last executing test programs: 5m58.266923366s ago: executing program 0 (id=2225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x800, 0x8) 5m57.285020962s ago: executing program 0 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)) 5m57.076332306s ago: executing program 0 (id=2228): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 5m55.936112564s ago: executing program 0 (id=2230): syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffbfffc0) getpgid(0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xfc) 5m55.762759097s ago: executing program 0 (id=2232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x6b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 5m51.999147628s ago: executing program 0 (id=2241): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5f, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) shutdown(r2, 0x1) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fspick(r3, &(0x7f0000000000)='.\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 5m36.46167566s ago: executing program 32 (id=2241): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5f, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) shutdown(r2, 0x1) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fspick(r3, &(0x7f0000000000)='.\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 25.518145817s ago: executing program 1 (id=2953): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x3106, 0xa04, 0x10002, 0x1fffffc}, &(0x7f0000000380), &(0x7f0000000180)) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) socket$inet_udp(0x2, 0x2, 0x0) 23.835201754s ago: executing program 1 (id=2957): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', 0xffffffffffffffff, 0x0, 0x417}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 19.760372318s ago: executing program 1 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r0 = open$dir(0x0, 0x200800, 0x150) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000004c0)=@v1={0x0, @adiantum, 0x3, @desc3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$loop(&(0x7f00000013c0), 0x3, 0x10b242) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2, r8], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x2]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000069047d08bf0a70330e03000000010902120001000000000904000000b5bc6500"], 0x0) 15.492060075s ago: executing program 4 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 15.485691066s ago: executing program 1 (id=2977): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 14.520647311s ago: executing program 4 (id=2978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x20a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000], 0xdddd1000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.214921286s ago: executing program 1 (id=2979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x6b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 14.125755118s ago: executing program 3 (id=2980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000000c0)={0x4, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x800, 0x8) 13.088970914s ago: executing program 3 (id=2981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') pidfd_getfd(0xffffffffffffffff, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, "25cac521"}}]}, 0x140}}, 0x0) 13.073841784s ago: executing program 4 (id=2982): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x2800000, 0x1) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) 12.087626639s ago: executing program 3 (id=2983): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r0 = syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x3106, 0xa04, 0x10002, 0x1fffffc}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newlink={0xa0, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x4000}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0xa0}}, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x0) 11.792677414s ago: executing program 4 (id=2984): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdc}}, 0x3, 0x0, 0x825e, 0x0, 0x22, 0x1, 0xff}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/16, 0x10, 0xfff9, 0x0, 0x203}}, 0x11c) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000080)=0x7ffc, 0x4) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0xc0fe, &(0x7f0000000100)={0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}, 0x1c) 11.104249645s ago: executing program 3 (id=2986): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90002, 0x80) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000000)='ntfs3\x00', 0x2308004, 0x0) 10.14574302s ago: executing program 3 (id=2987): socket$packet(0x11, 0xa, 0x300) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x8002) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) 10.1369776s ago: executing program 1 (id=2988): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8.820391901s ago: executing program 2 (id=2904): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) 8.472079836s ago: executing program 2 (id=2992): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xff21) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) 7.531601071s ago: executing program 2 (id=2993): sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000009) lseek(r0, 0x8, 0x4) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x2800000, 0x1) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) 7.260752805s ago: executing program 3 (id=2994): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002280), 0x8080, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000002440)=""/1, 0x1}], 0x1, 0x5, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x97) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106f50000000000000007"], 0x18}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}]}]}]}, 0x44}}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) r8 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40, 0xe2, 0x8}, 0x18) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000140)='nl80211\x00', &(0x7f0000000180)="2f1b8621f4e1e73fc23625733d087024e8ce8d999f26", 0x16) 7.079514928s ago: executing program 5 (id=2995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x10, r6) ptrace(0x420e, r6) fcntl$lock(r4, 0x25, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf250500a4b81b887a1fe6023d125df1631d44e60000081309000200000008000c00aa0a0008000001000500000008000b00020000000500120001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c181}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="200028bd7000fbdbdf2501000000050006000900000014001f00fe8000000000000000000000000000aa0500070003000000140020002001000000000000000000000000000108001700", @ANYRES32=r5], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20044044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r8 = getpid() kcmp(r8, r8, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) socket$packet(0x11, 0x3, 0x300) 5.930084256s ago: executing program 2 (id=2996): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x7fff, 0x400040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x3c, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) userfaultfd(0x80801) removexattr(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="73797374656d2e405c3a00b57640109cd3dcbadf2ff0dca56ff2ac52b91ab90145b76092a12e508f97dc9b000000000000aab0af793e6d52d7e110b83a9367981c19045ef32c3c2415e6916a625caddcceae8d"]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, 0x0, 0x0) r6 = openat$nvram(0xffffff9c, &(0x7f0000000140), 0x80000, 0x0) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="31679acf7906605bb9c47e81851e0a045d7ddd3480c4f12a8bdefcde4d785727685501dd93ec4cbb564aebb55e05c8e238d8fddf973c424eeee641a7e1ed9f93febdbd3dcdb4b821969cc730332710b3496121b9d6370815830062a308965bcd92e3b64734c391d278fc41b5f209ef707afa32bba79f6c037a295af5a7fe90c95fae9accb56ab1cb8303d2", 0x8b, 0x8, 0x0, 0x1, r6}, &(0x7f00000001c0)) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1) socket$kcm(0x29, 0x5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r7) 5.640313191s ago: executing program 5 (id=2997): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90002, 0x80) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./file2\x00', &(0x7f0000000000)='ntfs3\x00', 0x2308004, 0x0) 5.566032382s ago: executing program 4 (id=2998): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0x6b1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x2c9ab000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x7, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}}, 0x88) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 4.503495709s ago: executing program 5 (id=2999): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) io_submit(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.228105935s ago: executing program 4 (id=3000): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04fd02b9c900c9ced053c5c2aa00005113"], 0xe) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01032dbd7000fedb4a201c000000"], 0x14}}, 0x10) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) getpid() 2.092050247s ago: executing program 5 (id=3001): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.90395336s ago: executing program 2 (id=3002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0xff21) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000140)='./file1\x00', 0xd3) 1.388662298s ago: executing program 5 (id=3003): socket$packet(0x11, 0xa, 0x300) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x8002) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) 430.027723ms ago: executing program 2 (id=3004): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000880), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x40}, 0x18, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) dup(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) fchdir(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) 0s ago: executing program 5 (id=3005): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xcc83, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 has no interface number 2 [ 733.078167][ T4300] Bluetooth: (null): Invalid header checksum [ 733.083348][ T398] Bluetooth: (null): Invalid header checksum [ 733.106841][ T4298] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 733.159136][ T4300] Bluetooth: (null): Invalid header checksum [ 733.193565][ T398] Bluetooth: (null): Invalid header checksum [ 733.215709][ T4300] Bluetooth: (null): Invalid header checksum [ 733.229804][ T4298] usb 2-1: config 220 interface 0 has no altsetting 0 [ 733.242956][ T1108] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 733.255901][ T4300] Bluetooth: (null): Invalid header checksum [ 733.272335][ T4298] usb 2-1: config 220 interface 76 has no altsetting 0 [ 733.289882][ T4300] Bluetooth: (null): Invalid header checksum [ 733.303234][ T398] Bluetooth: (null): Invalid header checksum [ 733.311781][ T4298] usb 2-1: config 220 interface 1 has no altsetting 0 [ 733.318979][ T4300] Bluetooth: (null): Invalid header checksum [ 733.346767][ T4300] Bluetooth: (null): Invalid header checksum [ 733.368871][ T4300] Bluetooth: (null): Invalid header checksum [ 733.392187][ T4300] Bluetooth: (null): Invalid header checksum [ 733.413357][ T154] Bluetooth: (null): Invalid header checksum [ 733.423962][ T4300] Bluetooth: (null): Invalid header checksum [ 733.450387][ T4300] Bluetooth: (null): Invalid header checksum [ 733.476310][ T4300] Bluetooth: (null): Invalid header checksum [ 733.492960][ T4298] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 733.508495][ T4300] Bluetooth: (null): Invalid header checksum [ 733.523206][ T154] Bluetooth: (null): Invalid header checksum [ 733.529425][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.554861][ T4300] Bluetooth: (null): Invalid header checksum [ 733.593828][ T4298] usb 2-1: Product: syz [ 733.598042][ T4298] usb 2-1: Manufacturer: syz [ 733.623597][ T4300] Bluetooth: (null): Invalid header checksum [ 733.629774][ T4300] Bluetooth: (null): Invalid header checksum [ 733.646174][ T4298] usb 2-1: SerialNumber: syz [ 733.655175][ T4300] Bluetooth: (null): Invalid header checksum [ 733.665697][ T154] Bluetooth: (null): Invalid header checksum [ 733.703302][ T1108] usb 4-1: config index 0 descriptor too short (expected 12147, got 77) [ 733.713993][ T1108] usb 4-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 733.733022][ T4300] Bluetooth: (null): Invalid header checksum [ 733.758948][ T4300] Bluetooth: (null): Invalid header checksum [ 733.783729][ T4300] Bluetooth: (null): Invalid header checksum [ 733.802981][ T4298] usb 2-1: can't set config #220, error -71 [ 733.925815][ T1108] usb 4-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 733.944697][ T1108] usb 4-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 733.964653][ T4400] Bluetooth: (null): Invalid header checksum [ 733.976944][ T4400] Bluetooth: (null): Invalid header checksum [ 733.994081][ T4298] usb 2-1: USB disconnect, device number 38 [ 733.997676][ T4300] Bluetooth: (null): Invalid header checksum [ 734.010301][ T4400] Bluetooth: (null): Invalid header checksum [ 734.030441][ T4300] Bluetooth: (null): Invalid header checksum [ 734.047089][ T4300] Bluetooth: (null): Invalid header checksum [ 734.083675][ T4400] Bluetooth: (null): Invalid header checksum [ 734.123651][ T4300] Bluetooth: (null): Invalid header checksum [ 734.183142][ T1108] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 734.245747][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.422984][ T1108] usb 4-1: Product: syz [ 734.427351][ T1108] usb 4-1: Manufacturer: syz [ 734.432135][ T1108] usb 4-1: SerialNumber: syz [ 734.881002][ T4300] Bluetooth: (null): Invalid header checksum [ 734.882465][ T4400] Bluetooth: (null): Invalid header checksum [ 734.902870][ T4400] Bluetooth: (null): Invalid header checksum [ 734.909334][ T4400] Bluetooth: (null): Invalid header checksum [ 734.916990][ T4400] Bluetooth: (null): Invalid header checksum [ 734.923141][ T4400] Bluetooth: (null): Invalid header checksum [ 734.929290][ T4400] Bluetooth: (null): Invalid header checksum [ 734.935520][ T4400] Bluetooth: (null): Invalid header checksum [ 734.997207][ T4400] Bluetooth: (null): Invalid header checksum [ 735.029436][ T4300] Bluetooth: (null): Invalid header checksum [ 735.068816][ T4300] Bluetooth: (null): Invalid header checksum [ 735.104183][ T4400] Bluetooth: (null): Invalid header checksum [ 735.125580][ T4300] Bluetooth: (null): Invalid header checksum [ 735.214834][ T154] Bluetooth: (null): Invalid header checksum [ 735.309481][ T4300] Bluetooth: (null): Invalid header checksum [ 735.323917][ T154] Bluetooth: (null): Invalid header checksum [ 735.436820][ T4400] Bluetooth: (null): Invalid header checksum [ 735.634556][ T4300] Bluetooth: (null): Invalid header checksum [ 736.094756][ T4400] Bluetooth: (null): Invalid header checksum [ 736.136566][ T4300] Bluetooth: (null): Invalid header checksum [ 736.166342][ T4300] Bluetooth: (null): Invalid header checksum [ 736.308697][ T4400] Bluetooth: (null): Invalid header checksum [ 736.318294][ T4400] Bluetooth: (null): Invalid header checksum [ 736.324417][ T4300] Bluetooth: (null): Invalid header checksum [ 736.331304][ T4300] Bluetooth: (null): Invalid header checksum [ 736.331395][ T4400] Bluetooth: (null): Invalid header checksum [ 736.685736][ T4300] Bluetooth: (null): Invalid header checksum [ 736.692237][ T4300] Bluetooth: (null): Invalid header checksum [ 736.698834][ T4300] Bluetooth: (null): Invalid header checksum [ 736.705855][ T4300] Bluetooth: (null): Invalid header checksum [ 736.711949][ T4300] Bluetooth: (null): Invalid header checksum [ 736.718594][ T4300] Bluetooth: (null): Invalid header checksum [ 736.725080][ T4300] Bluetooth: (null): Invalid header checksum [ 736.731281][ T4300] Bluetooth: (null): Invalid header checksum [ 736.743434][ T4300] Bluetooth: (null): Invalid header checksum [ 737.521497][ T4400] Bluetooth: (null): Invalid header checksum [ 737.528790][T11382] ptrace attach of "./syz-executor exec"[4172] was attempted by ""[11382] [ 737.533046][ T4400] Bluetooth: (null): Invalid header checksum [ 737.563142][ T4400] Bluetooth: (null): Invalid header checksum [ 737.567410][ T4300] Bluetooth: (null): Invalid header checksum [ 737.573492][ T4400] Bluetooth: (null): Invalid header checksum [ 737.582962][ T4400] Bluetooth: (null): Invalid header checksum [ 737.589254][ T4400] Bluetooth: (null): Invalid header checksum [ 737.603102][ T4400] Bluetooth: (null): Invalid header checksum [ 737.609282][ T4400] Bluetooth: (null): Invalid header checksum [ 737.653094][ T4400] Bluetooth: (null): Invalid header checksum [ 737.659196][ T4400] Bluetooth: (null): Invalid header checksum [ 737.670527][ T4300] Bluetooth: (null): Invalid header checksum [ 737.704775][ T4300] Bluetooth: (null): Invalid header checksum [ 738.306783][ T4303] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 738.398554][ T4300] Bluetooth: (null): Invalid header checksum [ 738.481034][ T4300] Bluetooth: (null): Invalid header checksum [ 739.045002][ T4300] Bluetooth: (null): Invalid header checksum [ 739.051120][ T4300] Bluetooth: (null): Invalid header checksum [ 739.062846][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 739.111537][ T4400] Bluetooth: (null): Invalid header checksum [ 739.117934][ T4303] usb 5-1: no configurations [ 739.143076][ T4300] Bluetooth: (null): Invalid header checksum [ 739.150046][ T4303] usb 5-1: can't read configurations, error -22 [ 739.166848][ T4400] Bluetooth: (null): Invalid header checksum [ 739.189908][ T4300] Bluetooth: (null): Invalid header checksum [ 739.196159][ T4400] Bluetooth: (null): Invalid header checksum [ 739.200077][ T4300] Bluetooth: (null): Invalid header checksum [ 739.225374][ T4300] Bluetooth: (null): Invalid header checksum [ 739.231480][ T4300] Bluetooth: (null): Invalid header checksum [ 739.241882][T11403] netlink: 'syz.0.2059': attribute type 10 has an invalid length. [ 739.250702][ T4400] Bluetooth: (null): Invalid header checksum [ 739.270487][ T4300] Bluetooth: (null): Invalid header checksum [ 739.277285][ T4400] Bluetooth: (null): Invalid header checksum [ 739.300970][ T4400] Bluetooth: (null): Invalid header checksum [ 739.300970][ T4300] Bluetooth: (null): Invalid header checksum [ 739.301041][ T4300] Bluetooth: (null): Invalid header checksum [ 739.327162][ T4400] Bluetooth: (null): Invalid header checksum [ 739.343042][ T4303] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 739.379864][ T4400] Bluetooth: (null): Invalid header checksum [ 739.405634][ T4300] Bluetooth: (null): Invalid header checksum [ 739.411703][ T4300] Bluetooth: (null): Invalid header checksum [ 739.412874][ T4400] Bluetooth: (null): Invalid header checksum [ 739.452998][ T4400] Bluetooth: (null): Invalid header checksum [ 739.479869][ T4400] Bluetooth: (null): Invalid header checksum [ 739.495462][ T4400] Bluetooth: (null): Invalid header checksum [ 739.511887][ T4300] Bluetooth: (null): Invalid header checksum [ 739.518527][ T4400] Bluetooth: (null): Invalid header checksum [ 739.532951][ T4400] Bluetooth: (null): Invalid header checksum [ 739.563124][ T4300] Bluetooth: (null): Invalid header checksum [ 739.569551][ T4400] Bluetooth: (null): Invalid header checksum [ 739.602914][ T4300] Bluetooth: (null): Invalid header checksum [ 739.602974][ T4400] Bluetooth: (null): Invalid header checksum [ 739.608961][ T4300] Bluetooth: (null): Invalid header checksum [ 739.615167][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 739.666562][ T4400] Bluetooth: (null): Invalid header checksum [ 739.693019][ T4303] usb 5-1: no configurations [ 739.697794][ T4303] usb 5-1: can't read configurations, error -22 [ 739.713224][ T4300] Bluetooth: (null): Invalid header checksum [ 739.714451][ T4400] Bluetooth: (null): Invalid header checksum [ 739.719367][ T4300] Bluetooth: (null): Invalid header checksum [ 739.732939][ T4303] usb usb5-port1: attempt power cycle [ 739.738801][ T4400] Bluetooth: (null): Invalid header checksum [ 739.744970][ T4298] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 739.773339][ T4300] Bluetooth: (null): Invalid header checksum [ 739.778991][ T4400] Bluetooth: (null): Invalid header checksum [ 739.779465][ T4300] Bluetooth: (null): Invalid header checksum [ 739.793139][ T4400] Bluetooth: (null): Invalid header checksum [ 739.799380][ T4400] Bluetooth: (null): Invalid header checksum [ 739.809457][ T4300] Bluetooth: (null): Invalid header checksum [ 739.960054][ T4400] Bluetooth: (null): Invalid header checksum [ 739.980405][ T4300] Bluetooth: (null): Invalid header checksum [ 740.005944][ T4400] Bluetooth: (null): Invalid header checksum [ 740.020449][ T4300] Bluetooth: (null): Invalid header checksum [ 740.041451][ T4400] Bluetooth: (null): Invalid header checksum [ 740.057689][ T4300] Bluetooth: (null): Invalid header checksum [ 740.265801][ T4400] Bluetooth: (null): Invalid header checksum [ 740.278273][ T4300] Bluetooth: (null): Invalid header checksum [ 740.291234][ T4400] Bluetooth: (null): Invalid header checksum [ 740.313577][ T4303] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 740.413888][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 740.562915][ T4298] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 740.801303][ T4400] Bluetooth: (null): Invalid header checksum [ 740.809072][ T4400] Bluetooth: (null): Invalid header checksum [ 740.810065][ T4300] Bluetooth: (null): Invalid header checksum [ 740.815950][ T4400] Bluetooth: (null): Invalid header checksum [ 740.827829][ T4400] Bluetooth: (null): Invalid header checksum [ 740.835022][ T4400] Bluetooth: (null): Invalid header checksum [ 740.861977][ T4400] Bluetooth: (null): Invalid header checksum [ 740.865279][ T4298] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 740.892999][ T4400] Bluetooth: (null): Invalid header checksum [ 740.912460][ T4400] Bluetooth: (null): Invalid header checksum [ 740.928430][ T4300] Bluetooth: (null): Invalid header checksum [ 740.942820][ T4298] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 740.953443][ T4303] usb 5-1: device descriptor read/all, error -71 [ 740.973373][ T4400] Bluetooth: (null): Invalid header checksum [ 740.975607][ T4300] Bluetooth: (null): Invalid header checksum [ 741.006098][ T4298] usb 1-1: config 220 has no interface number 2 [ 741.027164][ T4300] Bluetooth: (null): Invalid header checksum [ 741.043683][ T4298] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 741.063283][ T4300] Bluetooth: (null): Invalid header checksum [ 741.084337][ T4300] Bluetooth: (null): Invalid header checksum [ 741.366803][ T4298] usb 1-1: config 220 interface 0 has no altsetting 0 [ 741.618815][ T4298] usb 1-1: config 220 interface 76 has no altsetting 0 [ 741.635009][ T4298] usb 1-1: config 220 interface 1 has no altsetting 0 [ 741.958958][ T4300] Bluetooth: (null): Invalid header checksum [ 741.973635][ T154] Bluetooth: (null): Invalid header checksum [ 741.979733][ T154] Bluetooth: (null): Invalid header checksum [ 742.022211][ T4300] Bluetooth: (null): Invalid header checksum [ 742.043079][ T154] Bluetooth: (null): Invalid header checksum [ 742.049219][ T154] Bluetooth: (null): Invalid header checksum [ 742.056175][ T4300] Bluetooth: (null): Invalid header checksum [ 742.063222][ T4300] Bluetooth: (null): Invalid header checksum [ 742.076411][ T154] Bluetooth: (null): Invalid header checksum [ 742.171256][ T4300] Bluetooth: (null): Invalid header checksum [ 742.197863][ T154] Bluetooth: (null): Invalid header checksum [ 742.203093][ T4298] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 742.204454][ T4300] Bluetooth: (null): Invalid header checksum [ 742.236479][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.241537][ T154] Bluetooth: (null): Invalid header checksum [ 742.271383][ T154] Bluetooth: (null): Invalid header checksum [ 742.291736][ T1108] usb 4-1: USB disconnect, device number 32 [ 742.301627][ T154] Bluetooth: (null): Invalid header checksum [ 742.311552][ T4298] usb 1-1: Product: syz [ 742.333354][ T154] Bluetooth: (null): Invalid header checksum [ 742.353553][ T4300] Bluetooth: (null): Invalid header checksum [ 742.361732][ T154] Bluetooth: (null): Invalid header checksum [ 742.378325][ T4298] usb 1-1: Manufacturer: syz [ 742.533045][ T4300] Bluetooth: (null): Invalid header checksum [ 742.541084][ T4298] usb 1-1: SerialNumber: syz [ 742.546780][ T154] Bluetooth: (null): Invalid header checksum [ 742.564790][ T4300] Bluetooth: (null): Invalid header checksum [ 742.659759][ T4300] Bluetooth: (null): Invalid header checksum [ 742.747986][ T4300] Bluetooth: (null): Invalid header checksum [ 743.163832][ T154] Bluetooth: (null): Invalid header checksum [ 743.183422][ T4298] usb 1-1: can't set config #220, error -71 [ 743.193262][ T154] Bluetooth: (null): Invalid header checksum [ 743.199303][ T154] Bluetooth: (null): Invalid header checksum [ 743.222854][ T4300] Bluetooth: (null): Invalid header checksum [ 743.222973][ T4298] usb 1-1: USB disconnect, device number 36 [ 743.228920][ T4300] Bluetooth: (null): Invalid header checksum [ 743.269520][ T154] Bluetooth: (null): Invalid header checksum [ 743.336498][ T154] Bluetooth: (null): Invalid header checksum [ 743.385377][T11446] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 743.523528][ T4300] Bluetooth: (null): Invalid header checksum [ 743.530202][ T4300] Bluetooth: (null): Invalid header checksum [ 743.574370][ T4300] Bluetooth: (null): Invalid header checksum [ 743.586710][ T154] Bluetooth: (null): Invalid header checksum [ 743.823490][ T4300] Bluetooth: (null): Invalid header checksum [ 743.830716][ T4300] Bluetooth: (null): Invalid header checksum [ 743.871590][ T4300] Bluetooth: (null): Invalid header checksum [ 743.888347][ T4300] Bluetooth: (null): Invalid header checksum [ 744.024345][T11452] ptrace attach of "./syz-executor exec"[4174] was attempted by ""[11452] [ 744.158745][ T4300] Bluetooth: (null): Invalid header checksum [ 744.306791][ T4300] Bluetooth: (null): Invalid header checksum [ 744.313582][ T4300] Bluetooth: (null): Invalid header checksum [ 744.319689][ T4300] Bluetooth: (null): Invalid header checksum [ 744.465655][ T4300] Bluetooth: (null): Invalid header checksum [ 744.472273][ T4300] Bluetooth: (null): Invalid header checksum [ 744.478912][ T4300] Bluetooth: (null): Invalid header checksum [ 744.485405][ T4300] Bluetooth: (null): Invalid header checksum [ 744.504039][ T4300] Bluetooth: (null): Invalid header checksum [ 744.510476][ T4300] Bluetooth: (null): Invalid header checksum [ 744.522850][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 744.624950][ T4300] Bluetooth: (null): Invalid header checksum [ 745.870088][ T4300] Bluetooth: (null): Invalid header checksum [ 745.932022][ T4300] Bluetooth: (null): Invalid header checksum [ 747.962451][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.012366][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 748.130154][ T4300] Bluetooth: (null): Invalid header checksum [ 748.168303][ T4300] Bluetooth: (null): Invalid header checksum [ 748.223062][ T4300] Bluetooth: (null): Invalid header checksum [ 748.313081][ T7] usb 4-1: device descriptor read/all, error -71 [ 748.339985][ T4300] Bluetooth: (null): Invalid header checksum [ 749.112384][ T4300] Bluetooth: (null): Invalid header checksum [ 749.118734][ T4300] Bluetooth: (null): Invalid header checksum [ 749.124987][ T4300] Bluetooth: (null): Invalid header checksum [ 749.131045][ T4300] Bluetooth: (null): Invalid header checksum [ 749.137172][ T4300] Bluetooth: (null): Invalid header checksum [ 749.143767][ T4300] Bluetooth: (null): Invalid header checksum [ 749.149815][ T4300] Bluetooth: (null): Invalid header checksum [ 749.157323][ T4300] Bluetooth: (null): Invalid header checksum [ 749.170290][ T4300] Bluetooth: (null): Invalid header checksum [ 749.191207][ T4300] Bluetooth: (null): Invalid header checksum [ 749.397280][ T7] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 749.475796][ T4300] Bluetooth: (null): Invalid header checksum [ 749.481940][ T4300] Bluetooth: (null): Invalid header checksum [ 749.523502][ T4300] Bluetooth: (null): Invalid header checksum [ 749.626845][ T4300] Bluetooth: (null): Invalid header checksum [ 749.695217][ T4300] Bluetooth: (null): Invalid header checksum [ 749.715012][ T4300] Bluetooth: (null): Invalid header checksum [ 749.721181][ T4300] Bluetooth: (null): Invalid header checksum [ 749.788014][ T4300] Bluetooth: (null): Invalid header checksum [ 749.815724][ T4300] Bluetooth: (null): Invalid header checksum [ 749.821849][ T4300] Bluetooth: (null): Invalid header checksum [ 749.859715][ T4300] Bluetooth: (null): Invalid header checksum [ 749.873036][ T7] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 749.892902][ T7] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 749.918839][ T4300] Bluetooth: (null): Invalid header checksum [ 749.947034][ T7] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 749.959021][ T4300] Bluetooth: (null): Invalid header checksum [ 749.986427][ T4300] Bluetooth: (null): Invalid header checksum [ 750.017302][ T4300] Bluetooth: (null): Invalid header checksum [ 750.031398][ T7] usb 4-1: config 220 has no interface number 2 [ 750.048049][ T7] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 750.075456][ T4300] Bluetooth: (null): Invalid header checksum [ 750.081544][ T4300] Bluetooth: (null): Invalid header checksum [ 750.102384][ T7] usb 4-1: config 220 interface 0 has no altsetting 0 [ 750.143339][ T7] usb 4-1: config 220 interface 76 has no altsetting 0 [ 750.150271][ T7] usb 4-1: config 220 interface 1 has no altsetting 0 [ 750.165234][ T4300] Bluetooth: (null): Invalid header checksum [ 750.190832][ T4300] Bluetooth: (null): Invalid header checksum [ 750.222888][ T4300] Bluetooth: (null): Invalid header checksum [ 750.228964][ T4300] Bluetooth: (null): Invalid header checksum [ 750.279964][ T4300] Bluetooth: (null): Invalid header checksum [ 750.292220][ T4300] Bluetooth: (null): Invalid header checksum [ 750.437204][ T7] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 750.446583][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.454777][ T7] usb 4-1: Product: syz [ 750.459070][ T7] usb 4-1: Manufacturer: syz [ 750.464339][ T7] usb 4-1: SerialNumber: syz [ 750.464360][T11502] ptrace attach of "./syz-executor exec"[4173] was attempted by ""[11502] [ 750.503322][ T4300] Bluetooth: (null): Invalid header checksum [ 750.631294][ T4300] Bluetooth: (null): Invalid header checksum [ 750.654157][ T4300] Bluetooth: (null): Invalid header checksum [ 750.660294][ T4300] Bluetooth: (null): Invalid header checksum [ 750.819718][ T4300] Bluetooth: (null): Invalid header checksum [ 750.825875][ T4300] Bluetooth: (null): Invalid header checksum [ 750.842887][ T4300] Bluetooth: (null): Invalid header checksum [ 750.849068][ T4300] Bluetooth: (null): Invalid header checksum [ 751.335963][ T398] Bluetooth: (null): Invalid header checksum [ 751.398722][ T7] usb 4-1: selecting invalid altsetting 0 [ 751.423382][ T398] Bluetooth: (null): Invalid header checksum [ 751.454946][ T7] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 751.474539][ T398] Bluetooth: (null): Invalid header checksum [ 751.495407][ T7] usb 4-1: No valid video chain found. [ 751.619056][ T398] Bluetooth: (null): Invalid header checksum [ 751.641775][ T398] Bluetooth: (null): Invalid header checksum [ 751.663585][ T398] Bluetooth: (null): Invalid header checksum [ 751.682899][ T398] Bluetooth: (null): Invalid header checksum [ 751.854792][ T7] usb 4-1: selecting invalid altsetting 0 [ 751.860577][ T7] usbtest: probe of 4-1:220.1 failed with error -22 [ 752.304399][ T7] usb 4-1: USB disconnect, device number 34 [ 752.853026][ T4177] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 754.342849][ T4177] usb 5-1: Using ep0 maxpacket: 8 [ 754.504718][T11542] ptrace attach of "./syz-executor exec"[4167] was attempted by ""[11542] [ 754.563129][ T4177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.783335][ T4177] usb 5-1: config 0 has no interfaces? [ 755.634103][ T4177] usb 5-1: string descriptor 0 read error: -71 [ 755.644041][ T4177] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 