x63}, {&(0x7f00000007c0)="a46c19f56c4f8a21e8068c6321387f24cd64e0033d354a3ad77b959b6c9ec188b030e82549fd347d6f75b4f6367b391d3b4f4e793639cec69bd182a1bce37cb7e65f2a6054c10433a515bad93b2c8c77304a068535e722206ba8e6aa6fafb5f4dad1379af983edb195bd25b112a6a2dd73a551ee40d3c38b19d9f5be464435eaef871c46ab6c85f58e91ec5d2e330b61e429ae", 0x93}], 0x3, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x78}, 0x1) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 196.031674ms ago: executing program 1 (id=4534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0), 0x0, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}, 0xe) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 82.781554ms ago: executing program 4 (id=4535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 0s ago: executing program 0 (id=4536): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x4122}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x18}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ioctl c0306201 200000000540 returned -22 [ 1034.761606][T15540] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3241'. [ 1035.748734][T15563] netlink: 'syz.3.3187': attribute type 1 has an invalid length. [ 1035.758130][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 1035.905023][T15570] binder_alloc: 15569: binder_alloc_buf, no vma [ 1037.699843][ T6754] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1037.909900][ T6754] usb 2-1: Using ep0 maxpacket: 8 [ 1037.917099][ T6754] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.941256][T15597] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1037.973761][ T6754] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.984964][ T6754] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.085434][T15601] binder: 15596:15601 unknown command 1074553619 [ 1038.092860][T15601] binder: 15596:15601 ioctl c0306201 200000000540 returned -22 [ 1038.101667][ T6754] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.131920][ T6754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.738596][ T6754] usbtmc 2-1:16.0: bulk endpoints not found [ 1038.867096][T15597] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1039.039991][T13573] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1039.256676][T13573] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1039.267317][T13573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.275616][T13573] usb 4-1: Product: syz [ 1039.280750][T13573] usb 4-1: Manufacturer: syz [ 1039.289841][T13573] usb 4-1: SerialNumber: syz [ 1039.350831][T13573] usb 4-1: config 0 descriptor?? [ 1039.473542][T15619] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 1039.547818][T15624] binder_alloc: 15621: binder_alloc_buf, no vma [ 1039.585197][T13573] usb 4-1: USB disconnect, device number 56 [ 1039.595605][T15619] device bond1 entered promiscuous mode [ 1039.618046][T15619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1039.625894][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1039.704615][T13028] usb 2-1: USB disconnect, device number 24 [ 1040.295740][T13029] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1041.192655][T13029] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1041.213980][T13029] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1041.254054][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.269610][T13029] usb 5-1: Product: syz [ 1041.283813][T13029] usb 5-1: Manufacturer: syz [ 1041.288448][T13029] usb 5-1: SerialNumber: syz [ 1041.305723][T13029] usb 5-1: config 0 descriptor?? [ 1041.881090][T15657] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1041.932289][T15662] binder: 15656:15662 unknown command 1074553619 [ 1041.951562][T15662] binder: 15656:15662 ioctl c0306201 200000000540 returned -22 [ 1041.991118][T15657] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1042.293715][T15657] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1043.279829][ T6754] usb 5-1: USB disconnect, device number 28 [ 1043.538746][T15686] vivid-000: disconnect [ 1043.599869][T13029] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1044.701349][T13029] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1044.749898][T13029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.819503][T13029] usb 4-1: Product: syz [ 1044.826870][T15693] vivid-000: reconnect [ 1044.846361][T13029] usb 4-1: Manufacturer: syz [ 1044.859761][T13029] usb 4-1: SerialNumber: syz [ 1044.955822][T13029] usb 4-1: config 0 descriptor?? [ 1045.184220][T13029] usb 4-1: USB disconnect, device number 57 [ 1045.719818][T12880] Bluetooth: hci2: command 0x0406 tx timeout [ 1047.000625][T12880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.017001][T12880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.218117][T15730] can0: slcan on ttyS3. [ 1047.543015][T15731] fuse: Bad value for 'fd' [ 1047.598676][T12880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.783244][T12880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1048.080119][T12880] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1048.087653][T12880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1048.300715][T15723] can0 (unregistered): slcan off ttyS3. [ 1050.057825][ T22] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1050.280276][T12880] Bluetooth: hci1: command 0x0409 tx timeout [ 1050.810213][T15724] chnl_net:caif_netlink_parms(): no params data found [ 1050.853505][ T22] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1050.875911][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.903553][ T22] usb 4-1: Product: syz [ 1050.915303][ T22] usb 4-1: Manufacturer: syz [ 1050.920880][ T22] usb 4-1: SerialNumber: syz [ 1050.927380][ T22] usb 4-1: config 0 descriptor?? [ 1052.157426][T15789] fuse: Bad value for 'fd' [ 1052.369145][T12880] Bluetooth: hci1: command 0x041b tx timeout [ 1052.378650][T15788] slcan: can't register candev [ 1052.383707][T15788] Falling back ldisc for ttyS3. [ 1052.570273][T13028] usb 4-1: USB disconnect, device number 58 [ 1052.760129][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.877793][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.960545][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.971436][T15724] device bridge_slave_0 entered promiscuous mode [ 1054.021834][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.034995][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.089473][T15724] device bridge_slave_1 entered promiscuous mode [ 1054.133903][T15810] netlink: 'syz.0.3308': attribute type 1 has an invalid length. [ 1054.279561][T15810] device bond1 entered promiscuous mode [ 1054.290148][T15810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1054.427160][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.440709][T12880] Bluetooth: hci1: command 0x040f tx timeout [ 1054.543087][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.624568][T15724] team0: Port device team_slave_0 added [ 1055.276998][T15724] team0: Port device team_slave_1 added [ 1055.495235][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.507853][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.977814][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.996110][T15840] can0: slcan on ttyS3. [ 1056.160985][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.168062][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.537398][ T4384] IPVS: stopping backup sync thread 6709 ... [ 1056.542552][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1056.579070][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.640478][T15833] can0 (unregistered): slcan off ttyS3. [ 1057.092707][T15724] device hsr_slave_0 entered promiscuous mode [ 1057.110435][T15724] device hsr_slave_1 entered promiscuous mode [ 1057.119414][T15724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.136210][T15724] Cannot create hsr debugfs directory [ 1057.159939][T13028] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1057.373970][T13028] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1057.386778][ T4384] device hsr_slave_0 left promiscuous mode [ 1057.402311][T13028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.410754][ T4384] device hsr_slave_1 left promiscuous mode [ 1057.430752][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.445755][T13028] usb 2-1: Product: syz [ 1057.461763][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.466638][T13028] usb 2-1: Manufacturer: syz [ 1057.498301][ T4384] device bridge_slave_1 left promiscuous mode [ 1057.503326][T13028] usb 2-1: SerialNumber: syz [ 1057.526319][T13028] usb 2-1: config 0 descriptor?? [ 1057.535529][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.600375][ T4384] device bridge_slave_0 left promiscuous mode [ 1057.660236][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.843816][T13028] usb 2-1: USB disconnect, device number 25 [ 1059.040203][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.046615][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.933697][ T4384] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1060.027004][ T4384] device bond8 left promiscuous mode [ 1060.133418][ T4384] bond8 (unregistering): Released all slaves [ 1061.063809][ T4384] bond7 (unregistering): Released all slaves [ 1061.357327][T15889] slcan: can't register candev [ 1061.362519][T15889] Falling back ldisc for ttyS3. [ 1061.502626][ T4384] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1061.600841][ T4384] device bond6 left promiscuous mode [ 1061.662992][ T4384] bond6 (unregistering): Released all slaves [ 1062.376654][ T4384] bond5 (unregistering): Released all slaves [ 1062.568668][ T4384] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1062.585768][ T4384] device bond4 left promiscuous mode [ 1062.594052][ T4384] bond4 (unregistering): Released all slaves [ 1062.866657][ T4384] bond3 (unregistering): Released all slaves [ 1063.065290][ T4384] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1063.098547][ T4384] device bond2 left promiscuous mode [ 1063.105896][ T4384] bond2 (unregistering): Released all slaves [ 1063.258602][ T4384] bond1 (unregistering): Released all slaves [ 1063.370041][T13028] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1063.553533][T13028] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1063.564335][T13028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.572873][T13028] usb 4-1: Product: syz [ 1063.577082][T13028] usb 4-1: Manufacturer: syz [ 1063.582072][T13028] usb 4-1: SerialNumber: syz [ 1063.596441][T13028] usb 4-1: config 0 descriptor?? [ 1063.717763][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 1063.770135][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 1063.806711][T13028] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1063.826003][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.881573][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.014048][T13028] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1064.494990][ T4384] bond0 (unregistering): Released all slaves [ 1065.136343][T15910] loop4: detected capacity change from 0 to 40427 [ 1065.317208][ T22] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1065.385754][T15910] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1065.434328][T15910] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1065.606669][ T22] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1065.620342][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.695135][ T22] usb 2-1: Product: syz [ 1065.699572][ T22] usb 2-1: Manufacturer: syz [ 1065.704449][ T22] usb 2-1: SerialNumber: syz [ 1066.259445][ T22] usb 2-1: config 0 descriptor?? [ 1066.383546][T12879] syz-executor: attempt to access beyond end of device [ 1066.383546][T12879] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1066.485846][ T22] usb 2-1: USB disconnect, device number 26 [ 1066.528012][T15932] usb 4-1: USB disconnect, device number 59 [ 1067.237778][T15941] can0: slcan on ttyS3. [ 1067.564133][T15950] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3334'. [ 1067.624921][T15953] binder: 15949:15953 unknown command 1074553619 [ 1067.632791][T15953] binder: 15949:15953 ioctl c0306201 200000000540 returned -22 [ 1071.210600][T15939] can0 (unregistered): slcan off ttyS3. [ 1071.254682][T15724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1071.308482][T15724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1071.356364][T15724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1071.535518][T15724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1071.549861][T13030] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1071.741684][T13030] usb 5-1: Using ep0 maxpacket: 32 [ 1071.749642][T13030] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1071.788515][T13030] usb 5-1: config 0 has no interface number 0 [ 1072.053706][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.079023][T15990] loop1: detected capacity change from 0 to 40427 [ 1072.086909][T13030] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1072.098993][T13030] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1072.108399][T13030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.117355][T13030] usb 5-1: Product: syz [ 1072.121934][T13030] usb 5-1: Manufacturer: syz [ 1072.126594][T13030] usb 5-1: SerialNumber: syz [ 1072.149024][T13030] usb 5-1: config 0 descriptor?? [ 1072.155491][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1072.159923][T15990] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1072.172956][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1072.219366][T15990] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1072.229480][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.335939][T15724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1072.398592][T15724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.427584][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1072.461027][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.471861][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.479001][T15790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.615372][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1072.759911][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1072.795845][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.803019][T15790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.863066][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1072.915308][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1072.955779][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1072.982048][T13374] syz-executor: attempt to access beyond end of device [ 1072.982048][T13374] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1073.012679][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1073.090584][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1073.143561][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1073.177038][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1073.215135][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1073.270050][T15930] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1073.290337][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1073.298896][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1073.307039][T13030] usb 5-1: USB disconnect, device number 29 [ 1073.348076][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1073.400681][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1073.415432][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1073.459908][T15930] usb 4-1: Using ep0 maxpacket: 8 [ 1073.467726][T15930] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1073.501000][T15930] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.540238][T15930] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.573597][T15930] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1073.604329][T15930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.649083][T15930] usbtmc 4-1:16.0: bulk endpoints not found [ 