last executing test programs: 9m15.591216576s ago: executing program 32 (id=166): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x422, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRES8, @ANYRES64], 0x2, 0x1c4, &(0x7f0000000280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m40.359872831s ago: executing program 3 (id=229): syz_mount_image$hfs(&(0x7f0000003400), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xf9, 0x2cd, &(0x7f0000003740)="$eJzs3T9v004cx/HPOW6T/lF/7q9FSKhToRITassAYqmEOrCzMCGgCVJFVCRaJGAKzIgHwN6n0AfAyISYkbox8QAqMRTd2caXP27cyqmb8n5JiRz7zve93Dn2N1ESAfhn3d883L/9096MVFNN0j0pkNSQQklXdLXxemdve6/dap60o5qrYW9GcU3TV2Zrp5U96HRvC7PFyD4Kdcdfh9Fo/FBnaabqKFA1d/QPEEj15Oh02xvx6t/HsfMNskSdqgOomDnSkd5oruo4AADV6WTn/yA5z88m1+9BIK0kp/34/G+8SmPsqOoARuzLkO3e+d9lWcfGju9/blOW77nBDjVxmpbdNHmw662ZVDyzui4wzbCs0sUSTD3fbrdubb1sNwN90EbCC2jR3TfjqZs63Dcup7XL76f7dr2c5KYF88s0Qy5W2ucSq2DC9mHdj98rslBui8OZr+abeWwifVbz7/VfeGzsMLmRinpGKo5/NX+PrpeTcqVyejnvGrmWtJA4sZc15WQkSmfUfM8ARjlxhl21ZLprxb1by++dq7WgQbXWvTk3NaDWYm+tbDbntzdq5pN5ZJb1Swfa9K7/A/tsr6jIkWnLuJLJzDixP6ErGbkn3hy4VZ2lgSWDM3cJBfS82H3UM93V3O7bdy+ettutV5dtIXmjQrv2SCxjhxO6EP0qZSGdBBclnmShbserhP2kJ5nq+2WjqKT19GgvVLhppL5NhV9JMMayQT9lRSbBZWGvu0yc/3n5yqpLkexd1H2dXvfrDv0AwNvjWk5u8L+7n+7N4HJyA+PeepgZ8Olif4teztWVwrqc6/pN6UaRFmNREufFs3GWSmZT3/WE9/8BAAAAAAAAAAAAAAAAAADGTXlfOWjkft2i6j4CAAAAAAAAAAAAAAAAAAAAADDuBvz/b/18/v834/6qI/09+YeKH4Wa5TfmgdH6EwAA///7S3C3") r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 8m39.644119267s ago: executing program 3 (id=231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "00000001"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x1, 0x200, 0x3}) 8m36.100492186s ago: executing program 3 (id=237): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) 8m35.416317114s ago: executing program 3 (id=240): syz_mount_image$hfs(&(0x7f0000003400), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xf9, 0x2cd, &(0x7f0000003740)="$eJzs3T9v004cx/HPOW6T/lF/7q9FSKhToRITassAYqmEOrCzMCGgCVJFVCRaJGAKzIgHwN6n0AfAyISYkbox8QAqMRTd2caXP27cyqmb8n5JiRz7zve93Dn2N1ESAfhn3d883L/9096MVFNN0j0pkNSQQklXdLXxemdve6/dap60o5qrYW9GcU3TV2Zrp5U96HRvC7PFyD4Kdcdfh9Fo/FBnaabqKFA1d/QPEEj15Oh02xvx6t/HsfMNskSdqgOomDnSkd5oruo4AADV6WTn/yA5z88m1+9BIK0kp/34/G+8SmPsqOoARuzLkO3e+d9lWcfGju9/blOW77nBDjVxmpbdNHmw662ZVDyzui4wzbCs0sUSTD3fbrdubb1sNwN90EbCC2jR3TfjqZs63Dcup7XL76f7dr2c5KYF88s0Qy5W2ucSq2DC9mHdj98rslBui8OZr+abeWwifVbz7/VfeGzsMLmRinpGKo5/NX+PrpeTcqVyejnvGrmWtJA4sZc15WQkSmfUfM8ARjlxhl21ZLprxb1by++dq7WgQbXWvTk3NaDWYm+tbDbntzdq5pN5ZJb1Swfa9K7/A/tsr6jIkWnLuJLJzDixP6ErGbkn3hy4VZ2lgSWDM3cJBfS82H3UM93V3O7bdy+ettutV5dtIXmjQrv2SCxjhxO6EP0qZSGdBBclnmShbserhP2kJ5nq+2WjqKT19GgvVLhppL5NhV9JMMayQT9lRSbBZWGvu0yc/3n5yqpLkexd1H2dXvfrDv0AwNvjWk5u8L+7n+7N4HJyA+PeepgZ8Olif4teztWVwrqc6/pN6UaRFmNREufFs3GWSmZT3/WE9/8BAAAAAAAAAAAAAAAAAADGTXlfOWjkft2i6j4CAAAAAAAAAAAAAAAAAAAAADDuBvz/b/18/v834/6qI/09+YeKH4Wa5TfmgdH6EwAA///7S3C3") r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd36) 8m34.600204208s ago: executing program 3 (id=245): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0xffffffffffffffec) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff004) io_setup(0x4c78, &(0x7f00000000c0)) 8m32.914711629s ago: executing program 3 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x200016, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7d) mq_notify(0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) 8m17.58764688s ago: executing program 33 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x200016, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7d) mq_notify(0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) 8m2.211053464s ago: executing program 4 (id=305): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12014d01020000402505a1a44000010203010902"], 0x0) 7m59.773028452s ago: executing program 4 (id=310): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0xffffffffffffffec) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff004) io_setup(0x4c78, &(0x7f00000000c0)) 7m58.597170891s ago: executing program 4 (id=312): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c9000f002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 7m57.86328328s ago: executing program 4 (id=313): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@lazytime}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) unlink(&(0x7f0000000100)='./file1\x00') 7m56.287705201s ago: executing program 4 (id=314): add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) 7m55.116088045s ago: executing program 4 (id=316): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ptrace(0x10, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7m52.684052482s ago: executing program 34 (id=316): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ptrace(0x10, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7m10.079655004s ago: executing program 6 (id=421): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) 7m9.278617488s ago: executing program 6 (id=423): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet_sctp(0x2, 0x800000000000001, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 7m8.096857775s ago: executing program 6 (id=426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 7m6.773124151s ago: executing program 6 (id=430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m5.957564333s ago: executing program 6 (id=432): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000001140)=0x401, 0x4) 7m5.124775303s ago: executing program 6 (id=437): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x202, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000012c0)={"029d79e77ccc1305dad6dac5c82d4d3d3caf9b61e6c80ef33044fe76b686e272d2064c58aa74425f9be83a46b1f4dc03675c6e23e4d08d2e5a0f13c55801126a36ce6a5b131e739938a912ea4f8a990af90495145032b33f495ccbba2dfa629df46eb7b2926d1a0f70ce1aefd31309e71d798e2124867a45b88ec2243fe9fff9560c6c8aac4e362e39c20af0361401dff7d696608d1b51c5ab2828b2c5a3d9a194b65fe76077e550ca2f8b12d98f11522a7cf174785ee8d58ff05ce4ff4ed6e9a30569c38d8ee6f0c13d4feaaeeb92d5a1c70c7c401de491de9de2e473a6f9c09fee437d7c1f248ea86be0aacd9f0ab55d8ee427180fbf9f5ea794bbf7fe0f028b51777b05ac6b0c4e79548907482e2a8a0c4a6fee4cc150d7316d8da960323c0ae21b01270b759d18b9b97435174294418a624a75c7c6d539f68f1da60fcdb981628a76bea692ad885bcd84db86794ee9526ce74f3911b6949bd3e8a3cf8d28c5deec7b41b74d6f72283c140e07bffb4828e44385799e66a81498c2288652831ada4b671a53d1d5b40a80198d48d22dd2e799a359097776e851a58101500cd532762e17138f16d1faa2ba7c0be5f851b30817f20e8a93e9a5e424b14a402128998aa3179627120f3f0100ce103bfe389e523e2cedb93d402e12459fb788316766f078e74bf78c2fe9177166bb596c07563403f6ca7e31ae857fdaf2781c92cdbc79496e9b214ce2359c8737bd7c8b4be920035cae6480167d9cb461e1c10ae40e74cd8e55fb145b79af636806c785e3ce7a0a5788099e6dd551741bd7d132a36dc9b23e5c220470b36e449f300088ffbd5c0432763e2045aa301f65881ecb7ceb633ae9b3633eeb8c6f619c16f10ccad8613fd34450ab7eb3709ff39bf179910194808fb8c7d93a4ee35a4ab60489b9df89fe3037a8812be4c8cfd91aa0b208fb3c43adc2cda2af1ffb3bf40b9a5b05dac88a7e49c7cf602ec65de7766e83edbf6bbbaa60289904b8bfd4f8c554283fa227acc79e106dcb9d02253fb80f3454440adcea7b24e8760338027cb3b967293dfd5105029dbc385711ca370994fb01beb51c646eafcffbde1091b4818a6fbd49aeeec2cd83f6dcd29281878593662e5052e490eb94554254cc87624c7397acab1bf10dac3a8df3f85c93d60fff8724d212f88776ad9747d8b6fc41bbe287903252f0cb4e1cc26317472a3b9e3f03135035d80adee24b6ebfffba26adb748558936d2283575b4161dfafc0afc492e17adf46267deb9eec3376ce5d40add86ba1c64dff6567f9d1230de00005a84be0a1c6affbdd7c9550a86b24cab6094ee9c5b682393e6d483374bf3e4dec499c320e3c743cc36973742896bda6cef3569cb15a4ae4023fe8f42185082fc7f17d7421aed8fc71b6fe522d61e1bb3888a3c073cdeae36f4f29ad0c7a8ba04cdc08e9a"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x2202, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='-5'], 0x9) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3}) 6m49.828198165s ago: executing program 35 (id=437): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x202, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000012c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000000c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x2202, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vm(r6, 0x4018aee1, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='-5'], 0x9) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3}) 2m4.122940584s ago: executing program 8 (id=1235): r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050f0c1000000048b23e9c200a", 0x13, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2f3, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074ae8440f20c5062bd87010203010902e10201000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) setresgid(0x0, 0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) 1m58.976982196s ago: executing program 8 (id=1261): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8804) 1m58.360435112s ago: executing program 8 (id=1265): socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe) lseek(r0, 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 1m57.770216968s ago: executing program 8 (id=1270): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000340)={0xcf44, 0xfffffffffffffff7}, 0x0) r0 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r0}, 0x1) 1m57.076569267s ago: executing program 8 (id=1273): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x2, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0x1, 0x2, "4faf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.949777922s ago: executing program 8 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) 1m55.392214492s ago: executing program 5 (id=1278): syz_emit_vhci(0x0, 0x0) 1m54.906956859s ago: executing program 5 (id=1280): mmap(&(0x7f0000889000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x61409f0ef8eb5a98, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x3c, 0x2, 0x0, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) bpf$MAP_CREATE(0x0, 0x0, 0x48) userfaultfd(0x80001) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000003c0)={0x0, 0x5, 0x0, 0x9}) 1m54.440773041s ago: executing program 5 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x6}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x240008d0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="80", 0x1, 0x400c0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m52.803010001s ago: executing program 5 (id=1286): r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f00000001c0)={0x6d42, 0x1}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r3, 0x8940, &(0x7f0000000000)=@buf={0x1, &(0x7f0000000080)="ce"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000372000/0x4000)=nil, 0x4000, 0x2000002, 0xc8012, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0xc) 1m45.087760762s ago: executing program 5 (id=1300): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) 1m44.409559102s ago: executing program 5 (id=1301): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x28020400) lstat(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000480)=[{}, {}, {}], 0x3, 0x2a6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 1m40.644197858s ago: executing program 36 (id=1276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) 1m29.115461481s ago: executing program 37 (id=1301): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x28020400) lstat(&(0x7f0000000540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000480)=[{}, {}, {}], 0x3, 0x2a6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 13.596194413s ago: executing program 1 (id=1458): syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x2000007, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x3, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0xf7e, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x8000047, 0xb18, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x1e7, 0x4000009, 0x7, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x7, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x7, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff004, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x30000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13.047671402s ago: executing program 1 (id=1460): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.365732865s ago: executing program 1 (id=1462): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_80211_inject_frame(0x0, 0x0, 0x0) 12.194243541s ago: executing program 0 (id=1463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) 10.639743021s ago: executing program 1 (id=1466): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') acct(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)) 9.899110753s ago: executing program 1 (id=1469): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_clone(0x21215000, &(0x7f0000000100)="6464644879eadbc4776b79bde104678ddf6dfc63dda6173beecea10152d970eebec7250b1cdb261787fb5d14348d66c7afd6d77bac4ac8cbd99132262c295a76858026967bde3782502ee601e86415e767e37026281f3a8638fa84b1b78fdcded02edf32edecc84321b9547bc700800000859ffeef9bcbb9cfbd9f15", 0x7c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 9.776899366s ago: executing program 0 (id=1470): syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x2000007, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x3, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0xf7e, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x8000047, 0xb18, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x1e7, 0x4000009, 0x7, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x7, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x7, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff004, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x30000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.847549664s ago: executing program 0 (id=1471): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x2, 0xc9, 0x0, 0x7197}}}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="9b0f2abd7000ff5bdf2501000000100002800c0001800800010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x42880}, 0x0) 8.639409775s ago: executing program 9 (id=1472): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.311951267s ago: executing program 1 (id=1473): socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="08001cccea8ccfcf", 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000300717472283414d6bba919736d34290000e95596c22903e69670204629e5fcb4e738783649d48c9476b203dd721e5f56433e4fdd8ce932562ba6a21cc27ec008af13f3055daa17146ffccd6001e1f9194227da842602f6"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 8.029332087s ago: executing program 9 (id=1474): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271ba", 0x6, 0x4044880, 0x0, 0x0) 7.624431081s ago: executing program 2 (id=1476): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="201004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.808083492s ago: executing program 7 (id=1479): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x5ea}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 5.333817182s ago: executing program 7 (id=1480): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4e, "7eed5100000080000000400000010000000000000000000000b100"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=r4, @ANYBLOB="5bbf0100000000001c0012800b000100627269646765556db10200"/36], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x100, 0x70bd2d, 0x25dfd9fb, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0x3}, {0x1, 0xfff2}}}, 0x24}}, 0x28008080) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) keyctl$restrict_keyring(0x1d, r6, &(0x7f00000000c0)='id_resolver\x00', 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe4a, &(0x7f0000000280)=0xca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='team_slave_1\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 4.72250364s ago: executing program 2 (id=1481): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x2000007, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x3, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0xf7e, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x8000047, 0xb18, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x1e7, 0x4000009, 