last executing test programs: 1m11.057666169s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 1m7.652948762s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m3.91212475s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.724657914s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 49.306992997s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.415709856s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 38.040051799s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.46705071s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 26.386861232s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.250054017s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 12.533306369s ago: executing program 2 (id=3274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB='2\x00\x00\x00'], 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x204}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x6c}}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) 11.439639428s ago: executing program 2 (id=3276): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRES16=r5, @ANYBLOB="010000000000000000001200000018000180140002000008000600b3a200000000000000cc2c2b3e000000000000000000007e7b23f48e2ef13ed968abb46a86711f33268ee062dd05ce27b28addb2397c6f3705bc3dfd267406a6f41b5dee3e86685842f6cbde85ffffffffffffffff0cff8b11177677a20d8a31ce8bb8d349fcd5f6a26a3d7d4c14dba4f3dc446853ffc15f19aa4d29027268df0000000000000000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.036801265s ago: executing program 2 (id=3278): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000340)=""/233, 0x0, 0xe9, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2b050000000000000000", @ANYBLOB='\x00'/10], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x800000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x32314241, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000134fc0)={0x218c933c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x53, "814cc480701b3e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000135fc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x6, "9a19bfe522b13a"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x24800, 0x0) 9.990902896s ago: executing program 0 (id=3279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs$namespace(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) sendto$inet(r1, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) gettid() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) clock_gettime(0x0, &(0x7f0000006880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/233, 0xe9}], 0x5, &(0x7f0000000700)=""/120, 0x78}, 0xd}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/78, 0x4e}], 0x2, &(0x7f0000000880)=""/4096, 0x1000}, 0xe558}, {{&(0x7f0000001880)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f0000003900)=""/227, 0xe3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/210, 0xd2}, {&(0x7f0000003b00)=""/236, 0xec}, {&(0x7f0000003c00)=""/63, 0x3f}], 0x3, &(0x7f0000003c80)=""/251, 0xfb}, 0xfffffa65}, {{&(0x7f0000003d80)=@pppol2tpv3in6, 0x80, &(0x7f0000005000)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/217, 0xd9}, {&(0x7f0000004fc0)=""/31, 0x1f}], 0x3, &(0x7f0000005040)=""/2, 0x2}, 0xffff8001}, {{&(0x7f0000005080)=@phonet, 0x80, &(0x7f0000006600)=[{&(0x7f0000005100)=""/254, 0xfe}, {&(0x7f0000005200)=""/75, 0x4b}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/81, 0x51}, {&(0x7f0000006300)=""/78, 0x4e}, {&(0x7f0000006380)=""/181, 0xb5}, {&(0x7f0000006440)=""/79, 0x4f}, {&(0x7f00000064c0)=""/61, 0x3d}, {&(0x7f0000006500)=""/197, 0xc5}], 0x9, &(0x7f00000066c0)=""/5, 0x5}, 0x80}], 0x6, 0x40010002, &(0x7f00000068c0)={r2, r3+60000000}) 9.142349827s ago: executing program 4 (id=3020): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r7 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r7, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.835247103s ago: executing program 2 (id=3280): syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x0, 0xb5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd83405181bdd6d10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.792498585s ago: executing program 0 (id=3281): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x4, [@datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x80000000, 0x3a9025d4}, {0x5, 0x3, 0xfff}, {0x4, 0xb, 0x2}], "398096"}, @enum64={0x10, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xe, 0x4, 0x4}, {0x9, 0x2, 0x7}, {0x2, 0x0, 0xfffffff6}, {0xc, 0x8, 0x6}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000340)=""/233, 0x8c, 0xe9, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2b050000000000000000", @ANYBLOB='\x00'/10], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x800000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x32314241, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000134fc0)={0x218c933c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x53, "814cc480701b3e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000135fc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x6, "9a19bfe522b13a"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x24800, 0x0) 6.220657592s ago: executing program 0 (id=3282): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f00000000c0), 0x1) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0xa002a0, 0xc, 0x0, &(0x7f0000000800)="e178f2789b76e4074d8840d7", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendfile(r0, r6, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x19, 0x0, 0x0) 6.212477557s ago: executing program 2 (id=3283): openat$comedi(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000002740)='\x00', 0xfffffffffffffcc3}], 0x1) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00'], 0x2d8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 6.202124001s ago: executing program 3 (id=3284): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f000000bb80)=0x7fff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f000000bc80), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x405a51bc3e632e7c) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x203, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x24, &(0x7f0000000080)={0x80, 0x0, 0x5, 0xffff, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x2, 0xdb, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) writev(r1, 0x0, 0x0) unshare(0x6a040000) io_uring_setup(0x162e, 0x0) fsopen(&(0x7f00000043c0)='devpts\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 5.152183042s ago: executing program 0 (id=3285): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000001480)=[@in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x3}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x71}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x1, {0xffffffffffffffff}, {0xee00}, 0x8001, 0xffffffff}) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={'blake2b-160\x00'}}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001940)={0x9, 0x0, [{0x8080000, 0x9d, &(0x7f0000001500)=""/157}, {0x1000, 0x1a, &(0x7f00000015c0)=""/26}, {0x8080000, 0xaf, &(0x7f0000001600)=""/175}, {0x5000, 0xdc, &(0x7f00000016c0)=""/220}, {0xffff1000, 0xa1, &(0x7f00000017c0)=""/161}, {0x5000, 0x1000, &(0x7f0000002a00)=""/4096}, {0x4000, 0x1000, &(0x7f0000003a00)=""/4096}, {0x4000, 0x33, &(0x7f0000001880)=""/51}, {0x4, 0x71, &(0x7f00000018c0)=""/113}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8b"]) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1}) 4.589530766s ago: executing program 3 (id=3286): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x15) r6 = eventfd2(0x8, 0x1) ppoll(&(0x7f0000000080)=[{r6}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r6, &(0x7f0000000040)=0x9, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0xfffffffd}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req={0x3fc, 0xfffff8c2, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000008010) read$FUSE(0xffffffffffffffff, &(0x7f0000004cc0)={0x2020}, 0x2020) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000de02e64d1e6c3bccda208e95f6763e0e3906"], 0x0, 0x0, 0x0, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.554188061s ago: executing program 0 (id=3287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB='2\x00\x00\x00\x00\x00'], 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x24044084) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x204}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x6c}}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) 3.070740832s ago: executing program 0 (id=3288): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x32, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x4080}, {r4, 0x158}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x1]}, 0x8) 2.706585827s ago: executing program 2 (id=3289): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x1, 0x7800, 0xd6, 0xffffffff, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x67, 0x0, 0xf9, 0x29, 0x0, @multicast2, @local, {[@generic={0x44, 0x12, "5014c2c089a18f3e5848c847c18fb528"}, @noop, @ssrr={0x89, 0x17, 0x64, [@private=0xa010101, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @remote]}, @end, @end, @cipso={0x86, 0x12, 0x3, [{0x7, 0x9, "0bd9ed23751be9"}, {0xde0537bf4c032dde, 0x3, 's'}]}, @timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0xee08}, {@loopback, 0x4}, {@empty, 0xd}, {@private=0xa010100, 0x1}]}, @ssrr={0x89, 0x1f, 0x99, [@rand_addr=0x64010102, @rand_addr=0x64010101, @multicast1, @loopback, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=@delchain={0xe44, 0x65, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x9}, {0x30acf44168847586, 0x1e}, {0x6, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x164, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xc}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8a}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x9}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_EMATCHES={0x138, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x110, 0x2, 0x0, 0x0, {{0x6f3, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "616e44d79af144f3b7637d751d6fe7ee8d366eab33438487c252fdbf4ed410b6d7d5c15c113f3fd905fb1d813f1dea5628dea2d5ebc11e0984ca0ba80f73c810fdb8231554ded4750add13f32e1470b5524fd4cd0b22391c5204204c491523b20b1c94b84af17bbdce7b5ccd5bb27ed28683fe263cbd01b827e5092659a30912e18983342db673e05639dac0fb902d9a523e563d71e4f92bacd8e8168407c692f051e6c2cff35b399ea8b69612fe3ba65e8f6618ecb89dc17c277e4aeb8cbbe4952d8f0be5862ff307221701cf07a4e346bfdc2655a4f9bac4f3d853840193bb5e"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x5}, {0x1, 0x5, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x4e4, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x74174c7c}, @TCA_FLOW_XOR={0x8, 0x7, 0xb}, @TCA_FLOW_MASK={0x8, 0x6, 0xbead}, @TCA_FLOW_XOR={0x8, 0x7, 0xffff8000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x4b8, 0x9, 0x0, 0x1, [@m_connmark={0x50, 0x1c, 0x0, 0x0, {{0xd}, {0x4}, {0x1e, 0x6, "549a43baf2bf70f632ed3843613c6d8b40c7aa726bb6b01f50db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x118, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x4, 0x1dc1, 0x400}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3b5, 0x9, 0x20000003, 0x2d4, 0x4}, 0x3, r5}}]}, {0xa9, 0x6, "f188f02aba4fafe76ab88e1d4da866f3bb671de3361e94e57069120801e9d00915aa53fe88a9fc1b0f7a060650d1f2c9799525cb28174347fd913cdff3bd605e8ffb0540c3e00658ade20b01b44e261f64e0362154bcc59d33694b6ae55964374e3f0d7978009faf79d9d9f206263c3c9d03dd3a3f5380c1b1bab736c13d0d5abbef12513468956134755485b42803ff0f3cf3f6be7230abf9ffc27afd31374d78752b3393"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x98, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffa, 0x7, 0x2, 0x2}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x0, 0x7, 0x5}, 0x66}}]}, {0x32, 0x6, "a872ba403a47968c22541b5f64bcf9c6c366ce1e8f714fb13daf8832a6490a3ee738abe40bfee59e34ed8cfb400d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x128, 0x1c, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa}]}, {0xd6, 0x6, "5174a3f152ba0c7935d33e82913959538951804e07cc5034a44adf16332d9d6467f8f84091396e185f2c38cff57471db937e455f02b376c556ba0d96f1a9192ca33d3d59e73511a889f0c8912d0caff175f727a87b408db12128571bf6183e5444cd6eb4be3bf0cb303588b4dcb68e3f2808e03cde610cd83ee0c2d1699ce1d9366d925300a012359468b0317eb637cbd5c2485ec468030f2f8fbd3db8986f577bfd4cec32ecc9fd3cdb7a500b35f83c7c5498b3df738260e3ece179870d123176937550fa2c799e1d953123ce4cb48ff499"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_bpf={0x74, 0x16, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xc00, 0x3, 0x5, 0xfff}, {0x68, 0x1, 0x5, 0x40}, {0x8, 0x51, 0x6, 0x5b}, {0x8b61, 0x2, 0x1, 0x4}, {0x3, 0x6, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x8bf, 0x10000000, 0x6, 0x400}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x118, 0x14, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x6, 0x8, 0x8, 0xf7}}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x1701d670, 0x0, 0x2}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x9ee0, 0x8, 0x7fffffff, 0xfea}, 0x5}}]}, {0x71, 0x6, "a84e17e113d762c60685f33bc96f9f2b06705e9a78613b4a5917f25bf19c6fb0761643ac4cb287388542dbbfb8597018e9ca79465348e6a9e04090b445c18a11b4a7f33ba33dce152ecce8a89e35102538cbd61085c58fc4fa0daa93b415041c933f838d737bf4ae5435e90bce"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf8}}, @filter_kind_options=@f_bpf={{0x8}, {0x7b0, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x6, 0x2, 0x0, 0x8001}, {0x6, 0xf3, 0x7f, 0x8000}]}}, @TCA_BPF_ACT={0x37c, 0x1, [@m_csum={0x1c8, 0x4, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x5}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffff80, 0x20000000, 0x7fff, 0x3}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0xffffffff, 0x10000000, 0x7, 0x40}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xda90, 0x2, 0x1, 0x5}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2000000, 0xfffffffa, 0x10000000, 0x1, 0x37a}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x18b6, 0x10000000, 0x3, 0x5}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0xffffffffffffffff, 0x3, 0xffffffff}, 0x7}}]}, {0xd5, 0x6, "9ecd3e0301aefeac1ea82042e43454beb054d84fe510faeea2ad1dcad90342c4812cd7e5caae87e200917c0b5338bf41eee97f40740a0d6c8244187800e68894d76f12de73d680002cbdb92c5c3416e4ba1597d320dbbc78d28bec9937e4e8b2398be2a4124db764a1b5217c6d2344f6d177b7fdb7aed79bda3d89f9c0ec416d315e05d5a46d2a32a19c20a9fe6d7d362219051857765f9542af5a8c79c040cfd1affee11b8569d7263e92cc27d53607faea597cb7169377e0e353418f3050f5577c7cef0d0bba14b52d35dc1ae7076df5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x100, 0x1a, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x2}]]}, {0xc6, 0x6, "b2fc990b7fbcd288b3c7aa48054537407519621c01cb5b1c9c0950aeccb11522bcd20cbb97e4c75189c1604ad9957a1c923a51810ea43b0505dfce6270655094c9eddff21d7e55cacd0ecd4cbd43d1a6413bc0e08cf460e1615f6247cc34e4e0a6cfa1ae8796322974f88b7f14306dd092d02122d644b5e9baf3ebba19f3dfa787e9bacf7875cdd44335fde0f4eaa475a087d6d7d11bce68ccc7942311685cec8a4e57b4a59fd4e37df67e4df51e4f4db1e0255a3a567b0380aa386fc3950b0c966f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xb0, 0x1b, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "79fcf58c7ee6185e448b5a4be2622ee6"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_LABELS={0x14, 0x7, "4364a484c13eaa4f5a52fc9be22a3bdf"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}]}, {0x11, 0x6, "af6843aca9cc80cd8c07612a67"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe5}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x40, 0x1, 0x0, 0x3, 0x9, 0x5, 0x0, 0x605, 0x3ff, 0x2, 0xff, 0x5, 0x7, 0x2, 0xfffffffe, 0x2, 0x93f, 0x400, 0x5, 0x7, 0x9, 0x6, 0x5, 0xd4f, 0x2, 0x6, 0x1, 0x9, 0x7ff, 0x1000, 0x1, 0x6e78, 0x8, 0x6721, 0x443, 0x8, 0x1, 0x80000000, 0x0, 0x101, 0x2, 0x2, 0x1, 0x10000, 0x4, 0x9, 0x9, 0x2, 0x3, 0x3, 0x9, 0x4, 0x8001, 0x8, 0x0, 0x6, 0x7, 0x27b, 0x331f442d, 0x3, 0x1, 0x2e, 0x401, 0x9243, 0xec3, 0x80000000, 0x3, 0x81, 0xef7d, 0x0, 0x1, 0x20000, 0x4, 0x26e2, 0x1, 0x3, 0x1, 0x147, 0x1acf, 0x2, 0x3, 0x290, 0xfffffffe, 0xffff0000, 0x0, 0x8, 0x200, 0xfffffffd, 0x80000000, 0x101, 0x9, 0x1200, 0x4, 0x107, 0x884, 0x6, 0x2, 0x1, 0x8000, 0x1, 0x9, 0x1ff, 0x4, 0xa23, 0x5, 0x59e, 0x7c, 0x80000001, 0x4, 0x7ff, 0x0, 0x6, 0x2, 0x200, 0x7, 0x2, 0x1, 0x0, 0x3, 0x7fffffff, 0xa, 0xfffff93d, 0x562af38d, 0x0, 0x9, 0xff, 0x3, 0x3ff, 0x10e, 0x401, 0xffff, 0x8, 0x2, 0x8, 0x0, 0x8142, 0xe3, 0x1, 0x85, 0x0, 0x10001, 0x5, 0x4, 0x40a3, 0x0, 0x2, 0x3, 0x7, 0x0, 0x8, 0x38, 0x4d, 0x4, 0x8, 0x8, 0x6, 0x5adc830c, 0x8, 0xe, 0x3, 0x200, 0x6, 0x6, 0x100, 0xfff, 0x6, 0x6, 0x4, 0x0, 0x4, 0x4, 0x7, 0x4, 0xa, 0x7, 0x10000, 0xb71, 0x1, 0x7, 0xfff, 0x5, 0x5, 0xf, 