1073.729981][T13573] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1073.961171][T13573] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1073.990080][T13573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.024477][T13573] usb 2-1: Product: syz [ 1074.028936][T13573] usb 2-1: Manufacturer: syz [ 1074.048889][T13573] usb 2-1: SerialNumber: syz [ 1074.084476][T13573] usb 2-1: config 0 descriptor?? [ 1074.304558][T13573] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.366427][ T4331] usb 4-1: USB disconnect, device number 60 [ 1074.518266][T13573] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 1075.695320][T13432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1075.731452][T13432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1075.989435][T15724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.596721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1076.638259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1076.896086][T16051] fuse: Bad value for 'fd' [ 1076.997182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1077.158945][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1077.237305][T13030] usb 2-1: USB disconnect, device number 27 [ 1077.259314][T15724] device veth0_vlan entered promiscuous mode [ 1077.273125][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1077.303882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1077.360181][T15724] device veth1_vlan entered promiscuous mode [ 1077.448403][T15724] device veth0_macvtap entered promiscuous mode [ 1077.458791][T15724] device veth1_macvtap entered promiscuous mode [ 1077.476241][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.487057][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.500769][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.518515][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.622206][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.341280][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.351437][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1078.368914][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.399632][T15724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.410200][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1078.429194][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1078.449088][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1078.459267][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1078.474787][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1078.486482][T14568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1078.633637][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.652168][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.668706][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.822714][T16023] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1078.832070][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.842229][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.853693][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.864402][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.874977][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.911357][T15724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.937065][T14774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1078.951898][T14774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1078.976173][T15724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.994681][T15724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.015825][T15724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.025845][T16023] usb 5-1: Using ep0 maxpacket: 8 [ 1079.042660][T16023] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1079.074079][T16023] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.087231][T15724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.121604][T16023] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.135504][T16023] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1079.145158][T16023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.183351][T16023] usbtmc 5-1:16.0: bulk endpoints not found [ 1079.739962][ T4331] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1080.029852][ T4331] usb 4-1: Using ep0 maxpacket: 32 [ 1080.036719][ T4331] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1080.070752][ T4331] usb 4-1: config 0 has no interface number 0 [ 1080.096842][ T4331] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1080.128971][ T4331] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1080.162056][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.197754][ T4331] usb 4-1: Product: syz [ 1080.215716][ T4331] usb 4-1: Manufacturer: syz [ 1080.229826][ T4331] usb 4-1: SerialNumber: syz [ 1080.240767][T14568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.277075][ T4309] usb 5-1: USB disconnect, device number 30 [ 1080.296728][T14568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.305301][ T4331] usb 4-1: config 0 descriptor?? [ 1080.315079][T13432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.328589][T13432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.365082][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1080.393916][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.637797][T16086] kvm [16085]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1081.502764][ T4331] usb 4-1: USB disconnect, device number 61 [ 1082.046833][T13573] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1082.803494][T13573] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1083.050214][T13573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.068750][T13573] usb 5-1: Product: syz [ 1083.081413][T13573] usb 5-1: Manufacturer: syz [ 1083.088231][T13573] usb 5-1: SerialNumber: syz [ 1083.125169][T13573] usb 5-1: config 0 descriptor?? [ 1083.346430][T13573] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.434292][T16125] fuse: Bad value for 'fd' [ 1084.637543][T13573] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1085.149940][T13573] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1085.689925][T13573] usb 3-1: Using ep0 maxpacket: 8 [ 1085.696763][T13573] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1085.715211][T13573] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.819817][T13573] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.833697][T13573] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1085.843063][T13573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.854308][T13573] usbtmc 3-1:16.0: bulk endpoints not found [ 1085.899946][T13573] usb 5-1: USB disconnect, device number 31 [ 1086.178123][T16152] binder: 16151:16152 ioctl c0306201 200000000240 returned -11 [ 1086.378912][T13029] usb 3-1: USB disconnect, device number 66 [ 1086.509502][T16159] binder: 16158:16159 ioctl c0306201 0 returned -14 [ 1086.885441][ T4331] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1087.050471][T13573] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1087.170910][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 1087.218934][ T4331] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1087.232156][ T4331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.430680][ T4331] usb 1-1: config 0 has no interface number 0 [ 1087.445847][ T4331] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1087.457242][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.465845][ T4331] usb 1-1: Product: syz [ 1087.476871][ T4331] usb 1-1: Manufacturer: syz [ 1087.481739][ T4331] usb 1-1: SerialNumber: syz [ 1087.499466][ T4331] usb 1-1: config 0 descriptor?? [ 1087.528402][ T4331] asix: probe of 1-1:0.251 failed with error -22 [ 1087.610036][T13573] usb 5-1: Using ep0 maxpacket: 32 [ 1087.627131][T13573] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1087.709578][T13573] usb 5-1: config 0 has no interface number 0 [ 1087.712457][T13029] usb 1-1: USB disconnect, device number 46 [ 1087.729185][T13573] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1087.823337][T13573] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1087.826902][T16173] fuse: Bad value for 'fd' [ 1087.851565][T13573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.880078][T13573] usb 5-1: Product: syz [ 1087.886254][T13573] usb 5-1: Manufacturer: syz [ 1087.891047][T13573] usb 5-1: SerialNumber: syz [ 1087.939622][T13573] usb 5-1: config 0 descriptor?? [ 1088.530708][T13573] usb 5-1: USB disconnect, device number 32 [ 1088.608359][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.929909][T16023] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1088.957238][T16191] binder: 16190:16191 ioctl c0306201 200000000240 returned -11 [ 1089.020972][T16195] binder: 16194:16195 ioctl c0306201 0 returned -14 [ 1089.153477][T16023] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1089.188036][T16023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.255203][T16023] usb 1-1: Product: syz [ 1089.277711][T16023] usb 1-1: Manufacturer: syz [ 1089.313326][T16023] usb 1-1: SerialNumber: syz [ 1089.513174][T16023] usb 1-1: config 0 descriptor?? [ 1090.270937][T16023] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1090.576626][T16212] fuse: Bad value for 'fd' [ 1090.877171][T16023] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1091.081916][T13029] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1091.236171][T16217] can0: slcan on ttyS3. [ 1091.699943][T13029] usb 4-1: Using ep0 maxpacket: 8 [ 1091.707109][T13029] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1091.740469][T16213] can0 (unregistered): slcan off ttyS3. [ 1091.816135][T13029] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.833754][T13029] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.854005][T13029] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1091.864022][T13029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.888363][T13029] usbtmc 4-1:16.0: bulk endpoints not found [ 1092.014625][T13029] usb 1-1: USB disconnect, device number 47 [ 1092.606606][T13029] usb 4-1: USB disconnect, device number 62 [ 1092.627699][T16238] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.662892][T16238] binder: 16236:16238 ioctl 4018620d 2000000002c0 returned -16 [ 1092.688443][T16238] binder: 16236:16238 ioctl c0306201 200000000240 returned -11 [ 1094.140016][T16273] fuse: Bad value for 'fd' [ 1094.357381][T16277] can0: slcan on ttyS3. [ 1094.855664][ T4282] Bluetooth: hci1: command 0x0405 tx timeout [ 1095.029855][T16270] can0 (unregistered): slcan off ttyS3. [ 1095.672143][T16296] binder: 16295:16296 ioctl c0306201 200000000240 returned -11 [ 1096.639880][T13030] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1097.933224][T13030] usb 1-1: Using ep0 maxpacket: 8 [ 1097.933805][T16317] block device autoloading is deprecated and will be removed. [ 1097.944594][T13030] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1097.999815][T13030] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.072576][T13030] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.229813][T13030] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1098.251974][T13030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.274686][T13030] usbtmc 1-1:16.0: bulk endpoints not found [ 1098.747248][T16329] can0: slcan on ttyS3. [ 1099.174177][T13030] usb 1-1: USB disconnect, device number 48 [ 1099.229952][T16324] can0 (unregistered): slcan off ttyS3. [ 1099.394138][T16339] fuse: Bad value for 'fd' [ 1100.034164][T16352] vivid-002: disconnect [ 1100.041395][T16352] Bluetooth: MGMT ver 1.22 [ 1100.444998][T16357] binder: 16356:16357 ioctl c0306201 200000000240 returned -11 [ 1100.751681][T16346] vivid-002: reconnect [ 1102.611045][T16386] can0: slcan on ttyS3. [ 1103.099915][T16380] can0 (unregistered): slcan off ttyS3. [ 1104.022886][T16405] fuse: Bad value for 'fd' [ 1104.170560][T13029] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1104.509806][T13029] usb 2-1: Using ep0 maxpacket: 8 [ 1104.516486][T13029] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1106.254684][T13029] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.440484][T16414] fuse: Bad value for 'fd' [ 1106.750729][T13029] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.876414][T13029] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1106.933151][T13029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.970017][T13029] usb 2-1: can't set config #16, error -71 [ 1106.990337][T13029] usb 2-1: USB disconnect, device number 28 [ 1107.044487][T16424] binder: 16422:16424 ioctl c0306201 200000000240 returned -11 [ 1110.090802][T13029] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1110.539829][T13029] usb 5-1: Using ep0 maxpacket: 8 [ 1110.547203][T13029] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1110.573829][T13029] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.704172][T13029] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1110.756286][T13029] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1110.797354][T13029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.846763][T13029] usbtmc 5-1:16.0: bulk endpoints not found [ 1111.406833][T16493] vivid-000: disconnect [ 1112.220468][T16490] vivid-000: reconnect [ 1112.418275][T16505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1112.679846][T16023] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1112.884749][T16023] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1112.895199][T16023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.907010][T16023] usb 4-1: Product: syz [ 1112.916057][T16023] usb 4-1: Manufacturer: syz [ 1112.923295][T16023] usb 4-1: SerialNumber: syz [ 1112.952356][T16023] usb 4-1: config 0 descriptor?? [ 1113.171716][T16023] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1113.303514][ T4309] usb 5-1: USB disconnect, device number 33 [ 1113.830323][T16023] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1115.086888][T16539] netlink: 'syz.2.3483': attribute type 1 has an invalid length. [ 1115.158275][T16539] device bond1 entered promiscuous mode [ 1115.187664][T16539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.363486][T16550] vivid-003: disconnect [ 1115.872786][ T4317] usb 4-1: USB disconnect, device number 63 [ 1116.044447][T16543] vivid-003: reconnect [ 1116.144677][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1116.582417][T13030] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1116.830071][T13030] usb 5-1: Using ep0 maxpacket: 8 [ 1116.870325][T13030] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1116.888637][T13030] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.048449][T13030] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.061803][T13030] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1117.071884][T13030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.101589][T13030] usbtmc 5-1:16.0: bulk endpoints not found [ 1119.542347][T16591] netlink: 'syz.0.3499': attribute type 1 has an invalid length. [ 1119.549889][T13030] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1119.618215][T16591] device bond3 entered promiscuous mode [ 1119.747962][T16598] vivid-002: disconnect [ 1120.443104][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.451107][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.463056][T16592] vivid-002: reconnect [ 1120.478384][T13030] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1120.488065][T13030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.496403][T13030] usb 2-1: Product: syz [ 1120.497011][T16591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1120.500829][T13030] usb 2-1: Manufacturer: syz [ 1120.512465][T13030] usb 2-1: SerialNumber: syz [ 1120.526310][T13030] usb 2-1: config 0 descriptor?? [ 1120.737995][T13030] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1120.784406][T16605] binder: 16603:16605 ioctl 4018620d 0 returned -22 [ 1120.816889][T16605] binder: 16603:16605 ioctl c0306201 200000000240 returned -11 [ 1122.023871][ T4317] usb 5-1: USB disconnect, device number 34 [ 1122.241646][T13030] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 1123.294592][ T6754] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1123.353753][ T4318] usb 2-1: USB disconnect, device number 29 [ 1123.510113][ T6754] usb 1-1: Using ep0 maxpacket: 32 [ 1123.518335][ T6754] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1123.526523][ T6754] usb 1-1: config 0 has no interface number 0 [ 1123.546818][ T6754] usb 1-1: config 0 interface 2 has no altsetting 0 [ 1123.675697][T16644] vivid-002: disconnect [ 1124.039789][ T4318] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1124.408395][T16638] vivid-002: reconnect [ 1124.461544][ T6754] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1124.532240][ T6754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.536898][T16650] binder: 16649:16650 ioctl 4018620d 0 returned -22 [ 1124.549228][T16650] binder: 16649:16650 ioctl c0306201 200000000240 returned -11 [ 1124.597040][ T6754] usb 1-1: Product: syz [ 1124.604269][ T6754] usb 1-1: Manufacturer: syz [ 1124.604402][ T4318] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1124.614553][ T6754] usb 1-1: SerialNumber: syz [ 1124.638718][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.646945][ T4318] usb 2-1: Product: syz [ 1124.651298][ T4318] usb 2-1: Manufacturer: syz [ 1124.655909][ T4318] usb 2-1: SerialNumber: syz [ 1124.757040][ T4318] usb 2-1: config 0 descriptor?? [ 1124.777176][ T6754] usb 1-1: config 0 descriptor?? [ 1125.004464][T14794] usb 2-1: USB disconnect, device number 30 [ 1125.079909][ T4318] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1125.221390][ T6754] usb 1-1: USB disconnect, device number 49 [ 1125.270031][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 1125.313175][ T4318] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1125.405314][ T4318] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.737846][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.778509][ T4318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1125.790790][ T5163] udevd[5163]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.839167][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.900811][ T4318] usbtmc 4-1:16.0: bulk endpoints not found [ 1125.993541][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1126.744870][ T4317] usb 4-1: USB disconnect, device number 64 [ 1126.809820][ T4318] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1127.013162][T16684] vivid-003: disconnect [ 1127.090193][ T4318] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1127.099421][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.107589][ T4318] usb 3-1: Product: syz [ 1127.112032][ T4318] usb 3-1: Manufacturer: syz [ 1127.116716][ T4318] usb 3-1: SerialNumber: syz [ 1127.125125][ T4318] usb 3-1: config 0 descriptor?? [ 1127.781587][T16681] vivid-003: reconnect [ 1127.787595][ T4318] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1128.833409][ T4318] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1129.263871][T16703] binder: 16701:16703 ioctl 4018620d 0 returned -22 [ 1129.271489][T16703] binder: 16701:16703 ioctl c0306201 200000000240 returned -11 [ 1130.007535][ T4317] usb 3-1: USB disconnect, device number 67 [ 1130.649715][ C1] hrtimer: interrupt took 47212 ns [ 1130.655481][T16023] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1131.130607][T16023] usb 5-1: Using ep0 maxpacket: 8 [ 1131.437820][T16023] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1131.456717][T16023] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.474339][T16023] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.500025][T16023] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.509109][T16023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.520756][T16023] usbtmc 5-1:16.0: bulk endpoints not found [ 1131.741800][T16739] binder: 16738:16739 ioctl c0306201 0 returned -14 [ 1132.680079][T16023] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1133.918558][T16023] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1133.932170][T16023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.941660][T16023] usb 4-1: Product: syz [ 1133.946527][T16023] usb 4-1: Manufacturer: syz [ 1133.952149][T16023] usb 4-1: SerialNumber: syz [ 1133.959526][T16023] usb 4-1: config 0 descriptor?? [ 1134.169978][T16023] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1135.166224][ T4317] usb 5-1: USB disconnect, device number 35 [ 1135.740705][T16788] vivid-001: disconnect [ 1136.264935][T16023] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1136.457348][T16784] vivid-001: reconnect [ 1137.669611][ T4318] usb 4-1: USB disconnect, device number 65 [ 1137.671842][T16800] binder: 16798:16800 ioctl c0306201 0 returned -14 [ 1139.653549][T14794] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1140.384017][T14794] usb 3-1: Using ep0 maxpacket: 8 [ 1140.474888][T16842] vivid-003: disconnect [ 1141.204987][T16839] vivid-003: reconnect [ 1141.256268][T14794] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1141.283550][T14794] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.319979][T14794] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.385821][T14794] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1141.406131][T14794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.435217][T14794] usbtmc 3-1:16.0: bulk endpoints not found [ 1141.529951][T16023] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1141.548791][T16849] binder: 16848:16849 ioctl c0306201 0 returned -14 [ 1141.556725][T16849] binder: 16848:16849 ioctl c0306201 200000000240 returned -11 [ 1141.667279][T16853] fuse: Bad value for 'fd' [ 1142.182102][T16023] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1142.200303][T16023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.217509][T16023] usb 5-1: Product: syz [ 1142.224080][T16023] usb 5-1: Manufacturer: syz [ 1142.228837][T16023] usb 5-1: SerialNumber: syz [ 1142.278735][T16023] usb 5-1: config 0 descriptor?? [ 1142.566167][T16023] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1143.948548][T16868] loop0: detected capacity change from 0 to 40427 [ 1144.041001][T16868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1144.089558][T16868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1144.215793][T13029] usb 3-1: USB disconnect, device number 68 [ 1145.213497][T16023] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1145.345544][T14117] syz-executor: attempt to access beyond end of device [ 1145.345544][T14117] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1146.175070][T16890] vivid-002: disconnect [ 1146.755814][ T6754] usb 5-1: USB disconnect, device number 36 [ 1146.850799][T16881] vivid-002: reconnect [ 1146.906400][T16895] binder: 16894:16895 ioctl c0306201 200000000240 returned -11 [ 1148.062767][T16920] loop4: detected capacity change from 0 to 40427 [ 1148.119920][T12880] Bluetooth: hci0: command 0x0406 tx timeout [ 1148.135955][T16920] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1148.197991][T16920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1148.394211][ T4309] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1148.599905][ T4309] usb 2-1: Using ep0 maxpacket: 8 [ 1148.617917][ T4309] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1149.109104][ T4309] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.119781][ T4309] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.133044][ T4309] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1149.142676][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.161427][ T4309] usbtmc 2-1:16.0: bulk endpoints not found [ 1149.253361][T12879] syz-executor: attempt to access beyond end of device [ 1149.253361][T12879] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1149.490130][ T4309] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1149.712132][T13029] usb 2-1: USB disconnect, device number 31 [ 1149.723266][ T4309] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1149.742532][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.758611][ T4309] usb 1-1: Product: syz [ 1149.763567][ T4309] usb 1-1: Manufacturer: syz [ 1149.768204][ T4309] usb 1-1: SerialNumber: syz [ 1149.775520][ T4309] usb 1-1: config 0 descriptor?? [ 1149.986728][ T4309] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1150.358765][T16946] vivid-002: disconnect [ 1151.118738][T16943] vivid-002: reconnect [ 1151.191037][T16954] binder: 16953:16954 ioctl c0306201 200000000240 returned -11 [ 1152.268928][ T4309] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1152.334642][ T4309] usb 1-1: USB disconnect, device number 50 [ 1152.603294][T16975] loop4: detected capacity change from 0 to 40427 [ 1152.699678][T16975] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1152.760210][T16975] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1153.579906][ T4317] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1153.779895][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 1153.790895][ T4317] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1153.799489][ T4317] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.810662][ T4317] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.824141][ T4317] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.952157][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.310091][ T4317] usbtmc 4-1:16.0: bulk endpoints not found [ 1154.361611][T12879] syz-executor: attempt to access beyond end of device [ 1154.361611][T12879] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1154.661989][ T4317] usb 4-1: USB disconnect, device number 66 [ 1155.021677][T17005] vivid-000: disconnect [ 1155.765881][T16998] vivid-000: reconnect [ 1156.078202][T17013] fuse: Bad value for 'fd' [ 1156.240458][T13029] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1156.585117][T17020] binder: 17018:17020 ioctl c0306201 200000000240 returned -11 [ 1157.153500][T13029] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1157.173801][T13029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.224274][T13029] usb 4-1: Product: syz [ 1157.237309][T13029] usb 4-1: Manufacturer: syz [ 1157.261342][T13029] usb 4-1: SerialNumber: syz [ 1157.278998][T13029] usb 4-1: config 0 descriptor?? [ 1157.508835][T13029] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1158.830244][ T4331] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1159.089981][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1159.132000][ T4331] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1159.217315][ T4331] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.295851][ T4331] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.381036][ T4331] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1159.401011][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.429085][T13029] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1159.457060][ T4331] usbtmc 5-1:16.0: bulk endpoints not found [ 1159.463562][T13029] usb 4-1: USB disconnect, device number 67 [ 1159.580675][T17057] vivid-001: disconnect [ 1161.562219][T17060] vivid-001: reconnect [ 1161.581778][ T4331] usb 5-1: USB disconnect, device number 37 [ 1161.589680][T17063] binder: 17058:17063 ioctl c0306201 200000000240 returned -11 [ 1161.878479][T17073] fuse: Bad value for 'fd' [ 1162.957459][T17088] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 1163.435206][T17096] vivid-002: disconnect [ 1163.539809][ T4317] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1164.286533][T17092] vivid-002: reconnect [ 1164.483978][ T4317] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1164.496312][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.504558][ T4317] usb 1-1: Product: syz [ 1164.508877][ T4317] usb 1-1: Manufacturer: syz [ 1164.513596][ T4317] usb 1-1: SerialNumber: syz [ 1164.571831][ T4317] usb 1-1: config 0 descriptor?? [ 1166.163657][ T4317] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1166.180385][ T4317] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1166.201973][ T4317] usb 1-1: USB disconnect, device number 51 [ 1166.636913][T17121] binder: 17117:17121 ioctl c0306201 200000000240 returned -11 [ 1166.737420][T17127] fuse: Bad value for 'fd' [ 1167.576629][ T6754] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1167.589791][ T4331] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1167.797995][ T4331] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 1167.833341][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.869168][ T4331] usb 1-1: Product: syz [ 1167.914251][ T4331] usb 1-1: Manufacturer: syz [ 1167.936681][ T6754] usb 2-1: Using ep0 maxpacket: 8 [ 1167.975264][ T6754] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1167.984777][ T4331] usb 1-1: SerialNumber: syz [ 1167.998528][ T6754] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.008911][ T6754] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1168.022057][ T6754] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1168.031274][ T6754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.051740][ T4331] usb 1-1: config 0 descriptor?? [ 1168.053333][ T6754] usbtmc 2-1:16.0: bulk endpoints not found [ 1168.078371][ T4331] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1168.129252][T17151] autofs4:pid:17151:autofs_fill_super: called with bogus options [ 1168.281865][ T4331] gspca_spca501: reg write: error -71 [ 1168.288045][ T4331] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1168.325523][ T4331] spca501: probe of 1-1:0.0 failed with error -22 [ 1168.366047][ T4331] usb 1-1: Found UVC 0.00 device syz (0000:0000) [ 1168.407030][ T4331] usb 1-1: No valid video chain found. [ 1168.530018][ T4331] usb 1-1: USB disconnect, device number 52 [ 1168.560175][ T4317] usb 2-1: USB disconnect, device number 32 [ 1168.561006][T15930] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1168.829104][T17161] vivid-000: disconnect [ 1169.190972][T17156] vivid-000: reconnect [ 1169.406498][T17165] fuse: Bad value for 'fd' [ 1169.609357][T15930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1169.744424][T15930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.144345][T15930] usb 5-1: Product: syz [ 1170.148679][T15930] usb 5-1: Manufacturer: syz [ 1170.170022][T15930] usb 5-1: SerialNumber: syz [ 1170.204124][T15930] usb 5-1: config 0 descriptor?? [ 1170.244481][T17173] binder: 17171:17173 ioctl c0306201 200000000240 returned -11 [ 1170.411997][T17178] fuse: Bad value for 'fd' [ 1170.726974][T15930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1170.913870][T17185] autofs4:pid:17185:autofs_fill_super: called with bogus options [ 1171.732527][T17197] vivid-002: disconnect [ 1171.820059][ T6754] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1172.186838][T17202] netlink: 'syz.1.3672': attribute type 21 has an invalid length. [ 1172.195396][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 1172.329813][ T6754] usb 3-1: Using ep0 maxpacket: 8 [ 1172.342817][ T6754] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1172.390725][ T6754] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.463988][T17193] vivid-002: reconnect [ 1172.473782][ T6754] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.603932][ T6754] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1172.986146][T15930] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1173.009209][ T6754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.040863][T15930] usb 5-1: USB disconnect, device number 38 [ 1173.061901][ T6754] usbtmc 3-1:16.0: bulk endpoints not found [ 1173.307658][T15930] usb 3-1: USB disconnect, device number 69 [ 1173.748244][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 1173.947162][T17230] autofs4:pid:17230:autofs_fill_super: called with bogus options [ 1174.812562][T17235] fuse: Bad value for 'fd' [ 1175.296700][T17245] vivid-000: disconnect [ 1175.419913][T13573] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1176.036758][T17240] vivid-000: reconnect [ 1176.263352][T13573] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1176.292937][T13573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.324086][T13573] usb 2-1: Product: syz [ 1176.334187][T13573] usb 