last executing test programs: 22m43.299664054s ago: executing program 1 (id=2): fchdir(0xffffffffffffffff) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x45802, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}, {@privport}, {@noextend}, {@uname={'uname', 0x3d, ',\\/{'}}], [{@pcr={'pcr', 0x3d, 0x1f}}, {@fsname={'fsname', 0x3d, 'W\x8e\xa4\xb6\xa5\xf42\x9e\xbc\xc9q\xec^\f\x00\x00\x00\xce\xe0\xe2`\\\xdd\\\x82MW{\x9e\xe8+=\xaaYj\'hb\xe0\xf0^\xb4\x90\xf5\xc2\x9a\xa9\xd5\xea\xf8\xf3\xcd\xf7\xf8\xd3\x19\r\xdb\xc4\xeap5g\x89/\xa0\xb6\xfc\x8e+Q^\xa6\xfe\xe6-\xc3\x80\x0f\xcd\xe8\"!:\x06\x7f.g.\x87\x9f\xd5\xe4r{8/\xe2\xe9\x81v)G\xb5j~\xc4\x8ay\x8f\x12\xf6`\xbe\xc4\xc0q\x19\xd2\t\x91\xa1z\xfb\xc7\x19\xee:\xb4\x1e\x1b\xe5x\xe7\"\x96\x04\xe7\xedw\xe3\xfc\xc3\x8f\xdb\x95$q\xdc\x90\xf4\xf4\xe9\x03\xa9\x8dRe\x12G\x1e\xde\xf9c\x99\'\x12\xd3F^;\xbf9\x9an\x1d\xf8\x03It!\xec\xea\xcbj\xa5\x8f!s}f\xd6\xd9*##\xb1\x8f\x8e \xfc\xb6\xd7\x9a\xeb$\\\x1b%\xea\x9b}\xe6m:\x81\xa7`'}}, {@smackfshat={'smackfshat', 0x3d, '%^'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_eq={'uid', 0x3d, r2}}, {@audit}]}}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r7, &(0x7f000004b680)=""/102391, 0x18ff7, 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 22m42.19411224s ago: executing program 1 (id=6): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) 22m41.074553337s ago: executing program 1 (id=7): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 22m40.428297038s ago: executing program 1 (id=8): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) getdents(r0, 0x0, 0x0) mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) 22m39.676818249s ago: executing program 0 (id=1): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)=@overlay={0x7, 0xa, 0x4, 0x2100, 0x9, {0x0, 0xea60}, {0x3, 0x0, 0x7, 0x0, 0xff, 0xd, "da8ee6aa"}, 0x2, 0x3, {}, 0xfffffffd, 0x0, r0}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="44a78145b5df66d46c58099d7ac1ee83f36f0bcd9f295e17215f2a43fdb9e8bcdb019d9b12055f07145d21200de1b4afabd0e5287e0517798c2ad56088b1ec3bedd8cad554d9f84833e6191ee17dd31197a885048349f84fb2f043c5639729ef7fa1b2040058a04a6664fe668483cba4b02c2e97ff", 0x75}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 22m39.364253094s ago: executing program 1 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22m37.943595795s ago: executing program 0 (id=11): socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) getpid() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mlockall(0x5) 22m36.914057851s ago: executing program 0 (id=14): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000140)=0x8, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 22m23.594407095s ago: executing program 32 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22m21.656852385s ago: executing program 33 (id=14): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) copy_file_range(r0, &(0x7f0000000000)=0x6, r0, &(0x7f0000000140)=0x8, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0x15) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) 2m40.987710821s ago: executing program 2 (id=2968): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) 2m40.908995222s ago: executing program 3 (id=2969): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 2m40.739758895s ago: executing program 2 (id=2970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m40.168335502s ago: executing program 3 (id=2974): socket$inet6(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2m38.76975094s ago: executing program 3 (id=2977): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x679, 0x40, 0x35, 0x4, 0xe, 0x6}) 2m38.535489973s ago: executing program 3 (id=2980): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) 2m38.318129936s ago: executing program 2 (id=2983): r0 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c00000010000d0400"/20, @ANYRES32=r5, @ANYBLOB="08300000000000003c001280110001006272696467655f736c6176650000000024000580050005000100"], 0x5c}}, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x1000}, {r3, 0x6201}], 0x2, 0x40) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) write$tcp_congestion(r7, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000100)={0x9b1c, 0x800, 0x0, 'queue1\x00', 0x1}) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x400454a4, &(0x7f0000005000)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x3}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 2m38.317527486s ago: executing program 3 (id=2984): syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904"], 0x0) 2m36.245032553s ago: executing program 2 (id=2996): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000032580)=""/102400, &(0x7f0000000040)=0x19000) 2m36.122188774s ago: executing program 2 (id=2997): unshare(0x20000400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) 2m36.008847456s ago: executing program 3 (id=2999): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$loop(0x0, 0x75f, 0xa382) sendfile(r1, r1, 0x0, 0x24002de8) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, r3, &(0x7f0000000480)=0x80000001, 0x2, 0x0) unshare(0x20040600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0) lseek(r5, 0xfffffffffffffff5, 0x1) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x405, 0x0, 0x3, 0xfd}, 0x8) 2m35.920285997s ago: executing program 2 (id=3000): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20540, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2m33.4198809s ago: executing program 6 (id=3012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x700, 0x0}, 0x0) 2m32.478730552s ago: executing program 6 (id=3016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m31.388375116s ago: executing program 6 (id=3021): open(&(0x7f0000000300)='.\x00', 0x48000, 0x90) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xda, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) flistxattr(r1, 0x0, 0xffde) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3) close(0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @void, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "f283ff6b715665e9"}}}}, &(0x7f0000000540)={0x0, 0x1, [0xd4, 0x12f, 0x349, 0x4f9]}) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x204000000000075f, 0x10b042) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x10, 0x9, "4b8b3ea46929dfed0b2f342d0d308f95a023d0fe9549918ae70800009bada8b117403362354d000000000000000200", "2363f1ec00", [0x1, 0x6]}) 2m31.192284759s ago: executing program 6 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m30.692747945s ago: executing program 6 (id=3027): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_names\x00') read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) preadv(r0, &(0x7f0000003740)=[{&(0x7f0000003640)=""/222, 0xde}], 0x1, 0x3ff, 0x34ad) 2m30.462254848s ago: executing program 6 (id=3028): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r3) close(r2) 2m20.898952622s ago: executing program 34 (id=3000): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20540, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2m20.832466393s ago: executing program 35 (id=2999): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_open_dev$loop(0x0, 0x75f, 0xa382) sendfile(r1, r1, 0x0, 0x24002de8) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "000000000000000e"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, r3, &(0x7f0000000480)=0x80000001, 0x2, 0x0) unshare(0x20040600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESOCT], 0x0) lseek(r5, 0xfffffffffffffff5, 0x1) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x405, 0x0, 0x3, 0xfd}, 0x8) 5.773313375s ago: executing program 5 (id=3504): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0xffffff2f) unshare(0x20000400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x1000, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x2bf, 0x3, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.721161026s ago: executing program 5 (id=3505): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff00100000080039"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', '', [{0x20, '`\x00\x00'}]}, 0x8) close(r4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x4, r4}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000001c0)={0x1, 0x3}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) timer_delete(0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000480)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) 4.177837755s ago: executing program 4 (id=3508): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x851, 0x4) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x60, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@empty, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f}, {0xffffffff, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000200)={'geneve0\x00', {0x2, 0x4e21, @loopback}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) 4.176198566s ago: executing program 5 (id=3515): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000", @ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4420}], 0x1, 0x0, &(0x7f0000000280)={[0x9b9]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 3.11398216s ago: executing program 5 (id=3509): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20010e63"], 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2.045453244s ago: executing program 4 (id=3510): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2c2}, 0x1c) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdf", 0x80}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.860108806s ago: executing program 4 (id=3511): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) getrlimit(0x1, &(0x7f0000000440)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket(0x2, 0x3, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) 1.055693466s ago: executing program 4 (id=3512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 935.374908ms ago: executing program 5 (id=3513): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 754.46361ms ago: executing program 4 (id=3514): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 628.154892ms ago: executing program 4 (id=3516): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) vmsplice(r1, &(0x7f0000000500), 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) acct(0x0) fanotify_init(0x0, 0x1) 0s ago: executing program 5 (id=3517): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000", @ANYRESDEC], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4420}], 0x1, 0x0, &(0x7f0000000280)={[0x9b9]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) kernel console output (not intermixed with test programs): 56][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.862830][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.869601][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.876293][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.883070][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.889810][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.896488][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.903527][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.910845][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.917620][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.924311][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.931084][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.937864][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.944585][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.951390][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.958137][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.964819][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.971591][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.978342][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.985059][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.991841][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1209.998636][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.005327][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.012117][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.019227][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.025952][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.032725][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.039481][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.046175][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.052976][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.059721][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.066431][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.073230][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.079985][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.086676][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.093557][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.100336][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.107134][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.113859][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.121149][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.127986][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.134689][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.141476][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.148278][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.154989][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.161792][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.168594][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.175292][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.182080][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.188876][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.195577][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.202325][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.209112][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.215820][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.223074][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.229879][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.236599][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.243385][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.250185][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.256969][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.263673][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.270447][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.277240][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.283936][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.290702][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.297441][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.304116][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.310895][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.317666][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.324728][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.331526][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.338315][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.345036][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.351795][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.358537][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.365218][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.371987][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.378754][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.385473][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.392258][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.398995][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.405672][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.412450][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.419236][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.426316][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.433112][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.439869][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.446565][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.453320][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.460067][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.466746][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.473519][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.480275][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.487040][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.493756][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.500553][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.507332][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.514051][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.520805][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x4 [ 1210.527935][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.534666][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.542103][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.548919][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.555640][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x2 [ 1210.562405][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.569177][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.575862][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.582645][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.589412][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.596093][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.602878][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.609629][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.616308][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.623081][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.630353][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.637162][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.643876][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.650651][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.657396][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.664102][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.670994][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.677782][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.684486][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.691300][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.698098][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.704818][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.711640][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.718409][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.725097][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.732400][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.739180][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.745878][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.752635][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.759398][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.766108][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.772875][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.779695][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.786426][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.793233][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.799982][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.806666][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.813454][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.820246][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.827058][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.834425][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.841237][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.848099][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.854782][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.861571][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.868349][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.875028][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.881756][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.888550][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.895266][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.902048][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.908876][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.915601][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.922355][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.929127][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.936180][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.942978][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.949776][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.956476][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.963259][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.970023][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.976704][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.983438][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.990186][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1210.996936][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.003648][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.010465][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.017227][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.023903][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.030693][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.037942][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.044664][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.051452][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.058218][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.064898][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.071687][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.078455][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.085148][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.091928][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.098695][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.105401][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.112175][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.118949][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.125648][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.132424][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.139654][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.146362][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.153139][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.159913][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.166603][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.173393][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.180181][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.186966][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.193674][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.200463][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.207271][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.213972][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.220726][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.227511][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.234211][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.240967][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.248095][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.254801][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.261577][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.268363][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.275068][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.281851][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.288665][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.295364][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.302140][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.308935][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.315656][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.322428][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.329195][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.335893][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.342685][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.349963][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.356695][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.363444][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.370217][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.376971][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.383691][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.390479][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.397262][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.403949][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.410758][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.417495][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.424184][ T4302] kye 0003:0458:5011.000E: unknown main item tag 0x0 [ 1211.435621][T10327] em28xx 7-1:0.132: Registering V4L2 extension [ 1211.442515][ T4302] kye 0003:0458:5011.000E: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 1211.456429][ T4302] kye 0003:0458:5011.000E: tablet-enabling feature report not found [ 1211.464546][ T4302] kye 0003:0458:5011.000E: tablet enabling failed [ 1211.535891][ T4302] usb 6-1: USB disconnect, device number 54 [ 1211.634184][T14112] device netdevsim0 entered promiscuous mode [ 1211.973791][T10327] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1212.031003][T10327] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1212.176693][T10327] em28xx 7-1:0.132: No AC97 audio processor [ 1213.005325][T10327] usb 7-1: Decoder not found [ 1213.011174][T10327] em28xx 7-1:0.132: failed to create media graph [ 1213.023329][T10327] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1213.066289][T10327] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1213.076128][ T4925] em28xx 7-1:0.132: Closing input extension [ 1213.161069][ T4925] em28xx 7-1:0.132: Freeing device [ 1215.780261][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2568'. [ 1216.617061][ T4925] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1216.807016][ T4925] usb 6-1: Using ep0 maxpacket: 8 [ 1216.814177][ T4925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.857153][ T4925] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1216.894448][ T4925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1216.914168][ T4925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.937028][ T4925] usb 6-1: Product: syz [ 1216.941355][ T4925] usb 6-1: Manufacturer: syz [ 1216.945995][ T4925] usb 6-1: SerialNumber: syz [ 1218.945295][T14205] syz.6.2587 uses obsolete (PF_INET,SOCK_PACKET) [ 1219.106908][T10685] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1219.296880][T10685] usb 3-1: Using ep0 maxpacket: 32 [ 1219.303964][T10685] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.324468][T10685] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1219.346865][T10685] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1219.366968][T10685] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1219.376059][T10685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.404222][T10685] usb 3-1: config 0 descriptor?? [ 1219.894745][ T4925] cdc_ncm 6-1:1.0: bind() failure [ 1219.935479][ T4925] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1219.945826][ T4925] cdc_ncm 6-1:1.1: bind() failure [ 1219.996308][ T4925] usb 6-1: USB disconnect, device number 55 [ 1220.306583][T10685] corsair-cpro 0003:1B1C:0C10.000F: item fetching failed at offset 3/5 [ 1220.317897][T10685] corsair-cpro: probe of 0003:1B1C:0C10.000F failed with error -22 [ 1220.587562][T10685] usb 3-1: USB disconnect, device number 38 [ 1221.957757][ T4384] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1222.380591][T14250] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.2600'. [ 1223.583859][T14292] netlink: 16162 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1225.008203][T10685] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1225.216938][T10685] usb 6-1: Using ep0 maxpacket: 32 [ 1225.234108][T10685] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1225.275963][T10685] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1225.302814][T10685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.333772][T10685] usb 6-1: Product: syz [ 1225.348803][T10685] usb 6-1: Manufacturer: syz [ 1225.384571][T10685] usb 6-1: SerialNumber: syz [ 1225.410478][T10685] usb 6-1: config 0 descriptor?? [ 1225.866454][T10685] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1226.269374][T10685] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1226.387309][T10711] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1226.393998][ T4264] Bluetooth: hci1: command 0x1003 tx timeout [ 1227.817060][ T8672] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1227.981248][ T8672] usb 4-1: device descriptor read/64, error -71 [ 1227.998955][ T952] usb 6-1: USB disconnect, device number 56 [ 1228.284366][ T8672] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1229.018875][ T8672] usb 4-1: device descriptor read/64, error -71 [ 1229.227199][ T8672] usb usb4-port1: attempt power cycle [ 1230.168383][ T8672] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1230.340371][ T8672] usb 4-1: device descriptor read/8, error -71 [ 1232.638314][T10968] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1232.877091][T10968] usb 7-1: Using ep0 maxpacket: 8 [ 1232.892842][T10968] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1232.925880][T10968] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1232.982699][T10968] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1233.581187][T10968] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1233.622220][T10968] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1233.650332][T10968] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1233.679411][T10968] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1233.711691][T10968] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1233.880148][T10968] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1233.916019][T10968] usb 7-1: string descriptor 0 read error: -22 [ 1233.931766][T10968] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1233.949157][T10968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.270254][T10968] adutux 7-1:168.0: interrupt endpoints not found [ 1235.858345][ T4331] usb 7-1: USB disconnect, device number 56 [ 1236.296999][T10711] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1236.297069][ T4264] Bluetooth: hci1: command 0x1003 tx timeout [ 1236.453486][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2668'. [ 1238.668853][ T4299] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1238.717198][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.731523][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.977661][ T4299] usb 4-1: Using ep0 maxpacket: 8 [ 1239.011637][ T4299] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.189182][ T4299] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.225559][ T4299] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1239.256333][ T4299] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.274973][ T4299] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.288053][ T4299] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1239.315359][ T4299] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.343165][ T4299] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.357062][ T4299] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1239.390103][ T4299] usb 4-1: string descriptor 0 read error: -22 [ 1239.398850][ T4299] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1239.426947][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.448339][ T4299] adutux 4-1:168.0: interrupt endpoints not found [ 1239.507340][T14530] batman_adv: batadv0: Adding interface: vxlan0 [ 1239.515637][T14530] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.548597][T14530] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 1239.786880][ T5178] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1239.902843][ T4299] usb 4-1: USB disconnect, device number 58 [ 1240.877007][ T5178] usb 7-1: Using ep0 maxpacket: 8 [ 1241.361538][ T5178] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.457210][ T5178] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.580318][ T5178] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1241.613434][ T5178] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.646240][ T5178] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.665290][ T5178] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1241.703555][ T5178] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1241.712514][ T5178] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1241.730681][ T5178] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1241.763768][ T5178] usb 7-1: string descriptor 0 read error: -22 [ 1241.783253][ T5178] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1241.796592][ T5178] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.939747][ T5178] adutux 7-1:168.0: interrupt endpoints not found [ 1242.789147][ T5178] usb 7-1: USB disconnect, device number 57 [ 1245.546977][ T8672] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1245.667265][ T6402] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1245.740073][ T8672] usb 5-1: Using ep0 maxpacket: 32 [ 1245.752406][ T8672] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1245.780985][ T8672] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1245.809410][ T8672] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1245.824038][ T8672] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1245.842801][ T8672] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1245.867107][ T6402] usb 4-1: Using ep0 maxpacket: 8 [ 1245.868880][ T8672] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1245.875136][ T6402] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1245.892668][ T8672] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1245.908323][ T8672] usb 5-1: Product: syz [ 1245.912533][ T8672] usb 5-1: Manufacturer: syz [ 1245.918601][ T6402] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1245.921712][T14642] netlink: 'syz.5.2727': attribute type 1 has an invalid length. [ 1245.937841][ T8672] usb 5-1: SerialNumber: syz [ 1245.944547][T14642] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2727'. [ 1245.950621][ T6402] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1245.955584][ T8672] usb 5-1: config 0 descriptor?? [ 1245.972371][ T8672] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1245.997971][ T8672] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1246.004568][ T6402] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1246.031150][ T6402] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1246.049608][ T6402] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1246.066014][ T6402] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1246.079084][ T6402] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1246.094319][ T6402] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1246.166652][ T6402] usb 4-1: string descriptor 0 read error: -22 [ 1246.199629][ T6402] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1246.255740][ T6402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.335808][ T6402] adutux 4-1:168.0: interrupt endpoints not found [ 1246.950841][ T8672] usb 5-1: USB disconnect, device number 56 [ 1246.956865][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1246.966608][ T8672] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1247.230525][ T6402] usb 4-1: USB disconnect, device number 59 [ 1250.887257][ T8672] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1251.077659][ T8672] usb 7-1: Using ep0 maxpacket: 8 [ 1251.090178][ T8672] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1251.119149][ T8672] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1251.147545][ T8672] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1251.173591][ T8672] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1251.191248][ T8672] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1251.217577][ T8672] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1251.247713][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1251.258693][ T8672] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1251.267409][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1251.275526][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1251.285706][ T8672] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1251.299401][ T8672] usb 7-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1251.310974][ T4269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1251.327143][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1251.334722][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1251.344781][ T8672] usb 7-1: string descriptor 0 read error: -22 [ 1251.367403][ T8672] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1251.386257][ T8672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.509129][ T8672] adutux 7-1:168.0: interrupt endpoints not found [ 1251.520227][T14768] lo speed is unknown, defaulting to 1000 [ 1251.973267][ T4390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.419652][ T8672] usb 7-1: USB disconnect, device number 58 [ 1253.021677][ T4417] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1253.096339][ T4390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.206700][ T4390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.295446][ T4390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.393534][T14768] chnl_net:caif_netlink_parms(): no params data found [ 1253.417548][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 1253.496712][ T27] audit: type=1326 audit(1742817717.814:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdf8d169 code=0x7ffc0000 [ 1253.581702][ T27] audit: type=1326 audit(1742817717.814:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdf8d169 code=0x7ffc0000 [ 1253.622932][T14768] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.655632][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.665018][T14768] device bridge_slave_0 entered promiscuous mode [ 1253.673857][ T27] audit: type=1326 audit(1742817717.814:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41fdf8d169 code=0x7ffc0000 [ 1253.710327][ T27] audit: type=1326 audit(1742817717.814:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdf8d169 code=0x7ffc0000 [ 1253.755760][ T27] audit: type=1326 audit(1742817717.814:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.5.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fdf8d169 code=0x7ffc0000 [ 1253.792376][T14768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.806181][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.823866][T14768] device bridge_slave_1 entered promiscuous mode [ 1254.038290][T14768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.080629][T14768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.913187][T14768] team0: Port device team_slave_0 added [ 1254.986541][T14768] team0: Port device team_slave_1 added [ 1255.085086][T14829] netlink: 'syz.5.2797': attribute type 1 has an invalid length. [ 1255.104018][T14829] netlink: 'syz.5.2797': attribute type 4 has an invalid length. [ 1255.140038][T14829] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2797'. [ 1255.183124][ T4390] tipc: Left network mode [ 1255.194256][T14768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.234706][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.287267][ T4331] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1255.291509][T14768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.326890][ T952] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1255.451749][T14768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.466867][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.500434][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 1255.504378][ T4331] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1255.536340][ T4331] usb 5-1: not running at top speed; connect to a high speed hub [ 1255.538894][ T952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.544664][T14768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.566883][ T952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.592685][ T4331] usb 5-1: too many configurations: 86, using maximum allowed: 8 [ 1255.596995][ T952] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1255.614724][ T952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.622198][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1255.660192][ T952] usb 7-1: config 0 descriptor?? [ 1255.662656][ T4331] usb 5-1: config 3 has no interface number 0 [ 1255.687018][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1255.724595][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1255.758400][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1255.772591][ T4331] usb 5-1: config 3 has no interface number 0 [ 1255.779176][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1255.791052][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1255.817889][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1255.826124][ T4331] usb 5-1: config 3 has no interface number 0 [ 1255.842602][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1255.873372][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1255.897259][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1255.914194][ T4331] usb 5-1: config 3 has no interface number 0 [ 1255.920494][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1255.938066][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1255.965192][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1255.984561][ T4331] usb 5-1: config 3 has no interface number 0 [ 1255.996196][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1256.014395][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1256.033895][T14768] device hsr_slave_0 entered promiscuous mode [ 1256.040551][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1256.051082][ T4331] usb 5-1: config 3 has no interface number 0 [ 1256.058066][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1256.070565][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1256.080756][T14768] device hsr_slave_1 entered promiscuous mode [ 1256.084113][ T952] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1256.087757][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1256.122199][ T4331] usb 5-1: config 3 has no interface number 0 [ 1256.136888][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1256.138097][ T952] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1256.161839][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1256.205615][ T4331] usb 5-1: config 3 has an invalid interface number: 106 but max is 0 [ 1256.214196][ T4331] usb 5-1: config 3 has no interface number 0 [ 1256.221118][ T4331] usb 5-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1256.232838][ T4331] usb 5-1: config 3 interface 106 has no altsetting 0 [ 1256.264809][ T4331] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 1256.286090][ T4331] usb 5-1: New USB device strings: Mfr=59, Product=246, SerialNumber=89 [ 1256.294855][ T4331] usb 5-1: Product: syz [ 1256.298941][ T952] cp2112 0003:10C4:EA90.0010: error requesting version [ 1256.299543][ T4331] usb 5-1: Manufacturer: syz [ 1256.310905][ T4331] usb 5-1: SerialNumber: syz [ 1256.346226][T14832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1256.492773][ T952] cp2112: probe of 0003:10C4:EA90.0010 failed with error -5 [ 1256.865394][ T952] usb 7-1: USB disconnect, device number 59 [ 1256.960395][ T4331] kobil_sct 5-1:3.106: KOBIL USB smart card terminal converter detected [ 1257.037039][ T4331] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1257.088160][ T4331] usb 5-1: USB disconnect, device number 57 [ 1257.115034][ T4331] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1257.145650][ T4331] kobil_sct 5-1:3.106: device disconnected [ 1257.175006][ T4390] bridge0: port 3(gretap0) entered disabled state [ 1257.266518][ T4390] device gretap0 left promiscuous mode [ 1257.276411][ T4390] bridge0: port 3(gretap0) entered disabled state [ 1257.577046][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 1259.241285][ T4390] device hsr_slave_0 left promiscuous mode [ 1259.255866][ T4390] device hsr_slave_1 left promiscuous mode [ 1259.268411][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.296332][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.305363][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.333373][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.377691][ T4390] device bridge_slave_1 left promiscuous mode [ 1259.383954][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.393295][ T4390] device bridge_slave_0 left promiscuous mode [ 1259.402925][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.666857][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 1259.953020][ T4390] device veth1_macvtap left promiscuous mode [ 1259.970043][ T4390] device veth0_macvtap left promiscuous mode [ 1259.976490][ T4390] device veth1_vlan left promiscuous mode [ 1259.984371][ T4390] device veth0_vlan left promiscuous mode [ 1260.624131][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 1260.678353][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 1260.737799][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.747837][ T4390] device bond_slave_1 left promiscuous mode [ 1260.852491][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.872349][ T4390] device bond_slave_0 left promiscuous mode [ 1261.582970][ T4390] bond0 (unregistering): Released all slaves [ 