0xb2, 0x10001, 0x0, 0x4, 0x2, 0x47, 0x8, 0x9, 0x9, 0x8, 0x1ff, 0x3, 0x6, 0x8, 0xbe, 0xff, 0x9, 0x101, 0x200, 0x8001, 0x40, 0x9, 0x4, 0x37e2, 0x9, 0x3, 0x9, 0x8, 0x63a, 0x7, 0xfffffffc, 0x1, 0xc, 0x1, 0x4, 0x8, 0xf10, 0x2, 0x9, 0x3000000, 0x499, 0x4, 0x0, 0x21ad, 0x6, 0x1, 0x60000, 0x9, 0x3, 0x7f, 0x8001, 0x401, 0x6, 0x100, 0x8, 0x2, 0xfffffc00, 0x3ff, 0x5, 0x9, 0x81, 0x68ed, 0x0, 0x6, 0x1, 0x8, 0xb9e, 0x9, 0x7, 0x3, 0x74, 0xbdc]}]}]}}]}, 0xe44}, 0x1, 0x0, 0x0, 0x44004}, 0x4840) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r8 = dup(r7) read$FUSE(r8, &(0x7f0000003c40)={0x2020}, 0xffffff0a) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) 2.600515373s ago: executing program 3 (id=3290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x1, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r8, 0x247f6, 0x80ffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) preadv(r2, &(0x7f00000000c0), 0x0, 0xfbfffffd, 0x4) 1.581122745s ago: executing program 3 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs$namespace(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) sendto$inet(r1, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) ioperm(0x7, 0x81, 0x2) gettid() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) clock_gettime(0x0, &(0x7f0000006880)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/233, 0xe9}], 0x5, &(0x7f0000000700)=""/120, 0x78}, 0xd}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/78, 0x4e}], 0x2, &(0x7f0000000880)=""/4096, 0x1000}, 0xe558}, {{&(0x7f0000001880)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f0000003900)=""/227, 0xe3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/210, 0xd2}, {&(0x7f0000003b00)=""/236, 0xec}, {&(0x7f0000003c00)=""/63, 0x3f}], 0x3, &(0x7f0000003c80)=""/251, 0xfb}, 0xfffffa65}, {{&(0x7f0000003d80)=@pppol2tpv3in6, 0x80, &(0x7f0000005000)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/217, 0xd9}, {&(0x7f0000004fc0)=""/31, 0x1f}], 0x3, &(0x7f0000005040)=""/2, 0x2}, 0xffff8001}, {{&(0x7f0000005080)=@phonet, 0x80, &(0x7f0000006600)=[{&(0x7f0000005100)=""/254, 0xfe}, {&(0x7f0000005200)=""/75, 0x4b}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/81, 0x51}, {&(0x7f0000006300)=""/78, 0x4e}, {&(0x7f0000006380)=""/181, 0xb5}, {&(0x7f0000006440)=""/79, 0x4f}, {&(0x7f00000064c0)=""/61, 0x3d}, {&(0x7f0000006500)=""/197, 0xc5}], 0x9, &(0x7f00000066c0)=""/5, 0x5}, 0x80}], 0x6, 0x40010002, &(0x7f00000068c0)={r2, r3+60000000}) 1.368959883s ago: executing program 3 (id=3292): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x4, [@datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x80000000, 0x3a9025d4}, {0x5, 0x3, 0xfff}, {0x4, 0xb, 0x2}], "398096"}, @enum64={0x10, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xe, 0x4, 0x4}, {0x9, 0x2, 0x7}, {0x2, 0x0, 0xfffffff6}, {0xc, 0x8, 0x6}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000340)=""/233, 0x8c, 0xe9, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2b050000000000000000", @ANYBLOB='\x00'/10], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x800000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x6, 0x0, 0x32314241, 0x0, 0x0, [{0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {0x20}]}}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000134fc0)={0x218c933c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x53, "814cc480701b3e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000135fc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x6, "9a19bfe522b13a"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x24800, 0x0) 423.812096ms ago: executing program 3 (id=3293): syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x0, 0xb5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd83405181bdd6d10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=0x41424344], 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x7bca, 0x4, 0x80, 0x1], 0x0, 0x0}, 0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r6, 0x26, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) kernel console output (not intermixed with test programs): -22 [ 1094.677310][ T5839] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1094.860299][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1095.081143][ T5839] usb usb3-port1: attempt power cycle [ 1095.622820][T16198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.694506][T16198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.937149][ T5839] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1095.978194][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.985319][ T5115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.232519][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.239657][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.850900][ T5839] usb 3-1: device descriptor read/8, error -71 [ 1098.318785][T16425] loop6: detected capacity change from 0 to 524287999 [ 1100.923071][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.736625][T16198] veth0_vlan: entered promiscuous mode [ 1101.790419][T16198] veth1_vlan: entered promiscuous mode [ 1102.306448][T16198] veth0_macvtap: entered promiscuous mode [ 1102.363706][T16198] veth1_macvtap: entered promiscuous mode [ 1103.405740][T16467] /dev/nullb0: Can't open blockdev [ 1103.464677][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.569780][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.678122][T16470] netlink: 'syz.4.2948': attribute type 21 has an invalid length. [ 1103.686473][T16470] netlink: 'syz.4.2948': attribute type 6 has an invalid length. [ 1103.694385][T16470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1103.920804][ T5884] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1103.936216][T16198] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1104.106672][T16198] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1104.163585][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1104.171990][T16198] wireguard: wg0: Could not create IPv4 socket [ 1104.201551][ T5884] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1104.212136][ T9460] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1104.220336][ T5884] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1104.264630][T16198] wireguard: wg1: Could not create IPv4 socket [ 1104.265679][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1104.278477][T16198] wireguard: wg2: Could not create IPv4 socket [ 1104.382467][ T9460] usb 4-1: Using ep0 maxpacket: 8 [ 1104.384286][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1104.417673][ T9460] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1104.418633][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1104.428827][ T9460] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.438864][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1104.488170][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1104.642160][ T9460] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1104.644534][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1104.818743][ T9460] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1104.824266][ T5884] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1104.830225][ T9460] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1104.840987][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.851349][ T9460] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1104.886666][ T5884] usb 1-1: config 0 descriptor?? [ 1104.932553][ T9460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.996605][ T9460] usbtmc 4-1:16.0: bulk endpoints not found [ 1105.112929][ T5884] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1105.149659][ T5884] usb 1-1: USB disconnect, device number 76 [ 1105.171001][ T5884] usblp0: removed [ 1105.416263][T16485] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1107.156254][ T5884] usb 4-1: USB disconnect, device number 63 [ 1108.980092][ T5884] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1109.049573][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1109.060470][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1109.083926][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1109.098473][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1109.106001][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1109.156161][ T5884] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1109.216176][T16513] Failed to initialize the IGMP autojoin socket (err -2) [ 1109.268379][ T5884] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1109.300138][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1109.317093][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.329590][T16507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1109.385389][ T5884] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1110.154645][ T5884] usb 4-1: USB disconnect, device number 64 [ 1110.633847][T16540] netlink: 'syz.4.2960': attribute type 21 has an invalid length. [ 1110.886593][T16540] netlink: 'syz.4.2960': attribute type 6 has an invalid length. [ 1111.197737][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2960'. [ 1111.342598][ T5845] Bluetooth: hci2: command tx timeout [ 1112.077960][T16559] omfs: Invalid superblock (0) [ 1112.378352][T14391] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1112.781024][T14391] usb 5-1: Using ep0 maxpacket: 32 [ 1112.832532][T14391] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1113.166227][T14391] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1113.228407][T14391] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1113.253983][T14391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1113.274129][T14391] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1113.307755][T14391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1113.355408][T14391] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1113.436584][T14391] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1113.477506][T14391] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1113.502881][T14391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.535763][T14391] usb 5-1: config 0 descriptor?? [ 1113.567176][ T5845] Bluetooth: hci2: command tx timeout [ 1113.642400][T16513] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 1113.722415][T16513] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 1113.760000][ T5884] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1113.770887][T14391] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 92 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1113.796020][T16513] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 1113.835918][T14391] usb 5-1: USB disconnect, device number 92 [ 1113.877791][T14391] usblp0: removed [ 1113.908428][T16513] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 1113.962161][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.984491][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.011380][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1114.306855][ T5884] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1114.343017][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.385984][ T5884] usb 1-1: config 0 descriptor?? [ 1114.724991][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 1114.745625][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1114.751663][ T9460] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1115.225933][ T5884] usb 1-1: USB disconnect, device number 77 [ 1115.443145][ T9460] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.552165][T16513] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1115.553669][ T9460] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1115.578375][ T9460] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1115.587513][ T9460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.599997][T16513] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1115.608186][T16587] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1115.625832][ T9460] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.661933][T16513] wireguard: wg0: Could not create IPv4 socket [ 1115.677483][T16513] wireguard: wg1: Could not create IPv4 socket [ 1115.697729][T16513] wireguard: wg2: Could not create IPv4 socket [ 1115.788637][ T5845] Bluetooth: hci2: command tx timeout [ 1116.063182][T10199] usb 4-1: USB disconnect, device number 65 [ 1117.248212][T16628] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1117.520236][ T9460] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1117.723612][ T9460] usb 1-1: Using ep0 maxpacket: 16 [ 1118.298614][ T9460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.315081][ T9460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.326749][ T9460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.336743][ T9460] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.493304][ T9460] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.560282][ T9460] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1118.597379][ T9460] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1118.705189][ T9460] usb 1-1: Manufacturer: syz [ 1118.815472][ T9460] usb 1-1: config 0 descriptor?? [ 1119.288637][ T9460] rc_core: IR keymap rc-hauppauge not found [ 1119.331205][ T9460] Registered IR keymap rc-empty [ 1119.607630][T10199] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1119.626241][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.658785][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.686999][ T9460] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1119.749154][ T9460] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input113 [ 1119.767473][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.787080][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.791219][T10199] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1119.805780][T10199] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1119.808326][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.824829][T16660] omfs: Invalid superblock (0) [ 1119.833229][T10199] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.855443][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.861116][T10199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.877660][T16649] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1119.883127][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.888736][T10199] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.915813][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.941493][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1119.980693][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1120.022336][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1120.064981][ T9460] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1120.141042][ T5937] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1120.168874][ T9460] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1120.182883][ T9460] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1120.193425][T10199] usb 3-1: USB disconnect, device number 71 [ 1120.222722][ T9460] usb 1-1: USB disconnect, device number 78 [ 1120.342742][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 1120.363454][ T5937] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1120.492490][ T5937] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1120.501148][ T5937] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1120.512977][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1120.529980][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1120.542879][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1120.616758][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1121.086366][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1121.109392][ T5937] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1121.130652][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.177683][ T5937] usb 4-1: config 0 descriptor?? [ 1121.362257][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1121.375243][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1121.396762][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1121.553403][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1121.609811][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1121.855770][ T5937] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1121.885673][T16678] Failed to initialize the IGMP autojoin socket (err -2) [ 1121.896571][ T5937] usb 4-1: USB disconnect, device number 66 [ 1121.904376][T16687] fuse: Unknown parameter 'user_i00000000000000000000' [ 1121.934830][ T5937] usblp0: removed [ 1123.917010][ T50] Bluetooth: hci2: command tx timeout [ 1125.495633][T10199] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1126.137062][ T5845] Bluetooth: hci2: command tx timeout [ 1126.724164][T10199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.815371][T10199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.847739][T10199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.865396][T10199] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1126.874801][T10199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.899847][T10199] usb 4-1: config 0 descriptor?? [ 1126.996808][T16741] loop6: detected capacity change from 0 to 524287999 [ 1127.035454][ T9460] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1127.282746][ T9460] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.330989][ T9460] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.375450][ T9460] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.385899][T10199] usbhid 4-1:0.0: can't add hid device: -71 [ 1127.409503][T10199] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1127.414467][ T9460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.452003][T10199] usb 4-1: USB disconnect, device number 67 [ 1127.459323][T16724] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1127.469992][ T9460] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.749163][ T9460] usb 3-1: USB disconnect, device number 72 [ 1128.420886][ T5845] Bluetooth: hci2: command tx timeout [ 1128.699688][T16678] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 1128.806828][T16678] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 1129.052499][T16678] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 1129.455003][T16678] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 1130.164569][ T30] audit: type=1400 audit(1753832898.766:900): avc: denied { write } for pid=16780 comm="syz.3.