last executing test programs: 1m26.866870494s ago: executing program 2 (id=2187): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x16, @loopback, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x6, 0x1e}, {@remote, 0x4e24, 0x4, 0xa06, 0x2, 0x40}}, 0x44) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000000, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x695, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c1f0a7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb02b, 0x0, 0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x9, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2df3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa6c7, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x195, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xe8f], 0x1, 0x400}) 1m15.074798875s ago: executing program 2 (id=2216): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='I', 0x0, 0x4}, 0xfffffd87) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 1m13.9722842s ago: executing program 2 (id=2219): syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = semget$private(0x0, 0x1, 0x81) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(r0, 0x1, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c0002800500010014000280080001000000000008000200ac14140008000540000000000900010073797a310000000000000000"], 0x58}}, 0x0) 1m12.768256656s ago: executing program 2 (id=2224): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x16, @loopback, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x6, 0x1e}, {@remote, 0x4e24, 0x4, 0xa06, 0x2, 0x40}}, 0x44) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000000, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x695, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c1f0a7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb02b, 0x0, 0x0, 0x403, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x9, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2df3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa6c7, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x1, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x195, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xe8f], 0x1, 0x400}) 1m8.537323334s ago: executing program 2 (id=2237): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)='I', 0x0, 0x4}, 0xfffffd87) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100), 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 1m7.421577819s ago: executing program 2 (id=2239): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 52.279515736s ago: executing program 32 (id=2239): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 23.110088874s ago: executing program 0 (id=2339): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000000c0)="89d31dfc2d623f4e3699d36aa1900a5183468fae37f888d484b34da21b082d0400da78f0c10100", 0x27, r0) keyctl$unlink(0x9, r0, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x22}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000002800018014000400ff1f0000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 22.621648531s ago: executing program 0 (id=2342): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x5ad, 0x3}, 0xe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0103000000000000000009058103400000000009058202000200ff06090503024002000000fdcbf6f51f63019fc10b0d04a9892724e4ba6871dd32b2807db9d856b32449390ac864703db7305de83a26e2a160755857a2f9034be2074ccf2d1e67fd4bd01f5c9605ed3672e0817d961da499a2"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0}) 13.90686641s ago: executing program 0 (id=2359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02010905"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 13.90581133s ago: executing program 1 (id=2360): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 12.034794325s ago: executing program 1 (id=2363): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) r8 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r8, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) 10.672578844s ago: executing program 3 (id=2364): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x16, @loopback, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x6, 0x1e}, {@remote, 0x4e24, 0x4, 0xa06, 0x2, 0x40}}, 0x44) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_clone(0x2001100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000207000000ffe9ffffffff160005001a"], 0x38}}, 0x1400c0d4) 9.082049756s ago: executing program 3 (id=2366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "cd486a10e133c1facb3c78be90d9917af3c9ee1e61af890ae3c966bbfb549c6e", "4a692a16abbadb752b69b175238894ec1466faf5a225338d500febb8db153388", "b537203fadc3b1b1e7c8bfe2ffcb1edd1952c0948405add9058e0b2cba9bb337", "a50a2c7e5daa066fac08c6f22875143fba3aefcc1ea0eff5bc1872a5f514da50", "ac93dededc3408a81ce890a357d073619eb1b8570d56b71cfc2a55124d81aeeb", "5dd307f7c7a291d060138122", 0x9, 0x3, 0xfffffff8, 0x0, 0x4}}) 8.961743117s ago: executing program 0 (id=2367): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x5ad, 0x3}, 0xe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) write$khugepaged_scan(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f0103000000000000000009058103400000000009058202000200ff06090503024002000000fdcbf6f51f63019fc10b0d04a9892724e4ba6871dd32b2807db9d856b32449390ac864703db7305de83a26e2a160755857a2f9034be2074ccf2d1e67fd4bd01f5c9605ed3672e0817d961da499a2"], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0}) 8.126952269s ago: executing program 3 (id=2369): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 6.953186765s ago: executing program 3 (id=2370): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940), 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f0000000280), 0x80) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) 5.804554071s ago: executing program 1 (id=2372): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYBLOB="ad430000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = getpid() process_vm_readv(r4, &(0x7f00000007c0), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) 5.734056072s ago: executing program 4 (id=2373): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffffff, 0x0, 0x89000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 5.708721162s ago: executing program 3 (id=2374): syz_usb_connect(0x0, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e01"], 0x0) r0 = syz_io_uring_setup(0x45bf, 0x0, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 4.762461995s ago: executing program 4 (id=2375): setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x16, @loopback, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x6, 0x1e}, {@remote, 0x4e24, 0x4, 0xa06, 0x2, 0x40}}, 0x44) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_clone(0x2001100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000207000000ffe9ffffffff160005001a"], 0x38}}, 0x1400c0d4) 3.726357139s ago: executing program 4 (id=2376): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000400)) 3.312306584s ago: executing program 4 (id=2377): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000003169000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000300000008000000e2cf00003082", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/20, @ANYRES32, @ANYBLOB="a5a98dfe"], 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @random="11c302284448", {0x5, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x1}}, 0x3, @random=0x7, 0x2100, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a, {0xf4a2, 0x1, 0x1, 0x0, {0x8, 0x1ad1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x7fffffff, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}}, [{0xdd, 0xb3, "5be25a2b259df5cc0872e13cccfcf0fca84fb0a3e48be155e52dbdc74e8d3db81b07c33a43ae64549dd18fe07833bd96ffd825e59cfb819977ce4068fd8f25ab76e689924d014648931df2dc14c7969652a93ee133c675548e3a27e521ea2c3692efa7064c8b8a83fec9da3831a5498b2d89928fa54a3cb2145fb7000ab6ca9d129d7af3cb1930899a8daec7fbf4cde6fdf4d4441f270c88f4fd0876822a3435ae2da1266345a85221d70957b008ca83e9f55b"}, {0xdd, 0x5d, "8107ef84105a390d07cb5ec75ff14b17f206e4f4548a39d5e9bac79c24246df0bb1c599e87d5163dbea056419ead61fc4b62a0d1f8e636760478fb4e8ed20c4108014126121dc0536788110fd6d08908ce55967d5654a96f1e42397357"}, {0xdd, 0xd1, "051a63f5329d77e32606206303ccd046d5308cd5a1a000edb790ac5fc21db8ff6d2bac72520c71ae9c43731ac104dee7ea49ca5e569940968c88e004359e76eb41940ea8e6013447b91f1749c4651abd8902247ccf09ef3b390e3cc119c2569d73e025adfa960c97a008e48931f479db1b17b137ea42ab184bf7eb1f07f679dcdc32b1dfd5c3f37d60f706e4f42547d0b8b47a6ae7c44b8431fcd8fb9647ce67fc09f9f925b7ac0568e6d65c0ed1c9b07b56017a8aaaf55a40d9dd7fb4ed000fa642d150aef7df12a7c19b3dc2ed77edaf"}, {0xdd, 0xb0, "6f11f1ce5aafd1f3a0b917f8d78367b4e4961776c0419490954bae795059ba66a321f7fa22c3553bac8e77810e703fc798aeedd6260d89c13b9e7e7fc029b4f24c29455cda7d19ca6c98c33f97a9d3e46abf8ead2e883ce7bda32762617b69926eee82f2162b806170fff1ffd076a88f03a99901cfe76a3b305a3c6bb84906f0e4b3fe2544626fc7eda9f0fc136f30e2441e972cf35416fffb5c70bbf110b2b48e72c9c92e9fe0096ecdf0fb7593e5f1"}, {0xdd, 0x6, "cbcaa0369326"}, {0xdd, 0x1d, "f3ffe4ac18b843095bc28c855541861b3f388d5c96242b64c67294bdf0"}]}, 0x321) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.204890626s ago: executing program 0 (id=2378): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000001, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x3, 0x100, 0x0, 0x0, 0x9, 0x8000, 0x200, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 2.736408032s ago: executing program 0 (id=2379): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x9, 0x7, {0x7, 0x0, "efd3f2d0c5"}}, 0x0}, 0x0) 2.558632394s ago: executing program 4 (id=2380): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 2.12616184s ago: executing program 1 (id=2381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.166454984s ago: executing program 1 (id=2382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp=r7}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0900000004000000050000000700000000000000", @ANYRES32, @ANYBLOB="0000100000000000000000000004000000000000d3bdbca6bcd293dcbb27a572c6219753b3805eda5825b7a4f91e2728f987303fb10a1d34767d34b2e2fee50c128e6aa30981b450b7ed71f8d6ddd6d29c7bfe0d60f1cb9674b8adf8a53a5c9de8f49d41838028fca78204e6ca11d72ca344ed974505b233d9af646aa9cab9cb42e234e77462905cf54be42d309d0b2c9e9953ce820e220dd7146b0a9fc84dfc4743d6d8ac50f3653efeb032668019c9721107d02793a6223c13c994bc73dd0000992fd1f613abd4d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0xfffffffffffffcc6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4090000000000006910ae0000000000c4090000000000049500740000000000363256b18a45c90e6f4e257a5c01ac94b2e8e4a18a58a741d119e6849b5b4b6ae7abd12126e1361333b163852f5c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r8) 801.467879ms ago: executing program 4 (id=2383): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet6(0xa, 0x80002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/crypto\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffffff, 0x0, 0x89000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 782.287199ms ago: executing program 3 (id=2384): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) mkdir(0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x80000, 0x2) connect$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 1 (id=2385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, 0x0) kernel console output (not intermixed with test programs): adget.3: fail, usb_ep_enable returned -22 [ 444.963704][T10337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.997533][ T5827] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 446.742686][ T5827] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 446.838402][ T5827] usb 4-1: USB disconnect, device number 20 [ 446.961370][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 447.007585][T10374] netlink: 'syz.0.1345': attribute type 21 has an invalid length. [ 447.018611][T10374] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1345'. [ 447.472762][T10390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.324406][ T9803] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 450.607255][ T9803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.631602][ T9803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 450.666966][ T9803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 450.693426][ T9803] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 450.745715][ T9803] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.761959][ T9803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.781328][ T9803] usb 4-1: SerialNumber: syz [ 450.799247][T10445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.806729][T10445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.815676][ T9803] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 451.085760][T10452] 9pnet_fd: Insufficient options for proto=fd [ 451.946116][T10464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.620290][ T9803] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 452.697727][ T9803] usb 4-1: USB disconnect, device number 21 [ 453.217685][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 454.670288][T10517] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[10517] [ 455.566285][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.694404][ T787] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 456.972759][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.024842][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 457.083429][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 457.128881][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 457.160648][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.169917][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 457.177340][T10547] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 457.182642][ T787] usb 1-1: SerialNumber: syz [ 457.197349][T10540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 457.204736][T10540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 457.487898][ T787] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 457.832040][T10555] syz_tun: entered allmulticast mode [ 457.839125][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1378'. [ 457.953557][T10553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.986089][T10544] syz_tun: left allmulticast mode [ 459.795029][ T787] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 460.032139][ T787] usb 1-1: USB disconnect, device number 18 [ 460.564405][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.630827][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 461.978428][T10599] syz_tun: entered allmulticast mode [ 462.251413][T10603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1388'. [ 462.532906][T10595] syz_tun: left allmulticast mode [ 464.491839][T10630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.662709][ T55] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 464.893605][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.440474][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 