1261.937172][T14768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1261.975155][T14768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1262.003415][T14768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1262.062835][T14768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1262.374770][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.439691][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1262.460204][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1262.502649][T14768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.562095][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1262.600901][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1262.634072][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.641250][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.666927][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1262.694482][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1262.715034][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1262.750003][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.757268][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.776634][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1262.791044][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1262.826168][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1262.862602][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1262.897098][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1262.920951][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.961651][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1262.994093][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.056604][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.099710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1263.119917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.150095][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1264.230254][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1264.241181][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1264.297370][T14768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.421936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1264.444177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1264.506591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1264.552272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1264.599013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1264.623054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1264.649534][T14768] device veth0_vlan entered promiscuous mode [ 1264.721851][T14768] device veth1_vlan entered promiscuous mode [ 1264.813129][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1264.826149][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1264.853190][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1264.882476][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1264.920705][T14768] device veth0_macvtap entered promiscuous mode [ 1264.934142][T13139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1264.964297][T14768] device veth1_macvtap entered promiscuous mode [ 1265.028406][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.054129][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.090308][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.132387][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.171610][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.205666][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.259848][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.305972][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.340179][T14768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.370033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1265.388021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1265.419518][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.457035][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.490345][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.537587][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.571652][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.615298][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.642655][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.665208][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.712960][T14768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.757273][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1265.780354][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1265.829795][T14768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.855920][T14768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.885692][T14768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.924880][T14768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.126345][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.155640][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.205162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1266.223193][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.235390][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.272361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1267.317307][ T4331] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1267.507939][ T4331] usb 5-1: Using ep0 maxpacket: 32 [ 1267.525380][ T4331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1267.569885][ T4331] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1267.619445][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.670978][ T4331] usb 5-1: Product: syz [ 1267.691933][ T4331] usb 5-1: Manufacturer: syz [ 1267.711150][ T4331] usb 5-1: SerialNumber: syz [ 1267.746331][ T4331] usb 5-1: config 0 descriptor?? [ 1268.106981][ T6402] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1268.182154][ T4331] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1268.297244][ T6402] usb 6-1: Using ep0 maxpacket: 8 [ 1268.433982][ T6402] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1268.443514][ T6402] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1268.452654][ T6402] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1268.468147][ T6402] usb 6-1: config 0 has no interface number 0 [ 1268.494419][ T6402] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1268.513961][ T6402] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1268.528876][ T6402] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1268.549497][ T6402] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1268.559545][ T6402] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1268.567867][ T6402] usb 6-1: Product: syz [ 1268.585852][ T4331] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1268.599030][ T6402] usb 6-1: config 0 descriptor?? [ 1268.814080][ T6402] usb 6-1: USB disconnect, device number 57 [ 1269.087432][T15121] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.2873'. [ 1269.210552][ T4299] usb 5-1: USB disconnect, device number 58 [ 1270.537178][ T4269] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1270.544225][T14474] Bluetooth: hci2: command 0x1003 tx timeout [ 1272.686485][ T4394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.877831][T10711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1272.889456][T10711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1272.889814][ T4394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.911552][T10711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1272.925363][T10711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1272.933382][T10711] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1272.940828][T10711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1273.023365][T15203] lo speed is unknown, defaulting to 1000 [ 1273.103866][ T4394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.250261][ T4394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.654335][T15219] netlink: 'syz.3.2901': attribute type 11 has an invalid length. [ 1273.762731][T15203] chnl_net:caif_netlink_parms(): no params data found [ 1273.907127][ T6402] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1273.978879][ T4269] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1273.984420][T10711] Bluetooth: hci2: command 0x1003 tx timeout [ 1274.114123][ T6402] usb 7-1: Using ep0 maxpacket: 8 [ 1274.138387][ T6402] usb 7-1: config index 0 descriptor too short (expected 3867, got 27) [ 1274.177416][ T6402] usb 7-1: config 96 has too many interfaces: 66, using maximum allowed: 32 [ 1274.213677][ T6402] usb 7-1: config 96 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.237193][ T6402] usb 7-1: config 96 has 0 interfaces, different from the descriptor's value: 66 [ 1274.263827][ T6402] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1274.281971][ T6402] usb 7-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1274.292628][ T6402] usb 7-1: Product: syz [ 1274.665920][T15203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.683151][T15203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.701272][T15203] device bridge_slave_0 entered promiscuous mode [ 1274.730597][ T4331] usb 7-1: USB disconnect, device number 60 [ 1274.797135][T15203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.807194][T15203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.855198][T15203] device bridge_slave_1 entered promiscuous mode [ 1275.027532][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 1275.134789][T15203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.175143][T15203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.439311][ T4394] bridge0: port 3(gretap0) entered disabled state [ 1275.539220][ T4394] device gretap0 left promiscuous mode [ 1275.552019][ T4394] bridge0: port 3(gretap0) entered disabled state [ 1275.608861][T15203] team0: Port device team_slave_0 added [ 1276.695997][T15203] team0: Port device team_slave_1 added [ 1277.054840][ T4394] team0: Port device wlan1 removed [ 1277.083039][T15203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.098816][T10711] Bluetooth: hci3: command 0x041b tx timeout [ 1277.098837][ T5178] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1277.107432][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.209485][T15203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.262454][T15203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.275213][T15203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.303213][ T5178] usb 4-1: Using ep0 maxpacket: 8 [ 1277.323787][ T5178] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 1277.378370][ T5178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1277.392368][ T5178] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1277.404417][ T5178] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.420735][ T5178] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1277.430616][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.445631][T15203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.664710][ T5178] usb 4-1: GET_CAPABILITIES returned 0 [ 1277.670455][ T5178] usbtmc 4-1:16.0: can't read capabilities [ 1277.868224][T15203] device hsr_slave_0 entered promiscuous mode [ 1277.899408][ T5178] usb 4-1: USB disconnect, device number 60 [ 1277.924287][T15203] device hsr_slave_1 entered promiscuous mode [ 1277.936697][T15203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1277.957385][T15203] Cannot create hsr debugfs directory [ 1278.138750][ T4269] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1278.227173][ T4394] device hsr_slave_0 left promiscuous mode [ 1278.256583][ T4394] device hsr_slave_1 left promiscuous mode [ 1278.317251][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.333926][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.360024][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.385359][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.421480][ T4394] batman_adv: batadv0: Removing interface: vxlan0 [ 1278.444067][ T4394] device bridge_slave_1 left promiscuous mode [ 1278.458890][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.507030][ T4394] device bridge_slave_0 left promiscuous mode [ 1278.517038][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.587555][ T4394] device veth1_macvtap left promiscuous mode [ 1278.593696][ T4394] device veth0_macvtap left promiscuous mode [ 1278.610336][ T4394] device veth1_vlan left promiscuous mode [ 1278.616210][ T4394] device veth0_vlan left promiscuous mode [ 1279.177094][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 1279.197786][ T4394] infiniband sz1: set down [ 1279.924654][ T4331] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1280.056013][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 1280.133522][ T4331] usb 7-1: Using ep0 maxpacket: 32 [ 1280.217176][ T4331] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1280.285718][ T4331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.329572][ T4331] usb 7-1: Product: syz [ 1280.351098][ T4331] usb 7-1: Manufacturer: syz [ 1280.378508][ T4331] usb 7-1: SerialNumber: syz [ 1280.494762][ T4331] usb 7-1: config 0 descriptor?? [ 1280.563744][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 1280.642184][ T4331] as10x_usb: device has been detected [ 1280.662849][ T4331] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1280.693991][ T4331] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1280.736159][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.788891][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.948657][ T4331] as10x_usb: error during firmware upload part1 [ 1280.955456][ T4331] Registered device Abilis Systems DVB-Titan [ 1281.263244][T14474] Bluetooth: hci3: command 0x0419 tx timeout [ 1281.366462][ T4394] bond0 (unregistering): Released all slaves [ 1281.450644][ T4390] smc: removing ib device sz1 [ 1281.474666][ T4925] lo speed is unknown, defaulting to 1000 [ 1282.137152][ T4269] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1282.497869][T15387] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2934'. [ 1282.563816][T15387] autofs4:pid:15387:autofs_fill_super: called with bogus options [ 1282.660966][ T4299] usb 7-1: USB disconnect, device number 61 [ 1282.756348][ T4299] Unregistered device Abilis Systems DVB-Titan [ 1282.785924][ T4299] as10x_usb: device has been disconnected [ 1282.855884][T15203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1282.917971][T15203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1282.977392][T15203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1283.015713][T15203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1283.375292][T15203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.422139][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1283.436630][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1283.458967][T15203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.489772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1283.506218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1283.532682][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.539924][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.579697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1283.601944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1283.631700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1283.654567][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.661799][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.685843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1283.726989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1283.736033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1283.791511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1283.839533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1284.004417][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1284.023821][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1284.058681][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1284.067893][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1284.085579][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1284.112163][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.151622][T15203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1284.801837][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1284.841581][T15449] autofs4:pid:15449:autofs_fill_super: called with bogus options [ 