2-1: Manufacturer: syz [ 1176.363724][T13573] usb 2-1: SerialNumber: syz [ 1176.392450][T13573] usb 2-1: config 0 descriptor?? [ 1176.618012][T13573] usb 2-1: USB disconnect, device number 33 [ 1176.645262][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1177.155858][T17271] autofs4:pid:17271:autofs_fill_super: called with bogus options [ 1177.410449][T13030] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1177.434044][T17280] vivid-004: disconnect [ 1177.519815][T13573] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1177.600102][ T6754] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1177.639053][T13030] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1177.662111][T13030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.704474][T13030] usb 3-1: Product: syz [ 1177.726234][T13030] usb 3-1: Manufacturer: syz [ 1177.754051][T13030] usb 3-1: SerialNumber: syz [ 1177.789950][ T6754] usb 4-1: Using ep0 maxpacket: 8 [ 1177.800434][ T6754] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1177.835102][T13030] usb 3-1: config 0 descriptor?? [ 1177.859580][ T6754] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.913618][ T6754] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.068263][T13030] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1178.134286][T17275] vivid-004: reconnect [ 1178.169894][ T6754] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1178.190192][ T6754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.374961][T13573] usb 2-1: Using ep0 maxpacket: 32 [ 1178.377773][ T6754] usbtmc 4-1:16.0: bulk endpoints not found [ 1178.382683][T13573] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1178.442821][T13573] usb 2-1: config 0 has no interface number 0 [ 1178.450281][T13573] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1178.473318][T13573] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1178.495412][T13573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.505305][T13573] usb 2-1: Product: syz [ 1178.540057][T13573] usb 2-1: Manufacturer: syz [ 1178.579589][T13573] usb 2-1: SerialNumber: syz [ 1178.803464][T13573] usb 2-1: config 0 descriptor?? [ 1179.173311][ T4318] usb 4-1: USB disconnect, device number 68 [ 1179.470186][T13573] usb 2-1: USB disconnect, device number 34 [ 1180.132320][T13030] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 1180.293547][T13030] usb 3-1: USB disconnect, device number 70 [ 1180.542687][T17316] autofs4:pid:17316:autofs_fill_super: called with bogus options [ 1180.699843][T13030] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1180.768008][T17325] vivid-001: disconnect [ 1181.128460][T13030] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1181.529378][T17321] vivid-001: reconnect [ 1181.574983][T13030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.583299][T13030] usb 4-1: Product: syz [ 1181.587695][T13030] usb 4-1: Manufacturer: syz [ 1181.592429][T13030] usb 4-1: SerialNumber: syz [ 1181.600431][T13030] usb 4-1: config 0 descriptor?? [ 1181.882084][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.888438][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.974605][T17334] netlink: 'syz.4.3711': attribute type 21 has an invalid length. [ 1181.982885][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3711'. [ 1182.263294][T13030] usb 4-1: USB disconnect, device number 69 [ 1183.439992][T13030] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1184.100376][T13030] usb 4-1: Using ep0 maxpacket: 8 [ 1184.601378][T13030] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1184.609621][T13030] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.688045][T13030] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.708829][T13030] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1184.719021][T13030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.829524][T13030] usbtmc 4-1:16.0: bulk endpoints not found [ 1184.949858][T16023] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1185.117550][T17371] vivid-001: disconnect [ 1185.478036][T16023] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1185.851517][T17368] vivid-001: reconnect [ 1185.868882][T16023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.871646][T13029] usb 4-1: USB disconnect, device number 70 [ 1185.877361][T16023] usb 5-1: Product: syz [ 1185.887532][T16023] usb 5-1: Manufacturer: syz [ 1185.892522][T16023] usb 5-1: SerialNumber: syz [ 1185.909514][T16023] usb 5-1: config 0 descriptor?? [ 1186.122785][T16023] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1186.319793][ T4318] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1186.680528][ T4318] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1186.711519][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.719662][ T4318] usb 3-1: Product: syz [ 1186.729001][ T4318] usb 3-1: Manufacturer: syz [ 1186.735478][ T4318] usb 3-1: SerialNumber: syz [ 1186.745566][ T4318] usb 3-1: config 0 descriptor?? [ 1186.961551][ T4318] usb 3-1: USB disconnect, device number 71 [ 1187.469033][T17402] vivid-002: disconnect [ 1188.029798][T13029] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1188.157158][T16023] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 1188.195059][T17399] vivid-002: reconnect [ 1188.236880][T13029] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 1188.246951][T16023] usb 5-1: USB disconnect, device number 39 [ 1188.271529][T13029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.329386][T13029] usb 2-1: Product: syz [ 1188.342735][T13029] usb 2-1: Manufacturer: syz [ 1188.347372][T13029] usb 2-1: SerialNumber: syz [ 1188.495272][T17411] vivid-000: disconnect [ 1189.246605][T17406] vivid-000: reconnect [ 1189.283188][T13029] usb 2-1: config 0 descriptor?? [ 1189.300022][T13029] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1189.461975][T17414] fuse: Bad value for 'fd' [ 1189.718425][T13029] gspca_spca501: reg write: error -71 [ 1189.752365][T13029] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1189.770724][T13029] spca501: probe of 2-1:0.0 failed with error -22 [ 1189.784289][T13029] usb 2-1: Found UVC 0.00 device syz (0000:0000) [ 1189.799908][T13029] usb 2-1: No valid video chain found. [ 1189.830812][T13029] usb 2-1: USB disconnect, device number 35 [ 1190.970042][T17427] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1191.020441][T17433] binder: 17422:17433 unknown command 1074553619 [ 1191.059976][T17433] binder: 17422:17433 ioctl c0306201 200000000540 returned -22 [ 1191.162395][T17427] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1191.189931][T13029] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1191.467071][T13029] usb 2-1: Using ep0 maxpacket: 8 [ 1191.476690][T13029] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1191.485220][T13029] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.496246][T13029] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1191.510041][T13029] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1191.519263][T13029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.535048][T13029] usbtmc 2-1:16.0: bulk endpoints not found [ 1191.989548][T17427] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3741'. [ 1192.779847][T16023] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1192.995383][T17466] fuse: Bad value for 'fd' [ 1193.010152][T16023] usb 1-1: Using ep0 maxpacket: 32 [ 1193.241148][ T6754] usb 2-1: USB disconnect, device number 36 [ 1193.248393][T16023] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1193.262995][T16023] usb 1-1: config 0 has no interface number 0 [ 1193.297892][T16023] usb 1-1: config 0 interface 2 has no altsetting 0 [ 1193.366608][T16023] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1193.412483][T16023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.421623][T16023] usb 1-1: Product: syz [ 1193.426005][T16023] usb 1-1: Manufacturer: syz [ 1193.430966][T16023] usb 1-1: SerialNumber: syz [ 1193.438417][T16023] usb 1-1: config 0 descriptor?? [ 1194.269360][T16023] usb 1-1: USB disconnect, device number 53 [ 1194.602798][T17486] fuse: Bad value for 'fd' [ 1194.878493][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.469890][ T6754] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1197.679862][ T6754] usb 5-1: Using ep0 maxpacket: 16 [ 1197.690016][ T6754] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1197.742747][ T6754] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1197.752725][ T6754] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.765914][ T6754] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1197.779154][ T6754] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1197.831714][ T6754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.840067][ T6754] usb 5-1: Product: syz [ 1197.844750][ T6754] usb 5-1: Manufacturer: syz [ 1197.849370][ T6754] usb 5-1: SerialNumber: syz [ 1198.068193][ T6754] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 1198.140021][T13030] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1198.989994][T13030] usb 2-1: Using ep0 maxpacket: 8 [ 1198.996748][T13030] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1199.019248][T13030] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.020651][T17506] usblp0:failed reading printer status (-71) [ 1199.030802][T13030] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1199.036514][ T4317] usb 5-1: USB disconnect, device number 40 [ 1199.056612][T13030] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1199.082800][T13030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.116829][T13030] usbtmc 2-1:16.0: bulk endpoints not found [ 1199.341194][T17505] usblp0: removed [ 1200.753081][T17561] fuse: Bad value for 'fd' [ 1201.080127][T13030] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1201.271472][T13030] usb 5-1: New USB device found, idVendor=8086, idProduct=011a, bcdDevice=bf.ad [ 1201.296674][T13030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.365516][T13030] usb 5-1: config 0 descriptor?? [ 1201.617856][T13030] usb 5-1: string descriptor 0 read error: -71 [ 1201.650700][T13030] usb 5-1: USB disconnect, device number 41 [ 1203.398098][T17585] input: syz1 as /devices/virtual/input/input43 [ 1205.796375][T17600] fuse: Bad value for 'fd' [ 1206.231559][ T4317] usb 2-1: USB disconnect, device number 37 [ 1206.438138][T17613] binder: 17606:17613 unknown command 1074553619 [ 1206.445071][T17613] binder: 17606:17613 ioctl c0306201 200000000540 returned -22 [ 1208.256154][T13573] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1208.409978][T13573] usb 1-1: device descriptor read/64, error -71 [ 1208.700121][T13573] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1208.859973][T13573] usb 1-1: device descriptor read/64, error -71 [ 1208.979968][T13573] usb usb1-port1: attempt power cycle [ 1209.034931][T17636] loop1: detected capacity change from 0 to 40427 [ 1209.101936][T17636] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1209.139358][T17636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1210.089998][T13573] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1210.350507][T13573] usb 1-1: device descriptor read/8, error -71 [ 1210.390085][T13374] syz-executor: attempt to access beyond end of device [ 1210.390085][T13374] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1210.629779][T13573] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1210.879895][T13573] usb 1-1: device not accepting address 57, error -71 [ 1210.889900][T14794] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1210.890948][T13573] usb usb1-port1: unable to enumerate USB device [ 1211.239786][T14794] usb 5-1: Using ep0 maxpacket: 8 [ 1211.251244][T14794] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1211.280620][T14794] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.314385][T14794] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.366580][T14794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1212.160503][T14794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.177377][T17670] fuse: Bad value for 'fd' [ 1212.490861][T14794] usbtmc 5-1:16.0: bulk endpoints not found [ 1213.584545][T17680] binder: 17669:17680 unknown command 1074553619 [ 1213.591109][T17680] binder: 17669:17680 ioctl c0306201 200000000540 returned -22 [ 1216.529879][T15932] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1216.769902][T15932] usb 4-1: device descriptor read/64, error -71 [ 1217.219874][T15932] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1217.379921][T15932] usb 4-1: device descriptor read/64, error -71 [ 1217.511779][T15932] usb usb4-port1: attempt power cycle [ 1217.939843][T15932] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1217.991074][T15932] usb 4-1: device descriptor read/8, error -71 [ 1218.269926][T15932] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1218.947145][T16023] usb 5-1: USB disconnect, device number 42 [ 1219.000979][T15932] usb 4-1: device descriptor read/8, error -71 [ 1219.106911][T17738] fuse: Bad value for 'fd' [ 1219.182154][T15932] usb usb4-port1: unable to enumerate USB device [ 1219.593662][T17748] binder: 17739:17748 unknown command 1074553619 [ 1219.600216][T17748] binder: 17739:17748 ioctl c0306201 200000000540 returned -22 [ 1221.485491][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1221.485506][ T26] audit: type=1326 audit(1754698484.923:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.595627][ T26] audit: type=1326 audit(1754698484.923:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.627453][ T26] audit: type=1326 audit(1754698484.923:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.655681][ T26] audit: type=1326 audit(1754698484.923:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.684110][ T26] audit: type=1326 audit(1754698484.923:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.894756][ T26] audit: type=1326 audit(1754698484.923:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1221.920715][ T26] audit: type=1326 audit(1754698484.923:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1222.431826][ T26] audit: type=1326 audit(1754698484.923:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1223.279150][ T26] audit: type=1326 audit(1754698484.923:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1223.301700][ T26] audit: type=1326 audit(1754698484.923:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17752 comm="syz.0.3828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce318ebe9 code=0x7ffc0000 [ 1224.829826][ T4309] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1225.629853][T15930] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1225.809802][ T4309] usb 2-1: Using ep0 maxpacket: 8 [ 1225.816218][ T4309] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1225.850486][T17792] fuse: Bad value for 'fd' [ 1225.889806][ T4309] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.889983][T15930] usb 1-1: device descriptor read/64, error -71 [ 1225.980013][ T4309] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.071087][ T4309] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1226.156691][ T4309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.190423][ T4309] usbtmc 2-1:16.0: bulk endpoints not found [ 1226.338049][T17802] binder: 17793:17802 unknown command 1074553619 [ 1226.344800][T17802] binder: 17793:17802 ioctl c0306201 200000000540 returned -22 [ 1226.399787][T15930] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1227.878718][T16023] usb 2-1: USB disconnect, device number 38 [ 1232.573510][T13573] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1232.648088][T17853] binder: 17846:17853 unknown command 1074553619 [ 1232.654880][T17853] binder: 17846:17853 ioctl c0306201 200000000540 returned -22 [ 1232.850264][T15930] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1233.059868][T15930] usb 4-1: Using ep0 maxpacket: 8 [ 1233.091703][T15930] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1234.333833][T15930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.459801][T13573] usb 