465.453146][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 465.495246][ T55] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 465.538658][ T55] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.559098][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 465.567422][ T55] usb 3-1: SerialNumber: syz [ 465.576331][T10624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.583712][T10624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.592840][ T55] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 466.016615][T10654] syz_tun: entered allmulticast mode [ 466.336190][T10661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1400'. [ 466.778449][T10651] syz_tun: left allmulticast mode [ 466.974836][ T55] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 466.996227][ T55] usb 3-1: USB disconnect, device number 20 [ 468.067791][T10688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.924234][ T787] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 469.797407][T10717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1414'. [ 469.932663][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.028982][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 470.040444][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 470.051977][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 470.069160][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.156848][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.184026][ T787] usb 1-1: SerialNumber: syz [ 470.224568][T10704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.231909][T10704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.240673][ T787] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 471.671462][ T787] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 471.732319][ T787] usb 1-1: USB disconnect, device number 19 [ 472.008307][T10742] 9pnet_fd: Insufficient options for proto=fd [ 472.819115][T10751] syz_tun: entered allmulticast mode [ 473.339186][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.557205][T10749] syz_tun: left allmulticast mode [ 475.663578][T10771] Bluetooth: hci4: Frame reassembly failed (-84) [ 475.947909][T10787] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 476.022655][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1433'. [ 476.047334][T10787] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.052496][T10790] 9pnet_fd: Insufficient options for proto=fd [ 476.480261][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.609207][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'. [ 476.725515][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'. [ 477.175865][T10800] netlink: 'syz.2.1436': attribute type 21 has an invalid length. [ 478.578292][T10818] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 480.048038][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1444'. [ 480.086101][T10829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1444'. [ 480.446486][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1442'. [ 480.586458][T10826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 481.464126][ T5827] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 481.714847][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 481.768434][ T5827] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 481.792269][ T5827] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 481.817923][T10836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.830416][ T5827] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 481.848685][ T5827] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 481.862843][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.887279][ T5827] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 481.904139][ T5827] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 481.924990][ T5827] usb 4-1: Product: syz [ 481.929364][ T5827] usb 4-1: Manufacturer: syz [ 481.934515][ T5827] usb 4-1: SerialNumber: syz [ 481.950667][ T5827] usb 4-1: config 0 descriptor?? [ 481.965473][ T5827] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.995473][ T5827] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 482.172719][ T787] usb 4-1: USB disconnect, device number 22 [ 482.180851][ T787] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 482.566574][ T5827] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 483.081263][ T5827] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.098096][ T5827] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 483.110399][ T5827] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 483.123255][ T5827] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 483.140669][ T5827] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 483.765517][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 483.773742][ T5827] usb 1-1: SerialNumber: syz [ 483.781923][T10845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 483.789547][T10845] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 483.859954][T10854] netlink: 'syz.2.1450': attribute type 21 has an invalid length. [ 483.888188][ T5827] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 484.217693][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 484.235558][T10861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1454'. [ 485.064539][ T5827] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 485.145718][ T5827] usb 1-1: USB disconnect, device number 20 [ 485.466829][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'. [ 485.754979][T10871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1458'. [ 488.553047][ T5856] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 488.824390][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 488.833290][ T5856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.045752][ T5856] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.054959][ T5856] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 489.064683][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.087825][ T5856] usb 3-1: config 0 descriptor?? [ 490.157894][T10928] block device autoloading is deprecated and will be removed. [ 491.014403][ T5827] usb 3-1: USB disconnect, device number 21 [ 491.711262][ T9803] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 492.115382][ T9803] usb 4-1: Using ep0 maxpacket: 32 [ 492.128506][ T9803] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 492.147812][ T9803] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 492.169371][ T9803] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 492.196136][ T9803] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 492.230182][ T9803] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.258351][ T9803] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 492.274048][ T9803] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 492.282526][ T9803] usb 4-1: Product: syz [ 492.304294][ T9803] usb 4-1: Manufacturer: syz [ 492.314112][ T9803] usb 4-1: SerialNumber: syz [ 492.335264][ T9803] usb 4-1: config 0 descriptor?? [ 492.370735][ T9803] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 492.444742][ T9803] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 493.186511][ T5855] usb 4-1: USB disconnect, device number 23 [ 493.215273][ T5855] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 494.364401][ T787] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 494.569351][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.868330][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 494.903237][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 495.177989][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 495.365940][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.436080][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 495.534033][ T787] usb 1-1: SerialNumber: syz [ 495.545943][T10969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 495.553302][T10969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 495.562152][ T787] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 496.641304][T10983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1488'. [ 496.966725][ T787] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 497.017402][ T787] usb 1-1: USB disconnect, device number 21 [ 498.615270][T11006] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 498.704993][T11006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1496'. [ 498.729185][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1496'. [ 498.940414][T11006] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.496633][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 500.506112][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 500.517103][T11025] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 500.529289][T11025] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1499'. [ 500.545818][T11025] block nbd0: Unsupported socket: shutdown callout must be supported. [ 501.354192][ T787] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 501.544044][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 501.555474][ T787] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 501.573255][ T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 501.591351][ T787] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 501.735319][ T787] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 501.816201][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.865110][T11037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1502'. [ 501.906728][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.023603][ T787] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 502.070376][ T787] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 502.188666][ T787] usb 3-1: Product: syz [ 502.208050][ T787] usb 3-1: Manufacturer: syz [ 502.213072][ T787] usb 3-1: SerialNumber: syz [ 502.221599][ T787] usb 3-1: config 0 descriptor?? [ 502.231277][ T787] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 502.249243][ T787] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 502.447656][ T787] usb 3-1: USB disconnect, device number 22 [ 502.470361][ T787] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 502.524099][ T9803] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 502.724322][ T9803] usb 4-1: Using ep0 maxpacket: 16 [ 502.741922][ T9803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.758376][ T9803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.768761][ T9803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.781955][ T9803] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 502.791589][ T9803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.804378][ T9803] usb 4-1: config 0 descriptor?? [ 503.015512][T11050] syz_tun: entered allmulticast mode [ 503.026108][T11049] syz_tun: left allmulticast mode [ 503.743720][ T9803] hid-u2fzero 0003:10C4:8ACF.0004: item fetching failed at offset 2/5 [ 503.759028][ T9803] hid-u2fzero: probe of 0003:10C4:8ACF.0004 failed with error -22 [ 504.835015][ T9803] usb 4-1: USB disconnect, device number 24 [ 506.154939][ T5856] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 506.236345][T11087] syz_tun: entered allmulticast mode [ 506.255434][ T787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 506.346186][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 506.369224][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 506.391694][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 506.414256][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 506.446413][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.465066][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 506.475259][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 506.486916][ T5856] usb 1-1: SerialNumber: syz [ 506.497467][ T787] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 506.510778][T11078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 506.518201][T11078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 506.526933][ T5856] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 506.535494][ T787] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 506.548633][ T787] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 506.560124][ T787] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 506.573686][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 506.586426][ T787] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 506.607277][ T787] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 506.626476][ T787] usb 4-1: Product: syz [ 506.636121][ T787] usb 4-1: Manufacturer: syz [ 506.647269][ T787] usb 4-1: SerialNumber: syz [ 506.665049][ T787] usb 4-1: config 0 descriptor?? [ 506.682991][ T787] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 506.699545][ T787] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 506.991480][ T787] usb 4-1: USB disconnect, device number 25 [ 507.005702][T11084] syz_tun: left allmulticast mode [ 507.028441][ T787] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 508.271925][ T5856] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 508.322157][ T5856] usb 1-1: USB disconnect, device number 22 [ 508.817036][T11107] x_tables: ip_tables: osf match: only valid for protocol 6 [ 508.935969][T11108] veth0_to_team: entered promiscuous mode [ 508.941935][T11108] veth0_to_team: entered allmulticast mode [ 509.610696][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 509.702586][T11111] bridge4: entered promiscuous mode [ 510.094150][ T5855] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 510.294045][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 510.317290][ T5855] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 510.354210][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.370422][ T5855] usb 4-1: config 0 has no interface number 0 [ 510.380300][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 510.391090][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.406856][ T5855] usb 4-1: Product: syz [ 510.416876][ T5855] usb 4-1: Manufacturer: syz [ 510.427730][ T5855] usb 4-1: SerialNumber: syz [ 510.440345][ T5855] usb 4-1: config 0 descriptor?? [ 510.457126][ T5855] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 510.463666][ T5855] usb 4-1: No valid video chain found. [ 511.534725][ T5855] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 512.394248][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 512.408650][ T5855] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 512.428121][ T5855] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 512.503867][ T5855] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 512.555520][ T5855] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 512.609915][ T5855] usb 1-1: config 0 interface 0 has no altsetting 0 [ 512.636889][ T5855] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 512.722582][ T5855] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 512.739996][ T5855] usb 1-1: Product: syz [ 512.745234][ T5855] usb 1-1: Manufacturer: syz [ 512.753326][ T5855] usb 1-1: SerialNumber: syz [ 512.825255][ T5855] usb 1-1: config 0 descriptor?? [ 512.896203][ T5798] usb 4-1: USB