1284.852674][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1284.890661][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1284.910060][T15203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.417433][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1286.436176][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1286.506262][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1286.540696][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1286.564066][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1286.601027][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1286.631398][T15203] device veth0_vlan entered promiscuous mode [ 1286.702583][T15203] device veth1_vlan entered promiscuous mode [ 1286.760020][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1286.778483][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1286.813378][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1286.854077][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1286.919072][T15203] device veth0_macvtap entered promiscuous mode [ 1286.966487][T15203] device veth1_macvtap entered promiscuous mode [ 1287.037937][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.082966][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.124080][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.321125][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.333938][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.350792][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.363835][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.382661][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.406141][T15203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.430725][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1287.449697][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1287.473088][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1287.507787][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1287.545654][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.570697][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.607837][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.656202][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.675935][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.703104][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.731896][T15203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.764401][T15203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.816060][T15203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.899907][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1287.964667][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1288.179724][T15532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1288.423619][T15532] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2963'. [ 1288.605820][T15203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.656912][T15203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.716624][T15203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.787118][T15203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.874959][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'. [ 1288.929587][T15539] autofs4:pid:15539:autofs_fill_super: called with bogus options [ 1289.102062][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.177448][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.211905][ T8657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.244733][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1289.257501][ T8657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.297290][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1291.999691][T15606] netlink: 'syz.6.2982': attribute type 1 has an invalid length. [ 1292.073004][T15606] netlink: 'syz.6.2982': attribute type 4 has an invalid length. [ 1292.088671][T15614] autofs4:pid:15614:autofs_fill_super: called with bogus options [ 1292.117217][T15606] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2982'. [ 1292.161929][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'. [ 1292.272301][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.301389][ T952] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1293.307055][ T952] usb 4-1: Using ep0 maxpacket: 8 [ 1293.315665][ T952] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1293.333115][ T952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.368011][ T952] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1293.386822][ T952] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1293.397188][T15631] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2988'. [ 1293.417084][ T952] usb 4-1: Product: syz [ 1293.436103][ T952] usb 4-1: config 0 descriptor?? [ 1293.691074][ T6402] usb 4-1: USB disconnect, device number 61 [ 1295.166984][ T6402] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1295.764340][T15701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3006'. [ 1295.795704][T15703] autofs4:pid:15703:autofs_fill_super: called with bogus options [ 1296.289712][T15714] netlink: 'syz.5.3008': attribute type 1 has an invalid length. [ 1296.360421][T15714] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3008'. [ 1296.886934][ T4331] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1297.080074][ T4331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.101007][ T4331] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1297.120344][ T4331] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1297.145481][ T4331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.164988][ T4331] usb 6-1: config 0 descriptor?? [ 1297.188507][ T4331] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1297.209028][ T4331] dvb-usb: bulk message failed: -22 (3/0) [ 1297.230746][ T4331] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1297.260662][ T4331] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1297.277289][ T4331] usb 6-1: media controller created [ 1297.294954][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.337209][ T4331] dvb-usb: bulk message failed: -22 (6/0) [ 1297.343516][ T4331] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1297.408930][ T4331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 1297.449473][ T4331] dvb-usb: schedule remote query interval to 150 msecs. [ 1297.456642][ T4331] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1297.547810][ T4331] usb 6-1: USB disconnect, device number 58 [ 1297.603664][ T4331] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1298.845304][T15745] syz.4.3015 (15745): drop_caches: 2 [ 1298.851940][T15775] netlink: 'syz.5.3020': attribute type 1 has an invalid length. [ 1298.887178][T15775] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3020'. [ 1299.088366][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3023'. [ 1299.123684][T15782] autofs4:pid:15782:autofs_fill_super: called with bogus options [ 1300.140193][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.146522][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.366878][ T6402] usb 4-1: device descriptor read/64, error -110 [ 1300.451734][T15820] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3032'. [ 1300.636948][ T6402] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1300.817001][ T6402] usb 4-1: device descriptor read/64, error -32 [ 1300.944878][ T6402] usb usb4-port1: attempt power cycle [ 1300.947041][ T952] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1301.148375][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.164316][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.187075][ T952] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1301.197175][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.214514][ T952] usb 5-1: config 0 descriptor?? [ 1301.366922][ T6402] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1301.418014][ T6402] usb 4-1: device descriptor read/8, error -32 [ 1301.626270][ T952] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1301.647554][ T952] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1301.687059][ T6402] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1301.742644][ T6402] usb 4-1: device descriptor read/8, error -32 [ 1301.826246][ T952] cp2112 0003:10C4:EA90.0011: error requesting version [ 1301.843739][ T952] cp2112: probe of 0003:10C4:EA90.0011 failed with error -71 [ 1301.872455][ T6402] usb usb4-port1: unable to enumerate USB device [ 1301.877332][ T952] usb 5-1: USB disconnect, device number 59 [ 1302.692032][T15879] netlink: 'syz.5.3043': attribute type 1 has an invalid length. [ 1302.703835][T15879] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1304.117074][ T8672] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1304.297257][ T8672] usb 5-1: Using ep0 maxpacket: 16 [ 1304.304736][ T8672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.315371][ T8672] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.327584][ T8672] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1304.337686][ T8672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.345693][ T8672] usb 5-1: Product: syz [ 1304.350125][ T8672] usb 5-1: Manufacturer: syz [ 1304.354743][ T8672] usb 5-1: SerialNumber: syz [ 1304.568401][ T8672] usb 5-1: 0:2 : does not exist [ 1304.580982][ T8672] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1304.603663][ T8672] usb 5-1: USB disconnect, device number 60 [ 1304.817800][T13800] udevd[13800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.646882][ T6402] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1306.796913][ T6402] usb 5-1: device descriptor read/64, error -71 [ 1307.067030][ T6402] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1307.226896][ T6402] usb 5-1: device descriptor read/64, error -71 [ 1307.347331][ T6402] usb usb5-port1: attempt power cycle [ 1307.756996][ T6402] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1307.787572][ T6402] usb 5-1: device descriptor read/8, error -71 [ 1308.067023][ T6402] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1308.109318][ T6402] usb 5-1: device descriptor read/8, error -71 [ 1308.247198][ T6402] usb usb5-port1: unable to enumerate USB device [ 1308.784024][T16003] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1310.496888][ T6402] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1310.656895][ T6402] usb 6-1: device descriptor read/64, error -71 [ 1310.937045][ T6402] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1311.086991][ T6402] usb 6-1: device descriptor read/64, error -71 [ 1311.197017][ T952] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1311.207166][ T6402] usb usb6-port1: attempt power cycle [ 1311.378595][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.389702][ T952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.399531][ T952] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1311.408634][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.424185][ T952] usb 5-1: config 0 descriptor?? [ 1311.626871][ T6402] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1311.662907][ T6402] usb 6-1: device descriptor read/8, error -71 [ 1311.841611][ T952] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 1311.849890][ T952] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1311.936972][ T6402] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1311.968264][ T6402] usb 6-1: device descriptor read/8, error -71 [ 1312.043111][ T952] cp2112 0003:10C4:EA90.0012: error requesting version [ 1312.051980][ T952] cp2112: probe of 0003:10C4:EA90.0012 failed with error -5 [ 1312.087172][ T6402] usb usb6-port1: unable to enumerate USB device [ 1312.246292][ T6402] usb 5-1: USB disconnect, device number 65 [ 1314.206942][ T6402] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1314.389218][ T6402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1314.397317][ T6402] usb 5-1: config 0 has no interface number 0 [ 1314.403518][ T6402] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1314.412641][ T6402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.423276][ T6402] usb 5-1: config 0 descriptor?? [ 1314.430633][ T6402] usb 5-1: selecting invalid altsetting 1 [ 1314.436487][ T6402] dvb_ttusb_budget: ttusb_init_controller: error [ 1314.443040][ T6402] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1314.518439][ T6402] DVB: Unable to find symbol cx22700_attach() [ 1314.578302][ T6402] DVB: Unable to find symbol tda10046_attach() [ 1314.584504][ T6402] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1314.636410][ T8672] usb 5-1: USB disconnect, device number 66 [ 1314.946897][ T6402] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1315.138545][ T6402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.149584][ T6402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.159435][ T6402] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1315.168580][ T6402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.178906][ T6402] usb 6-1: config 0 descriptor?? [ 1315.590755][ T6402] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 1315.600571][ T6402] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1315.792632][ T6402] cp2112 0003:10C4:EA90.0013: error requesting version [ 1315.800732][ T6402] cp2112: probe of 0003:10C4:EA90.0013 failed with error -5 [ 1315.997250][ T8672] usb 6-1: USB disconnect, device number 63 [ 1317.506877][ T952] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1317.689871][ T952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1317.698117][ T952] usb 6-1: config 0 has no interface number 0 [ 1317.704256][ T952] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1317.713448][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.730908][ T952] usb 6-1: config 0 descriptor?? [ 1317.755802][ T952] usb 6-1: selecting invalid altsetting 1 [ 1317.764242][ T952] dvb_ttusb_budget: ttusb_init_controller: error [ 1317.771809][ T952] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1317.853657][ T952] DVB: Unable to find symbol cx22700_attach() [ 1317.904373][ T952] DVB: Unable to find symbol tda10046_attach() [ 1317.911096][ T952] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1317.950059][ T952] usb 6-1: USB disconnect, device number 64 [ 1318.766870][ T952] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1318.948138][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.960941][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.970793][ T952] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1318.979920][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.997539][ T952] usb 6-1: config 0 descriptor?? [ 1319.417040][ T952] usbhid 6-1:0.0: can't add hid device: -71 [ 1319.423119][ T952] usbhid: probe of 6-1:0.0 failed with error -71 [ 1319.442668][ T952] usb 6-1: USB disconnect, device number 65 [ 1320.997109][ T5178] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1321.208874][ T5178] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.217656][ T5178] usb 5-1: config 0 has no interface number 0 [ 1321.224623][ T5178] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1321.234001][ T5178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.244511][ T5178] usb 5-1: config 0 descriptor?? [ 1321.252099][ T5178] usb 5-1: selecting invalid altsetting 1 [ 1321.258662][ T5178] dvb_ttusb_budget: ttusb_init_controller: error [ 1321.265016][ T5178] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1321.309905][ T5178] DVB: Unable to find symbol cx22700_attach() [ 1321.349968][ T5178] DVB: Unable to find symbol tda10046_attach() [ 1321.356148][ T5178] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1321.456684][ T952] usb 5-1: USB disconnect, device number 67 [ 1321.466949][ T4925] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1321.658938][ T4925] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1321.668421][ T4925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.679498][ T4925] usb 6-1: config 0 descriptor?? [ 1322.496314][ T4925] pegasus: probe of 6-1:0.0 failed with error -121 [ 1322.702425][ T4925] usb 6-1: USB disconnect, device number 66 [ 1323.306125][T16133] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3145'. [ 1324.736954][ T952] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 1324.918338][ T952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.926501][ T952] usb 6-1: config 0 has no interface number 0 [ 1324.932721][ T952] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1324.942232][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.952505][ T952] usb 6-1: config 0 descriptor?? [ 1324.972851][ T952] usb 6-1: selecting invalid altsetting 1 [ 1324.985713][ T952] dvb_ttusb_budget: ttusb_init_controller: error [ 1324.992826][ T952] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1325.062611][ T952] DVB: Unable to find symbol cx22700_attach() [ 1325.134407][ T952] DVB: Unable to find symbol tda10046_attach() [ 1325.142106][ T952] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1325.205496][ T952] usb 6-1: USB disconnect, device number 67 [ 1326.624130][T16163] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.3155'. [ 1327.536958][ T6402] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1327.741135][ T6402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1327.749398][ T6402] usb 5-1: config 0 has no interface number 0 [ 1327.755514][ T6402] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1327.764708][ T6402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.774316][ T6402] usb 5-1: config 0 descriptor?? [ 1327.781682][ T6402] usb 5-1: selecting invalid altsetting 1 [ 1327.787665][ T6402] dvb_ttusb_budget: ttusb_init_controller: error [ 1327.794010][ T6402] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1327.843177][ T6402] DVB: Unable to find symbol cx22700_attach() [ 1327.882812][ T6402] DVB: Unable to find symbol tda10046_attach() [ 1327.889383][ T6402] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1327.986847][T10685] usb 5-1: USB disconnect, device number 68 [ 1329.639607][T16192] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3164'. [ 1330.516868][ T5178] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1330.596938][T10685] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1330.696952][ T5178] usb 6-1: Using ep0 maxpacket: 8 [ 1330.702589][ T5178] usb 6-1: no configurations [ 1330.707299][ T5178] usb 6-1: can't read configurations, error -22 [ 1330.779000][T10685] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1330.787334][T10685] usb 5-1: config 0 has no interface number 0 [ 1330.793438][T10685] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1330.802625][T10685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.812584][T10685] usb 5-1: config 0 descriptor?? [ 1330.820839][T10685] usb 5-1: selecting invalid altsetting 1 [ 1330.826688][T10685] dvb_ttusb_budget: ttusb_init_controller: error [ 1330.833242][T10685] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1330.857218][ T5178] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1330.883129][T10685] DVB: Unable to find symbol cx22700_attach() [ 1330.919973][T10685] DVB: Unable to find symbol tda10046_attach() [ 1330.926355][T10685] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1331.024300][ T4331] usb 5-1: USB disconnect, device number 69 [ 1331.046862][ T5178] usb 6-1: Using ep0 maxpacket: 8 [ 1331.053298][ T5178] usb 6-1: no configurations [ 1331.058447][ T5178] usb 6-1: can't read configurations, error -22 [ 1331.064844][ T5178] usb usb6-port1: attempt power cycle [ 1331.476862][ T5178] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1331.507728][ T5178] usb 6-1: Using ep0 maxpacket: 8 [ 1331.513606][ T5178] usb 6-1: no configurations [ 1331.518550][ T5178] usb 6-1: can't read configurations, error -22 [ 1331.666871][ T5178] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1331.697405][ T5178] usb 6-1: Using ep0 maxpacket: 8 [ 1331.703008][ T5178] usb 6-1: no configurations [ 1331.707731][ T5178] usb 6-1: can't read configurations, error -22 [ 1331.714104][ T5178] usb usb6-port1: unable to enumerate USB device [ 1333.256888][ T952] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1333.458674][ T952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1333.472098][ T952] usb 5-1: config 0 has no interface number 0 [ 1333.478710][ T952] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1333.494588][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.520335][ T952] usb 5-1: config 0 descriptor?? [ 1333.544710][ T952] usb 5-1: selecting invalid altsetting 1 [ 1333.550923][ T952] dvb_ttusb_budget: ttusb_init_controller: error [ 1333.557690][ T952] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1333.642369][ T952] DVB: Unable to find symbol cx22700_attach() [ 1333.694435][ T952] DVB: Unable to find symbol tda10046_attach() [ 1333.700976][ T952] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1333.749076][ T4331] usb 5-1: USB disconnect, device number 70 [ 1334.727598][ T4331] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1334.919147][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1334.925009][ T4331] usb 5-1: no configurations [ 1334.934463][ T4331] usb 5-1: can't read configurations, error -22 [ 1335.106905][ T4331] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1335.296911][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1335.303549][ T4331] usb 5-1: no configurations [ 1335.308597][ T4331] usb 5-1: can't read configurations, error -22 [ 1335.317439][ T4331] usb usb5-port1: attempt power cycle [ 1335.727001][ T4331] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1335.758009][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1335.764433][ T4331] usb 5-1: no configurations [ 1335.769660][ T4331] usb 5-1: can't read configurations, error -22 [ 1335.916915][ T4331] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1335.947578][ T4331] usb 5-1: Using ep0 maxpacket: 8 [ 1335.953452][ T4331] usb 5-1: no configurations [ 1335.964021][ T4331] usb 5-1: can't read configurations, error -22 [ 1335.974731][ T4331] usb usb5-port1: unable to enumerate USB device [ 1336.586859][ T4331] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1336.768536][ T4331] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1336.776554][ T4331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.787052][ T4331] usb 6-1: config 0 has no interface number 0 [ 1336.793170][ T4331] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1336.806182][ T4331] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1336.820327][ T4331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.830581][ T4331] usb 6-1: config 0 descriptor?? [ 1336.842044][ T4331] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1338.693940][ T27] audit: type=1326 audit(1742817803.014:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16289 comm="syz.4.3198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47d158d169 code=0x0 [ 1339.400035][ T952] usb 6-1: USB disconnect, device number 72 [ 1339.887001][ T952] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1340.106879][ T952] usb 6-1: Using ep0 maxpacket: 8 [ 1340.114912][ T952] usb 6-1: too many configurations: 66, using maximum allowed: 8 [ 1340.130944][ T952] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1340.138832][ T952] usb 6-1: can't read configurations, error -61 [ 1340.287030][ T952] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1340.396892][ T4299] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1340.466917][ T952] usb 6-1: Using ep0 maxpacket: 8 [ 1340.475956][ T952] usb 6-1: too many configurations: 66, using maximum allowed: 8 [ 1340.486084][ T952] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1340.493747][ T952] usb 6-1: can't read configurations, error -61 [ 1340.500164][ T952] usb usb6-port1: attempt power cycle [ 1340.578659][ T4299] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1340.587489][ T4299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.597839][ T4299] usb 5-1: config 0 has no interface number 0 [ 1340.604045][ T4299] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.617681][ T4299] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1340.626799][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.637024][ T4299] usb 5-1: config 0 descriptor?? [ 1340.645185][ T4299] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1340.996659][ T952] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1341.027642][ T952] usb 6-1: Using ep0 maxpacket: 8 [ 1341.033407][ T952] usb 6-1: too many configurations: 66, using maximum allowed: 8 [ 1341.042578][ T952] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1341.050353][ T952] usb 6-1: can't read configurations, error -61 [ 1341.986849][ T952] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1342.017902][ T952] usb 6-1: Using ep0 maxpacket: 8 [ 1342.023716][ T952] usb 6-1: too many configurations: 66, using maximum allowed: 8 [ 1342.033057][ T952] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1342.040794][ T952] usb 6-1: can't read configurations, error -61 [ 1342.047707][ T952] usb usb6-port1: unable to enumerate USB device [ 1342.526114][T16315] netlink: 'syz.5.3207': attribute type 5 has an invalid length. [ 1342.534039][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 1342.544969][T16315] autofs4:pid:16315:autofs_fill_super: called with bogus options [ 1343.205684][ T6402] usb 5-1: USB disconnect, device number 75 [ 1344.346881][ T6402] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1344.528366][ T6402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1344.539933][ T6402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.550229][ T6402] usb 5-1: config 0 has no interface number 0 [ 1344.556352][ T6402] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1344.569417][ T6402] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1344.578579][ T6402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.592183][ T6402] usb 5-1: config 0 descriptor?? [ 1344.600150][ T6402] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1347.159300][ T6402] usb 5-1: USB disconnect, device number 76 [ 1347.236926][ T952] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1347.426941][ T952] usb 6-1: Using ep0 maxpacket: 32 [ 1347.437332][ T952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1347.453562][ T952] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1347.465446][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.479580][ T952] usb 6-1: Product: syz [ 1347.483779][ T952] usb 6-1: Manufacturer: syz [ 1347.491067][ T952] usb 6-1: SerialNumber: syz [ 1347.523393][ T952] usb 6-1: config 0 descriptor?? [ 1348.416891][ T952] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1348.435214][T16378] tipc: Started in network mode [ 1348.441885][T16378] tipc: Node identity , cluster identity 4711 [ 1348.624514][ T952] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1349.133470][T10685] usb 6-1: USB disconnect, device number 77 [ 1350.226975][ T4925] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1350.421990][ T4925] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1350.436811][ T4925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.457070][ T4925] usb 6-1: config 0 has no interface number 0 [ 1350.470482][ T4925] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1350.483461][ T4925] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1350.498246][ T4925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.512455][ T4925] usb 6-1: config 0 descriptor?? [ 1350.533834][ T4925] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1353.058724][ T8672] usb 6-1: USB disconnect, device number 78 [ 1353.106989][ T6402] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1353.306846][ T6402] usb 5-1: Using ep0 maxpacket: 32 [ 1353.314044][ T6402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1353.326513][ T6402] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1353.336626][ T6402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.348537][ T6402] usb 5-1: Product: syz [ 1353.352709][ T6402] usb 5-1: Manufacturer: syz [ 1353.357462][ T6402] usb 5-1: SerialNumber: syz [ 1353.363747][ T6402] usb 5-1: config 0 descriptor?? [ 1353.546893][ T4925] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1353.759661][ T4925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.770058][ T4925] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1353.779153][ T4925] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1353.788497][ T6402] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1353.794774][ T4925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.805642][ T4925] usb 6-1: config 0 descriptor?? [ 1353.814086][ T4925] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1353.821052][ T4925] dvb-usb: bulk message failed: -22 (3/0) [ 1353.831423][ T4925] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1353.840386][ T4925] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1353.847603][ T4925] usb 6-1: media controller created [ 1353.854132][ T4925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1353.871938][ T4925] dvb-usb: bulk message failed: -22 (6/0) [ 1353.877924][ T4925] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1353.887131][ T4925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 1353.903936][ T4925] dvb-usb: schedule remote query interval to 150 msecs. [ 1353.911063][ T4925] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1354.030037][T16450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.038955][T16450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.052370][ T4925] usb 6-1: USB disconnect, device number 79 [ 1354.079029][ T4925] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1354.190334][ T6402] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1354.928206][ T3918] gs_usb 5-1:0.0 can0: bit-timing not yet defined [ 1355.028280][T10685] usb 5-1: USB disconnect, device number 77 [ 1356.770853][T16514] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1356.938289][T10685] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1357.148008][T10685] usb 6-1: Using ep0 maxpacket: 32 [ 1357.161670][T10685] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1357.273977][T10685] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1357.326556][T10685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.357440][T10685] usb 6-1: Product: syz [ 1357.372507][T10685] usb 6-1: Manufacturer: syz [ 1357.410237][T10685] usb 6-1: SerialNumber: syz [ 1357.440027][T10685] usb 6-1: config 0 descriptor?? [ 1357.858522][T10685] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1358.260017][T10685] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1358.774966][T10685] usb 6-1: USB disconnect, device number 80 [ 1361.296833][ T5178] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1361.486825][ T5178] usb 6-1: Using ep0 maxpacket: 32 [ 1361.494232][ T5178] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1361.513380][ T5178] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1361.523515][ T5178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.536021][ T5178] usb 6-1: Product: syz [ 1361.540895][ T5178] usb 6-1: Manufacturer: syz [ 1361.545582][ T5178] usb 6-1: SerialNumber: syz [ 1361.559931][ T5178] usb 6-1: config 0 descriptor?? [ 1361.579558][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.585877][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.968194][ T5178] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1362.371259][ T5178] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1362.834946][T10685] usb 6-1: USB disconnect, device number 81 [ 1364.456867][ T952] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1364.640690][ T952] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1364.648895][ T952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.659047][ T952] usb 6-1: config 0 has no interface number 0 [ 1364.665148][ T952] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1364.678129][ T952] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1364.687269][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.698123][ T952] usb 6-1: config 0 descriptor?? [ 1364.706654][ T952] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1366.926820][ T952] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1367.106821][ T952] usb 5-1: Using ep0 maxpacket: 32 [ 1367.113532][ T952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1367.122244][ T952] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1367.131432][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.139554][ T952] usb 5-1: Product: syz [ 1367.143775][ T952] usb 5-1: Manufacturer: syz [ 1367.148484][ T952] usb 5-1: SerialNumber: syz [ 1367.154726][ T952] usb 5-1: config 0 descriptor?? [ 1367.278191][ T8672] usb 6-1: USB disconnect, device number 82 [ 1367.563503][ T952] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1367.965457][ T952] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1368.583313][ T3918] gs_usb 5-1:0.0 can0: bit-timing not yet defined [ 1369.746907][ T6402] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1369.948603][ T6402] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1369.956652][ T6402] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.967288][ T6402] usb 6-1: config 0 has no interface number 0 [ 1369.973424][ T6402] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.993773][ T6402] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1370.003280][ T6402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.016516][ T4925] usb 5-1: USB disconnect, device number 78 [ 1370.030205][ T6402] usb 6-1: config 0 descriptor?? [ 1370.042696][ T6402] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1372.551682][ T8672] usb 6-1: USB disconnect, device number 83 [ 1373.047211][ T8672] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1373.337093][ T8672] usb 6-1: Using ep0 maxpacket: 32 [ 1373.347135][ T8672] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1373.364667][ T8672] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1373.373981][ T8672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.387035][ T8672] usb 6-1: Product: syz [ 1373.391240][ T8672] usb 6-1: Manufacturer: syz [ 1373.395939][ T8672] usb 6-1: SerialNumber: syz [ 1373.421197][ T8672] usb 6-1: config 0 descriptor?? [ 1374.568043][ T8672] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1374.716893][ T4925] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1374.901277][ T4925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.909461][ T4925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.919665][ T4925] usb 5-1: config 0 has no interface number 0 [ 1374.925799][ T4925] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1374.938756][ T4925] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1374.947867][ T4925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.964053][ T4925] usb 5-1: config 0 descriptor?? [ 1374.969750][ T8672] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1374.972628][ T4925] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1376.301796][ T4925] usb 6-1: USB disconnect, device number 84 [ 1378.243571][ T8672] usb 5-1: USB disconnect, device number 79 [ 1378.285248][T16787] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1378.607172][ T8672] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1378.797204][ T8672] usb 5-1: Using ep0 maxpacket: 32 [ 1378.817753][ T8672] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1378.854898][ T8672] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1378.866793][ T8672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.881021][ T8672] usb 5-1: Product: syz [ 1378.885553][ T8672] usb 5-1: Manufacturer: syz [ 1378.893379][ T8672] usb 5-1: SerialNumber: syz [ 1378.924565][ T8672] usb 5-1: config 0 descriptor?? [ 1379.336120][ T8672] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1379.526809][ T5991] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1379.709379][ T5991] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1379.717534][ T5991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.727676][ T5991] usb 6-1: config 0 has no interface number 0 [ 1379.733808][ T5991] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.746905][ T8672] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1379.755353][ T5991] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1379.772962][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.792423][ T5991] usb 6-1: config 0 descriptor?? [ 1379.804341][ T5991] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1380.253653][ T5991] usb 5-1: USB disconnect, device number 80 [ 1382.387554][ T5991] usb 6-1: USB disconnect, device number 85 [ 1382.996851][ T4925] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1383.186908][ T4925] usb 6-1: Using ep0 maxpacket: 8 [ 1383.193775][ T4925] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1383.202609][ T4925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.212811][ T4925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.223238][ T4925] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1383.232366][ T4925] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1383.240515][ T4925] usb 6-1: Product: syz [ 1383.247387][ T4925] usb 6-1: config 0 descriptor?? [ 1383.458632][ T8672] usb 6-1: USB disconnect, device number 86 [ 1383.637082][ T4925] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1383.837055][ T4925] usb 5-1: Using ep0 maxpacket: 32 [ 1383.848206][ T4925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1383.856604][ T4925] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1383.869639][ T4925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.877709][ T4925] usb 5-1: Product: syz [ 1383.881971][ T4925] usb 5-1: Manufacturer: syz [ 1383.886561][ T4925] usb 5-1: SerialNumber: syz [ 1383.897149][ T4925] usb 5-1: config 0 descriptor?? [ 1384.450935][ T4925] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1384.884358][ T4925] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1385.307968][ T4925] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1385.369541][ T4331] usb 5-1: USB disconnect, device number 81 [ 1385.524933][ T4925] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1385.533546][ T4925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.550881][ T4925] usb 6-1: config 0 has no interface number 0 [ 1385.559660][ T4925] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1385.576391][ T4925] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1385.595673][ T4925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.622899][ T4925] usb 6-1: config 0 descriptor?? [ 1385.640385][ T4925] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1388.318103][ T5991] usb 6-1: USB disconnect, device number 87 [ 1389.476866][ T5991] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1389.656979][ T5991] usb 6-1: Using ep0 maxpacket: 32 [ 1389.664756][ T5991] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1389.673729][ T5991] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1389.684805][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.693005][ T5991] usb 6-1: Product: syz [ 1389.697560][ T5991] usb 6-1: Manufacturer: syz [ 1389.702180][ T5991] usb 6-1: SerialNumber: syz [ 1389.716386][ T5991] usb 6-1: config 0 descriptor?? [ 1390.124978][ T5991] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1390.256932][ T4331] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1390.439004][ T4331] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1390.447132][ T4331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.457932][ T4331] usb 5-1: config 0 has no interface number 0 [ 1390.464065][ T4331] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.477407][ T4331] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1390.486499][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.497156][ T4331] usb 5-1: config 0 descriptor?? [ 1390.506573][ T4331] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1390.527326][ T5991] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1391.433684][T13353] usb 6-1: USB disconnect, device number 88 [ 1393.285198][T13353] usb 5-1: USB disconnect, device number 82 [ 1394.013660][T13353] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1394.237192][T13353] usb 5-1: Using ep0 maxpacket: 32 [ 1394.251769][T13353] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1394.306918][T13353] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1394.441283][T13353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.452774][T13353] usb 5-1: Product: syz [ 1394.462033][T13353] usb 5-1: Manufacturer: syz [ 1394.466663][T13353] usb 5-1: SerialNumber: syz [ 1394.488569][T13353] usb 5-1: config 0 descriptor?? [ 1394.609680][T16985] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1394.914581][T13353] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1395.320839][T13353] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1395.636808][T10685] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1395.685249][ T8672] usb 5-1: USB disconnect, device number 83 [ 1395.828968][T10685] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1395.840686][T10685] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.854113][T10685] usb 6-1: config 0 has no interface number 0 [ 1395.864055][T10685] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1395.882994][T10685] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1395.892628][T10685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.921328][T10685] usb 6-1: config 0 descriptor?? [ 1395.934739][T10685] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1398.502935][ T4299] usb 6-1: USB disconnect, device number 89 [ 1400.036845][ T8672] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1400.137018][ T6402] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1400.216854][ T8672] usb 6-1: Using ep0 maxpacket: 32 [ 1400.223528][ T8672] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1400.232458][ T8672] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1400.243688][ T8672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.251822][ T8672] usb 6-1: Product: syz [ 1400.256020][ T8672] usb 6-1: Manufacturer: syz [ 1400.260700][ T8672] usb 6-1: SerialNumber: syz [ 1400.267559][ T8672] usb 6-1: config 0 descriptor?? [ 1400.318587][ T6402] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1400.326673][ T6402] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.337023][ T6402] usb 5-1: config 0 has no interface number 0 [ 1400.343621][ T6402] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1400.356683][ T6402] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1400.365793][ T6402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.375858][ T6402] usb 5-1: config 0 descriptor?? [ 1400.383886][ T6402] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1400.675831][ T8672] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1401.091040][ T8672] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1401.676529][T10685] usb 6-1: USB disconnect, device number 90 [ 1402.939257][T13353] usb 5-1: USB disconnect, device number 84 [ 1404.936815][T10685] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1405.116845][T10685] usb 6-1: Using ep0 maxpacket: 32 [ 1405.123427][T10685] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1405.132821][T10685] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1405.141956][T10685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.150003][T10685] usb 6-1: Product: syz [ 1405.154176][T10685] usb 6-1: Manufacturer: syz [ 1405.158871][T10685] usb 6-1: SerialNumber: syz [ 1405.165699][T10685] usb 6-1: config 0 descriptor?? [ 1405.237003][ T4299] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1405.418666][ T4299] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1405.426826][ T4299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.437025][ T4299] usb 5-1: config 0 has no interface number 0 [ 1405.443179][ T4299] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.456151][ T4299] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1405.465296][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.476644][ T4299] usb 5-1: config 0 descriptor?? [ 1405.484621][ T4299] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1405.574018][T10685] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1405.984770][T10685] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1406.808295][ T4299] usb 6-1: USB disconnect, device number 91 [ 1408.556950][T10685] usb 5-1: USB disconnect, device number 85 [ 1409.001873][T17160] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1409.106913][T13353] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1409.307104][T13353] usb 6-1: Using ep0 maxpacket: 8 [ 1409.314075][T13353] usb 6-1: config index 0 descriptor too short (expected 3867, got 27) [ 1409.322876][T13353] usb 6-1: config 96 has too many interfaces: 66, using maximum allowed: 32 [ 1409.331901][T13353] usb 6-1: config 96 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.342866][T13353] usb 6-1: config 96 has 0 interfaces, different from the descriptor's value: 66 [ 1409.353959][T13353] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1409.363324][T13353] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1409.371656][T13353] usb 6-1: Product: syz [ 1409.595602][T13353] usb 6-1: USB disconnect, device number 92 [ 1411.206950][ T6402] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1411.411647][ T6402] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1411.422571][ T6402] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1411.435146][ T6402] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1411.444231][ T6402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1411.452345][T13353] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1411.461369][ T6402] usb 5-1: SerialNumber: syz [ 1411.471998][T17192] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1411.479384][T17192] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1411.491203][ T6402] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1411.666869][T13353] usb 6-1: Using ep0 maxpacket: 8 [ 1411.673617][T13353] usb 6-1: config index 0 descriptor too short (expected 3867, got 27) [ 1411.681967][T13353] usb 6-1: config 96 has too many interfaces: 66, using maximum allowed: 32 [ 1411.695780][ T6402] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1411.703834][ T6402] usb 5-1: USB disconnect, device number 86 [ 1411.709903][T13353] usb 6-1: config 96 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.726066][T13353] usb 6-1: config 96 has 0 interfaces, different from the descriptor's value: 66 [ 1411.739709][T13353] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1411.749621][T13353] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1411.757745][T13353] usb 6-1: Product: syz [ 1411.972966][T13353] usb 6-1: USB disconnect, device number 93 [ 1413.196492][T17215] netlink: set zone limit has 8 unknown bytes [ 1413.273602][T17217] syz.4.3409 sent an