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1130.349392][ T9460] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1130.627213][ T5845] Bluetooth: hci2: command tx timeout [ 1130.648578][ T9460] usb 3-1: Using ep0 maxpacket: 8 [ 1130.664010][ T9460] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1130.672669][ T9460] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1130.682807][ T9460] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1130.693380][ T9460] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1130.704428][ T9460] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.721658][ T9460] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1130.758589][ T9460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.804596][ T9460] usbtmc 3-1:16.0: bulk endpoints not found [ 1130.951996][T16678] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1131.164004][T16678] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1131.210695][T16678] wireguard: wg0: Could not create IPv4 socket [ 1131.215084][T10199] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1131.219029][T16678] wireguard: wg1: Could not create IPv4 socket [ 1131.232631][T16678] wireguard: wg2: Could not create IPv4 socket [ 1131.499591][T10199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.529908][ T5884] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1131.581053][T10199] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1131.590997][T10199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.629897][T10199] usb 5-1: config 0 descriptor?? [ 1131.666171][T10199] pwc: Askey VC010 type 2 USB webcam detected. [ 1131.728369][ T5884] usb 1-1: device descriptor read/64, error -71 [ 1131.984806][ T5884] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1132.126410][ T5884] usb 1-1: device descriptor read/64, error -71 [ 1132.301969][ T5884] usb usb1-port1: attempt power cycle [ 1133.239698][ T5884] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1133.287995][ T5884] usb 1-1: device descriptor read/8, error -71 [ 1133.318954][ T5937] usb 3-1: USB disconnect, device number 73 [ 1133.717128][ T5884] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1133.750761][ T5884] usb 1-1: device descriptor read/8, error -71 [ 1134.096146][ T5884] usb usb1-port1: unable to enumerate USB device [ 1134.737901][T16862] /dev/nullb0: Can't open blockdev [ 1135.031681][ T5937] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1135.033191][T10199] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1135.095176][T10199] pwc: recv_control_msg error -71 req 02 val 2700 [ 1135.124006][T10199] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1135.148263][T10199] pwc: recv_control_msg error -71 req 04 val 1000 [ 1135.166424][T10199] pwc: recv_control_msg error -71 req 04 val 1300 [ 1135.247131][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 1135.258017][ T5937] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1135.259044][T10199] pwc: recv_control_msg error -71 req 04 val 1400 [ 1135.266405][ T5937] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1135.266433][ T5937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1135.297519][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1135.326278][T10199] pwc: recv_control_msg error -71 req 02 val 2000 [ 1135.373960][ T9460] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1135.396291][ T5937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1135.437866][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1135.497376][T10199] pwc: recv_control_msg error -71 req 02 val 2100 [ 1135.542975][ T5937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1135.544995][ T9460] usb 3-1: Using ep0 maxpacket: 16 [ 1135.575652][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1135.587538][T10199] pwc: recv_control_msg error -71 req 04 val 1500 [ 1135.654815][ T9460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.665213][T10199] pwc: recv_control_msg error -71 req 02 val 2500 [ 1135.672292][T10199] pwc: recv_control_msg error -71 req 02 val 2400 [ 1135.726802][T10199] pwc: recv_control_msg error -71 req 02 val 2600 [ 1135.751249][ T5937] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1135.764711][T10199] pwc: recv_control_msg error -71 req 02 val 2900 [ 1135.784690][ T9460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.791898][T10199] pwc: recv_control_msg error -71 req 02 val 2800 [ 1135.806564][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.837009][ T9460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1135.847942][ T5937] usb 1-1: config 0 descriptor?? [ 1135.865524][T10199] pwc: recv_control_msg error -71 req 04 val 1100 [ 1135.886854][T10199] pwc: recv_control_msg error -71 req 04 val 1200 [ 1135.908449][ T9460] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1135.950664][T10199] pwc: Registered as video103. [ 1135.989332][T10199] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input114 [ 1135.993823][ T9460] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.103040][T10199] usb 5-1: USB disconnect, device number 93 [ 1136.111191][ T9460] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1136.120653][ T5937] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1136.155357][ T9460] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1136.163965][ T9460] usb 3-1: Manufacturer: syz [ 1136.212599][ T5937] usb 1-1: USB disconnect, device number 83 [ 1136.243833][ T9460] usb 3-1: config 0 descriptor?? [ 1136.273803][ T5937] usblp0: removed [ 1136.507011][T14391] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1136.539270][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.553371][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.562037][ T9460] rc_core: IR keymap rc-hauppauge not found [ 1136.569439][ T9460] Registered IR keymap rc-empty [ 1136.579139][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.587724][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.595920][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.608825][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.635378][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.649884][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.668072][ T9460] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1136.688245][ T9460] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input115 [ 1136.710276][T14391] usb 4-1: Using ep0 maxpacket: 8 [ 1136.717810][T16888] Failed to initialize the IGMP autojoin socket (err -2) [ 1136.729166][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.737955][T14391] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1136.768234][T14391] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1136.771984][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.786491][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1136.793845][T14391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1136.793895][T14391] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1136.793915][T14391] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.793957][T14391] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1136.793978][T14391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.803714][T14391] usbtmc 4-1:16.0: bulk endpoints not found [ 1136.827681][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.860038][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1136.887883][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.899034][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1136.920215][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1136.925771][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.935073][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1136.958316][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1136.964265][T16894] Failed to initialize the IGMP autojoin socket (err -2) [ 1137.029800][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1137.052186][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1137.110670][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.115361][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1137.276771][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1137.308749][ T9460] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1137.331643][ T9460] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1137.344156][ T9460] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1137.366119][ T9460] usb 3-1: USB disconnect, device number 74 [ 1137.387188][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.474984][ T30] audit: type=1400 audit(1753832905.614:901): avc: denied { relabelfrom } for pid=16894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1137.562127][ T30] audit: type=1400 audit(1753832905.614:902): avc: denied { relabelto } for pid=16894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1138.738576][ T12] dummy0: left allmulticast mode [ 1138.763133][ T12] bridge0: port 3(dummy0) entered disabled state [ 1138.788311][ T12] bridge_slave_1: left allmulticast mode [ 1138.794798][ T5845] Bluetooth: hci0: command tx timeout [ 1138.819011][ T12] bridge_slave_1: left promiscuous mode [ 1138.846439][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.898015][ T12] bridge_slave_0: left allmulticast mode [ 1138.915789][ T12] bridge_slave_0: left promiscuous mode [ 1138.921532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.214675][ T12] bridge0 (unregistering): left promiscuous mode [ 1139.536353][ T5937] usb 4-1: USB disconnect, device number 68 [ 1140.366293][T16945] loop6: detected capacity change from 0 to 524287999 [ 1140.427747][ T12] bond0 (unregistering): left promiscuous mode [ 1140.461888][ T12] bond_slave_0: left promiscuous mode [ 1140.562522][ T12] bond_slave_1: left promiscuous mode [ 1140.821186][T16960] netlink: 'syz.3.3029': attribute type 21 has an invalid length. [ 1141.018458][ T5845] Bluetooth: hci0: command tx timeout [ 1141.122120][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1141.133872][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1141.143461][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1141.158361][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.168918][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1141.190309][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1141.231053][ T12] bond_slave_0: left allmulticast mode [ 1141.238090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.257525][ T12] bond_slave_1: left allmulticast mode [ 1141.311674][ T12] bond0 (unregistering): Released all slaves [ 1141.855830][ T12] bond1 (unregistering): Released all slaves [ 1141.900578][T16960] netlink: 'syz.3.3029': attribute type 6 has an invalid length. [ 1141.909558][T16960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3029'. [ 1141.968176][T16959] Failed to initialize the IGMP autojoin socket (err -2) [ 1142.021793][ T12] tipc: Disabling bearer [ 1142.030584][ T12] tipc: Left network mode [ 1142.132825][T16979] /dev/nullb0: Can't open blockdev [ 1142.142307][T16980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1142.622054][T14391] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1142.846944][T14391] usb 1-1: Using ep0 maxpacket: 32 [ 1142.866662][T14391] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1142.890993][T14391] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1142.911791][T14391] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1142.932961][T14391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1143.040844][T14391] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1143.095380][T14391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1143.194678][T14391] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1143.220765][T14391] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1143.242133][ T50] Bluetooth: hci0: command tx timeout [ 1143.258885][T14391] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1143.281499][T14391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.316543][T14391] usb 1-1: config 0 descriptor?? [ 1143.335505][ T12] hsr_slave_0: left promiscuous mode [ 1143.342996][ T12] hsr_slave_1: left promiscuous mode [ 1143.378340][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.386140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.395674][ T9460] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1143.406290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.417540][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.452659][ T12] veth1_macvtap: left promiscuous mode [ 1143.461163][ T12] veth0_macvtap: left promiscuous mode [ 1143.467398][ T12] veth1_vlan: left promiscuous mode [ 1143.472959][ T12] veth0_vlan: left promiscuous mode [ 1143.555289][T14391] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1143.562796][ T9460] usb 3-1: device descriptor read/64, error -71 [ 1143.620408][T14391] usb 1-1: USB disconnect, device number 84 [ 1143.643454][T14391] usblp0: removed [ 1143.849804][ T9460] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1143.965085][T17012] bio_check_eod: 2 callbacks suppressed [ 1143.965104][T17012] syz.3.3034: attempt to access beyond end of device [ 1143.965104][T17012] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1143.991242][ T9460] usb 3-1: device descriptor read/64, error -71 [ 1144.108888][ T9460] usb usb3-port1: attempt power cycle [ 1144.183170][T17012] syz.3.3034: attempt to access beyond end of device [ 1144.183170][T17012] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1144.225589][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1144.273282][T17012] syz.3.3034: attempt to access beyond end of device [ 1144.273282][T17012] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1144.349784][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1144.375276][T17012] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1144.394976][T17012] UDF-fs: Scanning with blocksize 512 failed [ 1144.482516][ T9460] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1144.518881][ T9460] usb 3-1: device descriptor read/8, error -71 [ 1144.732885][T17012] syz.3.3034: attempt to access beyond end of device [ 1144.732885][T17012] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1144.783576][ T9460] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1144.832108][ T9460] usb 3-1: device descriptor read/8, error -71 [ 1144.905970][T17012] syz.3.3034: attempt to access beyond end of device [ 1144.905970][T17012] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1144.953245][ T9460] usb usb3-port1: unable to enumerate USB device [ 1144.987355][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1144.997331][T17012] syz.3.3034: attempt to access beyond end of device [ 1144.997331][T17012] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1145.012804][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1145.023300][T17012] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1145.042249][T17012] UDF-fs: Scanning with blocksize 1024 failed [ 1145.050912][T17012] syz.3.3034: attempt to access beyond end of device [ 1145.050912][T17012] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1145.074424][T17012] syz.3.3034: attempt to access beyond end of device [ 1145.074424][T17012] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1145.123680][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1145.137562][T17012] syz.3.3034: attempt to access beyond end of device [ 1145.137562][T17012] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1145.166922][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1145.187788][T17012] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1145.200971][T17012] UDF-fs: Scanning with blocksize 2048 failed [ 1145.223862][T17012] syz.3.3034: attempt to access beyond end of device [ 1145.223862][T17012] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1145.237626][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1145.247916][T17012] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1145.261350][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1145.264279][T17012] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1145.282158][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1145.297449][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1145.334803][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1145.368488][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1145.373422][T17012] UDF-fs: Scanning with blocksize 4096 failed [ 1145.468858][ T5845] Bluetooth: hci0: command tx timeout [ 1145.592916][T17012] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1147.776097][ T5845] Bluetooth: hci2: command tx timeout [ 1148.170050][ T30] audit: type=1400 audit(1753832915.613:903): avc: denied { read } for pid=17064 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1148.451651][ T5937] lo speed is unknown, defaulting to 1000 [ 1148.458441][ T5937] s: Port: 1 Link DOWN [ 1149.016622][T17022] Failed to initialize the IGMP autojoin socket (err -2) [ 1149.967014][T17096] bio_check_eod: 2 callbacks suppressed [ 1149.967031][T17096] syz.2.3046: attempt to access beyond end of device [ 1149.967031][T17096] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1150.043245][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.043245][T17096] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1150.120732][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1150.182644][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.182644][T17096] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1150.238063][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1150.267956][T17096] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1150.301110][T17096] UDF-fs: Scanning with blocksize 512 failed [ 1150.317883][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.317883][T17096] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1150.363691][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.363691][T17096] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1150.409542][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1150.441570][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.441570][T17096] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1150.495710][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1150.505595][T17096] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1150.514801][T17096] UDF-fs: Scanning with blocksize 1024 failed [ 1150.521816][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.521816][T17096] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1150.554718][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.554718][T17096] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1150.592109][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1150.626660][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.626660][T17096] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1150.675895][T16888] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1150.709793][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1150.723341][T16888] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1150.757253][T17096] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1150.770649][T16888] wireguard: wg0: Could not create IPv4 socket [ 1150.780592][T16888] wireguard: wg1: Could not create IPv4 socket [ 1150.798054][T16888] wireguard: wg2: Could not create IPv4 socket [ 1150.806242][T17096] UDF-fs: Scanning with blocksize 2048 failed [ 1150.813587][T17096] syz.2.3046: attempt to access beyond end of device [ 1150.813587][T17096] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1150.852118][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1150.899157][T17096] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1150.943001][T17096] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1150.953670][T17096] UDF-fs: Scanning with blocksize 4096 failed [ 1150.961542][T17096] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1152.302077][T17029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.311485][T17029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.320849][T17029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.330477][T17029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.337861][T17029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.411905][T17151] Failed to initialize the IGMP autojoin socket (err -2) [ 1152.556289][ T5115] Bluetooth: Error in BCSP hdr checksum [ 1152.887466][ T5115] Bluetooth: Error in BCSP hdr checksum [ 1153.437900][ T4559] Bluetooth: Error in BCSP hdr checksum [ 1154.529912][ T5845] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1154.545168][ T50] Bluetooth: hci2: command tx timeout [ 1155.710334][T17215] bio_check_eod: 2 callbacks suppressed [ 1155.710354][T17215] syz.3.3059: attempt to access beyond end of device [ 1155.710354][T17215] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1155.729735][T17215] syz.3.3059: attempt to access beyond end of device [ 1155.729735][T17215] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1155.743883][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1155.757916][T17215] syz.3.3059: attempt to access beyond end of device [ 1155.757916][T17215] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1155.774652][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1155.813946][T17220] loop6: detected capacity change from 0 to 524287999 [ 1155.874509][T17215] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1155.968140][T17215] UDF-fs: Scanning with blocksize 512 failed [ 1156.162977][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.162977][T17215] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1156.212371][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.212371][T17215] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1156.274384][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1156.362826][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.362826][T17215] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1156.541646][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1156.574159][T17215] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1156.581776][T17215] UDF-fs: Scanning with blocksize 1024 failed [ 1156.593667][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.593667][T17215] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1156.609355][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.609355][T17215] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1156.624456][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1156.635335][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.635335][T17215] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1156.669740][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1156.728778][T17215] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1156.766493][T17215] UDF-fs: Scanning with blocksize 2048 failed [ 1156.771801][ T50] Bluetooth: hci2: command tx timeout [ 1156.868158][T17215] syz.3.3059: attempt to access beyond end of device [ 1156.868158][T17215] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1156.927121][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1156.972043][T17215] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1157.021990][T17215] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1157.066709][T17215] UDF-fs: Scanning with blocksize 4096 failed [ 1157.105370][T17215] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1157.378452][ T30] audit: type=1400 audit(1753832924.228:904): avc: denied { read } for pid=17235 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1158.166114][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1158.179186][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1158.199113][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1158.213337][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1158.227348][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.683166][T17245] Failed to initialize the IGMP autojoin socket (err -2) [ 1158.683581][T17151] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1158.985343][ T5845] Bluetooth: hci2: command tx timeout [ 1158.991723][T17151] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1159.696150][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.117856][T17151] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1160.143377][T17151] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1160.309482][T17258] SELinux: failed to load policy [ 1160.316170][ T30] audit: type=1400 audit(1753832926.969:905): avc: denied { load_policy } for pid=17257 comm="syz.3.3066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1160.485719][ T5845] Bluetooth: hci0: command tx timeout [ 1160.587703][T17270] netlink: 'syz.2.3068': attribute type 21 has an invalid length. [ 1160.688253][T17270] netlink: 'syz.2.3068': attribute type 6 has an invalid length. [ 1160.697116][T17270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1161.107550][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1161.128560][T17274] netlink: 'syz.3.3069': attribute type 2 has an invalid length. [ 1161.238723][ T5845] Bluetooth: hci2: command tx timeout [ 1161.245831][ T5937] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1161.396784][ T9460] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1161.407922][ T5937] usb 1-1: device descriptor read/64, error -71 [ 1161.657356][ T9460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.671829][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1161.701591][ T9460] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1161.711080][ T5937] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1161.723743][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1161.786630][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1161.811562][ T5884] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1161.826816][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1161.834309][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1161.877234][ T9460] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1161.951845][ T5937] usb 1-1: device descriptor read/64, error -71 [ 1161.993338][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 1162.004247][ T5884] usb 3-1: config 129 has an invalid interface number: 225 but max is 1 [ 1162.012704][ T5884] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.032426][T17289] Failed to initialize the IGMP autojoin socket (err -2) [ 1162.036051][ T5884] usb 3-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 1162.045933][ T9460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.069117][ T5937] usb usb1-port1: attempt power cycle [ 1162.070621][ T5884] usb 3-1: config 129 has no interface number 0 [ 1162.096741][T17151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1162.100202][ T5884] usb 3-1: config 129 interface 225 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 1162.118548][ T9460] usb 4-1: config 0 descriptor?? [ 1162.143027][ T5884] usb 3-1: config 129 interface 225 altsetting 143 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1162.157909][ T9460] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1162.164057][ T5884] usb 3-1: config 129 interface 225 altsetting 143 bulk endpoint 0x1 has invalid maxpacket 0 [ 1162.175220][ T5884] usb 3-1: config 129 interface 225 has no altsetting 0 [ 1162.189645][ T9460] dvb-usb: bulk message failed: -22 (3/0) [ 1162.209376][ T5884] usb 3-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=29.48 [ 1162.218957][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.219417][T17151] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1162.226945][ T5884] usb 3-1: Product: syz [ 1162.226961][ T5884] usb 3-1: Manufacturer: syz [ 1162.226974][ T5884] usb 3-1: SerialNumber: syz [ 1162.259447][ T9460] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1162.282538][ T9460] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1162.299499][ T9460] usb 4-1: media controller created [ 1162.322970][ T9460] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.339321][T17151] wireguard: wg0: Could not create IPv4 socket [ 1162.364257][T17274] dvb-usb: bulk message failed: -22 (4/0) [ 1162.383401][T17151] wireguard: wg1: Could not create IPv4 socket [ 1162.391669][ T9460] dvb-usb: bulk message failed: -22 (6/0) [ 1162.397798][ T9460] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1162.454068][T17286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.467534][T17286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.493523][T17286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.521109][T17286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.543125][ T5937] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1162.558239][T17151] wireguard: wg2: Could not create IPv4 socket [ 1162.576848][ T5937] usb 1-1: device descriptor read/8, error -71 [ 1162.594086][ T9460] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input116 [ 1162.627110][ T9460] dvb-usb: schedule remote query interval to 150 msecs. [ 1162.648733][ T9460] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1162.717236][ T5884] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 1162.749026][ T5884] usb 3-1: selecting invalid altsetting 0 [ 1162.774213][ T2331] pvrusb2: Failed to submit write-control URB status=-90 [ 1162.781585][ T2331] pvrusb2: Device being rendered inoperable [ 1162.803225][ T5884] usb 3-1: USB disconnect, device number 79 [ 1162.821081][ T9460] dvb-usb: bulk message failed: -22 (1/0) [ 1162.828343][ T9460] dvb-usb: error while querying for an remote control event. [ 1162.828483][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1162.848653][ T5937] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1162.850882][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1162.887005][ T5937] usb 1-1: device descriptor read/8, error -71 [ 1163.001785][ T9460] dvb-usb: bulk message failed: -22 (1/0) [ 1163.010107][ T9460] dvb-usb: error while querying for an remote control event. [ 1163.278716][ T5937] usb usb1-port1: unable to enumerate USB device [ 1163.306585][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 1163.381650][ T5937] dvb-usb: error while querying for an remote control event. [ 1163.511069][T17317] netlink: 'syz.0.3072': attribute type 21 has an invalid length. [ 1163.519574][T17317] netlink: 'syz.0.3072': attribute type 6 has an invalid length. [ 1163.527424][T17317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1163.787408][T17320] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1163.868569][T17322] bpq0: entered promiscuous mode [ 1163.873637][T17322] bpq0: left allmulticast mode [ 1163.887300][ T5937] dvb-usb: bulk message failed: -22 (1/0) [ 1164.862354][ T5937] dvb-usb: error while querying for an remote control event. [ 1164.975673][T10199] usb 4-1: USB disconnect, device number 69 [ 1165.089106][T10199] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1165.099975][ T30] audit: type=1400 audit(1753832931.449:906): avc: denied { setopt } for pid=17323 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1165.201804][ T30] audit: type=1400 audit(1753832931.524:907): avc: denied { write } for pid=17323 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1165.726893][ T30] audit: type=1400 audit(1753832931.524:908): avc: denied { read } for pid=17323 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1165.848069][T17334] Failed to initialize the IGMP autojoin socket (err -2) [ 1166.082753][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1166.092332][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.100646][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.109572][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.117086][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.117200][ T30] audit: type=1400 audit(1753832932.142:909): avc: denied { ioctl } for pid=17323 comm="syz.2.3075" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1166.151727][T17336] Failed to initialize the IGMP autojoin socket (err -2) [ 1166.339229][ T30] audit: type=1326 audit(1753832932.235:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17323 comm="syz.2.3075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc7958e9a9 code=0x0 [ 1168.138484][T17336] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1168.183821][T17336] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1168.220466][T17336] wireguard: wg0: Could not create IPv4 socket [ 1168.232625][T17336] wireguard: wg1: Could not create IPv4 socket [ 1168.242305][T17336] wireguard: wg2: Could not create IPv4 socket [ 1168.300884][ T50] Bluetooth: hci0: command tx timeout [ 1168.334476][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1168.447330][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1168.485434][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1168.506108][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1168.527697][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1170.240650][T17397] Failed to initialize the IGMP autojoin socket (err -2) [ 1170.424298][T17414] netlink: 'syz.2.3082': attribute type 21 has an invalid length. [ 1170.741053][T17414] netlink: 'syz.2.3082': attribute type 6 has an invalid length. [ 1170.751655][T17414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1170.988114][T17428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1171.302511][ T30] audit: type=1400 audit(1753832937.249:911): avc: denied { watch_mount } for pid=17430 comm="syz.0.3081" path="/628" dev="tmpfs" ino=3338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1171.350264][T17431] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1171.561576][ T50] Bluetooth: hci2: command tx timeout [ 1171.591330][T17438] netlink: 'syz.3.3085': attribute type 21 has an invalid length. [ 1171.799917][T17438] netlink: 'syz.3.3085': attribute type 6 has an invalid length. [ 1171.818255][T17438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3085'. [ 1172.319504][T17451] FAULT_INJECTION: forcing a failure. [ 1172.319504][T17451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.332980][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.3.3088 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 1172.333004][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1172.333014][T17451] Call Trace: [ 1172.333020][T17451] [ 1172.333026][T17451] dump_stack_lvl+0x16c/0x1f0 [ 1172.333054][T17451] should_fail_ex+0x512/0x640 [ 1172.333076][T17451] _copy_from_user+0x2e/0xd0 [ 1172.333099][T17451] copy_msghdr_from_user+0x98/0x160 [ 1172.333121][T17451] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1172.333154][T17451] ___sys_sendmsg+0xfe/0x1d0 [ 1172.333177][T17451] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.333196][T17451] ? __lock_acquire+0x622/0x1c90 [ 1172.333241][T17451] __sys_sendmsg+0x16d/0x220 [ 1172.333262][T17451] ? __pfx___sys_sendmsg+0x10/0x10 [ 1172.333297][T17451] do_syscall_64+0xcd/0x4c0 [ 1172.333320][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.333336][T17451] RIP: 0033:0x7fb1fed8e9a9 [ 1172.333350][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.333367][T17451] RSP: 002b:00007fb1ffc4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.333384][T17451] RAX: ffffffffffffffda RBX: 00007fb1fefb6080 RCX: 00007fb1fed8e9a9 [ 1172.333396][T17451] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1172.333406][T17451] RBP: 00007fb1ffc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.333416][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.333426][T17451] R13: 0000000000000000 R14: 00007fb1fefb6080 R15: 00007ffc48028a98 [ 1172.333448][T17451] [ 1173.338905][ T30] audit: type=1326 audit(1753832939.157:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17461 comm="syz.3.3091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1fed8e9a9 code=0x0 [ 1173.787092][ T50] Bluetooth: hci2: command tx timeout [ 1174.203387][T17490] fuse: Unknown parameter '0x0000000000000003' [ 1175.999406][ T50] Bluetooth: hci2: command tx timeout [ 1176.375948][ T30] audit: type=1400 audit(1753832942.001:913): avc: denied { listen } for pid=17497 comm="syz.0.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1176.711821][ T30] audit: type=1400 audit(1753832942.019:914): avc: denied { accept } for pid=17497 comm="syz.0.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1176.735836][ T30] audit: type=1400 audit(1753832942.066:915): avc: denied { bind } for pid=17497 comm="syz.0.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1176.758279][ T30] audit: type=1400 audit(1753832942.066:916): avc: denied { listen } for pid=17497 comm="syz.0.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1177.695710][T17397] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1177.732176][T17397] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1177.775622][T17397] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1177.840404][T17397] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1178.169051][ T5937] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1178.255239][ T50] Bluetooth: hci2: command tx timeout [ 1178.346417][ T5937] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1178.407499][ T5937] usb 3-1: config 0 has no interface number 0 [ 1178.430918][ T5937] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1178.577699][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.656177][ T5937] usb 3-1: config 0 descriptor?? [ 1178.662026][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1178.678998][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1178.687562][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1178.696638][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1178.706164][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1178.722163][ T5937] cp210x 3-1:0.32: cp210x converter detected [ 1178.874705][T17539] Failed to initialize the IGMP autojoin socket (err -2) [ 1179.144790][T17548] FAULT_INJECTION: forcing a failure. [ 1179.144790][T17548] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.157691][T17548] CPU: 0 UID: 0 PID: 17548 Comm: syz.3.3102 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 1179.157717][T17548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1179.157727][T17548] Call Trace: [ 1179.157734][T17548] [ 1179.157742][T17548] dump_stack_lvl+0x16c/0x1f0 [ 1179.157768][T17548] should_fail_ex+0x512/0x640 [ 1179.157787][T17548] ? fs_reclaim_acquire+0xae/0x150 [ 1179.157803][T17548] ? tomoyo_encode2+0x100/0x3e0 [ 1179.157816][T17548] should_failslab+0xc2/0x120 [ 1179.157835][T17548] __kmalloc_noprof+0xd2/0x510 [ 1179.157857][T17548] tomoyo_encode2+0x100/0x3e0 [ 1179.157878][T17548] tomoyo_encode+0x29/0x50 [ 1179.157894][T17548] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1179.157909][T17548] ? tomoyo_profile+0x47/0x60 [ 1179.157924][T17548] tomoyo_path_number_perm+0x245/0x580 [ 1179.157939][T17548] ? tomoyo_path_number_perm+0x237/0x580 [ 1179.157956][T17548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1179.157982][T17548] ? find_held_lock+0x2b/0x80 [ 1179.158027][T17548] ? find_held_lock+0x2b/0x80 [ 1179.158046][T17548] ? hook_file_ioctl_common+0x145/0x410 [ 1179.158062][T17548] ? __fget_files+0x20e/0x3c0 [ 1179.158076][T17548] security_file_ioctl+0x9b/0x240 [ 1179.158088][T17548] __x64_sys_ioctl+0xb7/0x210 [ 1179.158104][T17548] do_syscall_64+0xcd/0x4c0 [ 1179.158127][T17548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.158143][T17548] RIP: 0033:0x7fb1fed8e9a9 [ 1179.158158][T17548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.158173][T17548] RSP: 002b:00007fb1ffc2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.158189][T17548] RAX: ffffffffffffffda RBX: 00007fb1fefb6160 RCX: 00007fb1fed8e9a9 [ 1179.158196][T17548] RDX: 0000200000000200 RSI: 00000000000089a0 RDI: 000000000000000a [ 1179.158202][T17548] RBP: 00007fb1ffc2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.158208][T17548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.158215][T17548] R13: 0000000000000000 R14: 00007fb1fefb6160 R15: 00007ffc48028a98 [ 1179.158228][T17548] [ 1179.158264][T17548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1179.227192][ T5937] cp210x 3-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 1179.629150][ T5937] cp210x 3-1:0.32: GPIO initialisation failed: -19 [ 1179.647808][ T5937] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1179.986168][T10199] usb 3-1: USB disconnect, device number 80 [ 1180.028237][T10199] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1180.059433][T10199] cp210x 3-1:0.32: device disconnected [ 1180.135681][T17397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1180.175529][T17397] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1180.199956][T17397] wireguard: wg0: Could not create IPv4 socket [ 1180.208503][T17397] wireguard: wg1: Could not create IPv4 socket [ 1180.218761][T17397] wireguard: wg2: Could not create IPv4 socket [ 1180.661744][T17581] fuse: Unknown parameter '0x0000000000000003' [ 1180.917653][T17587] input: syz1 as /devices/virtual/input/input117 [ 1180.944974][ T30] audit: type=1400 audit(1753832946.238:917): avc: denied { connect } for pid=17579 comm="syz.3.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1181.057389][T17590] overlayfs: failed to resolve './file1': -2 [ 1181.806917][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1181.825037][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1181.834240][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1181.842308][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1181.860614][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1181.889978][T17602] Failed to initialize the IGMP autojoin socket (err -2) [ 1182.088894][T17609] serio: Serial port ptm0 [ 1182.286662][T17595] ALSA: mixer_oss: invalid OSS volume '' [ 1182.933478][T17628] loop6: detected capacity change from 0 to 524287999 [ 1184.037570][ T50] Bluetooth: hci0: command tx timeout [ 1184.646041][T17602] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1184.666422][T17602] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1184.685117][T17602] wireguard: wg0: Could not create IPv4 socket [ 1184.694127][T17602] wireguard: wg1: Could not create IPv4 socket [ 1184.704778][T17602] wireguard: wg2: Could not create IPv4 socket [ 1185.123558][T17685] fuse: Unknown parameter '0x0000000000000003' [ 1185.758338][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.768838][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.778386][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.787300][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.797428][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1185.890316][T17697] Failed to initialize the IGMP autojoin socket (err -2) [ 1186.158879][T17705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1187.149151][ T48] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1187.309168][ T48] usb 3-1: device descriptor read/64, error -71 [ 1187.565662][ T48] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1187.629465][T10199] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1187.711197][T17759] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1187.719735][ T48] usb 3-1: device descriptor read/64, error -71 [ 1188.097075][T10199] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1188.109431][ T50] Bluetooth: hci0: command tx timeout [ 1188.165268][T10199] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1188.232052][T10199] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1188.288727][T10199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.383396][T17741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1188.647931][T10199] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1188.680288][T17764] blk_print_req_error: 63 callbacks suppressed [ 1188.680307][T17764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.698668][T17764] buffer_io_error: 54 callbacks suppressed [ 1188.698685][T17764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1188.713101][T17764] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.729347][T17764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1188.737578][T17764] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.757768][ T48] usb usb3-port1: attempt power cycle [ 1188.777190][T17764] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1188.785264][T17764] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.794382][T17764] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1188.802873][T17764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.812147][T17764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1188.821113][T17764] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.830498][T17764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1188.840772][T17764] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.850617][T17764] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1188.859138][T17764] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.868287][T17764] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1188.876726][T17764] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.886213][T17764] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1188.897116][T17764] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1188.917846][T17764] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1188.949040][T17764] ldm_validate_partition_table(): Disk read failed. [ 1188.961282][T10199] usb 4-1: USB disconnect, device number 70 [ 1188.978970][T17764] Dev nbd0: unable to read RDB block 0 [ 1188.991103][T17764] nbd0: unable to read partition table [ 1189.022950][T17768] ldm_validate_partition_table(): Disk read failed. [ 1189.068432][T17768] Dev nbd0: unable to read RDB block 0 [ 1189.098091][T17768] nbd0: unable to read partition table [ 1189.113671][T17773] ldm_validate_partition_table(): Disk read failed. [ 1189.126599][ T48] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1189.149795][ T48] usb 3-1: device descriptor read/8, error -71 [ 1189.151208][T17773] Dev nbd0: unable to read RDB block 0 [ 1189.194239][T17773] nbd0: unable to read partition table [ 1189.214043][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1189.241935][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=30, location=30 [ 1189.271636][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=29, location=29 [ 1189.306317][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=28, location=28 [ 1189.322081][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1189.331920][T17773] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1189.339535][T17773] UDF-fs: Scanning with blocksize 1024 failed [ 1189.352198][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1189.369579][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=14, location=14 [ 1189.380608][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=13, location=13 [ 1189.390348][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=12, location=12 [ 1189.545488][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1189.588490][T17773] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1189.596074][T17773] UDF-fs: Scanning with blocksize 2048 failed [ 1189.597984][ T48] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1189.640601][ T48] usb 3-1: device descriptor read/8, error -71 [ 1189.653118][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1189.702876][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=6, location=6 [ 1189.770086][ T48] usb usb3-port1: unable to enumerate USB device [ 1189.799917][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=5, location=5 [ 1189.811823][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 1189.995299][T17773] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1190.087265][T17773] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1190.116568][T17773] UDF-fs: Scanning with blocksize 4096 failed [ 1190.142865][T17773] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1190.294650][ T50] Bluetooth: hci0: command tx timeout [ 1190.702259][T17697] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1190.743631][T17697] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1190.776886][T17697] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1190.825154][T17697] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1191.266635][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1191.368534][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1191.475861][ T48] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1191.489364][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1191.491512][T17831] netlink: 'syz.0.3129': attribute type 21 has an invalid length. [ 1191.504934][T17831] netlink: 'syz.0.3129': attribute type 6 has an invalid length. [ 1191.512919][T17831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1191.554213][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1191.568132][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.807817][ T48] usb 3-1: no configurations [ 1191.817019][T17829] Failed to initialize the IGMP autojoin socket (err -2) [ 1191.829994][ T48] usb 3-1: can't read configurations, error -22 [ 1192.000853][T17697] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1192.018472][ T48] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1192.032149][T17697] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1192.055645][T17697] wireguard: wg0: Could not create IPv4 socket [ 1192.064290][T17697] wireguard: wg1: Could not create IPv4 socket [ 1192.073855][T17697] wireguard: wg2: Could not create IPv4 socket [ 1192.730716][ T50] Bluetooth: hci0: command tx timeout [ 1192.751866][ T48] usb 3-1: no configurations [ 1192.763817][ T48] usb 3-1: can't read configurations, error -22 [ 1192.795562][ T48] usb usb3-port1: attempt power cycle [ 1193.765959][ T48] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1193.798942][ T48] usb 3-1: no configurations [ 1193.803582][ T48] usb 3-1: can't read configurations, error -22 [ 1193.958282][ T48] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1194.112060][ T48] usb 3-1: no configurations [ 1194.117065][ T48] usb 3-1: can't read configurations, error -22 [ 1194.126420][ T48] usb usb3-port1: unable to enumerate USB device [ 1195.278068][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1195.293698][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1195.303797][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1195.313195][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1195.323262][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1195.399853][T17884] Failed to initialize the IGMP autojoin socket (err -2) [ 1195.647392][ T9460] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1195.723563][T10199] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1195.836149][ T9460] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1195.871573][ T9460] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1195.886535][ T9460] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1195.895857][ T9460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.910083][T17878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1195.927941][ T9460] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1195.929535][T10199] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1195.960768][T10199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.981865][T10199] usb 4-1: config 0 descriptor?? [ 1196.167662][ T5884] usb 3-1: USB disconnect, device number 89 [ 1196.234651][T10199] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1196.486728][T10199] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1196.508449][T10199] [drm] Initialized udl on minor 2 [ 1196.679098][T10199] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1196.730188][T17914] input: syz0 as /devices/virtual/input/input118 [ 1196.899813][T10199] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1196.944676][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1196.968300][T10199] usb 4-1: USB disconnect, device number 71 [ 1196.992719][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1197.101597][T17926] bio_check_eod: 2 callbacks suppressed [ 1197.101616][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.101616][T17926] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1197.137363][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.137363][T17926] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1197.179200][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1197.193895][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.193895][T17926] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1197.241243][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1197.276785][T17926] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1197.333204][T17926] UDF-fs: Scanning with blocksize 512 failed [ 1197.381566][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.381566][T17926] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1197.454275][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.454275][T17926] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1197.552179][ T5845] Bluetooth: hci0: command tx timeout [ 1197.555213][T17943] netlink: 'syz.3.3142': attribute type 21 has an invalid length. [ 1197.566695][T17943] netlink: 'syz.3.3142': attribute type 6 has an invalid length. [ 1197.574732][T17943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3142'. [ 1197.671154][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1197.948748][T17926] syz.2.3141: attempt to access beyond end of device [ 1197.948748][T17926] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1198.136465][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1198.146291][T17926] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1198.184200][T17926] UDF-fs: Scanning with blocksize 1024 failed [ 1198.190341][T17884] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1198.208841][T17926] syz.2.3141: attempt to access beyond end of device [ 1198.208841][T17926] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1198.484795][T17926] syz.2.3141: attempt to access beyond end of device [ 1198.484795][T17926] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1198.532210][T17884] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1198.550757][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1198.575170][T17926] syz.2.3141: attempt to access beyond end of device [ 1198.575170][T17926] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1198.612842][T17884] wireguard: wg0: Could not create IPv4 socket [ 1198.640120][T17884] wireguard: wg1: Could not create IPv4 socket [ 1198.651766][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1198.660995][T17884] wireguard: wg2: Could not create IPv4 socket [ 1198.661245][T17926] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1198.700132][T17926] UDF-fs: Scanning with blocksize 2048 failed [ 1198.711334][T17926] syz.2.3141: attempt to access beyond end of device [ 1198.711334][T17926] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1198.758546][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1198.822752][T17926] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1198.822815][ T9460] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1198.832236][T17926] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1198.832256][T17926] UDF-fs: Scanning with blocksize 4096 failed [ 1198.832264][T17926] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1199.029140][ T9460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.042477][ T9460] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1199.074903][ T9460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.232806][ T9460] usb 1-1: config 0 descriptor?? [ 1199.355113][ T9460] pwc: Askey VC010 type 2 USB webcam detected. [ 1199.361928][ T48] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1199.540958][ T48] usb 3-1: no configurations [ 1199.546836][ T48] usb 3-1: can't read configurations, error -22 [ 1199.699372][ T48] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1199.878990][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 1199.903231][ T48] usb 3-1: no configurations [ 1199.908370][ T48] usb 3-1: can't read configurations, error -22 [ 1199.915634][ T48] usb usb3-port1: attempt power cycle [ 1200.298546][ T48] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1200.331350][ T48] usb 3-1: no configurations [ 1200.336049][ T48] usb 3-1: can't read configurations, error -22 [ 1200.490387][ T48] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1200.524845][ T48] usb 3-1: no configurations [ 1200.529655][ T48] usb 3-1: can't read configurations, error -22 [ 1200.541352][ T48] usb usb3-port1: unable to enumerate USB device [ 1201.518748][T18006] netlink: 'syz.3.3149': attribute type 21 has an invalid length. [ 1201.526858][T18006] netlink: 'syz.3.3149': attribute type 6 has an invalid length. [ 1201.534910][T18006] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3149'. [ 1202.003065][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1202.015408][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1202.027073][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1202.046572][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1202.056818][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1202.097466][T18013] Failed to initialize the IGMP autojoin socket (err -2) [ 1203.694573][T18031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1204.058173][ T9460] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1204.091832][ T9460] pwc: recv_control_msg error -71 req 02 val 2700 [ 1204.111472][ T9460] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1204.120797][ T9460] pwc: recv_control_msg error -71 req 04 val 1000 [ 1204.131778][ T9460] pwc: recv_control_msg error -71 req 04 val 1300 [ 1204.149092][ T9460] pwc: recv_control_msg error -71 req 04 val 1400 [ 1204.161940][ T9460] pwc: recv_control_msg error -71 req 02 val 2000 [ 1204.179147][ T9460] pwc: recv_control_msg error -71 req 02 val 2100 [ 1204.186708][ T9460] pwc: recv_control_msg error -71 req 04 val 1500 [ 1204.194788][ T9460] pwc: recv_control_msg error -71 req 02 val 2500 [ 1204.202267][ T9460] pwc: recv_control_msg error -71 req 02 val 2400 [ 1204.209119][ T9460] pwc: recv_control_msg error -71 req 02 val 2600 [ 1204.218763][ T9460] pwc: recv_control_msg error -71 req 02 val 2900 [ 1204.235470][ T50] Bluetooth: hci0: command tx timeout [ 1204.286593][T18040] input: syz0 as /devices/virtual/input/input119 [ 1204.336327][ T9460] pwc: recv_control_msg error -71 req 02 val 2800 [ 1204.376097][ T9460] pwc: recv_control_msg error -71 req 04 val 1100 [ 1204.555408][ T9460] pwc: recv_control_msg error -71 req 04 val 1200 [ 1204.597017][ T9460] pwc: Registered as video103. [ 1204.620901][ T9460] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input120 [ 1204.694243][ T9460] usb 1-1: USB disconnect, device number 89 [ 1205.661416][T18013] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1205.699374][T18013] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1205.741527][T18013] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1205.789531][T18013] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1206.112027][T18013] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1206.134459][T18013] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1206.158514][T18013] wireguard: wg0: Could not create IPv4 socket [ 1206.169807][T18013] wireguard: wg1: Could not create IPv4 socket [ 1206.179040][T18013] wireguard: wg2: Could not create IPv4 socket [ 1206.345397][T18090] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1206.419808][T18090] bpq0: left promiscuous mode [ 1206.424605][T18090] bpq0: entered allmulticast mode [ 1206.573186][T10199] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1206.585436][T14391] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1206.925588][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1206.939785][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1206.952962][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1206.973540][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1206.980835][T10199] usb 1-1: Using ep0 maxpacket: 8 [ 1206.987648][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1206.989056][T10199] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1207.006049][T14391] usb 4-1: Using ep0 maxpacket: 8 [ 1207.011811][T10199] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1207.025333][T14391] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1207.034551][T14391] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1207.039622][T18101] Failed to initialize the IGMP autojoin socket (err -2) [ 1207.058788][T14391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.070086][T10199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1207.083462][T14391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.093501][T10199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1207.107234][T14391] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.124143][T10199] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.143531][T14391] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1207.171212][T10199] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1207.196885][T14391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.207594][T10199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.466227][T10199] usb 1-1: usb_control_msg returned -32 [ 1207.480416][T10199] usbtmc 1-1:16.0: can't read capabilities [ 1207.487592][T14391] usb 4-1: usb_control_msg returned -32 [ 1207.506654][T14391] usbtmc 4-1:16.0: can't read capabilities [ 1209.082878][T18101] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1209.109441][T18101] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1209.127823][T18101] wireguard: wg0: Could not create IPv4 socket [ 1209.136533][T18101] wireguard: wg1: Could not create IPv4 socket [ 1209.155576][T18101] wireguard: wg2: Could not create IPv4 socket [ 1209.182358][ T5845] Bluetooth: hci0: command tx timeout [ 1209.235416][T14391] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1209.409139][T14391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.423762][T14391] usb 3-1: config 0 has no interfaces? [ 1209.430725][T14391] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1209.450612][T14391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.471677][T14391] usb 3-1: config 0 descriptor?? [ 1209.510486][ T5937] usb 4-1: USB disconnect, device number 72 [ 1209.546552][T14391] usb 1-1: USB disconnect, device number 90 [ 1210.143313][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.158382][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.167584][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1210.503881][ T30] audit: type=1400 audit(1753832973.917:918): avc: denied { bind } for pid=18209 comm="syz.3.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1210.967267][ T30] audit: type=1400 audit(1753832974.337:919): avc: denied { write } for pid=18209 comm="syz.3.