2-1: Using ep0 maxpacket: 8 [ 1234.472852][T13573] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1234.481349][T13573] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.489784][T15930] usb 4-1: Product: syz [ 1234.491758][T13573] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.499767][T15930] usb 4-1: Manufacturer: syz [ 1234.509585][T13573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1234.523337][T13573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.601505][T13573] usbtmc 2-1:16.0: bulk endpoints not found [ 1234.751521][T13573] usb 2-1: USB disconnect, device number 39 [ 1234.770257][T15930] usb 4-1: SerialNumber: syz [ 1234.800746][T15930] usb 4-1: config 0 descriptor?? [ 1234.911315][T15930] gspca_main: se401-2.14.0 probing 047d:5003 [ 1235.258179][T15930] gspca_se401: Too many frame sizes [ 1236.126886][T13573] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1236.295164][ T4331] usb 4-1: USB disconnect, device number 75 [ 1236.432834][T13573] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 1236.453598][T13573] usb 2-1: config 0 has no interface number 0 [ 1236.462884][T13573] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1236.478491][T13573] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1236.491640][T13573] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1237.455248][T13573] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1237.507472][T13573] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1237.521118][T13573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.563090][T13573] usb 2-1: config 0 descriptor?? [ 1237.585684][T13573] hub 2-1:0.3: bad descriptor, ignoring hub [ 1237.630426][T13573] hub: probe of 2-1:0.3 failed with error -5 [ 1237.648193][T13573] sierra 2-1:0.3: Sierra USB modem converter detected [ 1238.026634][T17888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3866'. [ 1238.490138][T17892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 1238.556090][T13573] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1238.570398][T13573] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1238.610798][T13573] usb 2-1: USB disconnect, device number 40 [ 1238.630799][T13573] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1238.663721][T13573] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1238.681861][T13573] sierra 2-1:0.3: device disconnected [ 1239.923684][ T6754] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1240.129890][ T6754] usb 3-1: Using ep0 maxpacket: 8 [ 1240.140395][ T6754] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1241.346806][ T6754] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.377935][ T6754] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.401753][ T6754] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1241.419795][ T6754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.538670][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1241.568273][ T6754] usbtmc 3-1:16.0: bulk endpoints not found [ 1242.363747][T16023] usb 3-1: USB disconnect, device number 72 [ 1242.489263][T17928] [U] ¹éMÙ­õáq&’Ù Kœ4 [ 1242.494947][T17927] [U] [“)ÎU°}¸Ç”íÚJï¬}N°sef*œ £‡ßÿånZíÀf[F_h®¦'ª„W"óxå~¶Îïú;vA˜)^ˆ`û1C':zÂÞ÷ãÃúÞFObþ *?ÛŸc‹z˜s¯ý<8zNñ·š ñ [ 1243.358830][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.373751][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.769835][T16023] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1246.229828][T16023] usb 3-1: Using ep0 maxpacket: 8 [ 1246.291610][T16023] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.315816][T16023] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.335032][T16023] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.151805][T16023] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1247.188901][T16023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.264866][T16023] usbtmc 3-1:16.0: bulk endpoints not found [ 1247.426199][T17985] CIFS: iocharset name too long [ 1248.999159][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1249.129034][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1252.663665][ T4309] usb 3-1: USB disconnect, device number 73 [ 1255.339669][T18073] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1255.372429][T18073] Bluetooth: MGMT ver 1.22 [ 1255.580097][ T4309] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1255.800167][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 1255.816594][ T4309] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1255.826262][ T4309] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.841088][ T4309] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.857495][ T4309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1255.869166][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.941645][ T4309] usbtmc 1-1:16.0: bulk endpoints not found [ 1258.740050][T15932] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1258.955177][T15932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.018313][T15932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.115119][T15932] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1259.201507][T15932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.355805][T15932] usb 2-1: config 0 descriptor?? [ 1260.320251][T15932] usb 2-1: language id specifier not provided by device, defaulting to English [ 1262.540326][T15932] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 1262.657590][T15932] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 1262.853948][T15932] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 1263.004963][T15932] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 1263.179317][T15932] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 1263.417466][T15932] usb 2-1: USB disconnect, device number 41 [ 1263.753048][T18156] input: syz1 as /devices/virtual/input/input45 [ 1264.715264][T18167] fuse: Bad value for 'fd' [ 1265.033212][ T4331] usb 1-1: USB disconnect, device number 60 [ 1268.150015][ T4309] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1268.430057][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 1268.477372][ T4309] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1268.559837][T13029] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1268.562976][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.679438][ T4309] usb 1-1: Product: syz [ 1268.727333][ T4309] usb 1-1: Manufacturer: syz [ 1268.774869][ T4309] usb 1-1: SerialNumber: syz [ 1268.917193][ T4309] usb 1-1: config 0 descriptor?? [ 1269.056123][ T4309] gspca_main: se401-2.14.0 probing 047d:5003 [ 1269.359777][T13029] usb 5-1: Using ep0 maxpacket: 8 [ 1269.408050][ T4309] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1269.466023][ T4309] se401: probe of 1-1:0.0 failed with error -71 [ 1270.101592][T13029] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1270.148811][T13029] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.183508][ T4309] usb 1-1: USB disconnect, device number 61 [ 1270.188250][T13029] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.556692][T13029] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1270.695047][T13029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.534994][T18228] fuse: Bad value for 'fd' [ 1271.770389][T13029] usb 5-1: can't set config #16, error -71 [ 1271.838845][T13029] usb 5-1: USB disconnect, device number 43 [ 1276.242548][T13029] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1277.069920][T13029] usb 3-1: Using ep0 maxpacket: 8 [ 1277.271055][T13029] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1277.301912][T13029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.662240][T13029] usb 3-1: Product: syz [ 1277.666459][T13029] usb 3-1: Manufacturer: syz [ 1277.671525][T13029] usb 3-1: SerialNumber: syz [ 1277.677801][T13029] usb 3-1: config 0 descriptor?? [ 1277.685439][T13029] gspca_main: se401-2.14.0 probing 047d:5003 [ 1277.799595][T18278] fuse: Bad value for 'fd' [ 1279.835736][T13029] gspca_se401: read req failed req 0x06 error -19 [ 1280.009168][T13029] usb 3-1: USB disconnect, device number 74 [ 1282.331496][T13029] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1282.374114][T18335] fuse: Bad value for 'fd' [ 1283.179950][T13029] usb 4-1: Using ep0 maxpacket: 32 [ 1283.187645][T13029] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1283.592300][T13029] usb 4-1: config 0 has no interface number 0 [ 1283.598697][T13029] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1283.618905][T13029] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1283.629976][ T4309] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1284.820048][ T4309] usb 2-1: Using ep0 maxpacket: 8 [ 1285.008901][ T4309] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1285.187539][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.344781][ T4309] usb 2-1: Product: syz [ 1285.414936][ T4309] usb 2-1: Manufacturer: syz [ 1285.492478][ T4309] usb 2-1: SerialNumber: syz [ 1285.693309][T13029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.702031][T13029] usb 4-1: Product: syz [ 1285.706220][T13029] usb 4-1: Manufacturer: syz [ 1285.710937][T13029] usb 4-1: SerialNumber: syz [ 1285.717223][T13029] usb 4-1: config 0 descriptor?? [ 1285.731983][ T4309] usb 2-1: config 0 descriptor?? [ 1285.741783][T13029] usb 4-1: can't set config #0, error -71 [ 1285.751240][T13029] usb 4-1: USB disconnect, device number 76 [ 1285.792840][ T4309] gspca_main: se401-2.14.0 probing 047d:5003 [ 1287.513511][T18365] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1287.530527][T18365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1288.009187][T18366] CIFS: iocharset name too long [ 1288.102811][ T4309] gspca_se401: read req failed req 0x06 error -19 [ 1288.126912][ T4309] usb 2-1: USB disconnect, device number 42 [ 1289.256404][T18371] random: crng reseeded on system resumption [ 1291.168651][T18393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1291.739906][T13029] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1292.719915][T13029] usb 2-1: Using ep0 maxpacket: 32 [ 1292.791659][T13029] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1293.336465][T13029] usb 2-1: config 0 has no interface number 0 [ 1293.349024][T13029] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1293.362138][T13029] usb 2-1: string descriptor 0 read error: -71 [ 1293.378113][T13029] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1293.389792][T13029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.401541][T13029] usb 2-1: config 0 descriptor?? [ 1293.406964][T13029] usb 2-1: can't set config #0, error -71 [ 1293.417096][T13029] usb 2-1: USB disconnect, device number 43 [ 1295.018114][T18428] CIFS: iocharset name too long [ 1295.577687][T18430] binder: 18425:18430 unknown command 1074553619 [ 1295.584369][T18430] binder: 18425:18430 ioctl c0306201 200000000540 returned -22 [ 1297.661399][T13573] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1297.880496][T13573] usb 2-1: Using ep0 maxpacket: 32 [ 1297.922130][T13573] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1298.055813][T13573] usb 2-1: config 0 has no interface number 0 [ 1298.146490][T13573] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1298.276638][T13573] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1298.337089][T13573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.495470][T13573] usb 2-1: Product: syz [ 1298.499662][T13573] usb 2-1: Manufacturer: syz [ 1298.505320][T13573] usb 2-1: SerialNumber: syz [ 1298.518760][T13573] usb 2-1: config 0 descriptor?? [ 1299.190835][T13573] usb 2-1: USB disconnect, device number 44 [ 1299.505822][T18476] CIFS: iocharset name too long [ 1299.689953][T13029] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1299.769876][T13030] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1299.998641][T13029] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1300.007989][T13030] usb 1-1: Using ep0 maxpacket: 8 [ 1300.033171][T13030] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.060025][T18486] binder: 18479:18486 unknown command 1074553619 [ 1300.066441][T18486] binder: 18479:18486 ioctl c0306201 200000000540 returned -22 [ 1300.088364][T13029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.153723][T13030] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1300.171080][T13029] usb 3-1: Product: syz [ 1300.205193][T13029] usb 3-1: Manufacturer: syz [ 1300.240157][T13030] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.258517][T13029] usb 3-1: SerialNumber: syz [ 1300.350742][T13029] usb 3-1: config 0 descriptor?? [ 1300.366538][T13030] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1300.468499][T13030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.633078][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 1300.803233][T13030] hub 1-1:1.0: bad descriptor, ignoring hub [ 1300.810220][T18468] device bond_slave_0 entered promiscuous mode [ 1300.816961][T18468] device bond_slave_1 entered promiscuous mode [ 1300.823696][T18468] device macvtap1 entered promiscuous mode [ 1300.829559][T18468] device bond0 entered promiscuous mode [ 1300.835505][T13030] hub: probe of 1-1:1.0 failed with error -5 [ 1300.836592][T18468] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1300.900646][T13030] cdc_wdm 1-1:1.0: skipping garbage [ 1300.949561][T13030] cdc_wdm 1-1:1.0: skipping garbage [ 1300.994620][T13030] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1301.077403][T13030] usb 1-1: USB disconnect, device number 62 [ 1301.158453][T18489] device bond0 left promiscuous mode [ 1301.223994][T18489] device bond_slave_0 left promiscuous mode [ 1301.230084][T18489] device bond_slave_1 left promiscuous mode [ 1301.802783][T13029] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 1301.904333][T13029] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1302.053266][T13029] usb 3-1: USB disconnect, device number 75 [ 1302.671781][T18513] CIFS: iocharset name too long [ 1303.090041][T13029] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1303.290082][T13029] usb 4-1: Using ep0 maxpacket: 16 [ 1303.322833][T18529] binder: 18523:18529 unknown command 1074553619 [ 1303.329374][T18529] binder: 18523:18529 ioctl c0306201 200000000540 returned -22 [ 1303.429883][T13573] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1304.766010][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.772487][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.609928][T13573] usb 2-1: device descriptor read/64, error -71 [ 1309.170163][T18553] fuse: Bad value for 'fd' [ 1310.915974][T18561] binder: BINDER_SET_CONTEXT_MGR already set [ 1310.922130][T18561] binder: 18559:18561 ioctl 4018620d 2000000002c0 returned -16 [ 1311.218166][T13029] usb 4-1: device descriptor read/all, error -71 [ 1311.510059][T16023] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1311.654409][T18573] binder: 18568:18573 unknown command 1074553619 [ 1311.661149][T18573] binder: 18568:18573 ioctl c0306201 200000000540 returned -22 [ 1313.769951][T16023] usb 5-1: Using ep0 maxpacket: 32 [ 1314.194373][T16023] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1314.242043][T16023] usb 5-1: config 0 has no interface number 0 [ 1314.248206][T16023] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1314.395705][T16023] usb 5-1: string descriptor 0 read error: -71 [ 1314.417335][T16023] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1314.448518][T16023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.466951][T18592] binder: BINDER_SET_CONTEXT_MGR already set [ 1314.488058][T18592] binder: 18590:18592 ioctl 4018620d 2000000002c0 returned -16 [ 1314.498296][T16023] usb 5-1: config 0 descriptor?? [ 1314.517917][T16023] usb 5-1: can't set config #0, error -71 [ 1314.552449][T16023] usb 5-1: USB disconnect, device number 44 [ 1314.648172][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1314.830823][T18599] device erspan0 entered promiscuous mode [ 1314.837267][T18599] device macvtap1 entered promiscuous mode [ 1314.863384][T18603] device erspan0 left promiscuous