disconnect, device number 26 [ 512.910089][ T5855] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 512.967771][ T5855] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 513.147368][ T5855] usb 1-1: USB disconnect, device number 23 [ 513.168308][ T5855] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 515.166287][T11159] Bluetooth: hci4: Frame reassembly failed (-84) [ 515.204468][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 516.155250][T11174] syz_tun: entered allmulticast mode [ 516.234558][ T5855] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 516.424014][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 516.442252][ T5855] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 516.464065][ T5855] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 516.493366][ T5855] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 516.523992][ T5855] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 516.554405][ T5855] usb 1-1: config 0 interface 0 has no altsetting 0 [ 516.579507][ T5855] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 516.597650][ T5855] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 516.619348][ T5855] usb 1-1: Product: syz [ 516.625528][ T5855] usb 1-1: Manufacturer: syz [ 516.635335][ T5855] usb 1-1: SerialNumber: syz [ 516.655355][ T5855] usb 1-1: config 0 descriptor?? [ 516.681115][ T5855] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 516.711179][ T5855] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 516.904937][ T5855] usb 1-1: USB disconnect, device number 24 [ 516.916595][T11171] syz_tun: left allmulticast mode [ 517.006947][ T5855] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 517.229731][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 517.864534][ T5855] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 518.080600][ T5855] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 518.101388][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.113558][ T5855] usb 1-1: Product: syz [ 518.120157][ T5855] usb 1-1: Manufacturer: syz [ 518.128622][ T5855] usb 1-1: SerialNumber: syz [ 518.137467][ T5855] r8152-cfgselector 1-1: config 0 descriptor?? [ 518.354839][ T5856] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 518.573117][ T5856] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 518.583315][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.593487][ T5856] usb 4-1: Product: syz [ 518.604666][ T5856] usb 4-1: Manufacturer: syz [ 518.609327][ T5856] usb 4-1: SerialNumber: syz [ 518.630797][ T5856] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.660373][ T5855] r8152-cfgselector 1-1: Unknown version 0x0000 [ 518.672766][ T5855] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 518.701650][ T5798] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.771921][T11199] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1553'. [ 519.508775][ T5855] usb 4-1: USB disconnect, device number 27 [ 520.066797][ T5798] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 520.090660][ T5798] ath9k_htc: Failed to initialize the device [ 520.119730][ T5855] usb 4-1: ath9k_htc: USB layer deinitialized [ 522.172497][T11233] Bluetooth: hci4: Frame reassembly failed (-84) [ 522.194989][ T1307] Bluetooth: hci4: Frame reassembly failed (-84) [ 522.315120][T11236] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1564'. [ 524.225249][T11161] Bluetooth: hci4: command 0x1003 tx timeout [ 524.233185][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 526.014368][T11266] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[11266] [ 526.992375][T11277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1574'. [ 527.384125][ T5856] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 527.574068][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 527.597338][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.612674][ T5856] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.626191][ T5856] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 527.649265][T11282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.654024][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.683171][ T5856] usb 1-1: config 0 descriptor?? [ 527.912772][ T5856] usb 1-1: USB disconnect, device number 26 [ 528.939431][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 528.955673][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 528.968526][T11290] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1579'. [ 529.274573][T11299] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[11299] [ 530.374248][ T5876] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 530.670104][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 530.711173][ T5876] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 530.731019][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.761488][ T5876] usb 1-1: config 0 has no interface number 0 [ 530.780112][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 530.805919][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.829899][ T5876] usb 1-1: Product: syz [ 530.856868][ T5876] usb 1-1: Manufacturer: syz [ 530.883152][ T5876] usb 1-1: SerialNumber: syz [ 530.950655][ T5876] usb 1-1: config 0 descriptor?? [ 530.965283][ T5876] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 530.972002][ T5876] usb 1-1: No valid video chain found. [ 532.126135][T11327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.644077][ T5876] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 532.824075][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 532.831122][ T5876] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 532.839571][ T5876] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 532.850789][ T5876] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 532.862042][ T5876] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 532.875426][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 532.885775][ T5876] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 532.895535][ T5876] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 532.906479][ T5876] usb 3-1: Product: syz [ 532.910755][ T5876] usb 3-1: Manufacturer: syz [ 532.915637][ T5876] usb 3-1: SerialNumber: syz [ 532.924121][ T5876] usb 3-1: config 0 descriptor?? [ 532.937113][ T5876] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 532.948020][ T5876] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 532.956756][ T5827] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 533.040240][T11333] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[11333] [ 533.200262][ T5798] usb 1-1: USB disconnect, device number 27 [ 533.313523][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 533.323470][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.336551][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.346557][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.359614][ T5827] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 533.368801][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.820572][ T5827] usb 4-1: config 0 descriptor?? [ 534.390820][ T5827] hid-u2fzero 0003:10C4:8ACF.0005: item fetching failed at offset 2/5 [ 534.429367][ T5827] hid-u2fzero: probe of 0003:10C4:8ACF.0005 failed with error -22 [ 534.624519][ T5827] usb 4-1: USB disconnect, device number 28 [ 535.175937][T11355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.425970][ T5798] usb 3-1: USB disconnect, device number 23 [ 535.444166][ T5798] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 535.573436][T11360] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[11360] [ 538.704969][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 538.756902][T11387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.964122][ T5827] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 539.156839][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 539.167319][ T5827] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 539.179643][ T5827] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 539.196848][ T5827] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 539.212519][ T5827] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 539.226354][ T5827] usb 3-1: config 0 interface 0 has no altsetting 0 [ 539.235673][ T5827] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 539.246246][ T5827] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 539.255940][ T5827] usb 3-1: Product: syz [ 539.260446][ T5827] usb 3-1: Manufacturer: syz [ 539.265720][ T5827] usb 3-1: SerialNumber: syz [ 539.273535][ T5827] usb 3-1: config 0 descriptor?? [ 539.287127][ T5827] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 539.299492][ T5827] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 539.511807][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1615'. [ 540.804557][ T5856] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 541.049485][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 541.115609][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.288445][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.352215][ T5856] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 541.381402][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.407350][ T5856] usb 1-1: config 0 descriptor?? [ 541.448196][ T5856] hub 1-1:0.0: USB hub found [ 541.645974][ T5856] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 542.303699][ T5798] usb 3-1: USB disconnect, device number 24 [ 542.312761][ T5856] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 542.347985][ T5798] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 542.441165][ T5856] usb 1-1: USB disconnect, device number 28 [ 542.480051][ T5827] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 542.545338][T11421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.684067][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 542.693758][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.716837][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.729198][ T5827] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 542.742944][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.773549][ T5827] usb 4-1: config 0 descriptor?? [ 542.919312][T11429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1625'. [ 543.723101][ T5827] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 544.567446][ T5827] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 544.581715][ T5827] ft260 0003:0403:6030.0007: failed to retrieve status: -71, no wakeup [ 544.604119][ T5827] ft260 0003:0403:6030.0007: failed to retrieve status: -71 [ 544.616409][ T5827] ft260 0003:0403:6030.0007: failed to reset I2C controller: -71 [ 544.663431][ T5827] usb 4-1: USB disconnect, device number 29 [ 545.170441][ T5856] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 545.394252][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 545.406092][ T5856] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 545.427918][ T5856] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 545.720977][ T5856] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 545.738340][ T5856] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 545.751823][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 545.776216][ T5856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 545.809511][ T5856] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 545.818124][ T5856] usb 1-1: Product: syz [ 545.822341][ T5856] usb 1-1: Manufacturer: syz [ 545.827202][ T5856] usb 1-1: SerialNumber: syz [ 545.836031][ T5856] usb 1-1: config 0 descriptor?? [ 545.855437][ T5856] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 545.886639][ T5856] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 547.836272][ T5855] usb 1-1: USB disconnect, device number 29 [ 547.879512][ T5855] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 548.730365][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'. [ 550.653463][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.824137][ T5856] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 552.141350][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 552.221949][ T5856] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 552.304052][ T5856] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 552.532580][ T5856] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 552.574825][ T5856] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 552.703856][ T5856] usb 1-1: config 0 interface 0 has no altsetting 0 [ 552.938088][ T5856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 552.951601][ T5856] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 552.961298][ T5856] usb 1-1: Product: syz [ 552.966150][ T5856] usb 1-1: Manufacturer: syz [ 552.971882][ T5856] usb 1-1: SerialNumber: syz [ 554.474868][ T5856] usb 1-1: config 0 descriptor?? [ 554.484633][ T5856] usb 1-1: can't set config #0, error -71 [ 554.491375][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 554.501726][ T5856] usb 1-1: USB disconnect, device number 30 [ 554.669489][T11550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.545071][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 555.573365][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1665'. [ 557.095250][ T9803] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 557.374190][ T9803] usb 3-1: Using ep0 maxpacket: 32 [ 557.390861][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.403110][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.429233][ T9803] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 557.583984][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.623644][ T9803] usb 3-1: config 0 descriptor?? [ 558.470283][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1672'. [ 559.446812][ T9803] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 559.492800][ T9803] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 559.757051][ T9803] ft260 0003:0403:6030.0008: failed to retrieve status: -71, no wakeup [ 559.787991][ T9803] ft260 0003:0403:6030.0008: failed to retrieve status: -71 [ 559.805864][ T9803] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 560.595394][T11602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 560.806791][ T9803] usb 3-1: USB disconnect, device number 25 [ 560.828506][T11602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1678'. [ 563.120659][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'. [ 563.189961][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.874071][ T787] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 564.067612][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 564.094418][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.114031][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.128192][ T787] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 564.137869][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.150072][ T787] usb 1-1: config 0 descriptor?? [ 564.806883][ T787] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 565.019901][ T787] ft260 0003:0403:6030.0009: failed to retrieve system status [ 565.086052][ T787] ft260: probe of 0003:0403:6030.0009 failed