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1212.182732][T14391] usb 3-1: USB disconnect, device number 94 [ 1215.369324][T18234] input: syz0 as /devices/virtual/input/input121 [ 1215.973707][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1215.986757][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1215.995112][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1216.011414][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1216.019910][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1216.066569][ T5937] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1216.076015][T18259] Failed to initialize the IGMP autojoin socket (err -2) [ 1216.231106][ T5937] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1216.261619][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.305787][ T5937] usb 4-1: config 0 descriptor?? [ 1216.324505][ T5937] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1216.709067][ T9460] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1216.890327][ T9460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.913290][ T9460] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1216.951689][ T9460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.987389][ T9460] usb 1-1: config 0 descriptor?? [ 1217.021112][ T9460] pwc: Askey VC010 type 2 USB webcam detected. [ 1217.183872][T18253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.196646][T18253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.237381][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1217.256672][ T5937] gspca_sunplus: reg_w_riv err -71 [ 1217.274696][ T5937] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1217.293956][ T5937] usb 4-1: USB disconnect, device number 73 [ 1217.410723][T18259] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1217.448442][T18259] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1217.477195][T18259] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1217.549972][T18259] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1217.625572][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1218.247512][ T50] Bluetooth: hci0: command tx timeout [ 1218.275631][T18259] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1218.320519][T18259] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1218.369065][T18294] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1218.410019][T18259] wireguard: wg0: Could not create IPv4 socket [ 1218.426531][T18259] wireguard: wg1: Could not create IPv4 socket [ 1218.440456][ T5884] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1218.471613][T18259] wireguard: wg2: Could not create IPv4 socket [ 1218.611337][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 1218.618209][ T5884] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1218.627004][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1218.661549][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1218.680032][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1218.690798][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1218.708717][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1218.723728][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1218.732777][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1218.743423][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1218.752736][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1218.767192][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1218.776890][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.837179][T18296] Failed to initialize the IGMP autojoin socket (err -2) [ 1219.055898][ T5884] usb 3-1: usb_control_msg returned -32 [ 1219.063636][ T5884] usbtmc 3-1:16.0: can't read capabilities [ 1219.804080][ T9460] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1219.833513][ T9460] pwc: recv_control_msg error -71 req 02 val 2700 [ 1219.859690][ T9460] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1219.882097][ T9460] pwc: recv_control_msg error -71 req 04 val 1000 [ 1219.899748][T18318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1219.913268][ T9460] pwc: recv_control_msg error -71 req 04 val 1300 [ 1219.946393][ T9460] pwc: recv_control_msg error -71 req 04 val 1400 [ 1219.954916][ T9460] pwc: recv_control_msg error -71 req 02 val 2000 [ 1219.973903][ T9460] pwc: recv_control_msg error -71 req 02 val 2100 [ 1220.040882][ T9460] pwc: recv_control_msg error -71 req 04 val 1500 [ 1220.092625][ T9460] pwc: recv_control_msg error -71 req 02 val 2500 [ 1220.126733][ T9460] pwc: recv_control_msg error -71 req 02 val 2400 [ 1220.138546][ T5937] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1220.172966][ T9460] pwc: recv_control_msg error -71 req 02 val 2600 [ 1220.215652][ T9460] pwc: recv_control_msg error -71 req 02 val 2900 [ 1220.299220][ T9460] pwc: recv_control_msg error -71 req 02 val 2800 [ 1220.314789][ T9460] pwc: recv_control_msg error -71 req 04 val 1100 [ 1220.322965][ T9460] pwc: recv_control_msg error -71 req 04 val 1200 [ 1220.331637][ T9460] pwc: Registered as video103. [ 1220.345179][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.369138][ T9460] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input122 [ 1220.405049][ T5937] usb 4-1: config 0 has no interfaces? [ 1220.425670][ T5937] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1220.448315][ T9460] usb 1-1: USB disconnect, device number 91 [ 1220.458894][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.497896][ T5937] usb 4-1: config 0 descriptor?? [ 1220.938830][ T30] audit: type=1400 audit(1753832983.682:920): avc: denied { bind } for pid=18338 comm="syz.0.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1220.984538][ T50] Bluetooth: hci2: command tx timeout [ 1221.001350][ T30] audit: type=1400 audit(1753832983.738:921): avc: denied { read } for pid=18338 comm="syz.0.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1221.113445][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.124377][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.133548][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1221.295662][T18296] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1221.320604][T18296] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1221.341424][T18296] wireguard: wg0: Could not create IPv4 socket [ 1221.351527][T18296] wireguard: wg1: Could not create IPv4 socket [ 1221.365051][T18296] wireguard: wg2: Could not create IPv4 socket [ 1221.386481][T14391] usb 3-1: USB disconnect, device number 95 [ 1223.134260][ T5937] usb 4-1: USB disconnect, device number 74 [ 1225.419809][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1225.707157][T18457] netlink: 'syz.3.3186': attribute type 21 has an invalid length. [ 1225.715311][T18457] netlink: 'syz.3.3186': attribute type 6 has an invalid length. [ 1225.723195][T18457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3186'. [ 1226.640696][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1226.650369][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1226.662192][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1226.669619][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1226.678492][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1226.702155][T18472] Failed to initialize the IGMP autojoin socket (err -2) [ 1227.757836][T18472] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1227.791392][T18472] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1227.831863][T18472] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1227.870594][T18472] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1228.314131][T18509] netlink: 'syz.3.3191': attribute type 21 has an invalid length. [ 1228.322991][T18509] netlink: 'syz.3.3191': attribute type 6 has an invalid length. [ 1228.331325][T18509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'. [ 1228.349653][T10199] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1228.672234][T10199] usb 1-1: Using ep0 maxpacket: 8 [ 1228.683195][T10199] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1228.711745][T10199] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1228.757878][T10199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1228.787412][T10199] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.841982][T10199] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.873395][ T5845] Bluetooth: hci0: command tx timeout [ 1228.927380][T10199] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1228.937157][T10199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.937224][ T5937] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1228.959033][T18517] serio: Serial port ptm0 [ 1229.303557][ T5937] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1229.336400][ T5937] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1229.372964][ T5937] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1229.386056][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.397193][T10199] usb 1-1: usb_control_msg returned -32 [ 1229.404966][T18504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1229.420993][ T5937] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.429800][T10199] usbtmc 1-1:16.0: can't read capabilities [ 1229.443686][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1229.493463][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1229.508077][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1229.677404][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1229.769543][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1229.808933][T18523] Failed to initialize the IGMP autojoin socket (err -2) [ 1229.865403][ T5937] usb 3-1: USB disconnect, device number 96 [ 1229.988224][T18472] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1230.097518][T18472] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1230.158233][T18472] wireguard: wg0: Could not create IPv4 socket [ 1230.171967][T18472] wireguard: wg1: Could not create IPv4 socket [ 1230.182496][T18472] wireguard: wg2: Could not create IPv4 socket [ 1231.166768][ T5937] usb 1-1: USB disconnect, device number 92 [ 1233.274428][T18613] input: syz0 as /devices/virtual/input/input123 [ 1235.458812][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.468559][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.477120][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.485936][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.493704][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.547065][T18641] Failed to initialize the IGMP autojoin socket (err -2) [ 1236.649625][T18641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1236.680667][T18641] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1236.707087][T18641] wireguard: wg0: Could not create IPv4 socket [ 1236.716524][T18641] wireguard: wg1: Could not create IPv4 socket [ 1236.735927][T18641] wireguard: wg2: Could not create IPv4 socket [ 1238.132587][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1238.147171][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1238.161084][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1238.175698][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1238.186667][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1238.427410][T14391] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1238.501659][T18712] Failed to initialize the IGMP autojoin socket (err -2) [ 1238.666947][T14391] usb 4-1: Using ep0 maxpacket: 8 [ 1238.684469][T14391] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1238.715658][T14391] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1238.740139][T14391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1238.790469][T14391] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1238.801211][T14391] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.912446][T14391] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1238.921510][T14391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.191392][T14391] usb 4-1: usb_control_msg returned -32 [ 1239.197022][T14391] usbtmc 4-1:16.0: can't read capabilities [ 1240.398400][ T50] Bluetooth: hci0: command tx timeout [ 1240.936397][T18760] input: syz0 as /devices/virtual/input/input124 [ 1242.049255][T14391] usb 4-1: USB disconnect, device number 75 [ 1242.195091][T18770] input: syz0 as /devices/virtual/input/input125 [ 1242.665192][ T50] Bluetooth: hci0: command tx timeout [ 1244.932600][ T50] Bluetooth: hci0: command tx timeout [ 1245.865604][T18712] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1245.931659][T18712] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1246.039887][T18712] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1246.111146][T18712] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1246.474992][T18712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1246.495932][T18712] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1246.516973][T18712] wireguard: wg0: Could not create IPv4 socket [ 1246.527017][T18712] wireguard: wg1: Could not create IPv4 socket [ 1246.539144][T18712] wireguard: wg2: Could not create IPv4 socket [ 1246.876746][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1247.298019][T18862] netlink: 'syz.2.3221': attribute type 21 has an invalid length. [ 1247.306355][T18862] netlink: 'syz.2.3221': attribute type 6 has an invalid length. [ 1247.314174][T18862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3221'. [ 1248.093521][T18872] loop6: detected capacity change from 0 to 524287999 [ 1248.609163][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1248.620551][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1248.630157][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1248.640551][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1248.648852][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1248.702749][T18882] Failed to initialize the IGMP autojoin socket (err -2) [ 1248.919658][ T5937] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1249.186097][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 1249.201598][ T5937] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1249.220270][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.247001][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1249.278158][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1249.311491][ T5937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.349633][ T5937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1249.377139][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.634525][ T5937] usb 1-1: GET_CAPABILITIES returned 0 [ 1249.657408][ T5937] usbtmc 1-1:16.0: can't read capabilities [ 1250.696835][T18882] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1250.761469][T18882] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1250.828498][T18882] wireguard: wg0: Could not create IPv4 socket [ 1250.834934][ T5845] Bluetooth: hci0: command tx timeout [ 1250.941781][T18882] wireguard: wg1: Could not create IPv4 socket [ 1251.013865][T18882] wireguard: wg2: Could not create IPv4 socket [ 1251.912309][T14391] usb 1-1: USB disconnect, device number 93 [ 1253.236593][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.247856][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.257129][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.268676][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.277568][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1253.313227][T19018] Failed to initialize the IGMP autojoin socket (err -2) [ 1255.119344][T19031] netlink: 'syz.2.3234': attribute type 21 has an invalid length. [ 1255.353556][T19031] netlink: 'syz.2.3234': attribute type 6 has an invalid length. [ 1255.361475][T19031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3234'. [ 1255.455599][ T5845] Bluetooth: hci0: command tx timeout [ 1255.557880][T19047] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1256.586973][T19048] bpq0: entered promiscuous mode [ 1256.591957][T19048] bpq0: left allmulticast mode [ 1257.092046][T19018] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1257.132917][T19018] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1257.170958][T19018] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1257.216030][T19018] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1257.527422][T19018] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1257.591056][T19018] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1257.614915][T19018] wireguard: wg0: Could not create IPv4 socket [ 1257.624137][T19018] wireguard: wg1: Could not create IPv4 socket [ 1257.635958][T19018] wireguard: wg2: Could not create IPv4 socket [ 1257.674506][ T5845] Bluetooth: hci0: command tx timeout [ 1258.562599][ T9460] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1258.636447][T14391] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1258.743224][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1258.754109][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1258.764002][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1258.765488][ T9460] usb 4-1: Using ep0 maxpacket: 8 [ 1258.771777][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1258.785445][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1258.823983][T19125] Failed to initialize the IGMP autojoin socket (err -2) [ 1258.833400][T14391] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1258.842664][T14391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.866746][T14391] usb 1-1: config 0 descriptor?? [ 1258.915248][ T5884] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1258.986340][ T9460] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1259.005913][ T9460] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.033747][ T9460] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.050471][ T9460] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1259.053385][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1259.063003][ T9460] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.126053][ T9460] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1259.205027][T14391] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1259.212476][ T9460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.406274][ T5884] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1259.441096][T14391] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1259.447843][T14391] [drm] Initialized udl on minor 2 [ 1259.561105][ T9460] usb 4-1: GET_CAPABILITIES returned 0 [ 1259.567111][ T9460] usbtmc 4-1:16.0: can't read capabilities [ 1259.577353][ T5884] usb 3-1: device descriptor read/64, error -71 [ 1259.727169][ T5884] usb usb3-port1: attempt power cycle [ 