755.749206][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.912129][ T4177] usb 5-1: config 0 descriptor?? [ 755.933087][ T4177] usb 5-1: can't set config #0, error -71 [ 756.022943][ T4177] usb 5-1: USB disconnect, device number 38 [ 758.147553][ T6713] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 758.642846][ T6713] usb 2-1: Using ep0 maxpacket: 32 [ 759.469963][ T6713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.485739][ T6713] usb 2-1: config 0 has no interfaces? [ 759.813472][ T6713] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 759.848177][ T6713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.878676][ T6713] usb 2-1: config 0 descriptor?? [ 760.063239][ T6713] usb 2-1: can't set config #0, error -71 [ 760.838446][ T6713] usb 2-1: USB disconnect, device number 39 [ 761.160838][ T4295] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 761.912809][ T6713] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 761.942922][ T4295] usb 4-1: config index 0 descriptor too short (expected 12147, got 77) [ 761.964522][ T4295] usb 4-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 761.973767][ T4295] usb 4-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 761.988445][ T4295] usb 4-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 762.002843][ T4210] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 762.162906][ T6713] usb 2-1: Using ep0 maxpacket: 8 [ 762.192970][ T4295] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.210719][ T4295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.219152][ T4295] usb 4-1: Product: syz [ 762.223454][ T4295] usb 4-1: Manufacturer: syz [ 762.231746][ T4295] usb 4-1: SerialNumber: syz [ 762.242824][ T4210] usb 1-1: Using ep0 maxpacket: 32 [ 762.336967][ T6713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.363014][ T6713] usb 2-1: config 0 has no interfaces? [ 762.366797][ T4210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.631688][T11621] Cannot find add_set index 0 as target [ 762.693330][ T4210] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 762.923307][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.104181][ T4210] usb 1-1: Product: syz [ 763.332908][ T6713] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 763.337098][ T4210] usb 1-1: Manufacturer: syz [ 763.341987][ T6713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.342014][ T6713] usb 2-1: Product: syz [ 763.518052][ T4210] usb 1-1: SerialNumber: syz [ 763.528518][ T6713] usb 2-1: Manufacturer: syz [ 763.552583][ T4210] usb 1-1: config 0 descriptor?? [ 763.564313][ T6713] usb 2-1: config 0 descriptor?? [ 763.728480][ T4210] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 763.788556][ T4210] hdpvr: probe of 1-1:0.0 failed with error -12 [ 764.502893][ T6713] usb 2-1: can't set config #0, error -71 [ 764.510534][ T6713] usb 2-1: USB disconnect, device number 40 [ 765.018583][ T4210] usb 1-1: USB disconnect, device number 37 [ 765.512859][ T4210] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 766.329120][ T4210] usb 1-1: Using ep0 maxpacket: 32 [ 766.461987][ T4295] usb 4-1: USB disconnect, device number 35 [ 766.472913][ T4210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.511194][ T4210] usb 1-1: config 0 has no interfaces? [ 766.590347][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 766.821205][ T4210] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 766.843301][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.853032][ T4210] usb 1-1: Product: syz [ 766.857351][ T4210] usb 1-1: Manufacturer: syz [ 766.867076][ T4210] usb 1-1: SerialNumber: syz [ 767.664666][ T4210] usb 1-1: config 0 descriptor?? [ 767.824625][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2125'. [ 768.017142][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 768.037753][T11636] device ipvlan2 entered promiscuous mode [ 768.066231][T11636] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 768.094790][T11636] team0: Device ipvlan2 is already an upper device of the team interface [ 768.227329][ T1108] usb 1-1: USB disconnect, device number 38 [ 768.402932][ T6715] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 769.572984][ T6715] usb 5-1: Using ep0 maxpacket: 8 [ 769.693400][ T6715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.729527][ T6715] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.133130][ T6715] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 770.893684][T11687] overlayfs: failed to resolve './file1': -2 [ 771.133936][ T6715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.355544][ T6715] usb 5-1: Product: syz [ 772.290508][ T6715] usb 5-1: Manufacturer: syz [ 773.055356][ T6715] usb 5-1: SerialNumber: syz [ 773.244632][ T6715] usb 5-1: config 0 descriptor?? [ 773.282960][ T6715] usb 5-1: can't set config #0, error -71 [ 773.302839][ T6715] usb 5-1: USB disconnect, device number 39 [ 773.312998][ T4210] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 773.344342][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.372647][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.389982][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.414129][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.449088][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.483865][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.523281][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.566518][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.609087][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.647934][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.675812][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.698098][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.728706][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.762112][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.796809][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.830699][ T4295] hid-generic FFF9:0000:0203.001C: unknown main item tag 0x0 [ 773.868118][ T4295] hid-generic FFF9:0000:0203.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 776.212846][ T4213] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 776.753437][T11739] overlayfs: failed to resolve './file1': -2 [ 777.192845][ T4213] usb 4-1: Using ep0 maxpacket: 8 [ 777.373379][ T4213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.865478][ T13] kworker/dying (13) used greatest stack depth: 14112 bytes left [ 778.061341][ T4213] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.280857][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.293344][ T4213] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 779.303660][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.311684][ T4213] usb 4-1: Product: syz [ 779.344258][ T4213] usb 4-1: config 0 descriptor?? [ 779.362966][ T4213] usb 4-1: can't set config #0, error -71 [ 779.372494][ T4213] usb 4-1: USB disconnect, device number 36 [ 779.473224][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.480845][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.488732][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.496575][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.503155][ T6713] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 779.504518][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.538333][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.611401][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.675933][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.756247][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.834931][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.911684][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 779.991499][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 780.065275][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 780.676482][T11775] overlayfs: missing 'workdir' [ 780.693294][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 780.700783][ T4242] hid-generic FFF9:0000:0203.001D: unknown main item tag 0x0 [ 780.719786][ T4242] hid-generic FFF9:0000:0203.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 780.987565][T11779] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 781.015759][T11779] CIFS: Unable to determine destination address [ 781.273096][ T6713] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 781.433149][ T6713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.452886][ T6713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 781.563252][ T6713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.583721][ T6713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 781.703308][ T6713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.722867][ T6713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 781.854221][ T6713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.878174][ T6713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.123079][ T6713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.151110][ T6713] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 782.380244][ T6713] usb 1-1: unable to read config index 5 descriptor/start: -71 [ 782.392412][ T6713] usb 1-1: can't read configurations, error -71 [ 782.873782][ T4213] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 783.190390][ T6715] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 783.513293][ T4213] usb 4-1: Using ep0 maxpacket: 32 [ 783.703116][ T4213] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.918469][ T4213] usb 4-1: config 0 has no interfaces? [ 784.003323][ T6715] usb 2-1: config index 0 descriptor too short (expected 12147, got 77) [ 784.027059][ T6715] usb 2-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 784.068874][ T6715] usb 2-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 784.102393][ T6715] usb 2-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 784.112456][ T4213] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 784.152472][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.170284][ T4213] usb 4-1: Product: syz [ 784.195208][ T4213] usb 4-1: Manufacturer: syz [ 784.199860][ T4213] usb 4-1: SerialNumber: syz [ 784.408643][ T4213] usb 4-1: config 0 descriptor?? [ 784.442988][ T6715] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 785.384458][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 785.402882][ T6715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.564416][T11787] device ipvlan2 entered promiscuous mode [ 785.584060][ T6715] usb 2-1: Product: syz [ 785.590580][ T6715] usb 2-1: Manufacturer: syz [ 785.595288][ T6715] usb 2-1: SerialNumber: syz [ 785.608370][T11787] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 785.616857][T11787] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 785.626229][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.682679][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.722978][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.736970][ T6713] usb 4-1: USB disconnect, device number 37 [ 785.756591][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.782909][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.818708][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.851438][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.883470][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.912111][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.942087][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 785.983037][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.010386][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.038171][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.062356][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.086754][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.109777][ T4305] hid-generic FFF9:0000:0203.001E: unknown main item tag 0x0 [ 786.153956][ T4305] hid-generic FFF9:0000:0203.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 786.471256][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 788.752903][ T6715] usb 2-1: can't set config #121, error -71 [ 789.649891][ T6715] usb 2-1: USB disconnect, device number 42 [ 792.936567][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 793.063939][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.093978][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.106662][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.115301][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.123103][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.136394][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.151741][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 793.296091][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.066245][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.098484][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.126486][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.204917][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.213839][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.221268][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.229331][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.237081][ T4213] hid-generic FFF9:0000:0203.001F: unknown main item tag 0x0 [ 795.245747][ T4213] hid-generic FFF9:0000:0203.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 796.082973][ T6715] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 797.193129][ T4213] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 798.442873][ T4213] usb 3-1: Using ep0 maxpacket: 8 [ 798.593937][ T4213] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 799.392960][ T4213] usb 3-1: string descriptor 0 read error: -71 [ 799.399193][ T4213] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 799.451982][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.064493][ T4213] usb 3-1: config 0 descriptor?? [ 800.093499][ T4213] usb 3-1: can't set config #0, error -71 [ 800.135113][ T4213] usb 3-1: USB disconnect, device number 43 [ 800.405890][T11958] 9pnet_virtio: no channels available for device syz [ 801.312957][ T6715] usb 1-1: device descriptor read/64, error -110 [ 802.264172][ T6715] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 803.064980][T11981] netlink: 'syz.2.2202': attribute type 4 has an invalid length. [ 805.152858][ T4210] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 805.912867][ T4210] usb 3-1: Using ep0 maxpacket: 8 [ 806.232920][ T4210] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 806.265785][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 806.593044][ T4210] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 807.135626][ T4210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.147960][ T4210] usb 3-1: Product: syz [ 807.152857][ T4210] usb 3-1: Manufacturer: syz [ 807.157476][ T4210] usb 3-1: SerialNumber: syz [ 807.187137][ T4210] usb 3-1: config 0 descriptor?? [ 808.132645][ T4295] usb 3-1: USB disconnect, device number 44 [ 808.254612][ T4210] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 808.574830][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.975770][T12073] 9pnet_virtio: no channels available for device syz [ 811.132936][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2224'. [ 813.752951][ T4210] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 813.766211][ T4210] usb 2-1: can't read configurations, error -71 [ 813.842964][ T4177] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 814.102858][ T4177] usb 5-1: Using ep0 maxpacket: 8 [ 815.471608][ T4177] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 815.491977][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.493666][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2235'. [ 815.501460][ T4177] usb 5-1: Product: syz [ 815.514088][ T4177] usb 5-1: Manufacturer: syz [ 815.527507][ T4177] usb 5-1: SerialNumber: syz [ 816.292804][ T4177] usb 5-1: config 0 descriptor?? [ 816.563521][ T4177] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 817.785083][ T4177] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 817.795900][ T4177] usb 5-1: USB disconnect, device number 40 [ 818.928986][ T4210] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 820.022949][ T4210] usb 1-1: config index 0 descriptor too short (expected 