with error -5 [ 565.096387][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 565.336201][ T787] usb 1-1: USB disconnect, device number 31 [ 566.569382][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 566.582258][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 566.594123][T11663] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1698'. [ 566.839612][T11672] netlink: 'syz.3.1696': attribute type 21 has an invalid length. [ 567.204389][ T9803] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 567.414121][ T9803] usb 1-1: Using ep0 maxpacket: 8 [ 567.496584][ T9803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.655181][ T9803] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.525644][ T9803] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 568.544688][ T9803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.590646][ T9803] usb 1-1: config 0 descriptor?? [ 568.707511][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'. [ 570.815443][T11643] usb 1-1: USB disconnect, device number 32 [ 571.053312][T11710] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 571.587981][ T9803] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 571.614829][T11713] netlink: 'syz.1.1709': attribute type 21 has an invalid length. [ 571.815989][ T9803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 572.560793][ T9803] usb 3-1: config 4 has an invalid interface number: 210 but max is 0 [ 572.569204][ T9803] usb 3-1: config 4 has no interface number 0 [ 572.576288][ T9803] usb 3-1: config 4 interface 210 has no altsetting 0 [ 572.629316][ T9803] usb 3-1: string descriptor 0 read error: -22 [ 572.647460][ T9803] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=8d.40 [ 572.662080][ T9803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.810402][ T9803] smsusb:smsusb_probe: board id=8, interface number 210 [ 573.666277][ T787] usb 3-1: USB disconnect, device number 26 [ 573.710875][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 573.733281][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 573.747502][T11727] netlink: 38 bytes leftover after parsing attributes in process `syz.0.1714'. [ 575.080217][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.155186][T11745] netlink: 'syz.1.1721': attribute type 1 has an invalid length. [ 575.318128][T11745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1721'. [ 575.335070][T11745] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.554282][T11643] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 576.444713][T11643] usb 1-1: Using ep0 maxpacket: 8 [ 576.481983][T11643] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.522416][T11643] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.550426][T11643] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 576.579781][T11643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.604440][T11643] usb 1-1: config 0 descriptor?? [ 578.673191][T11777] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 578.881606][ T5827] usb 1-1: USB disconnect, device number 33 [ 578.932052][T11780] netlink: 'syz.2.1725': attribute type 21 has an invalid length. [ 578.941696][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1730'. [ 578.957167][T11778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 579.150887][T11789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.334210][ T787] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 582.517962][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.611141][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 582.638128][ T787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 582.650005][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 582.675966][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.686570][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 582.695251][ T787] usb 1-1: SerialNumber: syz [ 582.723430][T11816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 582.730776][T11816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 582.738989][ T787] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 582.834448][T11821] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 582.970658][T11821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1740'. [ 583.006057][T11821] 8021q: adding VLAN 0 to HW filter on device bond10 [ 583.762808][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.949299][T11838] netlink: 'syz.1.1741': attribute type 21 has an invalid length. [ 584.795439][ T787] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 584.834323][ T787] usb 1-1: USB disconnect, device number 34 [ 584.929310][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1746'. [ 586.304531][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 586.363993][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.484041][ T5827] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 587.492743][ T9803] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 587.740631][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1760'. [ 587.798365][T11915] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1761'. [ 587.824521][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 587.831960][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.847919][ T9803] usb 3-1: Using ep0 maxpacket: 16 [ 587.861643][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.873626][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.886327][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.897059][ T5827] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 587.918224][ T9803] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.934374][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.977610][ T5827] usb 4-1: config 0 descriptor?? [ 587.984183][ T9803] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 588.027318][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.055294][ T9803] usb 3-1: config 0 descriptor?? [ 588.550766][ T9803] hid-u2fzero 0003:10C4:8ACF.000A: item fetching failed at offset 2/5 [ 588.580224][ T9803] hid-u2fzero: probe of 0003:10C4:8ACF.000A failed with error -22 [ 588.796220][ T5827] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 588.827443][ T9803] usb 3-1: USB disconnect, device number 27 [ 589.417781][ T5827] ft260 0003:0403:6030.000B: failed to retrieve system status [ 589.541617][ T5827] ft260: probe of 0003:0403:6030.000B failed with error -5 [ 589.589067][ T5827] usb 4-1: USB disconnect, device number 30 [ 589.658467][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 590.801418][ T1307] Bluetooth: hci4: Frame reassembly failed (-84) [ 590.838920][T11959] Bluetooth: hci4: Frame reassembly failed (-84) [ 590.966811][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 590.976675][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 591.426529][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1770'. [ 592.576361][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1776'. [ 592.579792][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 592.864095][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 592.871070][T11253] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 594.474071][ T9803] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 595.104092][ T9803] usb 3-1: Using ep0 maxpacket: 32 [ 595.111355][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.123119][ T9803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.133781][ T9803] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 595.144708][ T9803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.170431][ T9803] usb 3-1: config 0 descriptor?? [ 595.908739][ T9803] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 596.179140][ T9803] ft260 0003:0403:6030.000C: failed to retrieve system status [ 596.187245][ T9803] ft260: probe of 0003:0403:6030.000C failed with error -5 [ 596.517555][ T9803] usb 3-1: USB disconnect, device number 28 [ 597.011602][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 597.021277][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'. [ 597.031146][T12018] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1785'. [ 597.042113][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'. [ 597.125053][T12022] loop3: detected capacity change from 0 to 1 [ 598.199822][T12032] ucma_write: process 1281 (syz.3.1790) changed security contexts after opening file descriptor, this is not allowed. [ 598.219571][T12032] ALSA: mixer_oss: invalid OSS volume '' [ 599.624065][T12044] Bluetooth: hci4: Frame reassembly failed (-84) [ 599.638587][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 601.664092][T11253] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 601.664125][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 609.551633][T12048] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1797'. [ 609.702321][T12064] 9pnet_fd: Insufficient options for proto=fd [ 610.095749][T11643] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 610.978215][T11643] usb 3-1: Using ep0 maxpacket: 8 [ 610.999271][T11643] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.024538][T11643] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 611.046790][T11643] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 611.134126][T11643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.182265][T11643] usb 3-1: config 0 descriptor?? [ 611.410672][T12088] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 611.624748][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1810'. [ 612.893416][ T5827] usb 3-1: USB disconnect, device number 29 [ 612.904075][ T9803] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 613.367814][ T9803] usb 1-1: Using ep0 maxpacket: 32 [ 613.413808][ T9803] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 613.449551][ T9803] usb 1-1: config 0 has no interface number 0 [ 613.466585][ T9803] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 613.477016][ T9803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.486778][ T9803] usb 1-1: Product: syz [ 613.491126][ T9803] usb 1-1: Manufacturer: syz [ 613.497950][ T9803] usb 1-1: SerialNumber: syz [ 613.509493][ T9803] usb 1-1: config 0 descriptor?? [ 613.528138][ T9803] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 613.633265][ T9803] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 613.759013][T12118] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 613.789010][ T9803] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 613.806019][ T9803] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 613.838848][ T9803] usb 1-1: USB disconnect, device number 35 [ 613.946063][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1818'. [ 613.996433][T12118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 615.380379][T12135] veth0_to_team: entered promiscuous mode [ 615.386206][T12135] veth0_to_team: entered allmulticast mode [ 616.493355][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 617.205114][ T5835] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 617.499180][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 617.535253][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 617.589033][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 617.619571][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 617.659624][ T5835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 617.669360][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 617.680873][ T5835] usb 3-1: SerialNumber: syz [ 617.698705][T12157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 617.706724][T12157] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 617.715854][ T5835] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 619.595703][ T5835] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 619.667325][ T5835] usb 3-1: USB disconnect, device number 30 [ 620.438040][T12202] 9pnet_fd: Insufficient options for proto=fd [ 624.322557][T12240] 9pnet_fd: Insufficient options for proto=fd [ 624.631171][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.533343][T12258] Bluetooth: hci4: Frame reassembly failed (-84) [ 625.560361][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 625.777493][T12263] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 625.986941][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1852'. [ 625.999286][T12270] 8021q: adding VLAN 0 to HW filter on device bond11 [ 626.892913][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 626.957992][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1856'. [ 627.012709][T12280] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1856'. [ 627.594207][T11253] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 627.975217][T12287] 9pnet_fd: Insufficient options for proto=fd [ 629.205652][T12303] netlink: 'syz.0.1864': attribute type 1 has an invalid length. [ 629.207926][ T5827] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 629.290682][T12303] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1864'. [ 629.301303][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1864'. [ 629.327711][T12303] 8021q: adding VLAN 0 to HW filter on device bond7 [ 629.424641][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 629.432088][T12310] 9pnet_fd: Insufficient options for proto=fd [ 629.480628][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.499640][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.509664][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.525986][ T5827] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 629.536504][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.552759][ T5827] usb 4-1: config 0 descriptor?? [ 630.065014][ T23] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 630.190097][ T5827] usbhid 4-1:0.0: can't add hid device: -71 [ 630.222635][ T5827] usbhid: probe of 4-1:0.0 failed with error -71 [ 630.354654][ T5827] usb 4-1: USB disconnect, device number 31 [ 630.460617][ T23] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 630.502423][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.532559][ T23] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 630.573381][ T23] usb 1-1: config 1 has no interface number 1 [ 630.593725][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 630.635846][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.660937][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.691221][ T23] usb 1-1: Product: syz [ 630.701343][ T23] usb 1-1: Manufacturer: syz [ 630.711449][ T23] usb 1-1: SerialNumber: syz [ 630.966232][ T23] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 631.009476][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 631.105664][ T23] usb 1-1: USB disconnect, device number 36 [ 631.210299][T12158] udevd[12158]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.882160][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 631.892258][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'. [ 631.902076][T12337] netlink: 'syz.3.1875': attribute type 1 has an invalid length. [ 631.922059][T12337] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1875'. [ 632.122850][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 