1259.743881][T14391] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.755021][T14391] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1259.771720][T18714] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1259.783446][T18714] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1259.795085][T14391] usb 1-1: USB disconnect, device number 94 [ 1260.101138][ T5884] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1260.132353][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1260.403870][ T5884] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1260.434698][ T5884] usb 3-1: device descriptor read/8, error -71 [ 1260.564663][ T5884] usb usb3-port1: unable to enumerate USB device [ 1260.977943][ T5884] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1261.010078][ T50] Bluetooth: hci0: command tx timeout [ 1261.144257][T19125] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1261.177518][T19125] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1261.206952][ T5884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1261.236552][T19125] wireguard: wg0: Could not create IPv4 socket [ 1261.247042][ T5884] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1261.258703][T19125] wireguard: wg1: Could not create IPv4 socket [ 1261.279079][T19125] wireguard: wg2: Could not create IPv4 socket [ 1261.285376][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1261.295274][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.324070][T19163] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1261.359454][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1261.545850][ T5884] usb 4-1: USB disconnect, device number 76 [ 1261.634012][T10199] usb 1-1: USB disconnect, device number 95 [ 1262.412343][T19195] serio: Serial port ptm0 [ 1263.406894][T19215] Failed to initialize the IGMP autojoin socket (err -2) [ 1263.867816][ T30] audit: type=1326 audit(1753833023.839:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.2.3246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc7958e9a9 code=0x0 [ 1264.015980][T19216] Failed to initialize the IGMP autojoin socket (err -2) [ 1264.333808][ T30] audit: type=1326 audit(1753833024.269:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19210 comm="syz.0.3247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b8b8e9a9 code=0x0 [ 1266.160923][T19311] serio: Serial port ptm0 [ 1266.612184][T18714] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1266.805681][T19320] input: syz0 as /devices/virtual/input/input126 [ 1267.017908][T18714] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1267.076674][T18714] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1267.114087][T18714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.142694][T18714] usb 1-1: config 0 descriptor?? [ 1267.305732][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.316763][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1267.328934][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1267.336741][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1267.354932][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1267.370783][T15472] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1267.380056][T19331] Failed to initialize the IGMP autojoin socket (err -2) [ 1267.610094][T15472] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1267.642008][T15472] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1267.655519][T15472] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1267.665909][T15472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.685638][T19310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1267.696781][T15472] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.809074][T19345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.862777][T19345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.975826][T14391] usb 4-1: USB disconnect, device number 77 [ 1268.161197][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1268.248328][T18714] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1268.396950][T18714] usb 3-1: device descriptor read/64, error -71 [ 1268.675669][T18714] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1268.805601][T19331] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1268.832223][T19331] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1268.839091][T18714] usb 3-1: device descriptor read/64, error -71 [ 1268.925003][T19331] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1268.946676][T19331] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1268.953901][T18714] usb usb3-port1: attempt power cycle [ 1269.323035][T19331] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1269.339372][T18714] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1269.360358][T19331] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1269.378384][T18714] usb 3-1: device descriptor read/8, error -71 [ 1269.407883][T19331] wireguard: wg0: Could not create IPv4 socket [ 1269.436175][ T5884] usb 1-1: USB disconnect, device number 96 [ 1269.454205][T19331] wireguard: wg1: Could not create IPv4 socket [ 1269.486495][T19331] wireguard: wg2: Could not create IPv4 socket [ 1269.562448][ T5845] Bluetooth: hci0: command tx timeout [ 1269.648324][T18714] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1269.703686][T18714] usb 3-1: device descriptor read/8, error -71 [ 1269.968320][T18714] usb usb3-port1: unable to enumerate USB device [ 1270.485275][T19393] bpq0: left promiscuous mode [ 1270.490009][T19393] bpq0: entered allmulticast mode [ 1272.450951][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1272.464504][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1272.485085][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1272.496577][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1272.517751][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1272.602607][T19406] Failed to initialize the IGMP autojoin socket (err -2) [ 1274.481646][T19426] input: syz0 as /devices/virtual/input/input127 [ 1274.706986][ T5845] Bluetooth: hci0: command tx timeout [ 1275.239064][ T975] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1275.490219][ T975] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1275.568755][ T975] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1275.676033][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.787348][ T975] usb 4-1: config 0 descriptor?? [ 1276.533400][T19434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.542285][T19434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.583270][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1276.922063][ T5845] Bluetooth: hci0: command tx timeout [ 1277.138856][T19406] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1277.162371][T19406] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1277.180524][T19406] wireguard: wg0: Could not create IPv4 socket [ 1277.194455][T19406] wireguard: wg1: Could not create IPv4 socket [ 1277.203326][T19406] wireguard: wg2: Could not create IPv4 socket [ 1277.996885][ T975] usb 4-1: USB disconnect, device number 78 [ 1279.468354][T19545] Failed to initialize the IGMP autojoin socket (err -2) [ 1279.503552][ T5937] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1279.613321][ T30] audit: type=1326 audit(1753833038.562:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.0.3271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b8b8e9a9 code=0x0 [ 1279.675698][ T5937] usb 4-1: device descriptor read/64, error -71 [ 1279.764271][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1279.846782][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1279.855267][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1279.866175][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1279.874953][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1279.892063][T19546] Failed to initialize the IGMP autojoin socket (err -2) [ 1279.962672][ T5937] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1280.125150][ T5937] usb 4-1: device descriptor read/64, error -71 [ 1280.262937][ T5937] usb usb4-port1: attempt power cycle [ 1280.750768][ T5937] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1280.807481][ T5937] usb 4-1: device descriptor read/8, error -71 [ 1281.129521][ T5937] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1281.221817][ T5937] usb 4-1: device descriptor read/8, error -71 [ 1281.632891][ T5937] usb usb4-port1: unable to enumerate USB device [ 1282.145192][ T5845] Bluetooth: hci0: command tx timeout [ 1284.854885][ T5845] Bluetooth: hci0: command tx timeout [ 1286.696684][T19546] netdevsim netdevsim1 netdevsim0: renamed from eth5 [ 1286.750606][T19546] netdevsim netdevsim1 netdevsim1: renamed from eth6 [ 1286.867873][T19546] netdevsim netdevsim1 netdevsim2: renamed from eth7 [ 1286.927009][T19546] netdevsim netdevsim1 netdevsim3: renamed from eth8 [ 1287.010364][ T5845] Bluetooth: hci0: command tx timeout [ 1287.234698][T19546] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1287.254341][T19546] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1287.273897][T19546] wireguard: wg0: Could not create IPv4 socket [ 1287.284067][T19546] wireguard: wg1: Could not create IPv4 socket [ 1287.293461][T19546] wireguard: wg2: Could not create IPv4 socket [ 1288.869566][T19660] Failed to initialize the IGMP autojoin socket (err -2) [ 1289.103200][ T30] audit: type=1326 audit(1753833047.327:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19652 comm="syz.3.3284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1fed8e9a9 code=0x0 [ 1289.373763][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1289.394244][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.405264][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.414087][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.424780][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1289.469167][T19672] Failed to initialize the IGMP autojoin socket (err -2) [ 1291.045089][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1291.371209][ T48] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1291.506556][T19697] loop6: detected capacity change from 0 to 524287999 [ 1291.542548][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 1291.664011][ T50] Bluetooth: hci0: command tx timeout [ 1291.687428][ T48] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1292.231240][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1292.358567][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1292.538827][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1292.640032][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.807867][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1293.359262][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.656403][ T48] usb 1-1: GET_CAPABILITIES returned 0 [ 1293.680119][ T48] usbtmc 1-1:16.0: can't read capabilities [ 1293.862155][ T50] Bluetooth: hci0: command tx timeout [ 1294.490502][T19672] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1294.559624][T19672] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1294.601910][T19672] wireguard: wg0: Could not create IPv4 socket [ 1294.624277][T19672] wireguard: wg1: Could not create IPv4 socket [ 1294.642592][T19672] wireguard: wg2: Could not create IPv4 socket [ 1294.990249][ T48] usb 1-1: USB disconnect, device number 97 [ 1295.626403][T19781] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 1295.638494][T19781] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 1295.648020][T19781] CPU: 1 UID: 0 PID: 19781 Comm: dhcpcd-run-hook Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) [ 1295.660151][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1295.670189][T19781] RIP: 0010:refill_obj_stock+0x18f/0x6d0 [ 1295.675819][T19781] Code: c7 c7 00 4e 5c 8e e8 80 94 6e ff e8 7b 0c 63 09 5a 85 c0 0f 85 7d 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 db 04 00 00 48 8b 03 a8 03 0f 85 00 04 00 00 65 [ 1295.695670][T19781] RSP: 0018:ffffc90003277698 EFLAGS: 00010206 [ 1295.701721][T19781] RAX: dffffc0000000000 RBX: 00000000ffff0000 RCX: 00000000d5be5ab4 [ 1295.709676][T19781] RDX: 000000001fffe000 RSI: ffffffff8c15bee0 RDI: ffffffff8df43da8 [ 1295.717631][T19781] RBP: 0000000000000078 R08: 1d907f62e00821f4 R09: 0000000000000000 [ 1295.725584][T19781] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff93d42740 [ 1295.733539][T19781] R13: ffff88813fffb400 R14: ffff8880b853b740 R15: ffff8880b853b740 [ 1295.741500][T19781] FS: 0000000000000000(0000) GS:ffff8881247f9000(0000) knlGS:0000000000000000 [ 1295.750420][T19781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.756989][T19781] CR2: 00007f1be7d89286 CR3: 0000000052dd1000 CR4: 00000000003526f0 [ 1295.764945][T19781] Call Trace: [ 1295.768206][T19781] [ 1295.771121][T19781] __memcg_slab_free_hook+0x2db/0x5d0 [ 1295.776501][T19781] kmem_cache_free+0x37e/0x4d0 [ 1295.781253][T19781] ? unlink_anon_vmas+0x458/0x820 [ 1295.786275][T19781] unlink_anon_vmas+0x458/0x820 [ 1295.791115][T19781] free_pgtables+0x373/0xcb0 [ 1295.795708][T19781] ? __pfx_free_pgtables+0x10/0x10 [ 1295.800804][T19781] ? mas_next_slot+0x12d3/0x21b0 [ 1295.805732][T19781] ? __pfx_down_write+0x10/0x10 [ 1295.810573][T19781] exit_mmap+0x3fb/0xb90 [ 1295.814817][T19781] ? __pfx_exit_mmap+0x10/0x10 [ 1295.819573][T19781] __mmput+0x12a/0x410 [ 1295.823635][T19781] mmput+0x62/0x70 [ 1295.827341][T19781] begin_new_exec+0x15a7/0x38b0 [ 1295.832175][T19781] load_elf_binary+0x8ce/0x4fb0 [ 1295.837010][T19781] ? __lock_acquire+0xb8a/0x1c90 [ 1295.841948][T19781] ? find_held_lock+0x2b/0x80 [ 1295.846629][T19781] ? __pfx_load_elf_binary+0x10/0x10 [ 1295.851897][T19781] ? find_held_lock+0x2b/0x80 [ 1295.856573][T19781] ? bprm_execve+0x8a2/0x1650 [ 1295.861259][T19781] bprm_execve+0x8c0/0x1650 [ 1295.865752][T19781] ? __pfx_bprm_execve+0x10/0x10 [ 1295.870678][T19781] ? copy_strings.isra.0+0x48b/0x950 [ 1295.875950][T19781] do_execveat_common.isra.0+0x4a5/0x610 [ 1295.881566][T19781] __x64_sys_execve+0x8e/0xb0 [ 1295.886224][T19781] do_syscall_64+0xcd/0x4c0 [ 1295.890728][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.896602][T19781] RIP: 0033:0x7f1be7ccf107 [ 1295.901011][T19781] Code: Unable to access opcode bytes at 0x7f1be7ccf0dd. [ 1295.908008][T19781] RSP: 002b:00007ffd932b8b28 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1295.916427][T19781] RAX: ffffffffffffffda RBX: 000055af7badfe38 RCX: 00007f1be7ccf107 [ 1295.924397][T19781] RDX: 000055af7badfe60 RSI: 000055af7badfe38 RDI: 000055af7badfef0 [ 1295.932351][T19781] RBP: 000055af7badfef0 R08: 00007ffd932bda2d R09: 0000000000000000 [ 1295.940305][T19781] R10: 0000000000000008 R11: 0000000000000246 R12: 000055af7badfe60 [ 1295.948260][T19781] R13: 00007f1be7e94e8b R14: 000055af7badfe60 R15: 0000000000000000 [ 1295.956218][T19781] [ 1295.959220][T19781] Modules linked in: [ 1295.963533][T19781] ---[ end trace 0000000000000000 ]--- [ 1295.967670][ T30] audit: type=1400 audit(1753833053.865:926): avc: denied { read } for pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1295.969374][T19781] RIP: 0010:refill_obj_stock+0x18f/0x6d0 [ 1295.993806][ T30] audit: type=1400 audit(1753833053.865:927): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.996583][T19781] Code: c7 c7 00 4e 5c 8e e8 80 94 6e ff e8 7b 0c 63 09 5a 85 c0 0f 85 7d 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 db 04 00 00 48 8b 03 a8 03 0f 85 00 04 00 00 65 [ 1296.038109][ T30] audit: type=1400 audit(1753833053.865:928): avc: denied { append } for pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1296.038145][ T30] audit: type=1400 audit(1753833053.865:929): avc: denied { open } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1296.060425][T19781] RSP: 0018:ffffc90003277698 EFLAGS: 00010206 [ 1296.085799][ T30] audit: type=1400 audit(1753833053.865:930): avc: denied { getattr } for pid=5184 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1296.088904][T19781] RAX: dffffc0000000000 RBX: 00000000ffff0000 RCX: 00000000d5be5ab4 [ 1296.119679][T19781] RDX: 000000001fffe000 RSI: ffffffff8c15bee0 RDI: ffffffff8df43da8 [ 1296.127654][T19781] RBP: 0000000000000078 R08: 1d907f62e00821f4 R09: 0000000000000000 [ 1296.135886][T19781] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff93d42740 [ 1296.144117][T19781] R13: ffff88813fffb400 R14: ffff8880b853b740 R15: ffff8880b853b740 [ 1296.152255][T19781] FS: 0000000000000000(0000) GS:ffff8881247f9000(0000) knlGS:0000000000000000 [ 1296.161563][T19781] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.168143][T19781] CR2: 00007f1be7ccf0dd CR3: 0000000052dd1000 CR4: 00000000003526f0 [ 1296.176333][T19781] Kernel panic - not syncing: Fatal exception [ 1296.182596][T19781] Kernel Offset: disabled [ 1296.186901][T19781] Rebooting in 86400 seconds..