mode [ 1316.179841][T14794] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1316.379813][T14794] usb 5-1: Using ep0 maxpacket: 32 [ 1316.386552][T14794] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1316.464474][T18628] CIFS: iocharset name too long [ 1316.562031][T14794] usb 5-1: config 0 has no interface number 0 [ 1316.590096][T14794] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1316.668799][T14794] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1316.739625][T14794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.798970][T14794] usb 5-1: Product: syz [ 1316.823694][T14794] usb 5-1: Manufacturer: syz [ 1316.828352][T14794] usb 5-1: SerialNumber: syz [ 1316.881605][T14794] usb 5-1: config 0 descriptor?? [ 1318.141824][T14794] usb 5-1: USB disconnect, device number 45 [ 1318.522148][T18661] udevd[18661]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.603543][T18670] CIFS: iocharset name too long [ 1322.644740][T18708] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1322.654201][T18708] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1324.386631][T18722] CIFS: iocharset name too long [ 1324.814307][T18735] fuse: Bad value for 'fd' [ 1326.026079][T18761] CIFS: iocharset name too long [ 1327.394799][T18782] fuse: Bad value for 'fd' [ 1327.993084][T18804] binder: 18791:18804 unknown command 1074553619 [ 1327.999543][T18804] binder: 18791:18804 ioctl c0306201 200000000540 returned -22 [ 1329.090964][T18822] binder: 18813:18822 unknown command 1074553619 [ 1329.097438][T18822] binder: 18813:18822 ioctl c0306201 200000000540 returned -22 [ 1330.189971][T13573] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1330.190650][T18845] fuse: Bad value for 'fd' [ 1330.396044][T13573] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1330.409890][T13573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.418545][T13573] usb 5-1: Product: syz [ 1330.422889][T13573] usb 5-1: Manufacturer: syz [ 1330.440080][T13573] usb 5-1: SerialNumber: syz [ 1330.467301][T13573] usb 5-1: config 0 descriptor?? [ 1330.679904][T13573] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 1330.692168][T18852] binder: BINDER_SET_CONTEXT_MGR already set [ 1330.700210][T13573] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1330.708541][T18852] binder: 18850:18852 ioctl 4018620d 2000000002c0 returned -16 [ 1330.750000][T13573] usb 5-1: USB disconnect, device number 46 [ 1331.020895][T18859] binder: 18855:18859 unknown command 1074553619 [ 1331.027315][T18859] binder: 18855:18859 ioctl c0306201 200000000540 returned -22 [ 1332.707661][T18876] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4154'. [ 1332.764357][T18878] binder: 18868:18878 unknown command 1074553619 [ 1332.770898][T18878] binder: 18868:18878 ioctl c0306201 200000000540 returned -22 [ 1334.972586][T18915] binder: 18906:18915 unknown command 1074553619 [ 1334.979057][T18915] binder: 18906:18915 ioctl c0306201 200000000540 returned -22 [ 1336.369800][T18917] fuse: Bad value for 'fd' [ 1337.918127][T18925] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1337.933818][T18925] binder: 18924:18925 unknown command 1074553619 [ 1337.940477][T18925] binder: 18924:18925 ioctl c0306201 200000000540 returned -22 [ 1339.088005][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1339.465079][T18958] binder: 18955:18958 unknown command 1074553619 [ 1339.471681][T18958] binder: 18955:18958 ioctl c0306201 200000000540 returned -22 [ 1342.157201][T18983] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1342.187402][T18983] binder: 18977:18983 unknown command 1074553619 [ 1342.194051][T18983] binder: 18977:18983 ioctl c0306201 200000000540 returned -22 [ 1344.516541][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 1345.549307][T19025] binder: 19019:19025 unknown command 1074553619 [ 1345.555923][T19025] binder: 19019:19025 ioctl c0306201 200000000540 returned -22 [ 1347.735232][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1348.933556][T19074] binder: 19067:19074 unknown command 1074553619 [ 1348.940192][T19074] binder: 19067:19074 ioctl c0306201 200000000540 returned -22 [ 1350.936742][T19095] vivid-004: disconnect [ 1351.684397][T19091] vivid-004: reconnect [ 1352.083633][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1352.140043][T19122] binder: 19113:19122 unknown command 1074553619 [ 1352.146484][T19122] binder: 19113:19122 ioctl c0306201 200000000540 returned -22 [ 1354.769468][T19141] vivid-002: disconnect [ 1355.513152][T19136] vivid-002: reconnect [ 1356.754399][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'. [ 1356.815389][T19164] binder: 19157:19164 unknown command 1074553619 [ 1356.821834][T19164] binder: 19157:19164 ioctl c0306201 200000000540 returned -22 [ 1357.121212][T19179] can0: slcan on ttyS3. [ 1358.421761][T19175] can0 (unregistered): slcan off ttyS3. [ 1358.430208][ T6754] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1358.631675][ T6754] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.679850][ T6754] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1358.750119][ T6754] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1358.777258][ T6754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.789845][ T4317] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1358.797379][ T6754] usb 1-1: Product: syz [ 1358.813816][ T6754] usb 1-1: Manufacturer: syz [ 1358.825333][ T6754] usb 1-1: SerialNumber: syz [ 1358.991295][ T4317] usb 3-1: Using ep0 maxpacket: 8 [ 1358.994667][ T6754] usb 1-1: config 0 descriptor?? [ 1359.000984][ T4317] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1359.620600][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.628642][ T4317] usb 3-1: Product: syz [ 1359.633528][ T4317] usb 3-1: Manufacturer: syz [ 1359.638161][ T4317] usb 3-1: SerialNumber: syz [ 1359.673166][T13029] usb 1-1: USB disconnect, device number 63 [ 1359.740612][ T4317] usb 3-1: config 0 descriptor?? [ 1359.748201][ T4317] gspca_main: se401-2.14.0 probing 047d:5003 [ 1359.777583][T19207] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1359.958670][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.966067][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.149818][ T4317] gspca_se401: Too many frame sizes [ 1360.352825][T13573] usb 3-1: USB disconnect, device number 76 [ 1360.424032][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4253'. [ 1360.496636][T19242] binder: 19232:19242 unknown command 1074553619 [ 1360.503110][T19242] binder: 19232:19242 ioctl c0306201 200000000540 returned -22 [ 1364.709956][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.806872][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.871585][T19266] slcan: can't register candev [ 1364.876536][T19266] Falling back ldisc for ttyS3. [ 1364.923044][T19273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.657031][T19203] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.666433][T19203] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.676574][T19203] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.694238][T19203] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.785039][T19203] device bond1 left promiscuous mode [ 1366.097895][T19295] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4266'. [ 1366.113313][T19295] binder: 19290:19295 unknown command 1074553619 [ 1366.120205][T19295] binder: 19290:19295 ioctl c0306201 200000000540 returned -22 [ 1366.159975][ T4344] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1366.204352][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.215407][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.364755][ T4344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.437724][ T4344] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1366.552881][ T4344] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1366.674952][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.824666][ T4344] usb 5-1: Product: syz [ 1366.894011][ T4344] usb 5-1: Manufacturer: syz [ 1368.370206][ T4344] usb 5-1: SerialNumber: syz [ 1368.454695][ T4344] usb 5-1: config 0 descriptor?? [ 1368.696200][T13029] usb 5-1: USB disconnect, device number 47 [ 1370.635078][T19330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.736517][T19331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.877835][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1371.962258][T19357] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1372.087044][T19358] binder: 19351:19358 unknown command 1074553619 [ 1372.093663][T19358] binder: 19351:19358 ioctl c0306201 200000000540 returned -22 [ 1375.602334][T19384] device bridge_slave_0 left promiscuous mode [ 1375.660203][T19384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.764439][T19384] device bridge_slave_1 left promiscuous mode [ 1375.822280][T19384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.883205][T19384] bond0: (slave bond_slave_0): Releasing backup interface [ 1375.931936][T19384] bond0: (slave bond_slave_1): Releasing backup interface [ 1376.026200][T19384] team0: Port device team_slave_0 removed [ 1376.079827][T13248] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1377.506312][T19384] team0: Port device team_slave_1 removed [ 1377.517425][T19384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.570833][T19384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.595219][T19390] netlink: 'syz.4.4286': attribute type 10 has an invalid length. [ 1377.661177][T13248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.687458][T13248] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1377.717612][T13248] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1377.759837][T13248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.776221][T13248] usb 3-1: Product: syz [ 1377.786379][T13248] usb 3-1: Manufacturer: syz [ 1377.796141][T13248] usb 3-1: SerialNumber: syz [ 1377.807475][T13248] usb 3-1: config 0 descriptor?? [ 1377.865737][T18918] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1378.195102][T13248] usb 3-1: USB disconnect, device number 77 [ 1378.204433][T19416] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1378.213942][T18918] usb 1-1: Using ep0 maxpacket: 8 [ 1378.256256][T19418] binder: 19410:19418 unknown command 1074553619 [ 1378.262775][T19418] binder: 19410:19418 ioctl c0306201 200000000540 returned -22 [ 1379.590898][T18918] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1379.647536][T18918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.722270][T18918] usb 1-1: Product: syz [ 1379.740295][T18918] usb 1-1: Manufacturer: syz [ 1379.765327][T18918] usb 1-1: SerialNumber: syz [ 1379.779630][T18918] usb 1-1: config 0 descriptor?? [ 1381.165123][T18918] usb 1-1: can't set config #0, error -71 [ 1381.193795][T18918] usb 1-1: USB disconnect, device number 64 [ 1382.009629][T19457] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1382.067750][T19459] binder: 19452:19459 unknown command 1074553619 [ 1382.074505][T19459] binder: 19452:19459 ioctl c0306201 200000000540 returned -22 [ 1384.559988][T13029] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1384.577995][T19470] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4310'. [ 1384.618017][T19470] ieee802154 phy0 wpan0: encryption failed: -22 [ 1384.907116][T19479] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1384.939868][T13029] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1384.964249][T19486] binder: 19478:19486 unknown command 1074553619 [ 1384.970848][T19486] binder: 19478:19486 ioctl c0306201 200000000540 returned -22 [ 1386.013972][T13029] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1386.033514][T13029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.050510][T13029] usb 5-1: Product: syz [ 1386.065334][T13029] usb 5-1: Manufacturer: syz [ 1386.070150][T13029] usb 5-1: SerialNumber: syz [ 1386.095349][T13029] usb 5-1: config 0 descriptor?? [ 1386.188192][T19489] device bridge0 entered promiscuous mode [ 1386.314685][T13248] usb 5-1: USB disconnect, device number 48 [ 1386.323241][T19489] device vlan2 entered promiscuous mode [ 1387.990128][T19511] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 1388.808856][T19528] loop2: detected capacity change from 0 to 40427 [ 1388.845846][T19528] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1388.845901][T19511] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1388.906420][T19528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1389.041115][T19530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.654311][T19530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.718390][T15724] syz-executor: attempt to access beyond end of device [ 1389.718390][T15724] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1389.868219][ T4317] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1390.393670][T19530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.662507][T19530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.761564][ T4317] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1390.782514][ T4317] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1390.812897][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.829761][ T4317] usb 5-1: Product: syz [ 1390.839794][ T4317] usb 5-1: Manufacturer: syz [ 1390.844552][ T4317] usb 5-1: SerialNumber: syz [ 1390.848654][T19530] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.863288][ T4317] usb 5-1: config 0 descriptor?? [ 1390.869778][ T4331] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1390.922090][T19530] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.958554][T19530] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.998828][T19530] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.079995][ T4331] usb 1-1: Using ep0 maxpacket: 32 [ 1391.092493][ T4317] usb 5-1: USB disconnect, device number 49 [ 1391.100317][ T4331] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1391.117420][ T4331] usb 1-1: config 0 has no interface number 0 [ 1391.134037][ T4331] usb 1-1: config 0 interface 2 has no altsetting 0 [ 1391.152399][ T4331] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1391.181861][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.222870][ T4331] usb 1-1: Product: syz [ 1391.232977][ T4331] usb 1-1: Manufacturer: syz [ 1391.249735][ T4331] usb 1-1: SerialNumber: syz [ 1391.261854][ T4331] usb 1-1: config 0 descriptor?? [ 1392.215805][ T4331] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1392.284986][ T4331] usb 1-1: USB disconnect, device number 65 [ 1392.371034][T18533] udevd[18533]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.485866][T19569] can0: slcan on ttyS3. [ 1394.441534][T19573] can0 (unregistered): slcan off ttyS3. [ 1394.542739][T19588] netlink: 'syz.0.4341': attribute type 3 has an invalid length. [ 1394.577766][T19588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1394.596179][T19588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1394.627815][T19588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1394.813891][T19590] loop4: detected capacity change from 0 to 40427 [ 1394.846346][T19590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1394.876042][T19590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1395.874530][T12879] syz-executor: attempt to access beyond end of device [ 1395.874530][T12879] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1396.031937][T19604] tipc: Started in network mode [ 1396.037399][T19604] tipc: Node identity 221372c2645a, cluster identity 4711 [ 1396.082371][T19604] tipc: Enabled bearer , priority 0 [ 1396.118550][T19607] device syzkaller0 entered promiscuous mode [ 1396.229105][T19604] tipc: Resetting bearer [ 1396.247799][T19604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.283929][T13030] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1396.318048][T19603] tipc: Resetting bearer [ 1396.399200][T19603] tipc: Disabling bearer [ 1396.483619][T13030] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1396.493336][T13029] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1396.533815][T13030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.574940][T13030] usb 