632.132409][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 632.716659][T12343] 9pnet_fd: Insufficient options for proto=fd [ 634.664065][ T5827] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 636.626343][T12364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 636.642426][T12360] syz.0.1882 (12360): drop_caches: 2 [ 636.722744][T12364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 636.933997][ T5827] usb 3-1: device not accepting address 31, error -71 [ 640.050074][T12391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1889'. [ 641.711966][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 641.767533][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 642.164779][T12423] fuse: Bad value for 'fd' [ 642.533949][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 643.604224][ T5827] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 643.814057][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 643.843570][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.872078][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.895212][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.059814][T12450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1903'. [ 644.175974][ T5827] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 644.202065][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.221451][ T5827] usb 1-1: config 0 descriptor?? [ 644.648125][ T5827] usbhid 1-1:0.0: can't add hid device: -71 [ 644.781202][ T5827] usbhid: probe of 1-1:0.0 failed with error -71 [ 644.866009][ T5827] usb 1-1: USB disconnect, device number 37 [ 645.888313][T12372] syz.3.1884 (12372): drop_caches: 3 [ 646.448202][T12483] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[12483] [ 647.813155][ T5856] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 648.012087][T12501] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 648.028521][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 648.097463][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 648.111751][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.135345][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.149118][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.169139][ T5856] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 648.182460][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.227200][ T5856] usb 1-1: config 0 descriptor?? [ 648.391437][T12511] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 648.444255][ T787] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 648.501863][T12511] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1922'. [ 648.521464][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'. [ 648.555873][T12511] 8021q: adding VLAN 0 to HW filter on device bond12 [ 648.629871][T12520] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1923'. [ 648.647652][ T5856] usbhid 1-1:0.0: can't add hid device: -71 [ 648.661345][ T5856] usbhid: probe of 1-1:0.0 failed with error -71 [ 648.671931][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.699306][ T5856] usb 1-1: USB disconnect, device number 38 [ 648.726238][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 648.800817][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 648.859770][ T787] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 648.932025][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.044601][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 649.067387][ T787] usb 3-1: SerialNumber: syz [ 649.086136][T12497] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 649.093494][T12497] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 649.103155][ T787] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 651.787558][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.830359][ T787] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 651.860314][ T787] usb 3-1: USB disconnect, device number 33 [ 652.573473][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 654.406881][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 654.419564][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 655.341577][T12615] 9pnet_fd: Insufficient options for proto=fd [ 657.521520][T12637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1951'. [ 657.961514][ T23] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 658.362323][ T1307] Bluetooth: hci4: Frame reassembly failed (-84) [ 658.417599][T12661] Bluetooth: hci4: Frame reassembly failed (-84) [ 658.654519][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 658.717501][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.866734][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 658.896721][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.921874][ T23] usb 3-1: Product: syz [ 658.936748][ T23] usb 3-1: Manufacturer: syz [ 658.949849][ T23] usb 3-1: SerialNumber: syz [ 658.978541][ T23] usb 3-1: config 0 descriptor?? [ 660.384240][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 660.384576][T11253] Bluetooth: hci4: command 0x1003 tx timeout [ 660.877447][T12678] ptrace attach of "./syz-executor exec"[5792] was attempted by "./syz-executor exec"[12678] [ 661.319045][ T5856] usb 3-1: USB disconnect, device number 34 [ 661.716225][T12688] syz_tun: entered allmulticast mode [ 662.463501][T12683] syz_tun: left allmulticast mode [ 663.308957][T12703] loop3: detected capacity change from 0 to 1 [ 663.964908][T12715] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[12715] [ 665.798242][T12730] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1978'. [ 665.904150][ T5856] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 665.945428][ T787] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 666.134281][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 666.144749][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.157187][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.169877][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 666.184212][ T5856] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 666.195208][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.215875][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.244791][ T5856] usb 4-1: config 0 descriptor?? [ 666.252211][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.294324][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.324704][ T787] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 666.334755][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.354875][ T787] usb 3-1: config 0 descriptor?? [ 666.807840][T12734] Cannot find set identified by id 0 to match [ 667.211194][ T5856] usbhid 4-1:0.0: can't add hid device: -71 [ 667.220038][ T787] hid-u2fzero 0003:10C4:8ACF.000D: item fetching failed at offset 2/5 [ 667.228457][ T5856] usbhid: probe of 4-1:0.0 failed with error -71 [ 667.237951][ T787] hid-u2fzero: probe of 0003:10C4:8ACF.000D failed with error -22 [ 667.245978][ T5856] usb 4-1: USB disconnect, device number 32 [ 667.258350][ T787] usb 3-1: USB disconnect, device number 35 [ 667.409060][T12740] loop3: detected capacity change from 0 to 1 [ 669.604004][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 669.620948][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 670.876070][T12771] loop3: detected capacity change from 0 to 1 [ 673.074172][T12793] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1999'. [ 674.319670][T12800] 9pnet_fd: Insufficient options for proto=fd [ 675.468548][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 675.477970][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 675.486965][T12817] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2008'. [ 676.254097][T11643] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 676.891123][T11643] usb 4-1: Using ep0 maxpacket: 16 [ 676.898783][T11643] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 676.908375][T11643] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.919011][T11643] usb 4-1: config 0 has no interface number 0 [ 676.928024][T11643] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 676.937196][T11643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.949853][T11643] usb 4-1: Product: syz [ 676.956901][T11643] usb 4-1: Manufacturer: syz [ 676.961542][T11643] usb 4-1: SerialNumber: syz [ 676.974684][T11643] usb 4-1: config 0 descriptor?? [ 676.986859][T11643] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 676.993277][T11643] usb 4-1: No valid video chain found. [ 677.097840][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2017'. [ 678.142774][T12851] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2019'. [ 678.154028][T11643] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 679.203132][ T5827] usb 4-1: USB disconnect, device number 33 [ 679.225232][T11643] usb 3-1: Using ep0 maxpacket: 32 [ 679.378430][T11643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.404171][T11643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.424446][T11643] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 679.433780][T11643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.461130][T11643] usb 3-1: config 0 descriptor?? [ 679.842940][ T5786] syz_tun (unregistering): left allmulticast mode [ 680.105232][ T1307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.140687][ T1307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 680.184807][T11253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 680.196416][T11253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 680.205599][T11253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 680.225571][T11253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 680.237385][T11643] usbhid 3-1:0.0: can't add hid device: -32 [ 680.253807][T11253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 680.262774][T11253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 680.280138][T12870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2027'. [ 680.294324][T11643] usbhid: probe of 3-1:0.0 failed with error -32 [ 680.347885][T11643] usb 3-1: USB disconnect, device number 36 [ 680.740548][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 680.752145][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 680.761462][T12882] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2029'. [ 680.788008][ T1307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.798674][ T1307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 680.893589][ T1307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.908479][ T1307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.061958][ T23] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 681.127863][ T1307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.138615][ T1307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.252837][T12892] binder: 12884:12892 ioctl c0046209 0 returned -22 [ 681.319139][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 681.477812][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 681.660617][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 681.823729][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 681.929664][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.939114][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 681.954810][ T23] usb 4-1: SerialNumber: syz [ 681.964660][T12878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.971980][T12878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.995774][ T23] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 682.079839][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'. [ 682.089516][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 682.202743][ T23] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 682.218164][ T23] usb 4-1: USB disconnect, device number 34 [ 682.258494][T12869] chnl_net:caif_netlink_parms(): no params data found [ 682.384498][ T50] Bluetooth: hci0: command tx timeout [ 682.510110][ T1307] bond2: (slave ip6gretap1): Releasing backup interface [ 682.593306][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.621313][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.642878][T12869] bridge_slave_0: entered allmulticast mode [ 682.668270][T12869] bridge_slave_0: entered promiscuous mode [ 682.766888][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.790475][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.818843][T12869] bridge_slave_1: entered allmulticast mode [ 682.835295][T12869] bridge_slave_1: entered promiscuous mode [ 682.909470][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.941960][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.536834][T12869] team0: Port device team_slave_0 added [ 683.549839][T12869] team0: Port device team_slave_1 added [ 683.793747][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.809124][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.835128][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.894190][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.464677][ T50] Bluetooth: hci0: command tx timeout [ 684.637815][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.692177][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.718635][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.790029][T12919] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2032'. [ 684.855337][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.155641][T12869] hsr_slave_0: entered promiscuous mode [ 685.207619][T12869] hsr_slave_1: entered promiscuous mode [ 685.216271][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.246379][T12869] Cannot create hsr debugfs directory [ 685.465078][T12936] syz.3.2036 (12936): drop_caches: 2 [ 686.070341][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.554366][ T50] Bluetooth: hci0: command tx timeout [ 686.893452][ T1307] hsr_slave_0: left promiscuous mode [ 686.926153][ T1307] hsr_slave_1: left promiscuous mode [ 687.138151][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.159361][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.356513][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.459163][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.596110][ T1307] bridge_slave_1: left allmulticast mode [ 687.674887][ T1307] bridge_slave_1: left promiscuous mode [ 687.751842][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.802975][ T1307] bridge_slave_0: left allmulticast mode [ 687.820261][ T1307] bridge_slave_0: left promiscuous mode [ 687.850982][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.184647][ T1307] veth1_macvtap: left promiscuous mode [ 688.190916][ T1307] veth0_macvtap: left promiscuous mode [ 688.237633][ T1307] veth1_vlan: left promiscuous mode [ 688.285408][ T1307] veth0_vlan: left promiscuous mode [ 688.524600][ T5856] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 688.620131][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 688.635200][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 688.635636][ T50] Bluetooth: hci0: command tx timeout [ 688.817837][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 688.995002][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 689.049181][ T5856] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 689.060873][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 689.248597][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.299115][ T1307] bond12 (unregistering): Released all slaves [ 689.334299][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 689.364011][ T5856] usb 1-1: SerialNumber: syz [ 689.382803][T12980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 689.390154][T12980] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 689.402343][ T5856] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 689.733228][ T1307] bond11 (unregistering): Released all slaves [ 690.490241][T12992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.590070][ T1307] bond10 (unregistering): Released all slaves [ 690.595072][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 690.630373][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 690.639721][T12994] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2045'. [ 690.927489][ T1307] bond9 (unregistering): Released all slaves [ 691.185294][ T1307] bond8 (unregistering): Released all slaves [ 691.651759][ T1307] bond7 (unregistering): Released all slaves [ 692.134547][ T1307] bond6 (unregistering): Released all slaves [ 692.303438][ T1307] bond5 (unregistering): Released all slaves [ 692.506359][ T1307] bond4 (unregistering): Released all slaves [ 692.689502][ T1307] bond3 (unregistering): Released all slaves [ 692.751184][ T1307] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 692.929537][ T1307] bond2 (unregistering): Released all slaves [ 693.112589][ T1307] bond1 (unregistering): Released all slaves [ 693.743760][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 693.803771][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 693.862017][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.925078][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.480514][ T5856] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 694.555243][ T1307] bond0 (unregistering): Released all slaves [ 694.729568][T11643] usb 1-1: USB disconnect, device number 39 [ 696.115161][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 696.124119][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 696.409506][T12869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.449722][T12869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.503989][T12869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.729555][T12869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.799306][T13031] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2051'. [ 697.230179][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.312806][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.663299][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.670513][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.708168][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.716602][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.361360][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.449339][T12869] veth0_vlan: entered promiscuous mode [ 698.488653][T12869] veth1_vlan: entered promiscuous mode [ 698.496254][T13072] 9pnet_fd: Insufficient options for proto=fd [ 698.568228][T13075] netlink: 'syz.0.2052': attribute type 21 has an invalid length. [ 698.695575][T12869] veth0_macvtap: entered promiscuous mode [ 698.717651][T12869] veth1_macvtap: entered promiscuous mode [ 698.756456][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.770210][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.790066][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.817373][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.061429][T13083] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 699.069445][T13083] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2054'. [ 699.787921][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.839740][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.903065][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.958268][T13090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.060937][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.089068][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.110176][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.130491][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.155257][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.194356][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.206355][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.220083][T12869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.239836][T12869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.264977][T12869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.273736][T12869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.434212][ T5855] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 700.450099][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.465538][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.523103][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.536278][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.634073][ T5855] usb 4-1: Using ep0 maxpacket: 32 [ 700.655109][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.673743][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.687391][ T5855] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 700.703223][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.778373][T13110] loop3: detected capacity change from 0 to 1 [ 700.786616][ T5855] usb 4-1: config 0 descriptor?? [ 701.094041][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 701.103541][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 701.316533][ T5855] usbhid 4-1:0.0: can't add hid device: -71 [ 701.323375][ T5855] usbhid: probe of 4-1:0.0 failed with error -71 [ 701.389040][ T5855] usb 4-1: USB disconnect, device number 35 [ 701.988528][T13127] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2061'. [ 702.685186][T13139] netlink: 'syz.0.2063': attribute type 21 has an invalid length. [ 703.146796][T13147] loop3: detected capacity change from 0 to 1 [ 703.552872][T13155] 9pnet_fd: Insufficient options for proto=fd [ 703.854577][T13157] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 704.018387][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2068'. [ 704.874045][ T5856] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 705.109038][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 705.116634][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.127684][ T5856] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 705.137075][ T5856] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 705.146424][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.185634][ T5856] usb 2-1: config 0 descriptor?? [ 705.606456][T13182] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 705.727235][T13184] loop3: detected capacity change from 0 to 1 [ 707.445586][T13200] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 707.589309][ T5855] usb 2-1: USB disconnect, device number 12 [ 707.675027][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 708.606291][T13217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2089'. [ 708.617011][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 708.690357][T13216] loop3: detected capacity change from 0 to 1 [ 708.974358][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 708.986644][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 709.060752][T13224] syz_tun: entered allmulticast mode [ 709.770381][T13219] syz_tun: left allmulticast mode [ 709.824855][T13222] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2090'. [ 710.058843][T13226] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 710.754176][ T5855] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 711.005537][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 711.042811][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.077268][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.087783][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.109709][ T5855] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 711.173929][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.214693][ T5855] usb 4-1: config 0 descriptor?? [ 711.774773][ T5855] hid-u2fzero 0003:10C4:8ACF.000E: item fetching failed at offset 2/5 [ 711.792629][ T5855] hid-u2fzero: probe of 0003:10C4:8ACF.000E failed with error -22 [ 712.045604][T13255] loop3: detected capacity change from 0 to 1 [ 712.095300][ T5856] usb 4-1: USB disconnect, device number 36 [ 712.396815][T13261] syz_tun: entered allmulticast mode [ 713.105114][T13258] syz_tun: left allmulticast mode [ 717.350248][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 717.362597][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 717.400078][T13285] loop3: detected capacity change from 0 to 1 [ 717.895730][T13298] syz_tun: entered allmulticast mode [ 718.649060][T13293] syz_tun: left allmulticast mode [ 719.979088][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 719.993062][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 720.003414][T13306] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2114'. [ 720.210146][T13308] xt_l2tp: invalid flags combination: c [ 721.142624][T13320] loop3: detected capacity change from 0 to 1 [ 721.396952][T13330] syz_tun: entered allmulticast mode [ 721.982110][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'. [ 721.991766][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 722.015679][T13334] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2125'. [ 722.193440][T13323] syz_tun: left allmulticast mode [ 724.930424][T13356] loop3: detected capacity change from 0 to 1 [ 726.326533][T13375] syz_tun: entered allmulticast mode [ 727.051016][T13369] syz_tun: left allmulticast mode [ 727.620052][ T9803] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 728.488727][ T9803] usb 1-1: device descriptor read/all, error -71 [ 728.554191][T13393] loop3: detected capacity change from 0 to 1 [ 729.149688][ T23] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 729.363986][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 729.535997][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.536018][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.536039][ T23] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 729.536051][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.540292][ T23] usb 4-1: config 0 descriptor?? [ 730.365399][ T23] usbhid 4-1:0.0: can't add hid device: -32 [ 730.371582][ T23] usbhid: probe of 4-1:0.0 failed with error -32 [ 730.382534][ T23] usb 4-1: USB disconnect, device number 37 [ 733.993630][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 734.003682][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 735.424200][ T5855] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 735.663926][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 735.679904][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.691600][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.700150][T13468] veth0_to_team: left allmulticast mode [ 735.701555][ T5855] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 735.745544][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.774344][ T5855] usb 2-1: config 0 descriptor?? [ 735.777140][T13468] vlan2: left allmulticast mode [ 735.786996][T13468] geneve1: left allmulticast mode [ 736.499567][ T5855] usbhid 2-1:0.0: can't add hid device: -32 [ 738.047067][ T5855] usbhid: probe of 2-1:0.0 failed with error -32 [ 738.327717][ T5855] usb 2-1: USB disconnect, device number 13 [ 739.308915][T13496] netlink: 'syz.3.2170': attribute type 21 has an invalid length. [ 741.910186][T13526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.660908][T13539] netlink: 'syz.0.2183': attribute type 21 has an invalid length. [ 747.507089][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.056401][T13568] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 749.030252][T13576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.117931][T13605] netlink: 'syz.3.2203': attribute type 1 has an invalid length. [ 752.415565][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.494911][T13618] Bluetooth: MGMT ver 1.22 [ 753.792533][T13628] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 754.144093][ T5856] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 754.367103][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 754.491038][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 754.503354][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 754.517633][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 754.555006][ T5856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 754.574054][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 754.582232][ T5856] usb 4-1: SerialNumber: syz [ 754.746273][T13635] netlink: 'syz.0.2210': attribute type 1 has an invalid length. [ 754.754305][T13635] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2210'. [ 755.295907][T13628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.303354][T13628] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.312984][ T5856] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 755.864291][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 756.165870][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 756.295843][ T23] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 756.407121][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.500063][ T23] usb 1-1: Product: syz [ 756.544321][ T23] usb 1-1: Manufacturer: syz [ 756.605618][ T23] usb 1-1: SerialNumber: syz [ 756.735579][ T23] usb 1-1: config 0 descriptor?? [ 756.778928][ T23] as10x_usb: device has been detected [ 756.807711][ T23] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 756.973496][ T23] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 757.100233][ T23] as10x_usb: error during firmware upload part1 [ 757.129387][ T23] Registered device Sky IT Digital Key (green led) [ 757.151399][ T23] usb 1-1: USB disconnect, device number 42 [ 757.242380][T13665] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 757.272638][ T23] Unregistered device Sky IT Digital Key (green led) [ 757.295664][ T23] as10x_usb: device has been disconnected [ 757.379038][T13669] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.424228][T13669] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.458848][T13669] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.504238][T13669] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 757.537065][T13669] bond1: (slave geneve2): making interface the new active one [ 757.588534][T13669] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 757.699639][T13665] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 757.709627][ T5856] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 757.889736][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2215'. [ 758.043725][T13669] syz.1.2215 (13669) used greatest stack depth: 19496 bytes left [ 758.445452][ T5856] usb 4-1: USB disconnect, device number 38 [ 759.097135][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 