0x7, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x7, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x7, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff004, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x30000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.407826847s ago: executing program 9 (id=1482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.102470297s ago: executing program 2 (id=1483): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xffffffff00000001, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 3.837349988s ago: executing program 9 (id=1484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009"], 0x7c}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20a00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffd}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="3f1934cc8e", 0x5}], 0x1}, 0x40800) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000040) 3.837026847s ago: executing program 0 (id=1485): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf1b, &(0x7f0000001e80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, 0x0, 0x200) creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 3.689100055s ago: executing program 7 (id=1486): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.617311721s ago: executing program 9 (id=1487): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x44, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r1}) r3 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200)=r4, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) getpid() 2.511269324s ago: executing program 2 (id=1488): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) 2.418467323s ago: executing program 7 (id=1489): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) 1.340899217s ago: executing program 0 (id=1490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x81, 0x20000000, 0x2, 0x1c}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.325107606s ago: executing program 7 (id=1491): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="201004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.153522316s ago: executing program 9 (id=1492): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0xffffffffffffff6b, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x1a0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 989.446882ms ago: executing program 2 (id=1493): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x2000007, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x3, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0xf7e, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x8000047, 0xb18, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x1e7, 0x4000009, 0x7, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x7, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x7, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff004, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x30000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 526.25604ms ago: executing program 0 (id=1494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) fremovexattr(0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x6) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x2, &(0x7f0000000040)={0xc, "810556c721393f4084c89ea7f77d040b00"}}) 334.013331ms ago: executing program 2 (id=1495): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d367265673000", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000000006090001545b6e1430000000000c00034000000000000000010900010073797a30000000000c00064000000000000001ff0000001e"], 0x44}}, 0x80) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmsg(r0, 0x0, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 0s ago: executing program 7 (id=1496): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bc"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): probe with driver smsc95xx failed with error -71 [ 440.921741][ T11] usb 8-1: USB disconnect, device number 4 [ 442.138944][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.572'. [ 442.176181][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.572'. [ 442.250287][ T8274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.572'. [ 443.174114][ T5682] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 443.178390][ T79] team0 (unregistering): Port device team_slave_1 removed [ 443.310817][ T79] team0 (unregistering): Port device team_slave_0 removed [ 443.383894][ T5682] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 443.403656][ T5682] usb 8-1: config 0 has no interface number 0 [ 443.425451][ T5682] usb 8-1: config 0 interface 41 has no altsetting 0 [ 443.490497][ T5682] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 443.520715][ T5682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.536937][ T5682] usb 8-1: Product: syz [ 443.583723][ T5682] usb 8-1: Manufacturer: syz [ 443.618295][ T5682] usb 8-1: SerialNumber: syz [ 443.658104][ T5682] usb 8-1: config 0 descriptor?? [ 443.666622][ T8297] fuse: Unknown parameter '0x0000000000000003' [ 444.195776][ T8267] syzkaller1: entered promiscuous mode [ 444.202270][ T8267] syzkaller1: entered allmulticast mode [ 444.315497][ T5230] 8021q: adding VLAN 0 to HW filter on device eth10 [ 444.593194][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.598329][ T5682] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 444.600841][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.343197][ T5681] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 445.530415][ T5681] usb 6-1: Using ep0 maxpacket: 32 [ 445.595662][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.638603][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.687082][ T5681] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 445.719752][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.801782][ T5681] usb 6-1: config 0 descriptor?? [ 446.211566][ T5682] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 446.280873][ T5682] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 446.406721][ T5682] usb 8-1: USB disconnect, device number 5 [ 446.432375][ T5681] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 446.490358][ T8324] netlink: 76 bytes leftover after parsing attributes in process `syz.0.582'. [ 446.649628][ T48] Bluetooth: hci0: command 0x080f tx timeout [ 446.770316][ T5681] usb 6-1: USB disconnect, device number 25 [ 447.539020][ T8328] fido_id[8328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 447.648444][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.7.584'. [ 447.693214][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.584'. [ 447.783595][ T8337] netlink: 20 bytes leftover after parsing attributes in process `syz.7.584'. [ 448.666857][ T8353] fuse: Unknown parameter '0x0000000000000003' [ 448.705525][ T5681] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 448.920130][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 448.958821][ T5681] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 449.007137][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 449.067271][ T5681] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 449.107517][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.164686][ T5681] usb 2-1: config 0 descriptor?? [ 449.702851][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.735651][ T5681] hid_parser_main: 17 callbacks suppressed [ 449.735750][ T5681] apple 0003:05AC:027C.0007: unknown main item tag 0x3 [ 449.827631][ T5681] apple 0003:05AC:027C.0007: unknown main item tag 0x4 [ 449.868997][ T5681] apple 0003:05AC:027C.0007: reserved main item tag 0xd [ 449.940368][ T5681] apple 0003:05AC:027C.0007: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 450.028832][ T5681] usb 2-1: USB disconnect, device number 21 [ 450.193848][ T8372] input: syz0 as /devices/virtual/input/input8 [ 450.441741][ T5230] 8021q: adding VLAN 0 to HW filter on device eth11 [ 451.027039][ T8377] fido_id[8377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 451.045249][ T8374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.091750][ T8374] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 451.192272][ T8374] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 451.226224][ T8374] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 451.284502][ T8374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 451.351737][ T8374] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 451.410574][ T8374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.416903][ T8374] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 451.443001][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 451.463847][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.597'. [ 451.526681][ T8374] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 451.547497][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 451.637658][ T8374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 451.675152][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 451.681398][ T8374] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 451.826629][ T8374] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 452.149941][ T5681] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 452.244208][ T4876] Bluetooth: hci3: command 0x0406 tx timeout [ 452.359353][ T5681] usb 6-1: Using ep0 maxpacket: 32 [ 452.435500][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.500664][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.574899][ T5681] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.639605][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.687589][ T5681] usb 6-1: config 0 descriptor?? [ 452.747150][ T5681] hub 6-1:0.0: USB hub found [ 453.014407][ T5681] hub 6-1:0.0: 1 port detected [ 453.200430][ T4876] Bluetooth: hci5: command 0x0406 tx timeout [ 453.355520][ T7903] veth0_vlan: entered promiscuous mode [ 453.361047][ T4876] Bluetooth: hci0: command 0x080f tx timeout [ 453.450311][ T4876] Bluetooth: hci1: command 0x0c1a tx timeout [ 453.614038][ T7903] veth1_vlan: entered promiscuous mode [ 453.630998][ T5682] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 453.679663][ T4876] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.819577][ T5682] usb 8-1: Using ep0 maxpacket: 8 [ 453.858943][ T5682] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 453.896860][ T5682] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.956929][ T5682] usb 8-1: config 0 descriptor?? [ 454.101138][ T5681] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 454.123594][ T5681] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 454.203373][ T7903] veth0_macvtap: entered promiscuous mode [ 454.219516][ T5681] usbhid 6-1:0.0: can't add hid device: -32 [ 454.243937][ T5681] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 454.268503][ T7903] veth1_macvtap: entered promiscuous mode [ 454.320990][ T4876] Bluetooth: hci3: command 0x0406 tx timeout [ 454.481470][ T5682] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x7 [ 454.508440][ T5682] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 454.533581][ T5682] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x5 [ 454.549676][ T5682] sunplus 0003:04FC:05D8.0008: item fetching failed at offset 36/40 [ 454.606053][ T5682] sunplus 0003:04FC:05D8.0008: probe with driver sunplus failed with error -22 [ 454.625548][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.655156][ T8431] fuse: Unknown parameter '0x0000000000000003' [ 454.688138][ T5682] usb 8-1: USB disconnect, device number 6 [ 454.815712][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.964441][ T1110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.008948][ T1110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.023966][ T1110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.056728][ T1110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.280343][ T4876] Bluetooth: hci5: command 0x0406 tx timeout [ 455.444817][ T4876] Bluetooth: hci0: command 0x080f tx timeout [ 455.520186][ T4876] Bluetooth: hci1: command 0x0c1a tx timeout [ 455.536957][ T5230] 8021q: adding VLAN 0 to HW filter on device eth12 [ 455.600754][ T5682] usb 6-1: USB disconnect, device number 26 [ 455.759990][ T4876] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.531933][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.7.607'. [ 456.582620][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.607'. [ 456.631040][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.607'. [ 457.019979][ T8460] loop2: detected capacity change from 0 to 7 [ 457.063797][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.121112][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.174756][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.214416][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.258038][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.305223][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.353668][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.405585][ T8460] ldm_validate_partition_table(): Disk read failed. [ 457.457614][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.477877][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 457.496092][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.549556][ T8460] Buffer I/O error on dev loop2, logical block 0, async page read [ 457.599670][ T4876] Bluetooth: hci1: command 0x0c1a tx timeout [ 457.622357][ T8460] Dev loop2: unable to read RDB block 0 [ 457.662153][ T8460] loop2: unable to read partition table [ 457.686045][ T8460] loop2: partition table beyond EOD, truncated [ 457.723372][ T8460] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.793864][ T8461] ldm_validate_partition_table(): Disk read failed. [ 457.839609][ T4876] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.865681][ T8461] Dev loop2: unable to read RDB block 0 [ 457.906096][ T8461] loop2: unable to read partition table [ 457.937180][ T8461] loop2: partition table beyond EOD, truncated [ 457.974546][ T8461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 459.495847][ T8499] fuse: Unknown parameter '0x0000000000000003' [ 459.707267][ T5681] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 459.910522][ T5681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.942279][ T5681] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 459.978585][ T5681] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 460.006892][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.030081][ T5681] usb 1-1: Product: syz [ 460.043036][ T5681] usb 1-1: Manufacturer: syz [ 460.077295][ T5681] usb 1-1: SerialNumber: syz [ 460.569757][ T5682] usb 1-1: USB disconnect, device number 30 [ 460.651858][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 460.683519][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 460.735595][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 460.769365][ T8515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 461.081815][ T5681] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 461.271704][ T5681] usb 8-1: device descriptor read/64, error -71 [ 461.559570][ T5681] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 461.760798][ T5681] usb 8-1: device descriptor read/64, error -71 [ 461.796725][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.623'. [ 461.901416][ T5681] usb usb8-port1: attempt power cycle [ 462.285564][ T5681] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 462.343319][ T5681] usb 8-1: device descriptor read/8, error -71 [ 462.434399][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.492640][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.643689][ T5681] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 462.713477][ T5681] usb 8-1: device descriptor read/8, error -71 [ 462.851961][ T5681] usb usb8-port1: unable to enumerate USB device [ 462.885400][ T5699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.905074][ T5699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.375347][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 464.437458][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'. [ 464.497598][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 465.109823][ T5681] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 465.326953][ T5681] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.387055][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.411433][ T5682] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 465.462183][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.537606][ T5671] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 465.553142][ T5681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.626560][ T5681] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.646032][ T5682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.659479][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.691321][ T5682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 465.728551][ T5682] usb 1-1: config 1 has no interface number 0 [ 465.759796][ T5671] usb 8-1: Using ep0 maxpacket: 8 [ 465.763459][ T5682] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 465.767590][ T5681] usb 6-1: config 0 descriptor?? [ 465.812860][ T5671] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 465.824076][ T5682] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.856999][ T5671] usb 8-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 465.865709][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.893901][ T5671] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.912310][ T5682] usb 1-1: Product: syz [ 465.931228][ T5682] usb 1-1: Manufacturer: syz [ 465.957901][ T5682] usb 1-1: SerialNumber: syz [ 465.974083][ T5671] usb 8-1: config 0 descriptor?? [ 466.028306][ T5682] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 466.088799][ T5682] cdc_ncm 1-1:1.1: bind() failure [ 466.144485][ T5678] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 466.232041][ T5230] 8021q: adding VLAN 0 to HW filter on device eth14 [ 466.273716][ T5682] usb 1-1: USB disconnect, device number 31 [ 466.326922][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.385079][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.408801][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.464109][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.485225][ T5678] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 466.502592][ T5671] wacom 0003:056A:030C.000A: unknown main item tag 0x0 [ 466.519969][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.530639][ T5678] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.557178][ T5671] wacom 0003:056A:030C.000A: unknown main item tag 0x0 [ 466.574768][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.599290][ T5678] usb 9-1: config 0 descriptor?? [ 466.604586][ T5671] wacom 0003:056A:030C.000A: unknown main item tag 0x0 [ 466.613730][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.623869][ T8597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.640350][ T5671] wacom 0003:056A:030C.000A: unknown main item tag 0x0 [ 466.650406][ T8597] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 466.662345][ T5681] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 466.695655][ T8597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.764492][ T8597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.778373][ T5671] usb 8-1: USB disconnect, device number 11 [ 466.784471][ T8597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.814967][ T5681] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 467.320256][ T5678] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 467.415651][ T5678] usb 9-1: USB disconnect, device number 2 [ 467.839888][ T4876] Bluetooth: hci3: command 0x0406 tx timeout [ 468.143846][ T5678] usb 6-1: reset high-speed USB device number 27 using dummy_hcd [ 468.205618][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 468.219820][ T5682] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 468.470209][ T5682] usb 8-1: Using ep0 maxpacket: 16 [ 468.584049][ T5682] usb 8-1: unable to get BOS descriptor or descriptor too short [ 468.646160][ T5682] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 468.690437][ T5682] usb 8-1: can't read configurations, error -71 [ 468.719568][ T4876] Bluetooth: hci0: command 0x080f tx timeout [ 468.719642][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 468.799482][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.799580][ T4876] Bluetooth: hci1: command 0x0c1a tx timeout [ 468.928956][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.8.647'. [ 468.962501][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.647'. [ 469.011934][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.8.647'. [ 469.012495][ T5671] usb 6-1: USB disconnect, device number 27 [ 470.029440][ T5682] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 470.263793][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 470.270043][ T5682] usb 8-1: Using ep0 maxpacket: 16 [ 470.328814][ T5682] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.424456][ T5682] usb 8-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 470.478745][ T5682] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.519550][ T11] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 470.567249][ T5682] usb 8-1: config 0 descriptor?? [ 470.734883][ T11] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 470.777682][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.807599][ T11] usb 2-1: Product: syz [ 470.834746][ T11] usb 2-1: Manufacturer: syz [ 470.844387][ T11] usb 2-1: SerialNumber: syz [ 471.162394][ T5682] wacom 0003:056A:00E3.000C: reserved main item tag 0xd [ 471.337210][ T5678] usb 8-1: USB disconnect, device number 14 [ 471.479382][ T5671] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 471.673985][ T5671] usb 1-1: Using ep0 maxpacket: 8 [ 471.703360][ T5671] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 471.716072][ T11] rtl8150 2-1:1.0: eth17: rtl8150 is detected [ 471.741191][ T5671] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.782231][ T5671] usb 1-1: config 0 interface 0 has no altsetting 0 [ 471.800111][ T5671] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 471.833704][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.901308][ T5671] usb 1-1: config 0 descriptor?? [ 471.915265][ T11] usb 2-1: USB disconnect, device number 22 [ 472.142285][ T5230] 8021q: adding VLAN 0 to HW filter on device eth15 [ 472.404453][ T5671] hid_parser_main: 14 callbacks suppressed [ 472.404556][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.476192][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.534013][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.576626][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.619038][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.678188][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.732618][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.785464][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.823621][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.881978][ T5671] logitech 0003:046D:CA04.000D: unknown main item tag 0x0 [ 472.977404][ T5671] logitech 0003:046D:CA04.000D: hidraw0: USB HID v3.ff Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 473.040749][ T5671] logitech 0003:046D:CA04.000D: no inputs found [ 473.233143][ T5671] usb 1-1: USB disconnect, device number 32 [ 473.734078][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.8.659'. [ 473.796855][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.8.659'. [ 473.854446][ T8678] netlink: 20 bytes leftover after parsing attributes in process `syz.8.659'. [ 473.967002][ T8667] fido_id[8667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 474.673708][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.663'. [ 475.224433][ T8692] loop5: detected capacity change from 0 to 4096 [ 475.421346][ T8705] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 477.229439][ T5671] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 477.452304][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.5.677'. [ 477.469679][ T5671] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.477403][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.677'. [ 477.539918][ T5671] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.584518][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.677'. [ 477.620766][ T5671] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 477.673594][ T5671] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.747358][ T5671] usb 8-1: config 0 descriptor?? [ 477.819495][ T5678] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 478.057827][ T5678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.115973][ T5678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.163256][ T5678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.216190][ T5678] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.255057][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.315599][ T5671] hid_parser_main: 30 callbacks suppressed [ 478.315692][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.348527][ T5678] usb 2-1: config 0 descriptor?? [ 478.404805][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.443374][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.502943][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.572237][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.630351][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.660904][ T5671] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 478.695118][ T5671] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 478.758480][ T5671] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 478.824753][ C1] hid-thrustmaster 0003:044F:B65D.000E: Wheel with model id 0x200 is a Thrustmaster T300RS (Missing Attachment) [ 478.900624][ T5230] 8021q: adding VLAN 0 to HW filter on device eth16 [ 479.081758][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 479.147647][ T5678] usbhid 2-1:0.0: can't add hid device: -71 [ 479.211073][ C1] hid-thrustmaster 0003:044F:B65D.000E: Success?! The wheel should have been initialized! [ 479.226566][ T5681] usb 8-1: USB disconnect, device number 15 [ 479.237409][ T5678] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 479.306204][ T5678] usb 2-1: USB disconnect, device number 23 [ 479.608911][ T8748] fido_id[8748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 480.144535][ T8759] overlayfs: upper fs does not support file handles, falling back to index=off. [ 481.461898][ T11] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 481.639812][ T11] usb 2-1: device descriptor read/64, error -71 [ 481.811592][ T5682] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 481.930634][ T11] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 482.036716][ T5682] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 482.078442][ T5682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.111780][ T5682] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.129489][ T11] usb 2-1: device descriptor read/64, error -71 [ 482.150649][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.177778][ T5682] usb 1-1: SerialNumber: syz [ 482.276699][ T11] usb usb2-port1: attempt power cycle [ 482.596337][ T5682] usb 1-1: 0:2 : does not exist [ 482.715009][ T11] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 482.767344][ T11] usb 2-1: device descriptor read/8, error -71 [ 483.052273][ T11] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 483.118984][ T11] usb 2-1: device descriptor read/8, error -71 [ 483.170386][ T5682] usb 1-1: USB disconnect, device number 33 [ 483.226090][ T29] audit: type=1326 audit(1780645873.638:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.7.698" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f01c code=0x0 [ 483.273470][ T11] usb usb2-port1: unable to enumerate USB device [ 483.371214][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.8.696'. [ 483.494899][ T8237] udevd[8237]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.542913][ T11] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 483.775711][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.827805][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.865672][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.908580][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.968921][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.020815][ T11] usb 6-1: config 0 descriptor?? [ 484.809489][ T11] usbhid 6-1:0.0: can't add hid device: -71 [ 484.843200][ T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 484.923150][ T11] usb 6-1: USB disconnect, device number 28 [ 485.429582][ T5678] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 485.637520][ T5678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.661749][ T5678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.703253][ T5678] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 485.745647][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.816150][ T5678] usb 1-1: config 0 descriptor?? [ 486.631713][ T5678] usb 1-1: string descriptor 0 read error: -22 [ 486.856481][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.710'. [ 486.900821][ T5678] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000F/input/input9 [ 487.010334][ T5678] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 487.135529][ T5678] usb 1-1: USB disconnect, device number 34 [ 487.964207][ T8858] fido_id[8858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 488.130054][ T5678] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 488.295122][ T5678] usb 2-1: device descriptor read/64, error -71 [ 488.612878][ T5678] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 488.780855][ T5678] usb 2-1: device descriptor read/64, error -71 [ 488.939040][ T5678] usb usb2-port1: attempt power cycle [ 489.100864][ T11] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 489.168488][ T8879] loop0: detected capacity change from 0 to 4096 [ 489.296167][ T8886] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 489.320066][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.320290][ T5678] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 489.368692][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.431465][ T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.451101][ T5678] usb 2-1: device descriptor read/8, error -71 [ 489.467313][ T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.513575][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.548296][ T11] usb 6-1: config 0 descriptor?? [ 489.723469][ T5678] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 489.804282][ T5678] usb 2-1: device descriptor read/8, error -71 [ 489.971375][ T5678] usb usb2-port1: unable to enumerate USB device [ 490.082320][ T11] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 490.247228][ T11] usb 6-1: USB disconnect, device number 29 [ 490.706770][ T8895] fido_id[8895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 491.619487][ T11] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 491.885853][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.916803][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.983858][ T11] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 492.027589][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.095302][ T11] usb 1-1: config 0 descriptor?? [ 492.652497][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.711699][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.738842][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.797309][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.852939][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.893423][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 492.933986][ T11] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 493.038777][ T11] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 493.110117][ T11] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints? [ 493.150958][ C0] hid-thrustmaster 0003:044F:B65D.0011: Wheel with model id 0x2 is a Thrustmaster T500RS [ 493.206201][ C0] hid-thrustmaster 0003:044F:B65D.0011: Success?! The wheel should have been initialized! [ 493.455432][ T11] usb 1-1: USB disconnect, device number 35 [ 493.806902][ T8935] fido_id[8935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 494.033403][ T5681] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 494.267617][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.326887][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.410184][ T5681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.492818][ T5681] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.538670][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.637551][ T5681] usb 6-1: config 0 descriptor?? [ 495.288293][ T5681] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 495.417638][ T5681] usb 6-1: USB disconnect, device number 30 [ 495.446772][ T11] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 495.639760][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 495.664172][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 495.689330][ T11] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 495.723195][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.799842][ T11] usb 2-1: config 0 descriptor?? [ 496.278197][ T8971] fido_id[8971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 496.362945][ T11] petalynx 0003:18B1:0037.0013: unknown main item tag 0x3 [ 496.428984][ T11] petalynx 0003:18B1:0037.0013: unknown main item tag 0x3 [ 496.530076][ T11] petalynx 0003:18B1:0037.0013: reserved main item tag 0xd [ 496.577935][ T11] petalynx 0003:18B1:0037.0013: unknown main item tag 0x0 [ 496.638392][ T11] petalynx 0003:18B1:0037.0013: item fetching failed at offset 26/40 [ 496.705773][ T11] petalynx 0003:18B1:0037.0013: parse failed [ 496.776169][ T11] petalynx 0003:18B1:0037.0013: probe with driver petalynx failed with error -22 [ 496.795610][ T8977] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.743'. [ 496.892679][ T11] usb 2-1: USB disconnect, device number 32 [ 497.440391][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 497.682798][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 497.694782][ T4876] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 497.706787][ T4876] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 497.743874][ T9] usb 8-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 497.833105][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.872861][ T9] usb 8-1: Product: syz [ 497.903365][ T9] usb 8-1: Manufacturer: syz [ 497.920140][ T9] usb 8-1: SerialNumber: syz [ 498.066551][ T9] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 498.663519][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 498.711019][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 498.772673][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 498.810246][ T9] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 498.936051][ T9] usb 8-1: USB disconnect, device number 16 [ 499.169863][ T9009] syzkaller0: entered promiscuous mode [ 499.188169][ T9009] syzkaller0: entered allmulticast mode [ 499.428107][ T8237] udevd[8237]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.662361][ T5671] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 499.905195][ T5671] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.947076][ T5671] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.001243][ T5671] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.071599][ T5671] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.131749][ T5671] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.183898][ T5671] usb 8-1: config 0 descriptor?? [ 500.357608][ T9026] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.757'. [ 500.798550][ T5671] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 500.989025][ T5671] usb 8-1: USB disconnect, device number 17 [ 501.084759][ T9030] loop5: detected capacity change from 0 to 4096 [ 501.271680][ T9034] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.117069][ T9035] fido_id[9035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 504.332163][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 504.378438][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 504.484309][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.764'. [ 505.301152][ T9065] syzkaller0: entered promiscuous mode [ 505.328625][ T9065] syzkaller0: entered allmulticast mode [ 505.977050][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 505.989836][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 506.014371][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.021129][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.273233][ T9079] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.769'. [ 507.655090][ T9086] loop5: detected capacity change from 0 to 4096 [ 507.828279][ T9091] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.049490][ T8836] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 508.307973][ T8836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.343376][ T8836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.410084][ T8836] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.497121][ T8836] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.562261][ T8836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.621670][ T8836] usb 8-1: config 0 descriptor?? [ 509.278897][ T8836] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 509.480880][ T9] usb 8-1: USB disconnect, device number 18 [ 509.869029][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.8.776'. [ 510.288190][ T9109] fido_id[9109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 510.387444][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 510.473542][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 510.509968][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'. [ 510.906040][ T9125] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.780'. [ 511.466926][ T9129] syzkaller0: entered promiscuous mode [ 511.517218][ T9129] syzkaller0: entered allmulticast mode [ 512.382422][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 515.289499][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 515.345429][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 515.411829][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 516.869732][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 517.079552][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 517.117757][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.185195][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.348421][ T9] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 517.397980][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.452866][ T9] usb 8-1: Product: syz [ 517.488370][ T9] usb 8-1: Manufacturer: syz [ 517.519341][ T9] usb 8-1: SerialNumber: syz [ 517.556008][ T9198] syzkaller0: entered promiscuous mode [ 517.572161][ T9198] syzkaller0: entered allmulticast mode [ 517.603105][ T9] usb 8-1: config 0 descriptor?? [ 517.691201][ T9] kobil_sct 8-1:0.0: required endpoints missing [ 518.028920][ T9205] /dev/nullb0: Can't open blockdev [ 519.856731][ T8836] usb 8-1: USB disconnect, device number 19 [ 520.900127][ T8836] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 521.141686][ T8836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.236816][ T8836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.343684][ T8836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.463025][ T8836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.523686][ T8836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.635922][ T8836] usb 1-1: config 0 descriptor?? [ 522.446461][ T8836] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 522.656090][ T8836] usb 1-1: USB disconnect, device number 36 [ 523.511278][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 523.576365][ T9234] fido_id[9234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 523.597445][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 523.727771][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 524.994717][ T9243] loop0: detected capacity change from 0 to 4096 [ 525.273077][ T9250] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.712994][ T9260] syzkaller0: entered promiscuous mode [ 527.743574][ T9260] syzkaller0: entered allmulticast mode [ 527.846259][ T9267] fuse: Bad value for 'fd' [ 529.995593][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.8.819'. [ 530.061113][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.819'. [ 530.096867][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.8.819'. [ 530.757350][ T9302] netlink: 68 bytes leftover after parsing attributes in process `syz.1.823'. [ 530.955647][ T9299] loop0: detected capacity change from 0 to 4096 [ 531.170967][ T9317] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.036862][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 533.057292][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 536.507937][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 536.582041][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'. [ 536.628734][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 537.060060][ T5681] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 537.304379][ T5681] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.396590][ T5681] usb 8-1: config 0 has no interfaces? [ 537.485048][ T5681] usb 8-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 537.555523][ T5681] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.626943][ T5681] usb 8-1: Product: syz [ 537.653811][ T5681] usb 8-1: Manufacturer: syz [ 537.682513][ T5681] usb 8-1: SerialNumber: syz [ 537.755115][ T5681] usb 8-1: config 0 descriptor?? [ 538.883931][ T5681] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 538.991938][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 539.128017][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.184456][ T9] usb 1-1: device descriptor read/64, error -71 [ 539.195084][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.245311][ T5681] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 539.306314][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.390098][ T5681] usb 6-1: config 0 descriptor?? [ 539.485424][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 539.709557][ T9] usb 1-1: device descriptor read/64, error -71 [ 539.862217][ T9] usb usb1-port1: attempt power cycle [ 540.168327][ T5681] usb 6-1: string descriptor 0 read error: -71 [ 540.238477][ T5681] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 540.269600][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 540.301939][ T5681] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 540.335802][ T9] usb 1-1: device descriptor read/8, error -71 [ 540.369637][ T5681] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 540.411632][ T5681] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 540.455674][ T5681] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 540.547480][ T5681] usb 6-1: USB disconnect, device number 31 [ 540.629395][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 540.700056][ T9] usb 1-1: device descriptor read/8, error -71 [ 540.843510][ T9] usb usb1-port1: unable to enumerate USB device [ 540.903951][ T11] usb 8-1: USB disconnect, device number 20 [ 542.835193][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 542.861135][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 545.262385][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.848'. [ 545.275739][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.848'. [ 545.325768][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.848'. [ 546.579382][ T11] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 546.817261][ T11] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.873000][ T11] usb 8-1: config 0 has no interfaces? [ 546.946698][ T11] usb 8-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 546.984136][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.025172][ T11] usb 8-1: Product: syz [ 547.039517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 547.054566][ T11] usb 8-1: Manufacturer: syz [ 547.093794][ T11] usb 8-1: SerialNumber: syz [ 547.151761][ T11] usb 8-1: config 0 descriptor?? [ 548.010047][ T5681] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 548.169598][ T8836] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 548.179704][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 548.328099][ T9442] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 548.331585][ T8836] usb 1-1: Using ep0 maxpacket: 8 [ 548.362348][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.409622][ T8836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.423079][ T5681] usb 2-1: no configurations [ 548.435767][ T5681] usb 2-1: can't read configurations, error -22 [ 548.450582][ T8836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.497929][ T8836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.526905][ T8836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.556565][ T8836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.591197][ T8836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.068937][ T8836] usb 1-1: GET_CAPABILITIES returned 0 [ 549.098123][ T8836] usbtmc 1-1:16.0: can't read capabilities [ 549.642779][ T5681] usb 8-1: USB disconnect, device number 21 [ 551.872173][ T9452] netlink: 14 bytes leftover after parsing attributes in process `syz.7.856'. [ 552.692651][ T11] usb 1-1: USB disconnect, device number 41 [ 554.292488][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 554.313820][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 555.417244][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.8.862'. [ 555.478165][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.862'. [ 555.545916][ T9475] netlink: 20 bytes leftover after parsing attributes in process `syz.8.862'. [ 557.299906][ T11] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 557.489959][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 557.677984][ T9485] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 557.755493][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.795407][ T11] usb 1-1: no configurations [ 557.809947][ T11] usb 1-1: can't read configurations, error -22 [ 558.409478][ T5681] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 558.656472][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.754287][ T5681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.808956][ T5681] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 558.880160][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.944971][ T5681] usb 6-1: config 0 descriptor?? [ 559.274037][ T8836] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 559.513922][ T8836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 559.577778][ T8836] usb 1-1: not running at top speed; connect to a high speed hub [ 559.660019][ T8836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 4 [ 559.684261][ T5681] usb 6-1: string descriptor 0 read error: -71 [ 559.701218][ T8836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 11160, setting to 1023 [ 559.722392][ T5681] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 559.780611][ T5681] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 559.792138][ T8836] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 559.846746][ T5681] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 559.886225][ T5681] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 559.898655][ T8836] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 559.918957][ T5681] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 559.933460][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.976929][ T8836] usb 1-1: Product: syz [ 559.989651][ T5681] usb 6-1: USB disconnect, device number 32 [ 560.008250][ T8836] usb 1-1: Manufacturer: syz [ 560.044570][ T8836] usb 1-1: SerialNumber: syz [ 560.570213][ T8836] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.602629][ T8836] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 560.744920][ T8836] usb 1-1: USB disconnect, device number 44 [ 562.358746][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.7.873'. [ 562.446795][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.873'. [ 562.491577][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.7.873'. [ 563.145574][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 563.157224][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 565.651590][ T9531] netlink: 14 bytes leftover after parsing attributes in process `syz.8.880'. [ 565.670500][ T11] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 565.815754][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 565.870672][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 