2-1: Product: syz [ 1396.579151][T13030] usb 2-1: Manufacturer: syz [ 1396.618244][T13030] usb 2-1: SerialNumber: syz [ 1396.654851][T13030] usb 2-1: config 0 descriptor?? [ 1396.702302][T13029] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1396.728574][T13029] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1396.804673][T13029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.828781][T13029] usb 1-1: Product: syz [ 1396.838880][T13029] usb 1-1: Manufacturer: syz [ 1396.844762][T13029] usb 1-1: SerialNumber: syz [ 1396.873119][T13029] usb 1-1: config 0 descriptor?? [ 1396.893029][T13030] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 1396.935748][T13030] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1396.983572][T13030] usb 2-1: USB disconnect, device number 47 [ 1397.264493][ T14] usb 1-1: USB disconnect, device number 66 [ 1397.491625][T19637] loop2: detected capacity change from 0 to 40427 [ 1397.627677][T19637] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1397.710917][T19637] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1399.819075][T15724] syz-executor: attempt to access beyond end of device [ 1399.819075][T15724] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1401.785998][ T4317] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1402.033342][ T4317] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1402.049757][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.098727][ T4317] usb 2-1: Product: syz [ 1402.142884][ T4317] usb 2-1: Manufacturer: syz [ 1402.147539][ T4317] usb 2-1: SerialNumber: syz [ 1402.193809][ T4317] usb 2-1: config 0 descriptor?? [ 1402.402252][T19710] loop2: detected capacity change from 0 to 40427 [ 1402.406055][ T4317] usb 2-1: USB disconnect, device number 48 [ 1402.457143][T19710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1402.498636][T19710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1403.593487][T15724] syz-executor: attempt to access beyond end of device [ 1403.593487][T15724] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1404.310149][T13030] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1404.463464][T19738] tipc: Enabling of bearer rejected, failed to enable media [ 1404.530189][T13030] usb 2-1: Using ep0 maxpacket: 32 [ 1404.537069][T13030] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1405.280274][T13030] usb 2-1: config 0 has no interface number 0 [ 1405.286436][T13030] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1405.297811][T13030] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1405.339551][T13030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.410058][T13030] usb 2-1: Product: syz [ 1405.414273][T13030] usb 2-1: Manufacturer: syz [ 1405.418965][T13030] usb 2-1: SerialNumber: syz [ 1405.476107][T13030] usb 2-1: config 0 descriptor?? [ 1406.269348][T13030] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1406.287140][T13030] usb 2-1: USB disconnect, device number 49 [ 1406.570944][T18533] udevd[18533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1406.632788][T19777] autofs4:pid:19777:autofs_fill_super: called with bogus options [ 1406.788753][T19780] vivid-004: disconnect [ 1406.793545][ T14] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1407.296311][ T14] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1407.353558][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.438589][ T14] usb 1-1: Product: syz [ 1407.534653][T19773] vivid-004: reconnect [ 1407.589641][ T14] usb 1-1: Manufacturer: syz [ 1407.616008][ T14] usb 1-1: SerialNumber: syz [ 1407.809629][ T14] usb 1-1: config 0 descriptor?? [ 1408.227785][ T14] usb 1-1: USB disconnect, device number 67 [ 1408.765088][T18653] udevd[18653]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.929516][T19808] IPv6: Can't replace route, no match found [ 1410.047154][T19820] autofs4:pid:19820:autofs_fill_super: called with bogus options [ 1410.227728][T19828] vivid-002: disconnect [ 1411.602575][T19838] vivid-002: reconnect [ 1411.996899][T19861] Bluetooth: MGMT ver 1.22 [ 1412.146275][ T14] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1412.240179][ T4309] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1412.345741][T19867] autofs4:pid:19867:autofs_fill_super: called with bogus options [ 1412.451195][ T4309] usb 3-1: Using ep0 maxpacket: 32 [ 1412.484804][ T4309] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1412.488906][ T14] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1412.497173][ T4309] usb 3-1: config 0 has no interface number 0 [ 1412.509077][ T4309] usb 3-1: config 0 interface 2 has no altsetting 0 [ 1412.529149][ T4309] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1412.538958][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.547119][ T4309] usb 3-1: Product: syz [ 1412.547485][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.552045][ T4309] usb 3-1: Manufacturer: syz [ 1412.552106][ T4309] usb 3-1: SerialNumber: syz [ 1412.595037][ T4309] usb 3-1: config 0 descriptor?? [ 1412.679431][ T14] usb 2-1: Product: syz [ 1412.699671][ T14] usb 2-1: Manufacturer: syz [ 1412.720445][ T14] usb 2-1: SerialNumber: syz [ 1412.741127][ T14] usb 2-1: config 0 descriptor?? [ 1412.850158][ T4309] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1412.907877][ T4309] usb 3-1: USB disconnect, device number 78 [ 1412.985919][T14794] usb 2-1: USB disconnect, device number 50 [ 1413.164343][T18653] udevd[18653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.264803][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.286895][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.308293][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.353911][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.408192][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.469455][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.489139][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.517501][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.571000][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1413.627673][T19886] kvm [19884]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 1414.489855][T13573] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1414.689033][T19937] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1414.703365][T19937] binder: 19932:19937 unknown command 1074553619 [ 1414.710450][T19937] binder: 19932:19937 ioctl c0306201 200000000540 returned -22 [ 1414.718240][T13573] usb 3-1: Using ep0 maxpacket: 8 [ 1414.749463][T13573] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1414.810468][ T4309] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1414.856157][T13573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.980742][T13573] usb 3-1: Product: syz [ 1415.019873][ T4309] usb 2-1: Using ep0 maxpacket: 32 [ 1415.031491][ T4309] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1415.059474][T13573] usb 3-1: Manufacturer: syz [ 1416.240481][T13573] usb 3-1: SerialNumber: syz [ 1416.266554][ T4309] usb 2-1: config 0 has no interface number 0 [ 1416.308179][T13573] usb 3-1: config 0 descriptor?? [ 1416.315513][ T4309] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1416.354630][T13573] gspca_main: se401-2.14.0 probing 047d:5003 [ 1416.391170][ T4309] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1416.402020][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.410430][ T4309] usb 2-1: Product: syz [ 1416.429436][ T4309] usb 2-1: Manufacturer: syz [ 1416.443415][ T4309] usb 2-1: SerialNumber: syz [ 1417.354433][T13573] gspca_se401: ExtraFeatures: 64 [ 1417.359865][T13573] gspca_se401: Too many frame sizes [ 1417.373481][ T4309] usb 2-1: config 0 descriptor?? [ 1417.625590][ T14] usb 3-1: USB disconnect, device number 79 [ 1417.925308][ T4309] snd-usb-audio: probe of 2-1:0.2 failed with error -2 [ 1417.972620][ T4309] usb 2-1: USB disconnect, device number 51 [ 1418.037255][T18533] udevd[18533]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.155788][T19950] loop3: detected capacity change from 0 to 40427 [ 1418.208855][T19958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1418.239266][T19950] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1418.297434][T19950] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1419.457798][T15314] syz-executor: attempt to access beyond end of device [ 1419.457798][T15314] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1420.688745][T19990] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1420.739172][T19981] binder: 19980:19981 unknown command 1074553619 [ 1420.745939][T19981] binder: 19980:19981 ioctl c0306201 200000000540 returned -22 [ 1421.214049][T19997] tipc: Started in network mode [ 1421.244430][T19997] tipc: Node identity 162591e30fad, cluster identity 4711 [ 1421.285010][T19997] tipc: Enabled bearer , priority 0 [ 1421.314002][T20004] device syzkaller0 entered promiscuous mode [ 1421.390490][T20013] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1422.824399][ T4309] tipc: Node number set to 428380643 [ 1422.899610][T19993] tipc: Resetting bearer [ 1423.100248][T19993] tipc: Disabling bearer [ 1423.132721][T20013] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1423.174571][T20023] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1425.215910][T20052] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4473'. [ 1425.229565][T20052] binder: 20041:20052 unknown command 1074553619 [ 1425.236593][T20052] binder: 20041:20052 ioctl c0306201 200000000540 returned -22 [ 1426.610802][T20080] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1426.709991][ T14] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1426.950236][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 1426.994694][ T14] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1427.148115][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.272484][ T14] usb 2-1: Product: syz [ 1427.363418][ T14] usb 2-1: Manufacturer: syz [ 1427.382309][ T14] usb 2-1: SerialNumber: syz [ 1427.562266][T20087] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4481'. [ 1427.591837][ T14] usb 2-1: config 0 descriptor?? [ 1427.614947][ T14] gspca_main: se401-2.14.0 probing 047d:5003 [ 1427.644304][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.650973][ T4282] Bluetooth: hci1: command 0x0405 tx timeout [ 1427.660095][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.554648][ T14] gspca_se401: ExtraFeatures: 64 [ 1428.566048][ T14] gspca_se401: Too many frame sizes [ 1428.741763][T20105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1428.764792][ T4344] usb 2-1: USB disconnect, device number 52 [ 1428.797183][T20105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1428.831002][T20105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1428.845209][T20105] device bridge_slave_0 left promiscuous mode [ 1428.868806][T20105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.920445][T20105] device bridge_slave_1 left promiscuous mode [ 1428.935868][T20105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.975181][T20105] bond0: (slave bond_slave_0): Releasing backup interface [ 1429.029409][T20105] bond0: (slave bond_slave_1): Releasing backup interface [ 1429.076907][T20105] team0: Port device team_slave_0 removed [ 1429.096697][T20105] team0: Port device team_slave_1 removed [ 1429.103476][T20105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.108029][ T14] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1429.129468][T20105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.139514][T20105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.147580][T20105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.165748][T20118] netlink: 'syz.3.4488': attribute type 10 has an invalid length. [ 1429.310371][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 1429.324965][ T14] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1429.501105][ T14] usb 5-1: config 0 has no interface number 0 [ 1429.532949][T20118] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1429.678879][ T14] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1429.790576][ T14] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1429.905294][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.920468][ T14] usb 5-1: Product: syz [ 1429.924673][ T14] usb 5-1: Manufacturer: syz [ 1429.929305][ T14] usb 5-1: SerialNumber: syz [ 1429.936301][ T14] usb 5-1: config 0 descriptor?? [ 1430.085716][T20136] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4494'. [ 1430.161690][T20130] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1430.417888][T20119] syz.3.4488 (20119) used greatest stack depth: 17952 bytes left [ 1430.457531][ T14] snd-usb-audio: probe of 5-1:0.2 failed with error -2 [ 1430.626898][ T14] usb 5-1: USB disconnect, device number 50 [ 1431.080827][T18533] udevd[18533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.529207][T20170] tipc: Started in network mode [ 1432.549592][T20170] tipc: Node identity ba4e6c601214, cluster identity 4711 [ 1432.559987][ T4309] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1432.564775][T20170] tipc: Enabled bearer , priority 0 [ 1432.577309][T20169] device syzkaller0 entered promiscuous mode [ 1432.665761][T20174] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4509'. [ 1432.700270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.722620][T20168] tipc: Resetting bearer [ 1432.728710][T20168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.777969][T20167] tipc: Resetting bearer [ 1432.783920][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 1432.793698][ T4309] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1432.833537][ T4309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.850699][ T4309] usb 1-1: Product: syz [ 1432.855247][ T4309] usb 1-1: Manufacturer: syz [ 1432.860188][ T4309] usb 1-1: SerialNumber: syz [ 1432.870902][ T4309] usb 1-1: config 0 descriptor?? [ 1432.892563][ T4309] gspca_main: se401-2.14.0 probing 047d:5003 [ 1432.985106][T20167] tipc: Disabling bearer [ 1433.295298][ T4309] gspca_se401: ExtraFeatures: 64 [ 1433.306354][ T4309] gspca_se401: Too many frame sizes [ 1433.480538][T20191] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4516'. [ 1433.510112][ T22] usb 1-1: USB disconnect, device number 68 [ 1436.340426][T20232] tipc: Enabled bearer , priority 0 [ 1436.358204][T20232] device syzkaller0 entered promiscuous mode [ 1436.395641][T20232] tipc: Resetting bearer [ 1436.440853][T20231] tipc: Resetting bearer [ 1436.490284][T20231] tipc: Disabling bearer [ 1436.937867][T20245] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4531'. [ 1437.880099][ C1] ================================================================== [ 1437.888211][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 1437.895788][ C1] Read of size 2 at addr ffff88805610602a by task syz-executor/14117 [ 1437.904077][ C1] [ 1437.906431][ C1] CPU: 1 PID: 14117 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 1437.914776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1437.924890][ C1] Call Trace: [ 1437.928176][ C1] [ 1437.931023][ C1] dump_stack_lvl+0x168/0x22e [ 1437.935720][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 1437.940763][ C1] ? show_regs_print_info+0x12/0x12 [ 1437.945976][ C1] ? load_image+0x3b0/0x3b0 [ 1437.950509][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1437.955921][ C1] ? __virt_addr_valid+0x188/0x540 [ 1437.961051][ C1] ? __virt_addr_valid+0x465/0x540 [ 1437.966178][ C1] ? rose_timer_expiry+0x470/0x490 [ 1437.971313][ C1] print_report+0xa8/0x200 [ 1437.975843][ C1] kasan_report+0x10b/0x140 [ 1437.980376][ C1] ? rose_timer_expiry+0x470/0x490 [ 1437.985522][ C1] rose_timer_expiry+0x470/0x490 [ 1437.990495][ C1] call_timer_fn+0x1a0/0x670 [ 1437.995093][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1438.000135][ C1] ? call_timer_fn+0xc1/0x670 [ 1438.004831][ C1] ? __run_timers+0x7c0/0x7c0 [ 