12147, got 77) [ 820.041589][ T4210] usb 1-1: config 121 has too many interfaces: 146, using maximum allowed: 32 [ 820.222908][ T6713] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 820.523022][ T6713] usb 2-1: Using ep0 maxpacket: 32 [ 820.663127][ T6713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.820176][ T4210] usb 1-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 820.830576][ T4210] usb 1-1: config 121 has 0 interfaces, different from the descriptor's value: 146 [ 820.851884][ T6713] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 820.862886][ T6713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 821.403071][ T6713] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 821.412828][ T6713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.421018][ T6713] usb 2-1: Product: syz [ 821.425517][ T6713] usb 2-1: Manufacturer: syz [ 821.430250][ T6713] usb 2-1: SerialNumber: syz [ 822.113598][ T6713] usb 2-1: config 0 descriptor?? [ 822.384996][ T4242] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 823.148276][ T6713] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 823.386033][ T23] usb 2-1: USB disconnect, device number 45 [ 823.482847][ T4242] usb 3-1: Using ep0 maxpacket: 8 [ 823.512860][ T6713] usb 5-1: device descriptor read/64, error -71 [ 825.021646][ T4242] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 825.919503][ T4242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.932860][ T4210] usb 1-1: string descriptor 0 read error: -32 [ 825.945636][ T4242] usb 3-1: config 0 descriptor?? [ 825.950830][ T4210] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 825.960462][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.968904][ T4242] usb 3-1: can't set config #0, error -71 [ 825.976648][ T4242] usb 3-1: USB disconnect, device number 45 [ 826.982068][ T4210] usb 1-1: can't set config #121, error -32 [ 827.798251][T12221] overlayfs: failed to resolve './file0': -2 [ 830.745006][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'. [ 832.452868][ T7] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 832.676531][T12255] XFS (nbd4): no-recovery mounts must be read-only. [ 833.009170][ T4242] usb 1-1: USB disconnect, device number 43 [ 833.262902][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 833.383180][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.416303][ T7] usb 3-1: config 0 has no interfaces? [ 833.458928][T12264] overlayfs: failed to resolve './file0': -2 [ 833.603524][ T7] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 833.651699][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.757316][ T7] usb 3-1: Product: syz [ 833.812240][ T7] usb 3-1: Manufacturer: syz [ 833.855525][ T7] usb 3-1: SerialNumber: syz [ 834.032411][ T7] usb 3-1: config 0 descriptor?? [ 834.072907][ T7] usb 3-1: can't set config #0, error -71 [ 834.140594][ T7] usb 3-1: USB disconnect, device number 46 [ 836.681993][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2280'. [ 838.263047][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'. [ 838.478921][ T398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.646984][ T398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.742814][ T4210] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 838.821351][ T398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.982817][ T4210] usb 2-1: Using ep0 maxpacket: 32 [ 839.208124][ T4210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.220403][ T4210] usb 2-1: config 0 has no interfaces? [ 839.229721][ T398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.289621][T12272] chnl_net:caif_netlink_parms(): no params data found [ 839.423007][ T4210] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 839.432093][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.497645][ T4210] usb 2-1: Product: syz [ 839.515492][ T4210] usb 2-1: Manufacturer: syz [ 839.545721][ T4210] usb 2-1: SerialNumber: syz [ 839.658133][ T4210] usb 2-1: config 0 descriptor?? [ 839.782902][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 839.871221][T12272] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.893280][T12272] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.904421][T12272] device bridge_slave_0 entered promiscuous mode [ 839.922682][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 839.931739][T12310] bond0: Device is already in use. [ 839.940483][T12272] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.959300][T12272] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.970744][ T4177] usb 2-1: USB disconnect, device number 46 [ 840.009289][T12272] device bridge_slave_1 entered promiscuous mode [ 840.385121][T12272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.468933][T12327] overlayfs: failed to resolve './file0': -2 [ 841.204761][T12272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.564932][T12272] team0: Port device team_slave_0 added [ 842.012015][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 842.651012][T12340] lo speed is unknown, defaulting to 1000 [ 842.657552][T12340] lo speed is unknown, defaulting to 1000 [ 842.666659][T12340] lo speed is unknown, defaulting to 1000 [ 842.677857][T12340] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 842.691774][T12340] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 842.762995][T12272] team0: Port device team_slave_1 added [ 842.770484][T12340] lo speed is unknown, defaulting to 1000 [ 842.778005][T12340] lo speed is unknown, defaulting to 1000 [ 842.784480][T12340] lo speed is unknown, defaulting to 1000 [ 842.790864][T12340] lo speed is unknown, defaulting to 1000 [ 842.797817][T12340] lo speed is unknown, defaulting to 1000 [ 842.804352][T12340] lo speed is unknown, defaulting to 1000 [ 843.737237][T12272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.744468][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.022144][T12272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.262321][T12272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.302800][T12272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.411701][T12272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.503670][T12272] device hsr_slave_0 entered promiscuous mode [ 844.873820][ T4210] Bluetooth: hci0: command 0x040f tx timeout [ 844.895585][T12272] device hsr_slave_1 entered promiscuous mode [ 844.971710][T12272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.982885][T12272] Cannot create hsr debugfs directory [ 845.542882][ T4210] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 846.331358][ T4177] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 846.560921][T12396] XFS (nbd4): no-recovery mounts must be read-only. [ 846.572975][ T4210] usb 4-1: Using ep0 maxpacket: 8 [ 846.603006][ T4177] usb 3-1: Using ep0 maxpacket: 32 [ 846.892867][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 847.033190][ T4210] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 847.084546][ T4210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 847.103052][ T4177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.121961][ T4210] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 847.152246][ T4177] usb 3-1: config 0 has no interfaces? [ 847.184946][ T4210] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.236949][T12272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 847.245439][ T4210] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 847.376162][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.431977][T12272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 847.473103][ T4177] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 847.482218][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.730390][ T4177] usb 3-1: Product: syz [ 847.752855][ T4177] usb 3-1: Manufacturer: syz [ 847.757684][ T4177] usb 3-1: SerialNumber: syz [ 847.784224][T12272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 847.792316][ T4177] usb 3-1: config 0 descriptor?? [ 847.816729][T12272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 847.920869][ T398] device hsr_slave_0 left promiscuous mode [ 847.978855][ T398] device hsr_slave_1 left promiscuous mode [ 848.004525][ T398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.042520][ T398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.145219][ T398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.164313][ T398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.195633][ T398] device bridge_slave_1 left promiscuous mode [ 848.221573][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.270074][ T398] device bridge_slave_0 left promiscuous mode [ 848.282981][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.348293][ T398] device veth1_macvtap left promiscuous mode [ 848.923068][ T398] device veth0_macvtap left promiscuous mode [ 848.929865][ T398] device veth1_vlan left promiscuous mode [ 849.175929][ T398] device veth0_vlan left promiscuous mode [ 849.752884][ T4210] usb 4-1: usb_control_msg returned -71 [ 849.758509][ T4210] usbtmc 4-1:16.0: can't read capabilities [ 849.804032][ T4210] usb 4-1: USB disconnect, device number 38 [ 849.823840][ T398] team0 (unregistering): Port device team_slave_1 removed [ 849.839251][ T398] team0 (unregistering): Port device team_slave_0 removed [ 849.851725][ T398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.867475][ T398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.955612][ T398] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 849.966238][ T398] bond0 (unregistering): Released all slaves [ 850.062105][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 850.076378][T12385] device ipvlan2 entered promiscuous mode [ 850.083823][T12385] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 850.092637][T12385] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 850.208584][ T4210] usb 3-1: USB disconnect, device number 47 [ 850.436338][T12436] input: syz0 as /devices/virtual/input/input16 [ 850.473053][T12436] input: failed to attach handler leds to device input16, error: -6 [ 850.964120][T12272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.044455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.055750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.077315][T12272] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.325468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.363863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.428471][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.435618][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.468292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.516741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.532468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.570245][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.577369][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.613287][ T4213] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 851.728603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.753958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.814466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.863741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.923748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.097289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.173954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.182569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.209433][T12272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.220142][ T4213] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 852.240877][ T4213] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 852.251898][T12272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.271212][ T4213] usb 5-1: config 220 interface 0 has no altsetting 0 [ 852.282417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.291187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.310373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.463635][ T4213] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 852.491135][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.521307][ T4213] usb 5-1: Product: syz [ 852.532823][ T4213] usb 5-1: Manufacturer: syz [ 852.548171][ T4213] usb 5-1: SerialNumber: syz [ 852.790674][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.805100][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.841442][T12272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.933075][ T4213] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 852.943020][ T4213] usb 5-1: No valid video chain found. [ 852.981959][ T4213] usb 5-1: USB disconnect, device number 43 [ 853.702801][ T4305] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 853.772938][ T4210] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 853.801170][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 853.836014][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.956558][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 854.030966][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 854.082856][ T4210] usb 5-1: Using ep0 maxpacket: 32 [ 854.096690][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.153615][ T4305] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 854.170953][T12272] device veth0_vlan entered promiscuous mode [ 854.186215][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.198318][ T4305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 854.223193][ T4210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.233573][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 854.247751][ T4210] usb 5-1: config 0 has no interfaces? [ 854.255825][ T4305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.281172][T12272] device veth1_vlan entered promiscuous mode [ 855.207007][ T4305] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.208161][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 855.220993][ T4305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 855.242431][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.363270][ T4210] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 855.374917][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.404163][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.414303][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.438731][T12272] device veth0_macvtap entered promiscuous mode [ 855.447223][ T4210] usb 5-1: Product: syz [ 855.451419][ T4210] usb 5-1: Manufacturer: syz [ 855.467318][T12272] device veth1_macvtap entered promiscuous mode [ 855.494155][ T4210] usb 5-1: SerialNumber: syz [ 855.510277][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.531898][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.541428][ T4210] usb 5-1: config 0 descriptor?? [ 855.591904][T12272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.625695][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 855.653638][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.663765][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 855.704023][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.747615][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 855.784017][T12272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.959810][T12272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.989764][T12272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.302881][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 856.452467][T12499] device ipvlan2 entered promiscuous mode [ 856.703458][T12499] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 856.711277][T12499] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 857.046941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 857.127854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 857.260260][T12272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.328880][T12272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.608036][T12272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.625339][T12272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.670444][ T4213] usb 5-1: USB disconnect, device number 44 [ 858.805810][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.862921][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.910254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 