565.997165][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 566.013827][ T9529] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 566.080554][ T9535] hsr_slave_1 (unregistering): left promiscuous mode [ 566.107066][ T11] usb 8-1: unable to get BOS descriptor or descriptor too short [ 566.127618][ T11] usb 8-1: no configurations [ 566.155857][ T11] usb 8-1: can't read configurations, error -22 [ 566.231995][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.250022][ T8836] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 566.274411][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.308962][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 566.343922][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.404089][ T9] usb 2-1: config 0 descriptor?? [ 566.451327][ T8836] usb 1-1: Using ep0 maxpacket: 16 [ 566.478706][ T8836] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 566.521857][ T8836] usb 1-1: config 0 has no interface number 0 [ 566.539840][ T8836] usb 1-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 566.570150][ T8836] usb 1-1: config 0 interface 246 has no altsetting 0 [ 566.600932][ T8836] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 566.630367][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.674507][ T8836] usb 1-1: Product: syz [ 566.711180][ T8836] usb 1-1: Manufacturer: syz [ 566.745312][ T8836] usb 1-1: SerialNumber: syz [ 566.797544][ T8836] usb 1-1: config 0 descriptor?? [ 567.099616][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 567.112904][ T9] usb 2-1: string descriptor 0 read error: -71 [ 567.155928][ T9] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 567.174323][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 567.193632][ T9] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 567.255234][ T9] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 567.338045][ T9] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 567.393308][ T9] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 567.397113][ T8836] usb 1-1: USB disconnect, device number 45 [ 567.453517][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.460266][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.532294][ T9] usb 2-1: USB disconnect, device number 35 [ 568.042375][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.887'. [ 568.096583][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.887'. [ 568.166675][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz.5.887'. [ 568.485032][ T9561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.529368][ T9561] block device autoloading is deprecated and will be removed. [ 568.980537][ T9565] vlan2: entered allmulticast mode [ 569.007125][ T9565] bond0: entered allmulticast mode [ 569.033413][ T9565] bond_slave_0: entered allmulticast mode [ 569.073666][ T9565] bond_slave_1: entered allmulticast mode [ 569.317652][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 569.326244][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 570.333237][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 570.541070][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 570.682273][ T9581] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 570.774614][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 570.836989][ T9] usb 2-1: no configurations [ 570.861818][ T9] usb 2-1: can't read configurations, error -22 [ 571.754048][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 571.796139][ T9597] fuse: fd is not a fuse device [ 571.802405][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 571.863958][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 572.650323][ T9609] netlink: 84 bytes leftover after parsing attributes in process `syz.1.905'. [ 573.160703][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 573.170574][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 573.569481][ T8836] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 573.801261][ T8836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.831430][ T8836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.918056][ T8836] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 573.962107][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.024563][ T8836] usb 1-1: Product: syz [ 574.052107][ T8836] usb 1-1: Manufacturer: syz [ 574.078761][ T8836] usb 1-1: SerialNumber: syz [ 574.130850][ T8836] usb 1-1: config 0 descriptor?? [ 575.879664][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 576.066826][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 576.195339][ T9633] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 576.213615][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.8.914'. [ 576.256599][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.914'. [ 576.266996][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 576.294371][ T9] usb 6-1: no configurations [ 576.320637][ T9639] netlink: 20 bytes leftover after parsing attributes in process `syz.8.914'. [ 576.338104][ T9] usb 6-1: can't read configurations, error -22 [ 576.511536][ T9641] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.559016][ T9641] block device autoloading is deprecated and will be removed. [ 577.316751][ T8836] usb 1-1: USB disconnect, device number 46 [ 578.292124][ T48] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 578.304304][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 579.667320][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.926'. [ 579.716131][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.926'. [ 579.755200][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.8.926'. [ 580.196673][ T9675] md: md2 stopped. [ 580.840263][ T2161] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 581.049609][ T2161] usb 2-1: Using ep0 maxpacket: 16 [ 581.198152][ T9680] snd_virmidi snd_virmidi.0: control 1:5120:195:ÿÿ :53367 is already present [ 581.274246][ T2161] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.324774][ T2161] usb 2-1: no configurations [ 581.351239][ T2161] usb 2-1: can't read configurations, error -22 [ 584.110052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 584.384535][ T9696] loop7: detected capacity change from 0 to 4096 [ 584.573284][ T9697] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.630135][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.939'. [ 586.679675][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.939'. [ 586.748626][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.939'. [ 586.778035][ T9708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 586.831643][ T9708] block device autoloading is deprecated and will be removed. [ 587.268842][ T48] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 587.283733][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 587.741006][ T8836] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 587.917400][ T8836] usb 6-1: Using ep0 maxpacket: 16 [ 588.106210][ T8836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.128620][ T8836] usb 6-1: no configurations [ 588.149910][ T8836] usb 6-1: can't read configurations, error -22 [ 589.693997][ T9747] netlink: 'syz.5.950': attribute type 29 has an invalid length. [ 589.774778][ T9748] netlink: 'syz.5.950': attribute type 29 has an invalid length. [ 589.814964][ T9747] netlink: 600 bytes leftover after parsing attributes in process `syz.5.950'. [ 590.605473][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 590.687724][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 590.728854][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 592.155238][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 592.173027][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 593.431909][ T2161] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 593.632310][ T2161] usb 1-1: Using ep0 maxpacket: 16 [ 593.690453][ T2161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 593.717163][ T2161] usb 1-1: no configurations [ 593.746057][ T2161] usb 1-1: can't read configurations, error -22 [ 594.257900][ T9784] mmap: syz.8.963 (9784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 594.429827][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 594.460880][ T9785] trusted_key: encrypted_key: insufficient parameters specified [ 594.477763][ T9785] trusted_key: encrypted_key: insufficient parameters specified [ 594.688666][ T9785] netlink: 180 bytes leftover after parsing attributes in process `syz.1.964'. [ 594.759797][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 594.833346][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 594.932060][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.043444][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 595.127280][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.184745][ T9] usb 6-1: Product: syz [ 595.220373][ T9] usb 6-1: Manufacturer: syz [ 595.235049][ T9] usb 6-1: SerialNumber: syz [ 595.361699][ T2161] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 595.567014][ T9] snd-ua101 6-1:1.1: sample format descriptor not found [ 595.621943][ T9] snd-ua101 6-1:1.0: invalid num_altsetting [ 595.641341][ T2161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 595.674597][ T2161] usb 1-1: not running at top speed; connect to a high speed hub [ 595.749700][ T2161] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 595.769997][ T9] usb 6-1: USB disconnect, device number 37 [ 595.793239][ T2161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.860321][ T2161] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 595.896004][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.927231][ T2161] usb 1-1: Product: syz [ 595.944222][ T2161] usb 1-1: Manufacturer: syz [ 595.969618][ T2161] usb 1-1: SerialNumber: syz [ 596.371703][ T2161] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 596.458102][ T2161] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 596.510385][ T2161] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 596.540339][ T2161] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 596.595469][ T2161] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 596.637927][ T2161] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 596.678861][ T2161] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 596.738769][ T2161] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 596.951172][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.967'. [ 597.000489][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.967'. [ 597.027831][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.967'. [ 597.576363][ T2161] usb 1-1: USB disconnect, device number 49 [ 597.945606][ T8237] udevd[8237]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.190301][ T9809] fuse: fd is not a fuse device [ 598.858778][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 598.871879][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 599.189959][ T5681] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 599.229434][ T2161] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 599.400070][ T5681] usb 6-1: Using ep0 maxpacket: 16 [ 599.501152][ T2161] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.580636][ T2161] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.666110][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 599.703608][ T5681] usb 6-1: no configurations [ 599.703750][ T2161] usb 8-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 599.717469][ T5681] usb 6-1: can't read configurations, error -22 [ 599.806171][ T2161] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.834341][ T2161] usb 8-1: Product: syz [ 599.856150][ T2161] usb 8-1: Manufacturer: syz [ 599.889503][ T2161] usb 8-1: SerialNumber: syz [ 599.941367][ T2161] usb 8-1: config 0 descriptor?? [ 602.001711][ T9838] loop0: detected capacity change from 0 to 4096 [ 602.191142][ T2161] usb 8-1: USB disconnect, device number 24 [ 602.271546][ T9841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.404996][ T9846] random: crng reseeded on system resumption [ 603.806600][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 603.827588][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 603.939651][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 604.497706][ T9854] md: md2 stopped. [ 604.767553][ T9859] binder: 9858:9859 ioctl 4018620d 0 returned -22 [ 604.817912][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 604.881202][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 604.941703][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 605.025210][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 605.550022][ T2161] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 605.621413][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 605.628984][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 605.761306][ T2161] usb 6-1: Using ep0 maxpacket: 16 [ 605.844035][ T2161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 605.884156][ T2161] usb 6-1: no configurations [ 605.912863][ T2161] usb 6-1: can't read configurations, error -22 [ 606.002921][ T9870] macvlan2: entered allmulticast mode [ 606.040676][ T9870] team0: entered allmulticast mode [ 606.066825][ T9870] team_slave_0: entered allmulticast mode [ 606.106962][ T9870] team_slave_1: entered allmulticast mode [ 606.136833][ T9870] team_slave_0: entered promiscuous mode [ 606.143400][ T9870] team_slave_1: entered promiscuous mode [ 606.248213][ T9870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 606.656222][ T9872] loop7: detected capacity change from 0 to 4096 [ 606.813021][ T9874] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 607.388643][ T4876] Bluetooth: hci0: unexpected event 0x05 length: 14 > 4 [ 608.808459][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 608.903208][ T9892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'. [ 608.917613][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.995'. [ 609.037753][ T9895] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 610.089980][ T5681] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 610.292215][ T5681] usb 6-1: Using ep0 maxpacket: 16 [ 610.375908][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 610.407572][ T5681] usb 6-1: no configurations [ 610.449528][ T5681] usb 6-1: can't read configurations, error -22 [ 610.469717][ T48] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 610.489981][ T48] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 612.487941][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1010'. [ 612.517015][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1010'. [ 612.594968][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1010'. [ 614.239503][ T5681] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 614.441475][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 614.609572][ T5681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 614.673757][ T5681] usb 1-1: no configurations [ 614.735096][ T5681] usb 1-1: can't read configurations, error -22 [ 615.099783][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 615.114877][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 616.121307][ T9971] bridge_slave_0: left allmulticast mode [ 616.147838][ T9971] bridge_slave_0: left promiscuous mode [ 616.176607][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1022'. [ 616.187802][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.212336][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 616.255343][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1022'. [ 616.292500][ T9971] bridge_slave_1: left allmulticast mode [ 616.318960][ T9971] bridge_slave_1: left promiscuous mode [ 616.336093][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.528820][ T9971] bond0: (slave bond_slave_0): Releasing backup interface [ 616.646674][ T9971] bond0: (slave bond_slave_1): Releasing backup interface [ 616.716338][ T9971] team_slave_0: left allmulticast mode [ 616.759579][ T9971] team_slave_0: left promiscuous mode [ 616.833981][ T9971] team0: Port device team_slave_0 removed [ 616.884027][ T9971] team_slave_1: left allmulticast mode [ 616.913360][ T9971] team_slave_1: left promiscuous mode [ 616.961048][ T9971] team0: Port device team_slave_1 removed [ 617.017390][ T9971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.045512][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.107325][ T9971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.142115][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.197115][ T9971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.250734][ T9973] team0: Mode changed to "activebackup" [ 619.090797][ T5681] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 619.337466][ T5681] usb 6-1: Using ep0 maxpacket: 16 [ 619.499623][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 619.553268][ T5681] usb 6-1: no configurations [ 619.572931][ T5681] usb 6-1: can't read configurations, error -22 [ 619.920055][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 619.927443][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 620.683570][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1036'. [ 620.705538][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 620.749238][T10029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1036'. [ 625.281003][ T2161] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 625.469951][ T2161] usb 1-1: config 0 has no interfaces? [ 625.498985][ T2161] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 625.512026][ T2161] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 625.551907][ T2161] usb 1-1: Manufacturer: syz [ 625.613524][ T2161] usb 1-1: config 0 descriptor?? [ 625.857980][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.893374][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.210383][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 626.220250][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 626.262180][T10082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 628.892987][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.900082][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.548902][ T4876] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 629.558148][ T4876] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 631.818378][ T5681] usb 1-1: USB disconnect, device number 52 [ 632.183592][T10116] fuse: fd is not a fuse device [ 633.377106][T10122] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1060'. [ 633.387155][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1060'. [ 633.448568][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1060'. [ 633.836928][T10125] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1061'. [ 633.856890][T10125] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1061'. [ 635.007451][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 635.025021][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 637.021811][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 637.032049][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 640.850961][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1072'. [ 640.880238][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1072'. [ 640.927711][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1072'. [ 643.584771][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 643.608859][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 643.976322][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1083'. [ 645.277243][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1086'. [ 645.299839][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1086'. [ 645.358358][T10209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1086'. [ 646.419497][ T5681] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 646.584194][ T5681] usb 6-1: Using ep0 maxpacket: 16 [ 646.679189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 646.727159][ T5681] usb 6-1: unable to get BOS descriptor or descriptor too short [ 646.751350][ T5681] usb 6-1: no configurations [ 646.764647][ T5681] usb 6-1: can't read configurations, error -22 [ 648.829620][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 648.836860][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 649.108542][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 649.168948][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'. [ 649.194820][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 651.019635][ T5681] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 651.214045][ T5681] usb 1-1: Using ep0 maxpacket: 16 [ 651.334927][ T5681] usb 1-1: unable to get BOS descriptor or descriptor too short [ 651.387431][ T5681] usb 1-1: no configurations [ 651.413646][ T5681] usb 1-1: can't read configurations, error -22 [ 651.799654][ T2161] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 651.969399][ T2161] usb 6-1: device descriptor read/64, error -71 [ 652.269853][ T2161] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 652.479915][ T2161] usb 6-1: device descriptor read/64, error -71 [ 652.654444][ T2161] usb usb6-port1: attempt power cycle [ 653.083146][ T2161] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 653.172607][ T2161] usb 6-1: device descriptor read/8, error -71 [ 653.459719][ T2161] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 653.516446][ T2161] usb 6-1: device descriptor read/8, error -71 [ 653.660369][ T2161] usb usb6-port1: unable to enumerate USB device [ 653.708853][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1113'. [ 653.757544][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1113'. [ 653.800895][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1113'. [ 654.894683][ T4876] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 654.908503][ T4876] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 655.150834][ T2161] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 655.404060][ T2161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.520801][ T2161] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 655.532735][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.544866][ T2161] usb 1-1: Product: syz [ 655.550716][ T2161] usb 1-1: Manufacturer: syz [ 655.565415][ T2161] usb 1-1: SerialNumber: syz [ 655.592655][ T2161] usb 1-1: config 0 descriptor?? [ 655.625108][ T2161] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 656.948822][T10332] capability: warning: `syz.1.1123' uses deprecated v2 capabilities in a way that may be insecure [ 657.572405][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1127'. [ 657.591221][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1127'. [ 657.634211][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1127'. [ 657.960938][ T2161] usb 1-1: USB disconnect, device number 55 [ 658.351726][T10351] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1130'. [ 658.848869][ T4876] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 658.860731][ T4876] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 660.031096][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1141'. [ 660.053384][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1141'. [ 660.125350][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1141'. [ 660.954778][ T2161] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 661.177718][ T2161] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.286319][ T2161] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 661.332287][ T2161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.379296][ T2161] usb 6-1: Product: syz [ 661.408746][ T2161] usb 6-1: Manufacturer: syz [ 661.444089][ T2161] usb 6-1: SerialNumber: syz [ 661.508342][ T2161] usb 6-1: config 0 descriptor?? [ 661.575267][ T2161] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 661.843608][ T29] audit: type=1800 audit(1780646052.252:7): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1147" name="bus" dev="ramfs" ino=31317 res=0 errno=0 [ 664.140504][ T8836] usb 6-1: USB disconnect, device number 52 [ 665.070530][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 665.099992][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 665.115408][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 665.196100][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 665.773585][ T4876] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 665.783617][ T4876] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 668.351735][ T2161] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 668.537104][ T2161] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.622324][ T2161] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 668.643217][ T2161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.654434][ T2161] usb 6-1: Product: syz [ 668.660371][ T2161] usb 6-1: Manufacturer: syz [ 668.666374][ T2161] usb 6-1: SerialNumber: syz [ 668.708902][ T2161] usb 6-1: config 0 descriptor?? [ 668.760673][ T2161] ums_eneub6250 6-1:0.0: USB Mass Storage device detected [ 669.788078][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 669.846549][T10454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 669.859581][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 669.913164][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 670.461019][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1166'. [ 671.378336][ T2161] usb 6-1: USB disconnect, device number 53 [ 673.418158][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 673.426097][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 674.893645][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 674.946639][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'. [ 675.021654][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 675.065748][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'. [ 676.475041][ T2161] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 676.662584][ T2161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.754792][ T2161] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 676.781855][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.821286][ T2161] usb 1-1: Product: syz [ 676.836231][ T2161] usb 1-1: Manufacturer: syz [ 676.856099][ T2161] usb 1-1: SerialNumber: syz [ 676.903597][ T2161] usb 1-1: config 0 descriptor?? [ 676.952434][ T2161] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 679.267412][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1192'. [ 679.284689][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1192'. [ 679.351759][T10530] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1192'. [ 679.456223][ T8836] usb 1-1: USB disconnect, device number 56 [ 679.721740][ T4876] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 679.728980][ T4876] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 681.879780][ T4876] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 682.659689][ T8836] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 682.854095][ T8836] usb 6-1: Using ep0 maxpacket: 8 [ 682.915730][ T8836] usb 6-1: unable to get BOS descriptor or descriptor too short [ 682.928916][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 682.980787][ T8836] usb 6-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.995735][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1205'. [ 683.036637][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'. [ 683.065927][ T8836] usb 6-1: config 1 interface 0 has no altsetting 0 [ 683.130901][ T8836] usb 6-1: string descriptor 0 read error: -22 [ 683.172390][ T8836] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 683.238831][ T8836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.552658][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 684.565198][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 685.151143][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x6 [ 685.193981][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x2 [ 685.247533][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.273050][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.331011][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.402437][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.443240][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.491250][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.545574][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.576529][ T8836] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 685.625267][ T4876] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 686.372087][T10604] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1218'. [ 686.428697][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1218'. [ 686.429573][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1218'. [ 686.774945][ T8836] lenovo 0003:17EF:60A3.001A: hidraw0: USB HID v0.01 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 686.851816][ T8836] usb 6-1: USB disconnect, device number 54 [ 687.259651][ T8836] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 687.479863][ T8836] usb 6-1: Using ep0 maxpacket: 16 [ 687.503631][T10613] fido_id[10613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 687.521980][ T8836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.598368][ T8836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.660584][ T8836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 687.751077][ T8836] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 687.829573][ T8836] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.965197][ T8836] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 688.002301][ T8836] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 688.031945][ T8836] usb 6-1: Manufacturer: syz [ 688.081425][ T8836] usb 6-1: config 0 descriptor?? [ 688.730289][ T8836] rc_core: IR keymap rc-hauppauge not found [ 688.750547][ T8836] Registered IR keymap rc-empty [ 688.782084][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 688.840669][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 688.904244][ T8836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 688.997602][ T8836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 689.113946][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.229876][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.293852][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.351609][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.411205][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.462168][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.522085][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.571840][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.653488][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.711500][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.760440][ T8836] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 689.836266][ T8836] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 689.890293][ T8836] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 689.957060][ T8836] usb 6-1: USB disconnect, device number 55 [ 690.330135][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.353297][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.565406][ T48] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 691.578013][ T48] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 691.912214][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1231'. [ 691.958981][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1231'. [ 691.998619][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1231'. [ 694.027054][ T2161] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 694.478838][T10674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.543459][T10674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.691513][ T2161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 694.741825][T10686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 694.753298][ T2161] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 694.777380][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 694.786938][ T2161] usb 6-1: can't read configurations, error -71 [ 694.827224][T10687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 695.228632][ T4876] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 695.236525][ T4876] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 697.688985][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 697.733604][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 697.786589][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 698.097695][T10729] syzkaller0: entered promiscuous mode [ 698.117795][T10729] syzkaller0: entered allmulticast mode [ 699.010048][ T4876] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 699.018264][ T4876] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 699.376375][ T8836] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 699.574905][ T8836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.644471][ T8836] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 699.658470][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.688630][ T8836] usb 1-1: Product: syz [ 699.708522][ T8836] usb 1-1: Manufacturer: syz [ 699.747376][ T8836] usb 1-1: SerialNumber: syz [ 699.786288][ T8836] usb 1-1: config 0 descriptor?? [ 699.832790][ T8836] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 700.083964][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 700.141896][T10760] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1274'. [ 702.464404][ T8836] usb 1-1: USB disconnect, device number 57 [ 702.863147][T10778] syzkaller0: entered promiscuous mode [ 702.896415][T10778] syzkaller0: entered allmulticast mode [ 705.476975][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 705.486487][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 708.211933][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 708.269571][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 708.306606][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 708.699470][ T2161] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 708.889927][ T2161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.959632][ T2161] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 709.014217][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.066285][ T2161] usb 1-1: Product: syz [ 709.090796][ T2161] usb 1-1: Manufacturer: syz [ 709.133118][ T2161] usb 1-1: SerialNumber: syz [ 709.213892][ T2161] usb 1-1: config 0 descriptor?? [ 709.288970][ T2161] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 711.403203][T10840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1299'. [ 711.664665][ T2161] usb 1-1: USB disconnect, device number 58 [ 712.500797][T10847] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 712.540098][T10847] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 712.577045][T10847] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 713.066832][ T48] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 713.075212][ T48] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 713.924950][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1304'. [ 713.976656][T10857] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1304'. [ 714.853051][T10863] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1306'. [ 714.892810][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1306'. [ 714.927401][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1306'. [ 715.471087][T10867] syzkaller0: entered promiscuous mode [ 715.499734][T10867] syzkaller0: entered allmulticast mode [ 717.129434][ T2161] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 717.311853][ T2161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.369630][ T2161] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 717.413442][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.458411][ T2161] usb 1-1: Product: syz [ 717.480538][ T2161] usb 1-1: Manufacturer: syz [ 717.500329][ T2161] usb 1-1: SerialNumber: syz [ 717.544852][ T2161] usb 1-1: config 0 descriptor?? [ 717.606536][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.623036][ T2161] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 717.631566][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.644590][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.660562][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.698643][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 719.759533][ T4876] Bluetooth: hci4: command tx timeout [ 720.188320][ T2161] usb 1-1: USB disconnect, device number 59 [ 721.702526][ T4876] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 721.710771][ T4876] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 721.841004][ T4876] Bluetooth: hci4: command tx timeout [ 722.107497][T10908] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1318'. [ 722.144380][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1318'. [ 722.195750][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1318'. [ 723.924013][ T4876] Bluetooth: hci4: command tx timeout [ 724.764309][ T5681] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 724.999617][ T5681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.064015][ T5681] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 725.095989][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.141966][ T5681] usb 1-1: Product: syz [ 725.149372][ T5681] usb 1-1: Manufacturer: syz [ 725.160463][ T5681] usb 1-1: SerialNumber: syz [ 725.194865][ T5681] usb 1-1: config 0 descriptor?? [ 725.248179][ T5681] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 725.436587][T10881] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.486746][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.532256][T10881] bridge_slave_0: entered allmulticast mode [ 725.593919][T10881] bridge_slave_0: entered promiscuous mode [ 725.678939][T10881] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.703563][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.738644][T10881] bridge_slave_1: entered allmulticast mode [ 725.788765][T10881] bridge_slave_1: entered promiscuous mode [ 726.011064][ T4876] Bluetooth: hci4: command tx timeout [ 726.159817][T10881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.256186][T10881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.670447][T10881] team0: Port device team_slave_0 added [ 726.761174][T10881] team0: Port device team_slave_1 added [ 727.198170][T10881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.254993][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.421612][T10881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.504368][T10881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.558313][T10881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.679250][T10881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.814041][ T8836] usb 1-1: USB disconnect, device number 60 [ 728.360014][T10881] hsr_slave_0: entered promiscuous mode [ 728.416634][T10881] hsr_slave_1: entered promiscuous mode [ 728.448988][T10881] debugfs: 'hsr0' already exists in 'hsr' [ 728.511050][T10881] Cannot create hsr debugfs directory [ 729.005602][T10975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 729.024539][T10975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 729.037822][T10975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 729.077542][T10975] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 729.107628][T10975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 729.809675][ T2161] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 730.034949][ T2161] usb 1-1: Using ep0 maxpacket: 8 [ 730.085628][ T2161] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.132241][ T2161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.177968][ T2161] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 730.215097][ T2161] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 730.263106][ T2161] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.301405][ T2161] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 730.343234][ T2161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.412733][ T2161] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 730.834591][ T29] audit: type=1326 audit(1780646121.252:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10987 comm="syz.1.1337" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x0 [ 730.962801][T10982] tipc: Enabling of bearer rejected, failed to enable media [ 730.978345][T10990] syzkaller0: entered promiscuous mode [ 731.014885][T10990] syzkaller0: entered allmulticast mode [ 731.083287][T10992] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 731.200163][ T4876] Bluetooth: hci6: command tx timeout [ 731.436376][T10881] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 731.484394][ T2161] usb 1-1: USB disconnect, device number 61 [ 731.564045][T10881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.621485][T10881] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 731.745866][T10881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.808921][T10881] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 731.906147][T10881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.958541][T10881] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 732.051352][T10881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.089506][ T5681] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 733.267982][ T9] IPVS: starting estimator thread 0... [ 733.299777][ T4876] Bluetooth: hci6: command tx timeout [ 733.354247][ T5681] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 733.365748][ T5681] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 733.387253][T11011] IPVS: using max 240 ests per chain, 12000 per kthread [ 733.391121][ T5681] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 733.424236][ T5681] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 733.465462][ T5681] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 733.537366][ T5681] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 733.568573][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 733.627676][ T5681] usb 1-1: Product: syz [ 733.633340][ T5681] usb 1-1: Manufacturer: syz [ 733.674756][ T5681] cdc_wdm 1-1:1.0: skipping garbage [ 733.744146][ T5681] cdc_wdm 1-1:1.0: skipping garbage [ 733.779401][ T5681] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 733.797633][ T5681] cdc_wdm 1-1:1.0: Unknown control protocol [ 734.510058][T10881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.360002][ T4876] Bluetooth: hci6: command tx timeout [ 735.904766][T10881] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.104051][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.111651][T10194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.138079][ T5681] usb 1-1: USB disconnect, device number 62 [ 736.364820][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.372468][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.563005][T11032] capability: warning: `syz.7.1347' uses 32-bit capabilities (legacy support in use) [ 737.439935][ T4876] Bluetooth: hci6: command tx timeout [ 739.616032][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.676594][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.727269][T10973] bridge_slave_0: entered allmulticast mode [ 739.795423][T10973] bridge_slave_0: entered promiscuous mode [ 739.940783][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.983515][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.034279][T10973] bridge_slave_1: entered allmulticast mode [ 740.127054][T10973] bridge_slave_1: entered promiscuous mode [ 740.795509][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.015646][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.474175][T10973] team0: Port device team_slave_0 added [ 741.565005][T10973] team0: Port device team_slave_1 added [ 741.993953][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.057414][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.192417][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.270035][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.328682][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.442620][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.157828][T10973] hsr_slave_0: entered promiscuous mode [ 743.216559][T10973] hsr_slave_1: entered promiscuous mode [ 743.256572][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 743.308426][T10973] Cannot create hsr debugfs directory [ 743.581720][T11071] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1355'. [ 745.887051][T10881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.861806][T10973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.021468][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.057006][T10973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 748.234791][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.278246][T10973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 748.421138][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.488214][T10973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 748.637409][T10973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.749370][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 750.250831][T10881] veth0_vlan: entered promiscuous mode [ 750.477679][T10881] veth1_vlan: entered promiscuous mode [ 750.775152][T11127] tipc: Started in network mode [ 750.803179][T11127] tipc: Node identity 4, cluster identity 4711 [ 750.847662][T11127] tipc: Node number set to 4 [ 751.156794][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.773839][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.783324][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.934604][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.157141][T10881] veth0_macvtap: entered promiscuous mode [ 752.435045][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.442658][ T5696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.081304][T11139] syzkaller0: entered promiscuous mode [ 753.096788][T11139] syzkaller0: entered allmulticast mode [ 753.229392][ T4876] Bluetooth: hci5: unexpected event 0x05 length: 14 > 4 [ 753.237001][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.251831][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.924622][T10881] veth1_macvtap: entered promiscuous mode [ 754.405101][T10881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.745717][T10881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.969635][ T5681] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 755.088365][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.141688][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.208138][ T5681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.252559][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.264155][ T5681] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 755.306758][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.314063][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.365178][ T5681] usb 1-1: Product: syz [ 755.384370][ T5681] usb 1-1: Manufacturer: syz [ 755.414310][ T5681] usb 1-1: SerialNumber: syz [ 755.476032][ T5681] usb 1-1: config 0 descriptor?? [ 755.601765][ T5681] ums_eneub6250 1-1:0.0: USB Mass Storage device detected [ 758.049579][ T2161] usb 1-1: USB disconnect, device number 63 [ 761.931381][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.556866][ T4876] Bluetooth: hci5: unexpected event 0x05 length: 14 > 4 [ 763.001989][T10973] veth0_vlan: entered promiscuous mode [ 763.287475][T10973] veth1_vlan: entered promiscuous mode [ 764.258227][T10973] veth0_macvtap: entered promiscuous mode [ 764.506772][T10973] veth1_macvtap: entered promiscuous mode [ 764.896911][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.065859][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.345662][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.424126][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.492076][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.547765][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.184164][ T5671] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 766.374572][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.393046][ T5671] usb 1-1: Using ep0 maxpacket: 32 [ 766.445033][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.463421][ T5671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.574981][ T5671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.648144][ T5671] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 766.698521][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.766111][ T5671] usb 1-1: config 0 descriptor?? [ 766.947327][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.018624][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.429008][ T5671] hid_parser_main: 3996 callbacks suppressed [ 767.467581][ T5671] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 767.531743][ T5671] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 767.687935][ T5671] ft260 0003:0403:6030.001B: chip code: 0000 0000 [ 767.903083][ T5671] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 768.105156][ T5671] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 768.153422][ T5671] ft260 0003:0403:6030.001B: failed to retrieve status: -32 [ 768.422163][ T5681] usb 1-1: USB disconnect, device number 64 [ 768.804409][T11272] netlink: 'syz.9.1310': attribute type 5 has an invalid length. [ 770.796880][ T4876] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 772.920137][T11312] fuse: fd is not a fuse device [ 773.772704][ T2161] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 773.980799][ T2161] usb 1-1: Using ep0 maxpacket: 32 [ 774.040080][ T2161] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 774.092391][ T2161] usb 1-1: config 0 has no interface number 0 [ 774.175281][ T2161] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 774.235160][ T2161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.286663][ T2161] usb 1-1: Product: syz [ 774.313423][ T2161] usb 1-1: Manufacturer: syz [ 774.342928][ T2161] usb 1-1: SerialNumber: syz [ 774.409713][ T2161] usb 1-1: config 0 descriptor?? [ 775.401638][ T2161] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 775.626788][ T2161] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 775.732836][ T2161] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 775.849800][ T2161] usb 1-1: USB disconnect, device number 65 [ 777.140055][ T56] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.719262][ T4876] Bluetooth: hci3: unexpected event 0x05 length: 14 > 4 [ 777.966773][ T56] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.456592][ T56] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.888911][ T56] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.225567][ T5696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.311183][ T5696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.153718][ T5696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.235390][ T5696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.367175][ T56] bridge_slave_1: left allmulticast mode [ 780.444560][ T56] bridge_slave_1: left promiscuous mode [ 780.471719][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.544347][ T56] bridge_slave_0: left allmulticast mode [ 780.589320][ T56] bridge_slave_0: left promiscuous mode [ 780.633052][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.322015][T11381] fuse: fd is not a fuse device [ 782.405293][ T4876] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 782.618016][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.744246][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.847759][ T56] bond0 (unregistering): Released all slaves [ 783.262614][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1412'. [ 784.385094][T11411] syzkaller0: entered promiscuous mode [ 784.432382][T11411] syzkaller0: entered allmulticast mode [ 784.593965][ T56] hsr_slave_0: left promiscuous mode [ 784.637217][ T56] hsr_slave_1: left promiscuous mode [ 784.676881][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.718268][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.770750][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.814614][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.899886][ T56] veth1_macvtap: left promiscuous mode [ 784.937874][ T56] veth0_macvtap: left promiscuous mode [ 784.968767][ T56] veth1_vlan: left promiscuous mode [ 784.992848][ T56] veth0_vlan: left promiscuous mode [ 785.089832][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 785.924044][ T4876] Bluetooth: hci1: unexpected event 0x05 length: 14 > 4 [ 787.300752][T11444] PKCS8: Unsupported PKCS#8 version [ 787.500936][ T56] team0 (unregistering): Port device team_slave_1 removed [ 787.649824][ T56] team0 (unregistering): Port device team_slave_0 removed [ 790.930276][ T4876] Bluetooth: hci4: unexpected event 0x05 length: 14 > 4 [ 792.055941][T11483] sch_fq: defrate 0 ignored. [ 793.230133][ T8836] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 793.423127][ T8836] usb 1-1: too many configurations: 127, using maximum allowed: 8 [ 793.568766][ T8836] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 793.607342][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.662007][ T8836] usb 1-1: Product: syz [ 793.689571][ T8836] usb 1-1: Manufacturer: syz [ 793.723399][ T8836] usb 1-1: SerialNumber: syz [ 794.659936][ T8836] rtl8150 1-1:1.0: couldn't reset the device [ 794.698846][ T8836] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 794.844483][ T8836] usb 1-1: USB disconnect, device number 66 [ 795.738013][T11511] syzkaller0: entered promiscuous mode [ 795.779274][T11511] syzkaller0: entered allmulticast mode [ 796.687759][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.092365][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.427073][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.797577][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.986504][ T4876] Bluetooth: hci6: unexpected event 0x05 length: 14 > 4 [ 799.346215][ T29] audit: type=1326 audit(1780646189.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz.1.1449" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x0 [ 799.723043][ T12] bridge_slave_1: left allmulticast mode [ 799.757075][ T12] bridge_slave_1: left promiscuous mode [ 799.810499][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.881187][ T12] bridge_slave_0: left allmulticast mode [ 799.911225][ T12] bridge_slave_0: left promiscuous mode [ 799.944999][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.510370][ T8836] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 800.708563][ T8836] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 800.761482][ T8836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.809792][ T8836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 800.849466][ T8836] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 800.905988][ T8836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.984484][ T8836] usb 1-1: config 0 descriptor?? [ 801.622835][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.674480][ T12] bond_slave_0: left allmulticast mode [ 801.749653][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.791193][ T12] bond_slave_1: left allmulticast mode [ 801.856922][ T12] bond0 (unregistering): Released all slaves [ 803.141436][ T12] hsr_slave_0: left promiscuous mode [ 803.195363][ T12] hsr_slave_1: left promiscuous mode [ 803.236454][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.270733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.305300][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.318056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.477276][ T12] veth1_macvtap: left promiscuous mode [ 803.504192][ T12] veth0_macvtap: left promiscuous mode [ 803.523000][ T12] veth1_vlan: left promiscuous mode [ 803.528541][ T12] veth0_vlan: left promiscuous mode [ 804.150794][ T9] usb 1-1: USB disconnect, device number 67 [ 804.861353][T11592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.145559][ T8836] Process accounting resumed [ 806.501913][ T12] team0 (unregistering): Port device team_slave_1 removed [ 806.675899][ T12] team0 (unregistering): Port device team_slave_0 removed [ 809.479377][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 809.578476][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.587882][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.689962][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 809.737149][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 809.766197][ T9] usb 3-1: config 0 has no interface number 0 [ 809.814285][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 809.852350][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.875124][ T9] usb 3-1: Product: syz [ 809.886487][ T9] usb 3-1: Manufacturer: syz [ 809.912317][ T9] usb 3-1: SerialNumber: syz [ 809.943881][ T9] usb 3-1: config 0 descriptor?? [ 810.374674][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.388678][T11653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1478'. [ 810.480138][T11642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.872292][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 810.930974][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 810.961532][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 810.987577][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 811.057234][ T9] usb 3-1: USB disconnect, device number 4 [ 811.527772][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1480'. [ 811.532138][T10194] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.614120][T10194] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.680784][T11658] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.689852][T11658] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.914004][T10194] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.962314][T10194] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.792602][T11674] misc userio: Invalid payload size [ 813.216891][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.233093][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.171276][T11683] loop0: detected capacity change from 0 to 4096 [ 814.293228][T11692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 815.611476][T11705] netlink: 'syz.9.1492': attribute type 16 has an invalid length. [ 815.649570][T11705] netlink: 'syz.9.1492': attribute type 17 has an invalid length. [ 816.265489][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.344291][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.544196][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.599451][ T5671] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 816.780504][ T5671] usb 1-1: Using ep0 maxpacket: 32 [ 816.813795][ T5671] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 816.849597][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.919654][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 816.921389][ T5671] usb 1-1: config 0 descriptor?? [ 817.021061][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.150823][T11705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 817.188296][T11705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.245477][ T5671] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 817.300042][ T5671] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.302867][T11705] veth1_vlan: left promiscuous mode [ 817.354517][ T5671] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 817.366087][T11705] veth0_vlan: left promiscuous mode [ 817.381399][ T5671] usb 1-1: media controller created [ 817.414473][T11705] veth0_vlan: entered promiscuous mode [ 817.456922][T11715] ===================================================== [ 817.464481][T11715] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x2508/0x30a0 [ 817.465845][T11705] veth1_vlan: entered promiscuous mode [ 817.472285][T11715] __i2c_smbus_xfer+0x2508/0x30a0 [ 817.482997][T11715] i2c_smbus_xfer+0x2d8/0x480 [ 817.487801][T11715] i2cdev_ioctl_smbus+0x4a1/0x660 [ 817.493347][T11715] compat_i2cdev_ioctl+0x48f/0xb40 [ 817.498678][T11715] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 817.504557][T11715] ia32_sys_call+0x2854/0x4360 [ 817.509844][T11715] __do_fast_syscall_32+0x195/0x470 [ 817.518396][T11715] do_fast_syscall_32+0x37/0x80 [ 817.524722][T11715] do_SYSENTER_32+0x1f/0x30 [ 817.529759][T11715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 817.536287][T11715] [ 817.538681][T11715] Local variable msgbuf1.i created at: [ 817.544341][T11715] __i2c_smbus_xfer+0x97c/0x30a0 [ 817.549693][T11715] i2c_smbus_xfer+0x2d8/0x480 [ 817.554538][T11715] [ 817.556983][T11715] CPU: 1 UID: 0 PID: 11715 Comm: syz.0.1494 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 817.569362][T11715] Tainted: [L]=SOFTLOCKUP [ 817.573777][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 817.584284][T11715] ===================================================== [ 817.591427][T11715] Disabling lock debugging due to kernel taint [ 817.670843][T11705] veth1_macvtap: left promiscuous mode [ 817.687883][ T5671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.740439][T11705] veth0_macvtap: left promiscuous mode [ 817.764219][T11705] veth0_macvtap: entered promiscuous mode [ 817.790248][T11705] veth1_macvtap: entered promiscuous mode [ 817.907204][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.960512][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.983320][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.004546][T11705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.024087][T11715] Kernel panic - not syncing: kmsan.panic set ... [ 818.030647][T11715] CPU: 1 UID: 0 PID: 11715 Comm: syz.0.1494 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 818.041775][T11715] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 818.047405][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.057591][T11715] Call Trace: [ 818.060951][T11715] [ 818.063964][T11715] __dump_stack+0x26/0x30 [ 818.068458][T11715] dump_stack_lvl+0x50/0x1c0 [ 818.073266][T11715] ? dump_stack+0x12/0x25 [ 818.077762][T11715] dump_stack+0x1e/0x25 [ 818.082070][T11715] vpanic+0x7b4/0x1430 [ 818.086342][T11715] panic+0x15d/0x160 [ 818.090454][T11715] kmsan_report+0x31a/0x320 [ 818.095154][T11715] ? __msan_warning+0x1b/0x30 [ 818.100020][T11715] ? __i2c_smbus_xfer+0x2508/0x30a0 [ 818.105367][T11715] ? i2c_smbus_xfer+0x2d8/0x480 [ 818.110355][T11715] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 818.115745][T11715] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 818.121205][T11715] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 818.127115][T11715] ? ia32_sys_call+0x2854/0x4360 [ 818.132250][T11715] ? __do_fast_syscall_32+0x195/0x470 [ 818.137781][T11715] ? do_fast_syscall_32+0x37/0x80 [ 818.142955][T11715] ? do_SYSENTER_32+0x1f/0x30 [ 818.147776][T11715] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.154465][T11715] ? az6027_i2c_xfer+0x2bd7/0x2c30 [ 818.159877][T11715] ? kmsan_get_metadata+0xf1/0x160 [ 818.165203][T11715] ? kmsan_get_metadata+0xf1/0x160 [ 818.170505][T11715] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 818.176517][T11715] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 818.181832][T11715] __msan_warning+0x1b/0x30 [ 818.186512][T11715] __i2c_smbus_xfer+0x2508/0x30a0 [ 818.191680][T11715] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 818.198220][T11715] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 818.204130][T11715] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 818.210366][T11715] ? rt_mutex_lock+0x3d/0x70 [ 818.215137][T11715] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 818.221031][T11715] i2c_smbus_xfer+0x2d8/0x480 [ 818.225842][T11715] i2cdev_ioctl_smbus+0x4a1/0x660 [ 818.231049][T11715] compat_i2cdev_ioctl+0x48f/0xb40 [ 818.236372][T11715] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 818.242168][T11715] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 818.247886][T11715] ? fpregs_restore_userregs+0x211/0x3b0 [ 818.253738][T11715] ? kmsan_get_metadata+0xf1/0x160 [ 818.259013][T11715] ? kmsan_get_metadata+0xf1/0x160 [ 818.264312][T11715] ia32_sys_call+0x2854/0x4360 [ 818.269286][T11715] __do_fast_syscall_32+0x195/0x470 [ 818.274631][T11715] do_fast_syscall_32+0x37/0x80 [ 818.279606][T11715] do_SYSENTER_32+0x1f/0x30 [ 818.284225][T11715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.290720][T11715] RIP: 0023:0xf7f6701c [ 818.294894][T11715] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 818.314653][T11715] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 818.323199][T11715] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 818.331280][T11715] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 818.339363][T11715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.347438][T11715] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 818.355508][T11715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.363607][T11715] [ 818.366978][T11715] Kernel Offset: disabled [ 818.371350][T11715] Rebooting in 86400 seconds..