1438.009533][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1438.014757][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1438.020042][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1438.025081][ C1] __run_timers+0x525/0x7c0 [ 1438.029602][ C1] ? detach_timer+0x350/0x350 [ 1438.034395][ C1] ? lock_chain_count+0x20/0x20 [ 1438.039310][ C1] run_timer_softirq+0x63/0xf0 [ 1438.044107][ C1] handle_softirqs+0x2a1/0x920 [ 1438.048899][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1438.053782][ C1] ? do_softirq+0x200/0x200 [ 1438.058310][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1438.063536][ C1] __irq_exit_rcu+0x12f/0x220 [ 1438.068247][ C1] ? irq_exit_rcu+0x20/0x20 [ 1438.072795][ C1] irq_exit_rcu+0x5/0x20 [ 1438.077058][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1438.082714][ C1] [ 1438.085658][ C1] [ 1438.088601][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1438.094605][ C1] RIP: 0010:page_table_check_set+0x253/0x6d0 [ 1438.100618][ C1] Code: 04 00 00 00 e8 2e d2 f5 ff 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 00 01 00 00 41 8b 6d 00 <31> ff 89 ee e8 54 b7 a5 ff 85 ed 0f 85 8d 01 00 00 49 8d 7d 04 be [ 1438.120267][ C1] RSP: 0018:ffffc90003fbf510 EFLAGS: 00000246 [ 1438.126620][ C1] RAX: 0000000000000000 RBX: 1ffffffff1986f04 RCX: dffffc0000000000 [ 1438.134609][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801b124408 [ 1438.142598][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003624882 [ 1438.150597][ C1] R10: ffffed1003624882 R11: 1ffff11003624881 R12: 0000000000000000 [ 1438.158590][ C1] R13: ffff88801b124408 R14: 0000000000000000 R15: ffff88801b1243c8 [ 1438.166592][ C1] copy_page_range+0x26b3/0x39e0 [ 1438.171582][ C1] ? pfn_valid+0x450/0x450 [ 1438.176025][ C1] ? preempt_count_add+0x8d/0x190 [ 1438.181072][ C1] ? preempt_count_add+0x8d/0x190 [ 1438.186125][ C1] ? up_write+0x1bb/0x420 [ 1438.190481][ C1] ? vma_interval_tree_insert_after+0x245/0x2a0 [ 1438.196748][ C1] copy_mm+0xde1/0x15c0 [ 1438.200933][ C1] ? copy_signal+0x680/0x680 [ 1438.205576][ C1] ? lockdep_init_map_type+0x9d/0x880 [ 1438.210981][ C1] ? __init_rwsem+0x11e/0x160 [ 1438.215682][ C1] ? copy_signal+0x556/0x680 [ 1438.220312][ C1] copy_process+0x1953/0x4020 [ 1438.225013][ C1] ? copy_process+0x91f/0x4020 [ 1438.229897][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1438.235302][ C1] ? idle_dummy+0x10/0x10 [ 1438.239652][ C1] ? do_wp_page+0x807/0x1680 [ 1438.244355][ C1] kernel_clone+0x225/0x8b0 [ 1438.248889][ C1] ? handle_mm_fault+0x1367/0x3e70 [ 1438.254009][ C1] ? create_io_thread+0x120/0x120 [ 1438.259027][ C1] ? do_user_addr_fault+0x77d/0xb10 [ 1438.264216][ C1] __x64_sys_clone+0x17c/0x1d0 [ 1438.269060][ C1] ? __ia32_sys_vfork+0x100/0x100 [ 1438.274077][ C1] ? lock_chain_count+0x20/0x20 [ 1438.279010][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1438.284208][ C1] do_syscall_64+0x4c/0xa0 [ 1438.288633][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1438.293296][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1438.297958][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1438.303845][ C1] RIP: 0033:0x7f0ce3185453 [ 1438.308256][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1438.327860][ C1] RSP: 002b:00007ffcb4d98908 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1438.336361][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0ce3185453 [ 1438.344500][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1438.352464][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1438.360427][ C1] R10: 0000555575c117d0 R11: 0000000000000246 R12: 0000000000000000 [ 1438.368468][ C1] R13: 00000000000927c0 R14: 000000000015f19f R15: 00007ffcb4d98aa0 [ 1438.376441][ C1] [ 1438.379449][ C1] [ 1438.381762][ C1] Allocated by task 20105: [ 1438.386155][ C1] kasan_set_track+0x4b/0x70 [ 1438.390823][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1438.395399][ C1] __kmalloc_node_track_caller+0xae/0x230 [ 1438.401108][ C1] __alloc_skb+0x22a/0x7e0 [ 1438.405511][ C1] fdb_notify+0xa6/0x160 [ 1438.409743][ C1] fdb_delete+0xd52/0x10f0 [ 1438.414150][ C1] br_fdb_delete_by_port+0x246/0x310 [ 1438.419451][ C1] del_nbp+0x664/0xb40 [ 1438.423527][ C1] br_del_if+0x15d/0x330 [ 1438.427858][ C1] do_setlink+0xe3c/0x3c40 [ 1438.432271][ C1] rtnl_newlink+0x10a3/0x1ff0 [ 1438.436939][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1438.442315][ C1] netlink_rcv_skb+0x1de/0x420 [ 1438.447075][ C1] netlink_unicast+0x74d/0x8d0 [ 1438.451827][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1438.456592][ C1] ____sys_sendmsg+0x59b/0x970 [ 1438.461343][ C1] ___sys_sendmsg+0x21c/0x290 [ 1438.466008][ C1] __se_sys_sendmsg+0x19e/0x270 [ 1438.470850][ C1] do_syscall_64+0x4c/0xa0 [ 1438.475337][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1438.481238][ C1] [ 1438.483554][ C1] Freed by task 20105: [ 1438.487700][ C1] kasan_set_track+0x4b/0x70 [ 1438.492283][ C1] kasan_save_free_info+0x2d/0x50 [ 1438.497296][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1438.502393][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 1438.507845][ C1] __kmem_cache_free+0xb6/0x1f0 [ 1438.512684][ C1] skb_release_data+0x5db/0x7c0 [ 1438.517536][ C1] consume_skb+0xa2/0x100 [ 1438.521852][ C1] netlink_broadcast+0xfd6/0x10d0 [ 1438.526948][ C1] nlmsg_notify+0xe7/0x1a0 [ 1438.531348][ C1] fdb_delete+0xd52/0x10f0 [ 1438.535745][ C1] br_fdb_delete_by_port+0x246/0x310 [ 1438.541014][ C1] del_nbp+0x664/0xb40 [ 1438.545068][ C1] br_del_if+0x15d/0x330 [ 1438.549305][ C1] do_setlink+0xe3c/0x3c40 [ 1438.553718][ C1] rtnl_newlink+0x10a3/0x1ff0 [ 1438.558386][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1438.563400][ C1] netlink_rcv_skb+0x1de/0x420 [ 1438.568241][ C1] netlink_unicast+0x74d/0x8d0 [ 1438.572993][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1438.577745][ C1] ____sys_sendmsg+0x59b/0x970 [ 1438.582496][ C1] ___sys_sendmsg+0x21c/0x290 [ 1438.587163][ C1] __se_sys_sendmsg+0x19e/0x270 [ 1438.592025][ C1] do_syscall_64+0x4c/0xa0 [ 1438.596428][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1438.602311][ C1] [ 1438.604617][ C1] Last potentially related work creation: [ 1438.610331][ C1] kasan_save_stack+0x3a/0x60 [ 1438.614995][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1438.620444][ C1] insert_work+0x54/0x3c0 [ 1438.625020][ C1] __queue_work+0xba3/0xfb0 [ 1438.629510][ C1] call_timer_fn+0x1a0/0x670 [ 1438.634090][ C1] __run_timers+0x550/0x7c0 [ 1438.638580][ C1] run_timer_softirq+0x63/0xf0 [ 1438.643384][ C1] handle_softirqs+0x2a1/0x920 [ 1438.648143][ C1] __irq_exit_rcu+0x12f/0x220 [ 1438.652814][ C1] irq_exit_rcu+0x5/0x20 [ 1438.657133][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1438.662753][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1438.668737][ C1] [ 1438.671047][ C1] Second to last potentially related work creation: [ 1438.677618][ C1] kasan_save_stack+0x3a/0x60 [ 1438.682284][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1438.687647][ C1] kvfree_call_rcu+0x108/0x870 [ 1438.692408][ C1] __ipv6_dev_mc_dec+0x2c8/0x330 [ 1438.697333][ C1] __ipv6_ifa_notify+0x710/0xdb0 [ 1438.702262][ C1] addrconf_ifdown+0xe9a/0x1a10 [ 1438.707099][ C1] addrconf_notify+0x405/0xf40 [ 1438.711853][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1438.717206][ C1] dev_close_many+0x28d/0x400 [ 1438.721869][ C1] unregister_netdevice_many+0x471/0x1840 [ 1438.727575][ C1] rtnl_dellink+0x3e5/0x730 [ 1438.732066][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1438.736993][ C1] netlink_rcv_skb+0x1de/0x420 [ 1438.741852][ C1] netlink_unicast+0x74d/0x8d0 [ 1438.746599][ C1] netlink_sendmsg+0x89e/0xbc0 [ 1438.751378][ C1] ____sys_sendmsg+0x59b/0x970 [ 1438.756132][ C1] ___sys_sendmsg+0x21c/0x290 [ 1438.760797][ C1] __se_sys_sendmsg+0x19e/0x270 [ 1438.765636][ C1] do_syscall_64+0x4c/0xa0 [ 1438.770043][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1438.775938][ C1] [ 1438.778246][ C1] The buggy address belongs to the object at ffff888056106000 [ 1438.778246][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1438.792290][ C1] The buggy address is located 42 bytes inside of [ 1438.792290][ C1] 512-byte region [ffff888056106000, ffff888056106200) [ 1438.805467][ C1] [ 1438.807777][ C1] The buggy address belongs to the physical page: [ 1438.814186][ C1] page:ffffea0001584100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56104 [ 1438.824418][ C1] head:ffffea0001584100 order:2 compound_mapcount:0 compound_pincount:0 [ 1438.832726][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1438.840705][ C1] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017441c80 [ 1438.849270][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1438.857837][ C1] page dumped because: kasan: bad access detected [ 1438.864241][ C1] page_owner tracks the page as allocated [ 1438.869955][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4264, tgid 4264 (syz-executor), ts 60791560448, free_ts 12981489109 [ 1438.891330][ C1] post_alloc_hook+0x173/0x1a0 [ 1438.896098][ C1] get_page_from_freelist+0x1a26/0x1ac0 [ 1438.901639][ C1] __alloc_pages+0x1df/0x4e0 [ 1438.906256][ C1] alloc_slab_page+0x5d/0x160 [ 1438.910916][ C1] new_slab+0x87/0x2c0 [ 1438.914970][ C1] ___slab_alloc+0xbc6/0x1220 [ 1438.919647][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1438.925109][ C1] __kmalloc+0xa0/0x240 [ 1438.929268][ C1] fib6_info_alloc+0x2e/0xe0 [ 1438.933951][ C1] ip6_route_info_create+0x44f/0x1210 [ 1438.939314][ C1] addrconf_f6i_alloc+0x1b9/0x3f0 [ 1438.944323][ C1] ipv6_add_addr+0x43a/0xf90 [ 1438.948900][ C1] inet6_addr_add+0x43b/0x9b0 [ 1438.953561][ C1] inet6_rtm_newaddr+0x617/0x870 [ 1438.958484][ C1] rtnetlink_rcv_msg+0x79b/0xed0 [ 1438.963416][ C1] netlink_rcv_skb+0x1de/0x420 [ 1438.968163][ C1] page last free stack trace: [ 1438.972815][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 1438.978259][ C1] free_unref_page+0x2e/0x3f0 [ 1438.982923][ C1] free_contig_range+0x9d/0x150 [ 1438.987793][ C1] destroy_args+0xef/0x8bf [ 1438.992200][ C1] debug_vm_pgtable+0x32a/0x37e [ 1438.997056][ C1] do_one_initcall+0x214/0x7a0 [ 1439.001827][ C1] do_initcall_level+0x137/0x1e4 [ 1439.006758][ C1] do_initcalls+0x4b/0x8a [ 1439.011080][ C1] kernel_init_freeable+0x3fa/0x5ac [ 1439.016264][ C1] kernel_init+0x19/0x1b0 [ 1439.020584][ C1] ret_from_fork+0x1f/0x30 [ 1439.024990][ C1] [ 1439.027336][ C1] Memory state around the buggy address: [ 1439.032951][ C1] ffff888056105f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1439.041089][ C1] ffff888056105f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1439.049134][ C1] >ffff888056106000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1439.057176][ C1] ^ [ 1439.062538][ C1] ffff888056106080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1439.070596][ C1] ffff888056106100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1439.078733][ C1] ================================================================== [ 1439.086872][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1439.094053][ C1] CPU: 1 PID: 14117 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 1439.102376][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1439.112503][ C1] Call Trace: [ 1439.115774][ C1] [ 1439.118604][ C1] dump_stack_lvl+0x168/0x22e [ 1439.123269][ C1] ? memcpy+0x3c/0x60 [ 1439.127241][ C1] ? show_regs_print_info+0x12/0x12 [ 1439.132420][ C1] ? load_image+0x3b0/0x3b0 [ 1439.136911][ C1] panic+0x2c9/0x710 [ 1439.140794][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 1439.146932][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1439.151423][ C1] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1439.157303][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1439.163181][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1439.168023][ C1] check_panic_on_warn+0x80/0xa0 [ 1439.172951][ C1] ? rose_timer_expiry+0x470/0x490 [ 1439.178048][ C1] end_report+0x66/0x110 [ 1439.182279][ C1] kasan_report+0x118/0x140 [ 1439.186775][ C1] ? rose_timer_expiry+0x470/0x490 [ 1439.191877][ C1] rose_timer_expiry+0x470/0x490 [ 1439.196805][ C1] call_timer_fn+0x1a0/0x670 [ 1439.201379][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1439.206412][ C1] ? call_timer_fn+0xc1/0x670 [ 1439.211097][ C1] ? __run_timers+0x7c0/0x7c0 [ 1439.215779][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1439.220969][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1439.226154][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1439.231175][ C1] __run_timers+0x525/0x7c0 [ 1439.235668][ C1] ? detach_timer+0x350/0x350 [ 1439.240380][ C1] ? lock_chain_count+0x20/0x20 [ 1439.245236][ C1] run_timer_softirq+0x63/0xf0 [ 1439.250004][ C1] handle_softirqs+0x2a1/0x920 [ 1439.254782][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 1439.259637][ C1] ? do_softirq+0x200/0x200 [ 1439.264146][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1439.269334][ C1] __irq_exit_rcu+0x12f/0x220 [ 1439.274009][ C1] ? irq_exit_rcu+0x20/0x20 [ 1439.278504][ C1] irq_exit_rcu+0x5/0x20 [ 1439.282734][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1439.288441][ C1] [ 1439.291358][ C1] [ 1439.294280][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1439.300248][ C1] RIP: 0010:page_table_check_set+0x253/0x6d0 [ 1439.306225][ C1] Code: 04 00 00 00 e8 2e d2 f5 ff 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 00 01 00 00 41 8b 6d 00 <31> ff 89 ee e8 54 b7 a5 ff 85 ed 0f 85 8d 01 00 00 49 8d 7d 04 be [ 1439.326002][ C1] RSP: 0018:ffffc90003fbf510 EFLAGS: 00000246 [ 1439.332058][ C1] RAX: 0000000000000000 RBX: 1ffffffff1986f04 RCX: dffffc0000000000 [ 1439.340022][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801b124408 [ 1439.347985][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1003624882 [ 1439.355951][ C1] R10: ffffed1003624882 R11: 1ffff11003624881 R12: 0000000000000000 [ 1439.363905][ C1] R13: ffff88801b124408 R14: 0000000000000000 R15: ffff88801b1243c8 [ 1439.371881][ C1] copy_page_range+0x26b3/0x39e0 [ 1439.376832][ C1] ? pfn_valid+0x450/0x450 [ 1439.381246][ C1] ? preempt_count_add+0x8d/0x190 [ 1439.386352][ C1] ? preempt_count_add+0x8d/0x190 [ 1439.391368][ C1] ? up_write+0x1bb/0x420 [ 1439.395684][ C1] ? vma_interval_tree_insert_after+0x245/0x2a0 [ 1439.401913][ C1] copy_mm+0xde1/0x15c0 [ 1439.406063][ C1] ? copy_signal+0x680/0x680 [ 1439.410724][ C1] ? lockdep_init_map_type+0x9d/0x880 [ 1439.416092][ C1] ? __init_rwsem+0x11e/0x160 [ 1439.420766][ C1] ? copy_signal+0x556/0x680 [ 1439.425435][ C1] copy_process+0x1953/0x4020 [ 1439.430103][ C1] ? copy_process+0x91f/0x4020 [ 1439.434851][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1439.440055][ C1] ? idle_dummy+0x10/0x10 [ 1439.444373][ C1] ? do_wp_page+0x807/0x1680 [ 1439.448955][ C1] kernel_clone+0x225/0x8b0 [ 1439.453443][ C1] ? handle_mm_fault+0x1367/0x3e70 [ 1439.458551][ C1] ? create_io_thread+0x120/0x120 [ 1439.463561][ C1] ? do_user_addr_fault+0x77d/0xb10 [ 1439.468749][ C1] __x64_sys_clone+0x17c/0x1d0 [ 1439.473588][ C1] ? __ia32_sys_vfork+0x100/0x100 [ 1439.478601][ C1] ? lock_chain_count+0x20/0x20 [ 1439.483445][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1439.488660][ C1] do_syscall_64+0x4c/0xa0 [ 1439.493062][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1439.497724][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1439.502386][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1439.508274][ C1] RIP: 0033:0x7f0ce3185453 [ 1439.512676][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1439.532368][ C1] RSP: 002b:00007ffcb4d98908 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1439.540770][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0ce3185453 [ 1439.548728][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1439.556685][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1439.564641][ C1] R10: 0000555575c117d0 R11: 0000000000000246 R12: 0000000000000000 [ 1439.572776][ C1] R13: 00000000000927c0 R14: 000000000015f19f R15: 00007ffcb4d98aa0 [ 1439.580753][ C1] [ 1439.583997][ C1] Kernel Offset: disabled [ 1439.588306][ C1] Rebooting in 86400 seconds..