858.917886][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.926792][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.949320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 860.343366][ T4305] usb 4-1: usb_control_msg returned -110 [ 860.349403][ T4305] usbtmc 4-1:16.0: can't read capabilities [ 861.396496][ T7] usb 4-1: USB disconnect, device number 39 [ 862.333277][ T4213] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 862.977304][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2333'. [ 863.013009][ T6715] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 863.243045][ T6715] usb 2-1: device descriptor read/64, error -71 [ 863.502890][ T4213] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 863.533330][ T6715] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 863.631883][ T4213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.775051][ T6715] usb 2-1: device descriptor read/64, error -71 [ 863.903058][ T4213] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 863.923044][ T6715] usb usb2-port1: attempt power cycle [ 864.075754][T12597] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 864.149337][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 864.157496][ T4213] usb 5-1: SerialNumber: syz [ 864.512895][ T6715] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 864.583015][ T6713] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 864.633650][ T6715] usb 2-1: device descriptor read/8, error -71 [ 864.826188][ T6713] usb 6-1: Using ep0 maxpacket: 32 [ 864.902969][ T6715] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 865.415811][ T4213] usb 5-1: 0:2 : does not exist [ 865.503013][ T6713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.628651][ T6713] usb 6-1: config 0 has no interfaces? [ 866.150582][ T6715] usb 2-1: device not accepting address 50, error -71 [ 866.508464][ T4213] usb 5-1: USB disconnect, device number 45 [ 866.528004][ T6715] usb usb2-port1: unable to enumerate USB device [ 866.648395][T12631] overlayfs: missing 'workdir' [ 866.827478][T12640] device veth0_vlan left promiscuous mode [ 866.835567][T12640] device veth0_vlan entered promiscuous mode [ 866.863357][T12640] lo speed is unknown, defaulting to 1000 [ 866.928456][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 866.973140][ T6713] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 866.987852][ T6713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.014625][T11483] udevd[11483]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.046269][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 867.236759][ T6713] usb 6-1: Product: syz [ 867.724382][ T6713] usb 6-1: Manufacturer: syz [ 867.729058][ T6713] usb 6-1: SerialNumber: syz [ 867.790457][T12645] CIFS: Unable to determine destination address [ 867.940323][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 868.298153][ T6713] usb 6-1: config 0 descriptor?? [ 868.395424][ T6713] usb 6-1: can't set config #0, error -71 [ 868.409108][ T6713] usb 6-1: USB disconnect, device number 2 [ 869.506993][T12659] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 870.024684][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.214598][T12652] ptrace attach of "./syz-executor exec"[4167] was attempted by ""[12652] [ 872.992795][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 873.262844][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 873.402775][ T6713] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 873.452952][ T23] usb 6-1: config 0 has no interfaces? [ 873.458479][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 873.493004][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.506369][ T23] usb 6-1: config 0 descriptor?? [ 873.668365][ T6713] usb 2-1: Using ep0 maxpacket: 32 [ 873.963040][ T6713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.037230][ T6713] usb 2-1: config 0 has no interfaces? [ 874.233052][ T6713] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 874.268147][ T6713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.313857][ T6713] usb 2-1: Product: syz [ 874.318072][ T6713] usb 2-1: Manufacturer: syz [ 874.384853][ T6713] usb 2-1: SerialNumber: syz [ 874.444382][ T6713] usb 2-1: config 0 descriptor?? [ 874.698850][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'. [ 874.839375][T12697] bond0: Device is already in use. [ 875.694562][ T6713] usb 2-1: USB disconnect, device number 51 [ 876.264488][T12733] overlayfs: missing 'workdir' [ 876.397141][T12737] CIFS: Unable to determine destination address [ 876.896626][ T4212] usb 6-1: USB disconnect, device number 3 [ 877.134071][T12739] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 877.482799][ T4212] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 877.672907][ T6713] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 877.752775][ T4212] usb 6-1: Using ep0 maxpacket: 8 [ 877.979652][T12768] ptrace attach of "./syz-executor exec"[4174] was attempted by ""[12768] [ 878.232879][ T6713] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 878.253113][ T4212] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 878.274888][ T4212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.313436][ T4212] usb 6-1: Product: syz [ 878.329034][ T6713] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12847, setting to 1024 [ 878.350483][ T4212] usb 6-1: Manufacturer: syz [ 878.362837][ T1324] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 878.370552][ T4212] usb 6-1: SerialNumber: syz [ 878.407188][ T4212] usb 6-1: config 0 descriptor?? [ 878.463369][ T6713] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 878.473835][ T6713] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 878.483033][ T6713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.533875][T12754] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 878.682946][ T1324] usb 2-1: Using ep0 maxpacket: 32 [ 878.692928][ T4212] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 878.803098][ T1324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.814879][ T23] usb 3-1: USB disconnect, device number 48 [ 878.992917][ T4212] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 879.002987][ T1324] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 879.027115][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.129145][ T1324] usb 2-1: Product: syz [ 879.181403][ T1324] usb 2-1: Manufacturer: syz [ 879.212936][ T1324] usb 2-1: SerialNumber: syz [ 879.246052][ T1324] usb 2-1: config 0 descriptor?? [ 879.315512][ T1324] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 879.326481][ T1324] hdpvr: probe of 2-1:0.0 failed with error -12 [ 880.583036][ T4210] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 880.628347][ T4295] usb 6-1: USB disconnect, device number 4 [ 880.725947][ T23] usb 2-1: USB disconnect, device number 52 [ 880.933082][ T4210] usb 5-1: Using ep0 maxpacket: 32 [ 881.107869][ T4210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.169184][ T4210] usb 5-1: config 0 has no interfaces? [ 881.344240][ T4210] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 881.366598][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.463784][T12812] XFS (nbd1): no-recovery mounts must be read-only. [ 881.602374][ T4210] usb 5-1: Product: syz [ 881.621365][ T4210] usb 5-1: Manufacturer: syz [ 881.646387][ T4210] usb 5-1: SerialNumber: syz [ 881.648145][T12813] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 881.742432][ T4210] usb 5-1: config 0 descriptor?? [ 882.208860][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2370'. [ 882.252546][T12803] device ipvlan2 entered promiscuous mode [ 882.293415][T12803] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 882.331830][T12803] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 882.503346][T12836] ptrace attach of "./syz-executor exec"[4172] was attempted by ""[12836] [ 882.595647][ T6715] usb 5-1: USB disconnect, device number 47 [ 885.342895][ T4212] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 885.692952][ T4212] usb 5-1: Using ep0 maxpacket: 32 [ 885.912892][ T4212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.082901][ T4212] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 886.099606][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.112890][ T4212] usb 5-1: Product: syz [ 886.117232][ T4212] usb 5-1: Manufacturer: syz [ 886.122439][ T4212] usb 5-1: SerialNumber: syz [ 886.163273][ T4212] usb 5-1: config 0 descriptor?? [ 886.215257][ T4212] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 886.221677][ T4212] hdpvr: probe of 5-1:0.0 failed with error -12 [ 886.616535][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'. [ 886.946969][ T4212] usb 5-1: USB disconnect, device number 48 [ 888.282906][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2388'. [ 889.472097][T12901] ptrace attach of "./syz-executor exec"[4173] was attempted by ""[12901] [ 890.216548][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2391'. [ 892.202881][ T4212] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 892.973571][ T4212] usb 4-1: device descriptor read/64, error -71 [ 893.572969][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2400'. [ 894.748213][ T4210] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 894.879978][T12959] Cannot find add_set index 0 as target [ 895.416410][T12966] ptrace attach of "./syz-executor exec"[4173] was attempted by ""[12966] [ 896.111189][T12985] overlayfs: failed to resolve './file0': -2 [ 896.500597][T12975] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 898.226783][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'. [ 899.602839][ T7] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 899.872924][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 900.156533][T13036] ptrace attach of "./syz-executor exec"[4172] was attempted by ""[13036] [ 900.500712][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.693132][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 900.716391][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.779795][ T7] usb 5-1: Product: syz [ 900.810160][ T7] usb 5-1: Manufacturer: syz [ 900.827266][ T7] usb 5-1: SerialNumber: syz [ 900.855495][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 901.069709][ T7] usb 5-1: config 0 descriptor?? [ 901.176760][T13064] overlayfs: failed to resolve './file1': -2 [ 901.518317][ T7] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 901.525230][ T7] hdpvr: probe of 5-1:0.0 failed with error -12 [ 902.019534][ T4212] usb 5-1: USB disconnect, device number 49 [ 905.853034][T13111] XFS (nbd5): no-recovery mounts must be read-only. [ 907.435449][T13129] Cannot find add_set index 0 as target [ 908.264661][T13148] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 909.633269][T13175] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 915.279807][T13244] netlink: 'syz.3.2453': attribute type 4 has an invalid length. [ 915.632509][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 916.852831][ T23] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 917.303806][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 917.366372][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12847, setting to 1024 [ 917.687291][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 917.700928][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 917.715512][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.735250][T13278] overlayfs: missing 'workdir' [ 918.164748][T13258] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 918.265156][T13286] CIFS: Unable to determine destination address [ 918.804570][ T4305] usb 3-1: USB disconnect, device number 49 [ 919.165826][T13281] XFS (nbd1): no-recovery mounts must be read-only. [ 919.285303][T12781] udevd[12781]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.589265][T13301] netlink: 'syz.1.2467': attribute type 4 has an invalid length. [ 923.351501][T13344] overlayfs: missing 'workdir' [ 923.745890][T13349] netlink: 'syz.3.2478': attribute type 4 has an invalid length. [ 924.724964][T13363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 924.800414][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 926.162893][ T1324] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 926.422802][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 926.553091][ T1324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.573035][ T1324] usb 4-1: config 0 has no interfaces? [ 926.745560][ T1324] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 926.759533][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.788410][ T1324] usb 4-1: Product: syz [ 926.798533][ T1324] usb 4-1: Manufacturer: syz [ 926.812795][ T1324] usb 4-1: SerialNumber: syz [ 926.829740][ T1324] usb 4-1: config 0 descriptor?? [ 927.013092][ T4305] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 927.088587][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 927.118809][T13372] device ipvlan2 entered promiscuous mode [ 927.129805][T13372] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 927.149987][T13372] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 927.259331][ T23] usb 4-1: USB disconnect, device number 42 [ 927.423770][ T4305] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 927.452432][ T4305] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 927.468907][ T4305] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 927.499602][ T4305] usb 3-1: config 220 has no interface number 2 [ 927.519873][ T4305] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.542833][ T4305] usb 3-1: config 220 interface 0 has no altsetting 0 [ 927.553079][ T4305] usb 3-1: config 220 interface 76 has no altsetting 0 [ 927.569413][ T4305] usb 3-1: config 220 interface 1 has no altsetting 0 [ 927.787815][T13394] overlayfs: missing 'workdir' [ 927.790917][ T4305] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 927.815471][ T4305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.832920][ T4305] usb 3-1: Product: syz [ 927.840224][ T4305] usb 3-1: Manufacturer: syz [ 927.852741][ T4305] usb 3-1: SerialNumber: syz [ 928.684097][ T4305] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 928.712819][ T4305] usb 3-1: No valid video chain found. [ 928.745437][T13407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2494'. [ 928.802717][T13409] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 929.040221][ T4305] usb 3-1: USB disconnect, device number 50 [ 929.979715][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 930.954807][T13434] device veth0_vlan left promiscuous mode [ 930.964344][T13434] device veth0_vlan entered promiscuous mode [ 931.073937][T13434] lo speed is unknown, defaulting to 1000 [ 931.605442][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.780469][T13430] XFS (nbd3): no-recovery mounts must be read-only. [ 933.452810][ T4305] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 933.742790][ T4305] usb 4-1: Using ep0 maxpacket: 8 [ 933.872905][ T4305] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 933.967113][ T4305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 934.013217][ T4305] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.061011][ T4305] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.093975][ T4305] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 934.113068][ T4305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.730097][ T4213] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 936.797158][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 937.303051][ T4305] usb 4-1: usb_control_msg returned -71 [ 937.309113][ T4305] usbtmc 4-1:16.0: can't read capabilities [ 937.345501][ T4305] usb 4-1: USB disconnect, device number 43 [ 937.353354][ T4213] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 937.361673][ T4213] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 937.403930][ T4213] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 937.442191][ T4213] usb 5-1: config 220 has no interface number 2 [ 937.479540][ T4213] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.536790][ T4213] usb 5-1: config 220 interface 