759.106376][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2219'. [ 759.423765][ T9803] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 759.645708][ T9803] usb 1-1: Using ep0 maxpacket: 32 [ 759.697307][ T9803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.708601][ T9803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.718482][ T9803] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 759.727995][ T9803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.739217][ T9803] usb 1-1: config 0 descriptor?? [ 759.818088][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 759.829235][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 759.838366][T13703] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2223'. [ 760.220635][T13711] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 760.285015][T13711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 760.388792][ T9803] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 760.396735][ T9803] ft260: probe of 0003:0403:6030.000F failed with error -32 [ 761.597054][ T9803] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 761.610911][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2229'. [ 761.810181][ T9803] usb 4-1: Using ep0 maxpacket: 16 [ 761.820587][ T9803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.849571][ T9803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.869557][ T9803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.897690][ T9803] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 761.917616][ T9803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.938764][ T9803] usb 4-1: config 0 descriptor?? [ 762.054293][ T55] usb 1-1: USB disconnect, device number 43 [ 762.266569][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 762.276451][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 762.391079][ T9803] usbhid 4-1:0.0: can't add hid device: -71 [ 762.478994][ T9803] usbhid: probe of 4-1:0.0 failed with error -71 [ 762.712397][ T9803] usb 4-1: USB disconnect, device number 39 [ 763.072294][T13740] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 763.080335][T13740] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2233'. [ 764.035085][T13745] netlink: 'syz.3.2235': attribute type 1 has an invalid length. [ 764.217497][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2235'. [ 765.287388][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 765.297249][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 766.207218][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 766.216654][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 767.045344][ T55] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 767.264030][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 767.275378][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.304840][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.316580][ T55] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.331431][ T55] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 767.340632][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.363775][ T55] usb 4-1: config 0 descriptor?? [ 767.542061][T13783] netlink: 'syz.1.2245': attribute type 1 has an invalid length. [ 767.551138][T13783] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2245'. [ 767.928097][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 769.332497][ T55] usbhid: probe of 4-1:0.0 failed with error -71 [ 769.584208][ T55] usb 4-1: USB disconnect, device number 40 [ 770.098824][T13791] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 770.153106][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2247'. [ 771.486455][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 771.495641][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 772.644993][T13820] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2255'. [ 773.955775][T13829] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 773.963646][T13829] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2257'. [ 775.853947][ T5798] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 776.516904][ T5798] usb 4-1: Using ep0 maxpacket: 16 [ 776.533226][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.559674][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.711580][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 776.720930][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 777.084088][ T5798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.124284][ T5798] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 777.137459][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.160580][ T5798] usb 4-1: config 0 descriptor?? [ 777.700808][ T5798] usbhid 4-1:0.0: can't add hid device: -71 [ 777.718096][ T5798] usbhid: probe of 4-1:0.0 failed with error -71 [ 777.744983][ T5798] usb 4-1: USB disconnect, device number 41 [ 779.540987][T13870] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 779.549032][T13870] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2267'. [ 780.448144][T11253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.460549][T11253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.607276][T13880] syz.3.2273 (13880): drop_caches: 2 [ 780.612842][T13880] syz.3.2273 (13880): drop_caches: 2 [ 780.621892][T11253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.649258][T11253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.662246][T11253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.674083][T11253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.226957][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 781.238549][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 782.575986][T13881] chnl_net:caif_netlink_parms(): no params data found [ 782.672143][ T5798] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 783.091160][T11253] Bluetooth: hci4: command tx timeout [ 783.291128][ T5795] syz-executor (5795) used greatest stack depth: 19304 bytes left [ 783.311024][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.318292][ T5798] usb 4-1: Using ep0 maxpacket: 16 [ 783.327132][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.335964][T13881] bridge_slave_0: entered allmulticast mode [ 783.342146][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.354568][ T5798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.365010][ T5798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.377959][ T5798] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 783.387540][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.416347][T13881] bridge_slave_0: entered promiscuous mode [ 783.418448][ T5798] usb 4-1: config 0 descriptor?? [ 783.431933][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.442889][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.455860][T13881] bridge_slave_1: entered allmulticast mode [ 783.475084][T13881] bridge_slave_1: entered promiscuous mode [ 783.545569][T13881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.563611][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.616935][T13881] team0: Port device team_slave_0 added [ 783.630536][T13881] team0: Port device team_slave_1 added [ 783.664286][ T787] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 783.677756][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.685767][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.712836][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.727512][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.735426][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.763179][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.833394][T13881] hsr_slave_0: entered promiscuous mode [ 783.841804][T13881] hsr_slave_1: entered promiscuous mode [ 783.852771][T13881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.863050][T13881] Cannot create hsr debugfs directory [ 783.877509][ T787] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.900831][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.913871][ T787] usb 1-1: Product: syz [ 783.931723][ T787] usb 1-1: Manufacturer: syz [ 783.937427][ T787] usb 1-1: SerialNumber: syz [ 783.960367][ T787] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 784.027638][ T5856] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.064647][ T5798] usbhid 4-1:0.0: can't add hid device: -71 [ 784.081884][ T5798] usbhid: probe of 4-1:0.0 failed with error -71 [ 784.106545][ T5798] usb 4-1: USB disconnect, device number 42 [ 784.328921][ T5855] usb 1-1: USB disconnect, device number 44 [ 784.392820][T13881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 784.407980][T13881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 784.418810][T13881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 784.442680][T13881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 784.602574][T13881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.623089][T13881] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.114275][ T5856] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 785.184417][T11253] Bluetooth: hci4: command tx timeout [ 785.257834][ T5856] ath9k_htc: Failed to initialize the device [ 785.325770][T13881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.350824][ T5855] usb 1-1: ath9k_htc: USB layer deinitialized [ 785.364785][T13881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.385712][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.393015][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.525165][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.532363][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.653168][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 786.861946][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.022020][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 787.033261][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 787.286202][T11253] Bluetooth: hci4: command tx timeout [ 787.773918][ T5856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 787.832490][T13955] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 787.840691][T13955] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2289'. [ 788.814765][T13881] veth0_vlan: entered promiscuous mode [ 788.883916][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 788.887804][T13881] veth1_vlan: entered promiscuous mode [ 788.895819][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.917584][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.936223][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.963937][ T5856] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 788.986621][T13881] veth0_macvtap: entered promiscuous mode [ 788.990253][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.012238][T13881] veth1_macvtap: entered promiscuous mode [ 789.015795][ T5856] usb 2-1: config 0 descriptor?? [ 789.063635][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.075001][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.085449][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.096701][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.113906][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.134217][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.153960][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.175631][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.203292][T13881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.260887][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.288070][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.314114][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.341583][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.354157][T11253] Bluetooth: hci4: command tx timeout [ 789.375116][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.404380][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.414889][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.426010][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.438504][T13881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.452154][T13881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.461672][T13881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.471845][T13881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.492868][T13881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.685167][ T5856] usbhid 2-1:0.0: can't add hid device: -71 [ 789.812591][ T5856] usbhid: probe of 2-1:0.0 failed with error -71 [ 790.201940][ T5856] usb 2-1: USB disconnect, device number 14 [ 790.351912][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.415470][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.529134][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.546620][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.956887][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 790.965990][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 794.745058][T14026] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 794.752983][T14026] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2310'. [ 796.457628][T14041] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 796.465722][T14041] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2313'. [ 797.160702][T14038] veth0_to_team: left allmulticast mode [ 797.169871][T14038] veth0_vlan: left allmulticast mode [ 797.178820][T14038] ip6erspan0: left allmulticast mode [ 797.994558][T14047] usb usb8: usbfs: process 14047 (syz.1.2317) did not claim interface 0 before use [ 801.095879][T14067] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 801.103725][T14067] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2322'. [ 802.374215][T14073] ubi31: attaching mtd0 [ 802.380228][T14073] ubi31: scanning is finished [ 802.385190][T14073] ubi31: empty MTD device detected [ 802.731383][T14073] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 803.207657][T14086] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 803.215713][T14086] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2325'. [ 803.434047][ T55] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 803.664131][T14073] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 803.672376][T14073] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 803.682634][T14073] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 803.690273][T14073] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 803.697371][T14073] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 803.705554][T14073] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2637267321 [ 803.778613][T14073] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 803.918654][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.934007][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 803.945278][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 803.986996][ T55] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 804.012491][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.050998][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 804.158358][ T55] usb 2-1: SerialNumber: syz [ 804.264504][T14080] ubi31: background thread "ubi_bgt31d" started, PID 14080 [ 