0 has no altsetting 0 [ 937.588359][ T4213] usb 5-1: config 220 interface 76 has no altsetting 0 [ 937.619402][ T4213] usb 5-1: config 220 interface 1 has no altsetting 0 [ 938.462893][ T4213] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 938.500406][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.527145][ T4213] usb 5-1: Product: syz [ 938.546768][ T4213] usb 5-1: Manufacturer: syz [ 938.567091][ T4213] usb 5-1: SerialNumber: syz [ 938.763325][ T4213] usb 5-1: can't set config #220, error -71 [ 938.829524][ T4213] usb 5-1: USB disconnect, device number 50 [ 939.542757][ T4305] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 939.762837][ T4305] usb 4-1: device descriptor read/64, error -71 [ 939.782877][ T4295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 940.042747][ T4305] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 940.308278][ T4295] usb 6-1: Using ep0 maxpacket: 8 [ 940.742986][ T4295] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 941.633906][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.641944][ T4295] usb 6-1: Product: syz [ 941.646217][ T4295] usb 6-1: Manufacturer: syz [ 941.650839][ T4295] usb 6-1: SerialNumber: syz [ 941.666568][ T4295] usb 6-1: config 0 descriptor?? [ 941.943043][ T4295] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.162897][ T4212] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 942.423127][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 942.543134][ T4212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.562953][ T4212] usb 2-1: config 0 has no interfaces? [ 942.712169][T13536] device veth0_vlan left promiscuous mode [ 942.721270][T13536] device veth0_vlan entered promiscuous mode [ 942.823889][T13536] lo speed is unknown, defaulting to 1000 [ 943.046109][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 943.133706][ T4212] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 943.166458][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 943.196315][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.258759][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 943.270122][ T4212] usb 2-1: Product: syz [ 943.319344][ T4212] usb 2-1: Manufacturer: syz [ 943.348897][ T4212] usb 2-1: SerialNumber: syz [ 943.505456][ T4212] usb 2-1: config 0 descriptor?? [ 943.538721][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 943.763675][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 943.785782][T13527] bond0: Device is already in use. [ 943.804675][ T23] usb 2-1: USB disconnect, device number 54 [ 943.903012][ T4295] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 943.931317][ T4295] usb 6-1: USB disconnect, device number 5 [ 943.962193][T13544] netlink: 'syz.3.2531': attribute type 4 has an invalid length. [ 944.273069][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 944.292819][ T4213] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 944.393084][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 944.435459][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 944.574132][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 944.593092][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.611749][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 944.675008][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.703107][ T4213] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 944.723484][ T4213] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 944.784234][ T4213] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 944.794690][ T4213] usb 5-1: config 220 has no interface number 2 [ 944.801160][ T4213] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 944.889206][ T4213] usb 5-1: config 220 interface 0 has no altsetting 0 [ 944.934611][ T4213] usb 5-1: config 220 interface 76 has no altsetting 0 [ 944.981888][ T4213] usb 5-1: config 220 interface 1 has no altsetting 0 [ 945.223133][ T4213] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 945.363082][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.383544][ T4213] usb 5-1: Product: syz [ 945.668799][ T4213] usb 5-1: Manufacturer: syz [ 946.031508][ T4213] usb 5-1: SerialNumber: syz [ 946.703535][ T4213] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 946.712233][ T4213] usb 5-1: No valid video chain found. [ 946.823972][ T4213] usb 5-1: USB disconnect, device number 51 [ 946.887608][T13566] overlayfs: missing 'workdir' [ 948.012897][ T7] usb 3-1: usb_control_msg returned -71 [ 948.019388][ T7] usbtmc 3-1:16.0: can't read capabilities [ 948.497548][ T7] usb 3-1: USB disconnect, device number 51 [ 949.052789][ T7] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 949.652890][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 949.782906][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.844271][ T7] usb 3-1: config 0 has no interfaces? [ 950.183076][ T7] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 950.200729][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.265680][ T7] usb 3-1: Product: syz [ 950.287614][ T7] usb 3-1: Manufacturer: syz [ 950.315833][ T7] usb 3-1: SerialNumber: syz [ 950.354301][ T7] usb 3-1: config 0 descriptor?? [ 950.654323][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 951.404472][T13588] device ipvlan2 entered promiscuous mode [ 951.456728][T13588] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 951.475307][T13588] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 951.660162][ T4305] usb 3-1: USB disconnect, device number 52 [ 953.039531][T13619] overlayfs: missing 'workdir' [ 953.236219][T13619] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 954.419333][T13620] XFS (nbd3): no-recovery mounts must be read-only. [ 955.177091][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2556'. [ 958.008558][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2563'. [ 958.063109][ T7] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 958.104084][T13667] overlayfs: missing 'workdir' [ 958.198868][T13668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 958.782828][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 959.053146][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.073208][ T7] usb 5-1: config 0 has no interfaces? [ 959.333451][ T7] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 959.380500][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.424796][ T7] usb 5-1: Product: syz [ 959.441254][ T7] usb 5-1: Manufacturer: syz [ 959.458512][ T7] usb 5-1: SerialNumber: syz [ 959.500845][ T7] usb 5-1: config 0 descriptor?? [ 959.779574][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 959.838916][T13654] device ipvlan2 entered promiscuous mode [ 959.888808][T13654] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 959.932471][T13654] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 960.096577][ T1324] usb 5-1: USB disconnect, device number 52 [ 961.032871][ T4295] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 962.863394][ T4295] usb 5-1: Using ep0 maxpacket: 8 [ 963.102255][T13694] 9pnet_virtio: no channels available for device syz [ 963.143015][ T4295] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 963.169339][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.195961][ T4295] usb 5-1: Product: syz [ 963.210733][ T4295] usb 5-1: Manufacturer: syz [ 963.227271][ T4295] usb 5-1: SerialNumber: syz [ 963.263729][ T4295] usb 5-1: config 0 descriptor?? [ 963.552932][ T4295] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 964.733035][ T4305] Bluetooth: hci0: command 0x0406 tx timeout [ 965.312961][ T4295] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 965.361726][ T4295] usb 5-1: USB disconnect, device number 53 [ 965.762984][ T4212] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 966.013345][ T4212] usb 6-1: device descriptor read/64, error -71 [ 966.292909][ T4212] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 966.864497][T13722] device veth0_vlan left promiscuous mode [ 966.873529][T13722] device veth0_vlan entered promiscuous mode [ 966.961502][T13722] lo speed is unknown, defaulting to 1000 [ 967.189589][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 967.253226][ T4212] usb 6-1: device descriptor read/64, error -71 [ 967.391608][ T4212] usb usb6-port1: attempt power cycle [ 967.406937][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 967.489630][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 967.727845][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2579'. [ 967.754311][T13726] bond0: Device is already in use. [ 967.862993][ T4212] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 967.973272][ T4212] usb 6-1: device descriptor read/8, error -71 [ 968.265219][T13732] netlink: 'syz.4.2580': attribute type 4 has an invalid length. [ 968.291541][ T4212] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 968.320254][T13724] XFS (nbd3): no-recovery mounts must be read-only. [ 968.606278][ T4212] usb 6-1: device not accepting address 9, error -71 [ 968.859282][ T4212] usb usb6-port1: unable to enumerate USB device [ 970.027319][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 970.462816][T13727] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 970.513172][ T1108] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 970.765147][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 970.833853][T13727] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 970.947583][T13727] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 971.058109][T13727] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 971.142552][T13727] usb 3-1: config 220 has no interface number 2 [ 971.195425][T13727] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 971.210440][ T1108] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 971.223647][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 971.237016][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.253695][ T1108] usb 5-1: Product: syz [ 971.408037][T13727] usb 3-1: config 220 interface 0 has no altsetting 0 [ 971.415598][ T1108] usb 5-1: Manufacturer: syz [ 971.422404][ T1108] usb 5-1: SerialNumber: syz [ 971.428366][T13727] usb 3-1: config 220 interface 76 has no altsetting 0 [ 971.446457][ T1108] usb 5-1: config 0 descriptor?? [ 971.451714][T13727] usb 3-1: config 220 interface 1 has no altsetting 0 [ 971.519749][T13768] 9pnet_virtio: no channels available for device syz [ 971.643069][T13727] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 971.680563][T13727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.722847][ T1108] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 971.749176][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 971.766115][T13727] usb 3-1: Product: syz [ 971.781516][T13770] device ipvlan2 entered promiscuous mode [ 971.795507][T13770] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 971.810240][T13770] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 971.837963][T13727] usb 3-1: Manufacturer: syz [ 971.872804][T13727] usb 3-1: SerialNumber: syz [ 972.273082][T13727] usb 3-1: selecting invalid altsetting 0 [ 972.280175][T13727] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 972.325693][T13727] usb 3-1: No valid video chain found. [ 972.433878][T13727] usb 3-1: selecting invalid altsetting 0 [ 972.450058][T13727] usbtest: probe of 3-1:220.1 failed with error -22 [ 972.487987][T13727] usb 3-1: USB disconnect, device number 53 [ 972.602793][T13773] netlink: 'syz.3.2593': attribute type 4 has an invalid length. [ 974.062621][ T1108] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 976.017695][ T1108] usb 5-1: USB disconnect, device number 54 [ 976.347633][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2598'. [ 979.862987][ T1108] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 980.118209][T13830] 9pnet_virtio: no channels available for device syz [ 980.362945][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 980.381388][T13832] XFS (nbd5): no-recovery mounts must be read-only. [ 980.713483][ T1108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 980.739448][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.836856][ T1108] usb 2-1: Product: syz [ 980.841276][ T1108] usb 2-1: Manufacturer: syz [ 981.490756][ T1108] usb 2-1: SerialNumber: syz [ 981.697302][ T1108] usb 2-1: config 0 descriptor?? [ 981.962912][ T1108] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 981.972756][ T4177] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 982.162865][ T4177] usb 6-1: device descriptor read/64, error -71 [ 982.656870][ T4177] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 982.893077][ T1324] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 982.900896][ T4177] usb 6-1: device descriptor read/64, error -71 [ 983.930376][T13860] device veth0_vlan left promiscuous mode [ 983.937057][T13860] device veth0_vlan entered promiscuous mode [ 983.961053][T13860] lo speed is unknown, defaulting to 1000 [ 983.978745][ T4177] usb usb6-port1: attempt power cycle [ 984.004089][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 984.020761][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 984.043383][T13861] overlayfs: failed to get inode (-116) [ 984.045843][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 984.049323][T13861] overlayfs: failed to get inode (-116) [ 984.102831][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 984.223634][ T1324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 984.235364][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 984.246215][ T1324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 984.256716][ T1324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.270070][ T1324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.279376][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.292928][ T1108] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 984.313539][ T1108] usb 2-1: USB disconnect, device number 55 [ 984.642960][ T1324] usb 5-1: usb_control_msg returned -71 [ 984.648851][ T1324] usbtmc 5-1:16.0: can't read capabilities [ 984.672005][ T1324] usb 5-1: USB disconnect, device number 55 [ 985.231415][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 985.314436][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2624'. [ 985.713781][T13882] 9pnet_virtio: no channels available for device syz [ 988.464061][T13907] overlayfs: failed to get inode (-116) [ 988.472298][T13907] overlayfs: failed to get inode (-116) [ 988.672953][ T4303] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 988.912801][ T4303] usb 4-1: device descriptor read/64, error -71 [ 989.252829][ T4303] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 989.482974][ T4303] usb 4-1: device descriptor read/64, error -71 [ 989.613478][ T4303] usb usb4-port1: attempt power cycle [ 990.042925][ T4303] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 990.603007][ T4303] usb 4-1: device descriptor read/8, error -71 [ 990.872783][ T4303] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 990.912802][ T4212] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 990.963374][ T4295] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 990.973908][ T4303] usb 4-1: device descriptor read/8, error -71 [ 991.093210][ T4303] usb usb4-port1: unable to enumerate USB device [ 991.212789][ T4212] usb 6-1: Using ep0 maxpacket: 8 [ 992.563010][ T4212] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 992.740237][ T4212] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 992.752816][ T4295] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 992.768497][ T4212] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 992.803569][ T4295] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12847, setting to 1024 [ 992.822133][ T4212] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.852488][ T4295] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 992.895116][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.912903][ T4212] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 992.922879][ T4295] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 993.195595][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.203724][ T4212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.233097][T13925] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 993.507346][ T4295] usb 5-1: USB disconnect, device number 56 [ 994.005102][T13949] 9pnet_virtio: no channels available for device syz [ 994.082859][ T4212] usb 6-1: usb_control_msg returned -71 [ 994.090046][ T4212] usbtmc 6-1:16.0: can't read capabilities [ 994.202975][ T4212] usb 6-1: USB disconnect, device number 13 [ 997.263014][ T1108] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 997.502879][ T1108] usb 5-1: device descriptor read/64, error -71 [ 997.812892][ T1108] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 998.032806][ T1108] usb 5-1: device descriptor read/64, error -71 [ 998.239127][ T1108] usb usb5-port1: attempt power cycle [ 999.302868][ T1108] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 999.328888][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2653'. [ 999.412966][ T1108] usb 5-1: device descriptor read/8, error -71 [ 999.712862][ T1108] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 999.782559][T13992] fuse: Unknown parameter 'grou00000000000000000000' [ 1000.073314][T13996] overlayfs: failed to get inode (-116) [ 1000.079187][T13996] overlayfs: failed to get inode (-116) [ 1000.085822][ T1108] usb 5-1: device not accepting address 60, error -71 [ 1000.093476][ T1108] usb usb5-port1: unable to enumerate USB device [ 1000.537499][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 1004.544531][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2667'. [ 1005.246921][T14052] overlayfs: failed to get inode (-116) [ 1005.252839][T14052] overlayfs: failed to get inode (-116) [ 1006.185427][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 1009.185139][ T23] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1009.386473][T14084] 9pnet_virtio: no channels available for device syz [ 1009.482853][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1009.523098][ T23] usb 2-1: no configurations [ 1009.527752][ T23] usb 2-1: can't read configurations, error -22 [ 1009.742890][ T23] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1010.002919][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1010.043886][ T23] usb 2-1: no configurations [ 1010.057734][ T23] usb 2-1: can't read configurations, error -22 [ 1010.133429][ T23] usb usb2-port1: attempt power cycle [ 1010.612799][ T23] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1010.791986][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1010.882821][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1010.922846][ T23] usb 2-1: no configurations [ 1010.927752][ T23] usb 2-1: can't read configurations, error -22 [ 1011.082731][ T23] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1011.182919][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1011.222991][ T23] usb 2-1: no configurations [ 1011.227626][ T23] usb 2-1: can't read configurations, error -22 [ 1011.248789][ T23] usb usb2-port1: unable to enumerate USB device [ 1016.845185][T14125] XFS (nbd4): no-recovery mounts must be read-only. [ 1018.643864][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2694'. [ 1024.369514][T14173] XFS (nbd3): no-recovery mounts must be read-only. [ 1024.919310][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 1026.828153][T14191] device veth0_vlan left promiscuous mode [ 1026.835455][T14191] device veth0_vlan entered promiscuous mode [ 1026.849062][T14192] lo speed is unknown, defaulting to 1000 [ 1030.324701][T14216] overlayfs: failed to get inode (-116) [ 1030.330473][T14216] overlayfs: failed to get inode (-116) [ 1033.293296][T14237] device veth0_vlan left promiscuous mode [ 1033.301394][T14237] device veth0_vlan entered promiscuous mode [ 1033.406124][T14237] lo speed is unknown, defaulting to 1000 [ 1033.553663][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1034.165027][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1034.213753][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1035.162492][ T4242] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1035.967824][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1035.979309][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.992878][ T4242] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1036.002028][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.021983][ T4242] usb 3-1: config 0 descriptor?? [ 1037.728058][ T4242] isku 0003:1E7D:319C.0020: item fetching failed at offset 6/7 [ 1037.736121][ T4242] isku 0003:1E7D:319C.0020: parse failed [ 1037.741793][ T4242] isku: probe of 0003:1E7D:319C.0020 failed with error -22 [ 1039.697513][ T4242] usb 3-1: USB disconnect, device number 54 [ 1040.108976][T14294] device veth0_vlan left promiscuous mode [ 1040.115477][T14294] device veth0_vlan entered promiscuous mode [ 1040.127419][T14291] lo speed is unknown, defaulting to 1000 [ 1040.247941][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1040.284798][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1040.822963][ T4242] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1041.275707][ T4242] usb 3-1: device descriptor read/64, error -71 [ 1041.296196][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1041.562738][ T4242] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1041.783023][ T4242] usb 3-1: device descriptor read/64, error -71 [ 1041.912915][ T4242] usb usb3-port1: attempt power cycle [ 1042.352733][ T4242] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1042.453066][ T4242] usb 3-1: device descriptor read/8, error -71 [ 1042.931584][ T4242] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1043.063688][ T4242] usb 3-1: device descriptor read/8, error -71 [ 1043.182881][ T4242] usb usb3-port1: unable to enumerate USB device [ 1044.295560][T14331] hub 9-0:1.0: USB hub found [ 1044.305538][T14331] hub 9-0:1.0: 1 port detected [ 1049.032810][ T4242] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1049.572791][ T4242] usb 4-1: device descriptor read/64, error -71 [ 1050.042864][ T4242] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1050.232767][ T4242] usb 4-1: device descriptor read/64, error -71 [ 1050.373456][ T4242] usb usb4-port1: attempt power cycle [ 1050.704912][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2755'. [ 1050.813027][ T4242] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1050.913108][ T4242] usb 4-1: device descriptor read/8, error -71 [ 1051.192807][ T4242] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1051.297669][ T4242] usb 4-1: device descriptor read/8, error -71 [ 1051.432875][ T4242] usb usb4-port1: unable to enumerate USB device [ 1053.519508][T14383] overlayfs: missing 'workdir' [ 1054.693296][ T4242] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1054.695102][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.973093][ T4242] usb 4-1: Using ep0 maxpacket: 32 [ 1055.239042][T14383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1055.262786][ T4242] usb 4-1: device descriptor read/all, error -71 [ 1058.593083][ T6713] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1058.832767][ T6713] usb 3-1: device descriptor read/64, error -71 [ 1059.112692][ T6713] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1059.312865][ T6713] usb 3-1: device descriptor read/64, error -71 [ 1059.435081][ T6713] usb usb3-port1: attempt power cycle [ 1059.842780][ T6713] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1059.933021][ T6713] usb 3-1: device descriptor read/8, error -71 [ 1060.291820][ T6713] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1060.999106][T14444] overlayfs: missing 'workdir' [ 1061.905080][ T6713] usb 3-1: device not accepting address 62, error -71 [ 1061.914024][ T6713] usb usb3-port1: unable to enumerate USB device [ 1062.471487][T14448] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1066.133807][T14476] hub 9-0:1.0: USB hub found [ 1066.139438][T14476] hub 9-0:1.0: 1 port detected [ 1067.502891][ T1324] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1067.702800][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1067.711333][T14485] overlayfs: missing 'workdir' [ 1068.762655][ T1324] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1069.182813][T14485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1069.422798][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1069.552881][ T1324] usb usb2-port1: attempt power cycle [ 1071.854555][T14516] Cannot find add_set index 0 as target [ 1076.756320][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1076.762368][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1076.829577][T14541] ceph: No mds server is up or the cluster is laggy [ 1077.299688][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1077.305969][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1077.414358][ T1324] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1077.872891][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1078.234118][T14565] Cannot find add_set index 0 as target [ 1078.467451][T14567] hub 9-0:1.0: USB hub found [ 1078.472417][T14567] hub 9-0:1.0: 1 port detected [ 1079.312784][ T1324] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1079.532887][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1079.656360][ T1324] usb usb2-port1: attempt power cycle [ 1083.478142][ T23] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1084.299367][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.345634][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 1084.469544][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.654320][ T23] usb 2-1: config 0 descriptor?? [ 1084.991469][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 1085.468585][ T4303] usb 2-1: USB disconnect, device number 66 [ 1086.634300][T12781] udevd[12781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.889100][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1090.423929][T14675] overlayfs: missing 'workdir' [ 1090.534791][T14678] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1095.336692][T14734] device veth0_vlan left promiscuous mode [ 1095.343464][T14734] device veth0_vlan entered promiscuous mode [ 1095.366825][T14734] lo speed is unknown, defaulting to 1000 [ 1095.408243][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1095.649064][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1096.869612][T14745] overlayfs: missing 'workdir' [ 1097.317847][T14750] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1100.588914][T14775] ptrace attach of "./syz-executor exec"[4174] was attempted by ""[14775] [ 1109.211670][T14837] ptrace attach of "./syz-executor exec"[4172] was attempted by ""[14837] [ 1110.452781][ T1108] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1110.808505][ T1108] usb 2-1: device descriptor read/64, error -71 [ 1111.132977][ T1108] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1111.362755][ T1108] usb 2-1: device descriptor read/64, error -71 [ 1111.492926][ T1108] usb usb2-port1: attempt power cycle [ 1111.935881][ T1108] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1112.852785][ T1108] usb 2-1: device descriptor read/8, error -71 [ 1112.922951][T14869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1115.573123][T14887] hub 9-0:1.0: USB hub found [ 1115.578090][T14887] hub 9-0:1.0: 1 port detected [ 1115.793140][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.651536][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 1119.965591][ T23] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1120.322713][ T23] usb 3-1: device descriptor read/64, error -71 [ 1121.634427][ T23] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1126.494964][ T4192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.818947][ T4192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.913051][T14992] lo speed is unknown, defaulting to 1000 [ 1127.024707][ T4192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.196545][ T4192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.692787][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 1127.759027][T14992] chnl_net:caif_netlink_parms(): no params data found [ 1127.766415][ T1108] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1127.972826][ T1108] usb 5-1: device descriptor read/64, error -71 [ 1128.217957][T14992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.355950][ T1108] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1128.419930][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.831688][T14992] device bridge_slave_0 entered promiscuous mode [ 1129.303066][ T1108] usb 5-1: device descriptor read/64, error -71 [ 1129.365299][T14992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.372429][T14992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.424134][ T1108] usb usb5-port1: attempt power cycle [ 1129.447316][T14992] device bridge_slave_1 entered promiscuous mode [ 1129.772845][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 1129.843944][ T1108] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1130.494911][T15047] overlayfs: missing 'workdir' [ 1130.632672][ T1108] usb 5-1: device not accepting address 63, error -71 [ 1130.746823][T14992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.758595][T15047] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1130.939064][T14992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.848484][T14992] team0: Port device team_slave_0 added [ 1131.854826][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 1131.889452][T14992] team0: Port device team_slave_1 added [ 1131.929501][T14992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.942677][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.980872][T14992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.038988][T14992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.049577][T14992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.112706][T14992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.414793][T14992] device hsr_slave_0 entered promiscuous mode [ 1132.441661][T14992] device hsr_slave_1 entered promiscuous mode [ 1132.465115][T14992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1132.494815][T14992] Cannot create hsr debugfs directory [ 1134.014775][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 1134.871762][T15095] ptrace attach of "./syz-executor exec"[12272] was attempted by ""[15095] [ 1135.224638][ T4192] device hsr_slave_0 left promiscuous mode [ 1135.255624][ T4192] device hsr_slave_1 left promiscuous mode [ 1136.250185][ T4192] device veth1_macvtap left promiscuous mode [ 1136.289139][ T4192] device veth0_macvtap left promiscuous mode [ 1136.309333][ T4192] device veth1_vlan left promiscuous mode [ 1136.316417][T15120] overlayfs: missing 'workdir' [ 1136.336954][ T4192] device veth0_vlan left promiscuous mode [ 1137.094986][T15120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1140.461973][ T4192] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1140.509690][ T4192] device bridge0 left promiscuous mode [ 1140.518663][ T4192] bond0 (unregistering): Released all slaves [ 1140.857288][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1143.122815][ T23] usb 4-1: device descriptor read/all, error -71 [ 1143.714756][T15192] overlayfs: missing 'workdir' [ 1143.761155][T14992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1144.043746][T14992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1144.104532][T14992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1144.272276][T14992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1145.942187][T14992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.998329][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1146.023433][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1146.184173][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.270301][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1146.299970][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1146.412113][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.419344][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.702240][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1147.246992][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1147.285663][T15229] hub 