804.306556][T14084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.314089][T14084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.331139][ T55] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 804.866444][ T5855] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 805.678755][ T55] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 805.744335][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 805.756304][ T55] usb 2-1: USB disconnect, device number 15 [ 805.765437][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.773704][ T5855] usb 4-1: Product: syz [ 805.780694][ T5855] usb 4-1: Manufacturer: syz [ 805.787561][ T5855] usb 4-1: SerialNumber: syz [ 805.798036][ T5855] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 805.821535][T14053] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 805.904036][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 806.124932][ C1] usb 4-1: ath: unknown panic pattern! [ 806.365643][ T5855] usb 4-1: USB disconnect, device number 43 [ 807.634754][T14115] veth0_to_team: entered allmulticast mode [ 808.114254][T14053] usb 4-1: Service connection timeout for: 256 [ 808.120877][T14053] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 808.131954][T14053] ath9k_htc: Failed to initialize the device [ 808.166355][ T5855] usb 4-1: ath9k_htc: USB layer deinitialized [ 808.683777][ T5827] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 808.855514][T14135] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 808.863440][T14135] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2337'. [ 808.968295][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.015082][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 809.426594][ T5827] usb 2-1: device descriptor read/all, error -71 [ 810.223654][T14154] syz_tun: entered allmulticast mode [ 810.598786][T14142] syz_tun: left allmulticast mode [ 812.214056][T14181] ubi: mtd0 is already attached to ubi31 [ 813.108306][T14174] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 813.716678][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 813.988292][T11253] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 814.504252][ T5855] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 814.903674][T14215] syz_tun: entered allmulticast mode [ 814.910993][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 815.315133][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.350098][ T5855] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.383566][ T5855] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 815.427938][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.472591][ T5855] usb 4-1: config 0 descriptor?? [ 815.490334][T14209] syz_tun: left allmulticast mode [ 816.922835][ T9] usb 1-1: device descriptor read/all, error -71 [ 817.076293][ T5798] usb 4-1: USB disconnect, device number 44 [ 818.066200][T11253] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 818.075573][T11253] Bluetooth: hci0: Injecting HCI hardware error event [ 818.086818][ T50] Bluetooth: hci0: hardware error 0x00 [ 818.514976][T14239] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 818.564511][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2357'. [ 819.768566][T14255] ubi: mtd0 is already attached to ubi31 [ 820.475704][T14244] 9pnet_fd: Insufficient options for proto=fd [ 820.553527][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 821.890725][T14263] syz_tun: entered allmulticast mode [ 822.583715][T14259] syz_tun: left allmulticast mode [ 823.244705][T14271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.526472][T14275] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2363'. [ 823.915356][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 823.924578][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 823.935030][ T50] Bluetooth: hci4: hardware error 0x00 [ 824.524771][T14285] syz.4.2368 (14285): drop_caches: 2 [ 824.662390][T14285] syz.4.2368 (14285): drop_caches: 2 [ 824.694639][T14284] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 825.402557][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. [ 826.132835][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 826.600644][T14299] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 826.899931][T14307] syz_tun: entered allmulticast mode [ 827.556767][T14301] syz_tun: left allmulticast mode [ 827.849758][T14053] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 828.761861][ T5855] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 829.044025][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 829.051300][ T5855] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 829.114699][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.134157][ T5855] usb 4-1: config 0 has no interface number 0 [ 829.147931][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 829.169351][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.186736][ T5855] usb 4-1: Product: syz [ 829.201225][ T5855] usb 4-1: Manufacturer: syz [ 829.206292][ T5855] usb 4-1: SerialNumber: syz [ 829.213147][ T5855] usb 4-1: config 0 descriptor?? [ 829.230814][ T5855] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 829.253041][ T5855] usb 4-1: No valid video chain found. [ 829.297772][T14322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.329109][T14325] fuse: Unknown parameter 'grou00000000000000000000' [ 829.344117][ T787] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 829.554015][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 829.591582][ T787] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 829.613932][ T787] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 829.633128][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 829.651453][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 829.664283][ T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 829.693941][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 829.720031][ T787] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 829.762552][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.783777][ T787] usb 2-1: config 0 descriptor?? [ 830.309686][ T787] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 830.500632][T14344] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 830.555047][T14053] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 830.556336][ T787] usb 2-1: USB disconnect, device number 18 [ 830.585651][ T787] usblp0: removed [ 830.806287][T14351] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.048731][T14351] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.207942][T14351] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.235517][T14351] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.286460][T14351] bond1: (slave geneve2): making interface the new active one [ 831.350399][ T5856] usb 4-1: USB disconnect, device number 45 [ 831.359840][T14351] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 831.408860][T14344] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 831.416822][T14053] usb 1-1: Using ep0 maxpacket: 16 [ 831.439538][T14053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.446694][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2380'. [ 831.465549][T14053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.483947][T14053] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.511391][T14053] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 831.528917][T14053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.569065][T14053] usb 1-1: config 0 descriptor?? [ 831.919490][T14366] veth0_to_team: entered promiscuous mode [ 831.926037][T14366] veth0_to_team: entered allmulticast mode [ 832.484883][T14053] hid-u2fzero 0003:10C4:8ACF.0010: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 832.515340][T14053] hid-u2fzero 0003:10C4:8ACF.0010: U2F Zero LED initialised [ 832.523462][T14053] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 832.535202][T14053] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 832.543624][T14053] CPU: 1 PID: 14053 Comm: kworker/1:1 Not tainted 6.6.95-syzkaller #0 [ 832.551773][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.561831][T14053] Workqueue: usb_hub_wq hub_event [ 832.566887][T14053] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 832.572514][T14053] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 832.592124][T14053] RSP: 0018:ffffc900036a6780 EFLAGS: 00010202 [ 832.598204][T14053] RAX: 0000000000000015 RBX: ffff88802dc3c030 RCX: dffffc0000000000 [ 832.606180][T14053] RDX: 0000000000000000 RSI: ffffc900036a68a0 RDI: ffff8880259cb468 [ 832.614327][T14053] RBP: ffffc900036a6998 R08: 0000000000000000 R09: 0000000000000000 [ 832.622301][T14053] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802dc3c300 [ 832.630271][T14053] R13: 1ffff920006d4cf8 R14: ffff88802dc3c418 R15: 00000000000000a8 [ 832.638410][T14053] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 832.647333][T14053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.653912][T14053] CR2: 00007f13b9c46e9c CR3: 000000000cb30000 CR4: 00000000003506e0 [ 832.661892][T14053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.669871][T14053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 832.677838][T14053] Call Trace: [ 832.681108][T14053] [ 832.684037][T14053] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 832.689592][T14053] ? add_early_randomness+0x1e/0x1a0 [ 832.694896][T14053] ? mutex_unlock+0x10/0x10 [ 832.699400][T14053] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 832.704939][T14053] add_early_randomness+0x7a/0x1a0 [ 832.710083][T14053] hwrng_register+0x3db/0x4a0 [ 832.714753][T14053] devm_hwrng_register+0x47/0xb0 [ 832.719689][T14053] u2fzero_probe+0x348/0x460 [ 832.724277][T14053] hid_device_probe+0x293/0x5b0 [ 832.729129][T14053] ? hid_uevent+0x350/0x350 [ 832.733623][T14053] really_probe+0x25b/0xb40 [ 832.738127][T14053] ? pm_runtime_barrier+0x14b/0x1c0 [ 832.743317][T14053] __driver_probe_device+0x18c/0x330 [ 832.748600][T14053] driver_probe_device+0x4f/0x420 [ 832.753626][T14053] __device_attach_driver+0x2ca/0x520 [ 832.759001][T14053] bus_for_each_drv+0x24b/0x2d0 [ 832.763846][T14053] ? coredump_store+0x90/0x90 [ 832.768516][T14053] ? bus_find_device+0x320/0x320 [ 832.773445][T14053] __device_attach+0x2b5/0x400 [ 832.778204][T14053] ? device_attach+0x20/0x20 [ 832.782788][T14053] ? do_raw_spin_unlock+0x121/0x230 [ 832.788037][T14053] bus_probe_device+0x180/0x260 [ 832.792884][T14053] device_add+0x85b/0xc20 [ 832.797203][T14053] hid_add_device+0x38d/0x530 [ 832.801875][T14053] usbhid_probe+0xe02/0x1220 [ 832.806472][T14053] usb_probe_interface+0x5a4/0xb00 [ 832.811588][T14053] ? usb_register_driver+0x3d0/0x3d0 [ 832.816869][T14053] really_probe+0x25b/0xb40 [ 832.821372][T14053] ? pm_runtime_barrier+0x14b/0x1c0 [ 832.826565][T14053] __driver_probe_device+0x18c/0x330 [ 832.831857][T14053] driver_probe_device+0x4f/0x420 [ 832.836883][T14053] __device_attach_driver+0x2ca/0x520 [ 832.842257][T14053] bus_for_each_drv+0x24b/0x2d0 [ 832.847102][T14053] ? coredump_store+0x90/0x90 [ 832.851777][T14053] ? bus_find_device+0x320/0x320 [ 832.856727][T14053] __device_attach+0x2b5/0x400 [ 832.861522][T14053] ? device_attach+0x20/0x20 [ 832.866109][T14053] ? __kmem_cache_free+0xba/0x1f0 [ 832.871127][T14053] ? do_raw_spin_unlock+0x121/0x230 [ 832.876321][T14053] bus_probe_device+0x180/0x260 [ 832.881169][T14053] device_add+0x85b/0xc20 [ 832.885521][T14053] usb_set_configuration+0x1a79/0x20c0 [ 832.890995][T14053] usb_generic_driver_probe+0x8d/0x150 [ 832.896454][T14053] usb_probe_device+0x13d/0x280 [ 832.901297][T14053] ? usb_register_device_driver+0x230/0x230 [ 832.907180][T14053] really_probe+0x25b/0xb40 [ 832.911682][T14053] ? pm_runtime_barrier+0x14b/0x1c0 [ 832.916876][T14053] __driver_probe_device+0x18c/0x330 [ 832.922172][T14053] driver_probe_device+0x4f/0x420 [ 832.927210][T14053] __device_attach_driver+0x2ca/0x520 [ 832.932608][T14053] bus_for_each_drv+0x24b/0x2d0 [ 832.937467][T14053] ? coredump_store+0x90/0x90 [ 832.942140][T14053] ? bus_find_device+0x320/0x320 [ 832.947072][T14053] __device_attach+0x2b5/0x400 [ 832.951837][T14053] ? device_attach+0x20/0x20 [ 832.956419][T14053] ? __kmem_cache_free+0xba/0x1f0 [ 832.961475][T14053] ? do_raw_spin_unlock+0x121/0x230 [ 832.966670][T14053] bus_probe_device+0x180/0x260 [ 832.971522][T14053] device_add+0x85b/0xc20 [ 832.975957][T14053] usb_new_device+0xa31/0x1630 [ 832.980746][T14053] ? usb_disconnect+0x8a0/0x8a0 [ 832.985695][T14053] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.991070][T14053] ? lockdep_hardirqs_on+0x98/0x150 [ 832.996270][T14053] hub_event+0x2957/0x49c0 [ 833.000794][T14053] ? led_work+0x720/0x720 [ 833.005112][T14053] ? read_lock_is_recursive+0x20/0x20 [ 833.010474][T14053] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.015755][T14053] ? process_scheduled_works+0x957/0x15b0 [ 833.021466][T14053] ? process_scheduled_works+0x957/0x15b0 [ 833.027180][T14053] process_scheduled_works+0xa45/0x15b0 [ 833.032725][T14053] ? assign_work+0x400/0x400 [ 833.037307][T14053] ? assign_work+0x39e/0x400 [ 833.041891][T14053] worker_thread+0xa55/0xfc0 [ 833.046469][T14053] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 833.052378][T14053] ? _raw_spin_unlock+0x40/0x40 [ 833.057226][T14053] kthread+0x2fa/0x390 [ 833.061285][T14053] ? pr_cont_work+0x560/0x560 [ 833.065954][T14053] ? kthread_blkcg+0xd0/0xd0 [ 833.070626][T14053] ret_from_fork+0x48/0x80 [ 833.075033][T14053] ? kthread_blkcg+0xd0/0xd0 [ 833.079617][T14053] ret_from_fork_asm+0x11/0x20 [ 833.084378][T14053] [ 833.087395][T14053] Modules linked in: [ 833.091344][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 833.148730][T14053] ---[ end trace 0000000000000000 ]--- [ 833.187952][T14053] RIP: 0010:u2fzero_rng_read+0x233/0x630 [ 833.378642][T14053] Code: 10 42 80 3c 38 00 74 08 48 89 df e8 e7 94 fa f9 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 5f 95 fa f9 48 8d 44 24 60 49 89 07 [ 833.781271][T14382] syz_tun: entered allmulticast mode [ 834.003961][T14053] RSP: 0018:ffffc900036a6780 EFLAGS: 00010202 [ 834.010094][T14053] RAX: 0000000000000015 RBX: ffff88802dc3c030 RCX: dffffc0000000000 [ 834.055994][T14053] RDX: 0000000000000000 RSI: ffffc900036a68a0 RDI: ffff8880259cb468 [ 834.094353][T14053] RBP: ffffc900036a6998 R08: 0000000000000000 R09: 0000000000000000 [ 834.102402][T14053] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802dc3c300 [ 834.122694][T14053] R13: 1ffff920006d4cf8 R14: ffff88802dc3c418 R15: 00000000000000a8 [ 834.131396][T14053] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 834.140964][T14380] syz_tun (unregistering): left allmulticast mode [ 834.163895][T14053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.170542][T14053] CR2: 00007fd2dd0fb890 CR3: 0000000019a85000 CR4: 00000000003506e0 [ 834.181096][T14053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 834.190106][T14053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 834.198239][T14053] Kernel panic - not syncing: Fatal exception [ 834.204606][T14053] Kernel Offset: disabled [ 834.208929][T14053] Rebooting in 86400 seconds..