9-0:1.0: USB hub found [ 1147.290419][T15229] hub 9-0:1.0: 1 port detected [ 1147.305750][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1147.315139][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.322263][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.446456][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1147.476098][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1147.504533][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1147.536389][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1148.429186][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1149.450421][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1149.459232][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1149.467856][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1149.476444][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1149.495647][T14992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.601927][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1149.747445][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1151.005051][T15262] netlink: 'syz.4.2967': attribute type 4 has an invalid length. [ 1152.032306][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1152.046119][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1152.114354][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.132765][ T4177] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1152.232752][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1152.241915][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1152.252330][ T6713] libceph: connect (1)[c::]:6789 error -101 [ 1152.283072][ T6713] libceph: mon0 (1)[c::]:6789 connect error [ 1152.306641][T15281] ceph: No mds server is up or the cluster is laggy [ 1152.322770][ T4177] usb 2-1: device descriptor read/64, error -71 [ 1152.460572][T14992] device veth0_vlan entered promiscuous mode [ 1152.467971][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1152.484097][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1152.499149][T14992] device veth1_vlan entered promiscuous mode [ 1152.510136][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1152.519169][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1152.554805][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1152.612674][ T4177] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1152.625410][ T6713] libceph: connect (1)[c::]:6789 error -101 [ 1152.631536][ T6713] libceph: mon0 (1)[c::]:6789 connect error [ 1152.767036][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1152.776741][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1152.833417][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1152.850156][ T4177] usb 2-1: device descriptor read/64, error -71 [ 1152.883580][T14992] device veth0_macvtap entered promiscuous mode [ 1152.928676][T14992] device veth1_macvtap entered promiscuous mode [ 1152.983698][T14992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1152.984532][ T4177] usb usb2-port1: attempt power cycle [ 1153.035110][T14992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.164299][T14992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.291361][T15308] overlayfs: failed to get inode (-116) [ 1153.298587][T15308] overlayfs: failed to get inode (-116) [ 1154.004785][T14992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.268559][T14992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.075880][T14992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.282768][T14992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.400122][T14992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1155.456783][T14992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.662647][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.683779][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1155.692350][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1156.089371][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1156.501198][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1156.682766][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1157.720024][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1157.797857][T14992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.152515][T14992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.200899][T14992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.238049][T14992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.732305][T15370] overlayfs: failed to get inode (-116) [ 1158.739472][T15370] overlayfs: failed to get inode (-116) [ 1159.464525][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.536291][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.330027][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1160.459994][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.470072][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.484554][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1160.812865][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.824785][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.832213][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.847571][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.877870][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.902757][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.910201][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1160.955228][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.025211][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.056919][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.221426][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.348617][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.468391][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.570635][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.673175][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.774510][ T4212] hid-generic FFF9:0000:0203.0021: unknown main item tag 0x0 [ 1161.945415][ T4212] hid-generic FFF9:0000:0203.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1163.484427][T15420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2995'. [ 1163.783643][ T6713] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1164.023500][ T6713] usb 4-1: Using ep0 maxpacket: 16 [ 1164.369680][T15445] overlayfs: failed to get inode (-116) [ 1164.376847][T15445] overlayfs: failed to get inode (-116) [ 1164.414309][ T4242] Bluetooth: hci5: command 0x0409 tx timeout [ 1165.222743][ T6713] usb 4-1: config 0 has no interfaces? [ 1165.228240][ T6713] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1165.255339][ T6713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.277356][ T6713] usb 4-1: config 0 descriptor?? [ 1165.564175][T15409] chnl_net:caif_netlink_parms(): no params data found [ 1167.251746][ T4303] Bluetooth: hci5: command 0x041b tx timeout [ 1167.492786][ T4177] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1167.836163][T15462] hub 9-0:1.0: USB hub found [ 1167.842689][T15462] hub 9-0:1.0: 1 port detected [ 1169.153870][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.295147][ T4242] Bluetooth: hci5: command 0x040f tx timeout [ 1169.398673][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.407295][T15409] device bridge_slave_0 entered promiscuous mode [ 1169.422117][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.429929][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.452827][T15409] device bridge_slave_1 entered promiscuous mode [ 1169.564320][T11033] Bluetooth: hci0: Unknown advertising packet type: 0x7474 [ 1169.564564][T11033] ================================================================== [ 1169.580827][T11033] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 1169.589082][T11033] Read of size 1 at addr ffff8881413d3c0a by task kworker/u5:0/11033 [ 1169.597167][T11033] [ 1169.599485][T11033] CPU: 1 PID: 11033 Comm: kworker/u5:0 Not tainted 5.15.180-syzkaller #0 [ 1169.608023][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1169.618079][T11033] Workqueue: hci0 hci_rx_work [ 1169.622782][T11033] Call Trace: [ 1169.626066][T11033] [ 1169.628990][T11033] dump_stack_lvl+0x1e3/0x2d0 [ 1169.633668][T11033] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1169.639314][T11033] ? _printk+0xd1/0x120 [ 1169.643474][T11033] ? __wake_up_klogd+0xcc/0x100 [ 1169.648353][T11033] ? panic+0x860/0x860 [ 1169.652416][T11033] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 1169.657877][T11033] print_address_description+0x63/0x3b0 [ 1169.663421][T11033] ? hci_le_meta_evt+0x11d6/0x3f50 [ 1169.668541][T11033] kasan_report+0x16b/0x1c0 [ 1169.673452][T11033] ? hci_le_meta_evt+0x11d6/0x3f50 [ 1169.678561][T11033] hci_le_meta_evt+0x11d6/0x3f50 [ 1169.683513][T11033] ? __lock_acquire+0x1ff0/0x1ff0 [ 1169.688563][T11033] ? hci_remote_host_features_evt+0x280/0x280 [ 1169.694643][T11033] ? __mutex_unlock_slowpath+0x218/0x750 [ 1169.700297][T11033] ? hci_event_packet+0x3b4/0x1550 [ 1169.705408][T11033] ? mutex_unlock+0x10/0x10 [ 1169.709910][T11033] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1169.715891][T11033] ? print_irqtrace_events+0x210/0x210 [ 1169.721371][T11033] hci_event_packet+0xc41/0x1550 [ 1169.726342][T11033] ? rcu_lock_release+0x20/0x20 [ 1169.731217][T11033] ? hci_send_to_monitor+0x99/0x4d0 [ 1169.736426][T11033] hci_rx_work+0x237/0xa10 [ 1169.740872][T11033] process_one_work+0x8a1/0x10c0 [ 1169.745832][T11033] ? worker_detach_from_pool+0x260/0x260 [ 1169.751478][T11033] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1169.757021][T11033] ? kthread_data+0x4e/0xc0 [ 1169.761523][T11033] ? wq_worker_running+0x97/0x170 [ 1169.766544][T11033] worker_thread+0xaca/0x1280 [ 1169.771588][T11033] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1169.777510][T11033] kthread+0x3f6/0x4f0 [ 1169.781580][T11033] ? rcu_lock_release+0x20/0x20 [ 1169.786445][T11033] ? kthread_blkcg+0xd0/0xd0 [ 1169.791031][T11033] ret_from_fork+0x1f/0x30 [ 1169.795455][T11033] [ 1169.798465][T11033] [ 1169.800777][T11033] Allocated by task 15486: [ 1169.805188][T11033] ____kasan_kmalloc+0xba/0xf0 [ 1169.809953][T11033] __kmalloc_node_track_caller+0x195/0x390 [ 1169.815791][T11033] __alloc_skb+0x12c/0x590 [ 1169.820210][T11033] vhci_write+0xbc/0x430 [ 1169.824466][T11033] vfs_write+0xacd/0xe50 [ 1169.828725][T11033] ksys_write+0x1a2/0x2c0 [ 1169.833069][T11033] do_syscall_64+0x3b/0x80 [ 1169.837482][T11033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1169.843369][T11033] [ 1169.845707][T11033] Last potentially related work creation: [ 1169.851459][T11033] kasan_save_stack+0x36/0x60 [ 1169.856165][T11033] kasan_record_aux_stack+0xba/0x100 [ 1169.861450][T11033] insert_work+0x54/0x3e0 [ 1169.865773][T11033] __queue_work+0x963/0xd00 [ 1169.870266][T11033] queue_work_on+0x14b/0x250 [ 1169.875234][T11033] cleanup_net+0x7f1/0xc90 [ 1169.879647][T11033] process_one_work+0x8a1/0x10c0 [ 1169.884575][T11033] worker_thread+0xaca/0x1280 [ 1169.889243][T11033] kthread+0x3f6/0x4f0 [ 1169.893300][T11033] ret_from_fork+0x1f/0x30 [ 1169.897707][T11033] [ 1169.900020][T11033] The buggy address belongs to the object at ffff8881413d3800 [ 1169.900020][T11033] which belongs to the cache kmalloc-1k of size 1024 [ 1169.914058][T11033] The buggy address is located 10 bytes to the right of [ 1169.914058][T11033] 1024-byte region [ffff8881413d3800, ffff8881413d3c00) [ 1169.927848][T11033] The buggy address belongs to the page: [ 1169.933479][T11033] page:ffffea000504f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1413d0 [ 1169.943707][T11033] head:ffffea000504f400 order:3 compound_mapcount:0 compound_pincount:0 [ 1169.952028][T11033] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 1169.960103][T11033] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 1169.968677][T11033] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 1169.977628][T11033] page dumped because: kasan: bad access detected [ 1169.984125][T11033] page_owner tracks the page as allocated [ 1169.989848][T11033] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 4096712777, free_ts 0 [ 1170.007761][T11033] get_page_from_freelist+0x3b78/0x3d40 [ 1170.013301][T11033] __alloc_pages+0x272/0x700 [ 1170.017882][T11033] alloc_page_interleave+0x22/0x1c0 [ 1170.023072][T11033] new_slab+0xbb/0x4b0 [ 1170.027135][T11033] ___slab_alloc+0x6f6/0xe10 [ 1170.031712][T11033] kmem_cache_alloc_trace+0x1a0/0x290 [ 1170.037083][T11033] __class_register+0x5e/0x3c0 [ 1170.041840][T11033] do_one_initcall+0x22b/0x7a0 [ 1170.046595][T11033] do_initcall_level+0x157/0x210 [ 1170.051539][T11033] do_initcalls+0x49/0x90 [ 1170.055860][T11033] kernel_init_freeable+0x425/0x5c0 [ 1170.061070][T11033] kernel_init+0x19/0x290 [ 1170.065395][T11033] ret_from_fork+0x1f/0x30 [ 1170.069802][T11033] page_owner free stack trace missing [ 1170.075549][T11033] [ 1170.077864][T11033] Memory state around the buggy address: [ 1170.083479][T11033] ffff8881413d3b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1170.091527][T11033] ffff8881413d3b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1170.099603][T11033] >ffff8881413d3c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1170.107649][T11033] ^ [ 1170.111964][T11033] ffff8881413d3c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1170.120024][T11033] ffff8881413d3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1170.128097][T11033] ================================================================== [ 1170.136161][T11033] Disabling lock debugging due to kernel taint [ 1170.154138][T11033] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1170.161366][T11033] CPU: 1 PID: 11033 Comm: kworker/u5:0 Tainted: G B 5.15.180-syzkaller #0 [ 1170.171181][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1170.181252][T11033] Workqueue: hci0 hci_rx_work [ 1170.185958][T11033] Call Trace: [ 1170.189259][T11033] [ 1170.192192][T11033] dump_stack_lvl+0x1e3/0x2d0 [ 1170.196867][T11033] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1170.202491][T11033] ? panic+0x860/0x860 [ 1170.206549][T11033] ? rcu_is_watching+0x11/0xa0 [ 1170.211305][T11033] ? preempt_schedule_common+0xa6/0xd0 [ 1170.216772][T11033] panic+0x318/0x860 [ 1170.220683][T11033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1170.226850][T11033] ? check_panic_on_warn+0x1d/0xa0 [ 1170.231973][T11033] ? fb_is_primary_device+0xd0/0xd0 [ 1170.237165][T11033] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1170.243196][T11033] ? _raw_spin_unlock+0x40/0x40 [ 1170.248042][T11033] check_panic_on_warn+0x7e/0xa0 [ 1170.252976][T11033] ? hci_le_meta_evt+0x11d6/0x3f50 [ 1170.258100][T11033] end_report+0x6d/0xf0 [ 1170.262263][T11033] kasan_report+0x18e/0x1c0 [ 1170.266765][T11033] ? hci_le_meta_evt+0x11d6/0x3f50 [ 1170.271893][T11033] hci_le_meta_evt+0x11d6/0x3f50 [ 1170.276844][T11033] ? __lock_acquire+0x1ff0/0x1ff0 [ 1170.281896][T11033] ? hci_remote_host_features_evt+0x280/0x280 [ 1170.287978][T11033] ? __mutex_unlock_slowpath+0x218/0x750 [ 1170.293626][T11033] ? hci_event_packet+0x3b4/0x1550 [ 1170.298761][T11033] ? mutex_unlock+0x10/0x10 [ 1170.303281][T11033] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1170.309277][T11033] ? print_irqtrace_events+0x210/0x210 [ 1170.314759][T11033] hci_event_packet+0xc41/0x1550 [ 1170.319720][T11033] ? rcu_lock_release+0x20/0x20 [ 1170.324587][T11033] ? hci_send_to_monitor+0x99/0x4d0 [ 1170.329801][T11033] hci_rx_work+0x237/0xa10 [ 1170.334216][T11033] process_one_work+0x8a1/0x10c0 [ 1170.339156][T11033] ? worker_detach_from_pool+0x260/0x260 [ 1170.344809][T11033] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1170.350364][T11033] ? kthread_data+0x4e/0xc0 [ 1170.354859][T11033] ? wq_worker_running+0x97/0x170 [ 1170.359875][T11033] worker_thread+0xaca/0x1280 [ 1170.364551][T11033] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1170.370720][T11033] kthread+0x3f6/0x4f0 [ 1170.374808][T11033] ? rcu_lock_release+0x20/0x20 [ 1170.379651][T11033] ? kthread_blkcg+0xd0/0xd0 [ 1170.384229][T11033] ret_from_fork+0x1f/0x30 [ 1170.388641][T11033] [ 1170.391933][T11033] Kernel Offset: disabled [ 1170.396278][T11033] Rebooting in 86400 seconds..