empty control message without MSG_MORE. [ 1413.706870][ T6402] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1413.886944][ T6402] usb 5-1: Using ep0 maxpacket: 32 [ 1413.894096][ T6402] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1413.904935][ T6402] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1413.914508][ T6402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.928335][ T6402] usb 5-1: Product: syz [ 1413.932545][ T6402] usb 5-1: Manufacturer: syz [ 1413.941197][ T6402] usb 5-1: SerialNumber: syz [ 1413.951889][ T6402] usb 5-1: config 0 descriptor?? [ 1414.545959][ T6402] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1414.967902][ T6402] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1415.392619][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3424'. [ 1415.489651][ T4299] usb 5-1: USB disconnect, device number 87 [ 1416.977202][T10685] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1417.188564][T10685] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1417.197277][T10685] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1417.208795][T10685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1417.217916][T10685] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1417.230389][T10685] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1417.239525][T10685] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1417.247574][T10685] usb 5-1: Product: syz [ 1417.251754][T10685] usb 5-1: Manufacturer: syz [ 1417.259124][T17304] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1417.268060][T10685] cdc_wdm 5-1:1.0: skipping garbage [ 1417.273297][T10685] cdc_wdm 5-1:1.0: skipping garbage [ 1417.278666][T10685] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1417.485175][T10685] usb 5-1: USB disconnect, device number 88 [ 1417.841413][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1418.166904][T13353] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1418.346995][T13353] usb 6-1: Using ep0 maxpacket: 32 [ 1418.359734][T13353] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1418.368927][T13353] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1418.378123][T13353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.386189][T13353] usb 6-1: Product: syz [ 1418.392458][T13353] usb 6-1: Manufacturer: syz [ 1418.403114][T13353] usb 6-1: SerialNumber: syz [ 1418.410374][T13353] usb 6-1: config 0 descriptor?? [ 1418.965403][T13353] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1419.372424][T13353] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1420.526441][ T8672] usb 6-1: USB disconnect, device number 94 [ 1420.546023][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'. [ 1421.323094][T17370] tmpfs: Unknown parameter 'grpqu"RƯ÷‘ota_block_hardl' [ 1422.337990][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3451'. [ 1423.030922][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.037318][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.082261][ T27] audit: type=1326 audit(1742817888.404:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17410 comm="syz.5.3460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41fdf8d169 code=0x0 [ 1424.486829][T13353] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1424.666851][T13353] usb 5-1: Using ep0 maxpacket: 8 [ 1424.673624][T13353] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1424.682872][T13353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.692957][T13353] usb 5-1: config 0 descriptor?? [ 1425.023009][T17424] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1425.035972][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1426.915505][T13353] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1426.929699][T13353] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1426.941234][T13353] asix: probe of 5-1:0.0 failed with error -71 [ 1426.956186][T13353] usb 5-1: USB disconnect, device number 89 [ 1428.262277][T17438] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1429.386809][ T4299] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1429.598495][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.612795][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.623009][ T4299] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1429.632334][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.649217][ T4299] usb 6-1: config 0 descriptor?? [ 1430.064663][ T4299] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1430.127407][ T4299] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1430.264067][ T4299] cp2112 0003:10C4:EA90.0014: error requesting version [ 1430.283083][ T4299] cp2112: probe of 0003:10C4:EA90.0014 failed with error -5 [ 1430.466628][ T4299] usb 6-1: USB disconnect, device number 95 [ 1431.120608][T17461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3477'. [ 1432.719867][T17481] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1432.729635][T17481] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1433.492780][T17487] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3485'. [ 1433.666903][T10685] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1433.878403][T10685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.889429][T10685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.899456][T10685] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1433.908669][T10685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.919300][T10685] usb 5-1: config 0 descriptor?? [ 1434.332364][T10685] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 1434.341559][T10685] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1434.531103][T10685] cp2112 0003:10C4:EA90.0015: error requesting version [ 1434.539781][T10685] cp2112: probe of 0003:10C4:EA90.0015 failed with error -5 [ 1434.739381][ T4331] usb 5-1: USB disconnect, device number 90 [ 1438.986852][T13353] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1439.178396][T13353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.200080][T13353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.226874][T13353] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1439.250459][T13353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.275866][T13353] usb 5-1: config 0 descriptor?? [ 1439.698332][T13353] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 1439.722115][T13353] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1439.906020][T13353] cp2112 0003:10C4:EA90.0016: error requesting version [ 1439.935933][T13353] cp2112: probe of 0003:10C4:EA90.0016 failed with error -5 [ 1440.146093][ T8672] usb 5-1: USB disconnect, device number 91 [ 1441.177449][ T4299] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1441.439065][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.525477][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.604621][ T4299] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1441.664959][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.758974][ T4299] usb 6-1: config 0 descriptor?? [ 1442.368844][ T4299] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 1442.417124][ T4299] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1442.568699][ T4299] cp2112 0003:10C4:EA90.0017: error requesting version [ 1442.577477][ T4299] cp2112: probe of 0003:10C4:EA90.0017 failed with error -5 [ 1442.940707][T13353] usb 6-1: USB disconnect, device number 96 [ 1443.481862][T17543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1443.492173][T17543] device vlan0 entered promiscuous mode [ 1447.506930][T10685] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1447.702489][T10685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.730627][T10685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.797204][T10685] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1447.814458][T10685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.844821][T10685] usb 6-1: config 0 descriptor?? [ 1448.274377][T10685] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 1448.289583][T10685] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1448.497375][T10685] cp2112 0003:10C4:EA90.0018: error requesting version [ 1448.514261][T10685] cp2112: probe of 0003:10C4:EA90.0018 failed with error -5 [ 1448.727970][ T6402] usb 6-1: USB disconnect, device number 97 [ 1450.562834][ T28] INFO: task kworker/1:5:4302 blocked for more than 143 seconds. [ 1450.570769][ T28] Not tainted 6.1.131-syzkaller #0 [ 1450.576469][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1450.897697][ T28] task:kworker/1:5 state:D stack:19704 pid:4302 ppid:2 flags:0x00004000 [ 1451.352792][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 1451.371865][ T28] Call Trace: [ 1451.378963][ T28] [ 1451.381981][ T28] __schedule+0x143f/0x4570 [ 1451.390453][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1451.396462][ T28] ? print_irqtrace_events+0x210/0x210 [ 1451.405461][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1451.412463][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1451.421266][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1451.426600][ T28] schedule+0xbf/0x180 [ 1451.432767][ T28] schedule_preempt_disabled+0xf/0x20 [ 1451.448280][ T28] __mutex_lock+0x6b9/0xd80 [ 1451.453003][ T28] ? __mutex_lock+0x53c/0xd80 [ 1451.462373][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 1451.471393][ T28] ? mutex_lock_nested+0x10/0x10 [ 1451.476460][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1451.485892][ T28] ? print_irqtrace_events+0x210/0x210 [ 1451.493514][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1451.503411][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1451.511402][ T28] ? process_one_work+0x806/0x1260 [ 1451.516625][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 1451.525136][ T28] ? process_one_work+0x806/0x1260 [ 1451.532395][ T28] process_one_work+0x917/0x1260 [ 1451.541054][ T28] ? worker_detach_from_pool+0x260/0x260 [ 1451.552449][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1451.561687][ T28] ? kthread_data+0x4e/0xc0 [ 1451.566325][ T28] ? wq_worker_running+0x97/0x190 [ 1451.574314][ T28] worker_thread+0xa47/0x1200 [ 1451.582397][ T28] kthread+0x28d/0x320 [ 1451.586599][ T28] ? worker_clr_flags+0x190/0x190 [ 1451.594549][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1451.602569][ T28] ret_from_fork+0x1f/0x30 [ 1451.609901][ T28] [ 1451.619429][ T28] INFO: task syz-executor:4493 blocked for more than 144 seconds. [ 1451.631630][ T28] Not tainted 6.1.131-syzkaller #0 [ 1451.637489][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1451.646289][ T28] task:syz-executor state:D stack:20344 pid:4493 ppid:1 flags:0x00004006 [ 1451.659824][ T28] Call Trace: [ 1451.669900][ T28] [ 1451.676300][ T28] __schedule+0x143f/0x4570 [ 1451.684784][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1451.690822][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1451.696415][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1451.705159][ T28] schedule+0xbf/0x180 [ 1451.709383][ T28] schedule_preempt_disabled+0xf/0x20 [ 1451.714883][ T28] __mutex_lock+0x6b9/0xd80 [ 1451.724316][ T28] ? kobject_put+0x422/0x460 [ 1451.729043][ T28] ? __mutex_lock+0x53c/0xd80 [ 1451.733858][ T28] ? rfkill_unregister+0xcc/0x220 [ 1451.743692][ T28] ? mutex_lock_nested+0x10/0x10 [ 1451.748919][ T28] ? kill_device+0x160/0x160 [ 1451.753667][ T28] ? kmem_cache_free+0x292/0x510 [ 1451.763699][ T28] rfkill_unregister+0xcc/0x220 [ 1451.768710][ T28] hci_unregister_dev+0x362/0x500 [ 1451.773882][ T28] vhci_release+0x7f/0xd0 [ 1451.785791][ T28] ? vhci_open+0x360/0x360 [ 1451.790399][ T28] __fput+0x3f6/0x8d0 [ 1451.794511][ T28] task_work_run+0x246/0x300 [ 1451.803924][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 1451.809370][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 1451.814538][ T28] ? kmem_cache_free+0x292/0x510 [ 1451.826528][ T28] ? do_exit+0xa69/0x26a0 [ 1451.831011][ T28] do_exit+0xa6e/0x26a0 [ 1451.835299][ T28] ? put_task_struct+0x80/0x80 [ 1451.844880][ T28] ? get_signal+0x1352/0x17a0 [ 1451.854411][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1451.865211][ T28] ? print_irqtrace_events+0x210/0x210 [ 1451.870817][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1451.876094][ T28] do_group_exit+0x202/0x2b0 [ 1451.884170][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1451.893551][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1451.903435][ T28] get_signal+0x16cb/0x17a0 [ 1451.908152][ T28] ? pipe_wait_writable+0x590/0x590 [ 1451.913494][ T28] ? ptrace_notify+0x370/0x370 [ 1451.923178][ T28] ? wake_bit_function+0x210/0x210 [ 1451.928465][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 1451.934230][ T28] ? vfs_read+0x553/0xbf0 [ 1451.943376][ T28] ? kernel_read+0x1f0/0x1f0 [ 1451.948116][ T28] ? get_sigframe_size+0x10/0x10 [ 1451.953192][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1451.963915][ T28] ? ksys_read+0x252/0x2c0 [ 1451.968585][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1451.976901][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 1451.982316][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1451.992954][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1452.002766][ T28] do_syscall_64+0x47/0xb0 [ 1452.013222][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1452.018038][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.024071][ T28] RIP: 0033:0x7ff6a838bb7c [ 1452.033364][ T28] RSP: 002b:00007ffca8e7d420 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1452.041933][ T28] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007ff6a838bb7c [ 1452.053611][ T28] RDX: 0000000000000030 RSI: 00007ffca8e7d4e0 RDI: 00000000000000f9 [ 1452.061745][ T28] RBP: 00007ffca8e7d48c R08: 0000000000000000 R09: 0079746972756365 [ 1452.073412][ T28] R10: 00007ffca8e7cde0 R11: 0000000000000246 R12: 0000000000000258 [ 1452.081669][ T28] R13: 00000000000927c0 R14: 000000000013d5b0 R15: 00007ffca8e7d4e0 [ 1452.094553][ T28] [ 1452.097743][ T28] INFO: task syz.3.2999:15681 blocked for more than 144 seconds. [ 1452.105570][ T28] Not tainted 6.1.131-syzkaller #0 [ 1452.119018][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1452.130999][ T28] task:syz.3.2999 state:D stack:26592 pid:15681 ppid:4251 flags:0x00004004 [ 1452.143138][ T28] Call Trace: [ 1452.148944][ T28] [ 1452.155376][ T28] __schedule+0x143f/0x4570 [ 1452.162787][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1452.170918][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1452.179602][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1452.189137][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1452.196788][ T28] schedule+0xbf/0x180 [ 1452.200986][ T28] schedule_preempt_disabled+0xf/0x20 [ 1452.210610][ T28] __mutex_lock+0x6b9/0xd80 [ 1452.217001][ T28] ? __mutex_lock+0x53c/0xd80 [ 1452.230275][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 1452.237369][ T28] ? mutex_lock_nested+0x10/0x10 [ 1452.242495][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1452.248097][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1452.253412][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1452.259657][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1452.264636][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 1452.270050][ T28] ? nfc_unregister_device+0x290/0x290 [ 1452.275657][ T28] rfkill_set_block+0x1e7/0x430 [ 1452.280867][ T28] rfkill_fop_write+0x5b7/0x790 [ 1452.287026][ T28] ? wake_up_q+0x9f/0xd0 [ 1452.291424][ T28] ? rfkill_fop_read+0x470/0x470 [ 1452.296493][ T28] ? fsnotify_perm+0x64/0x590 [ 1452.301696][ T28] ? security_file_permission+0x75/0xa0 [ 1452.307591][ T28] ? rfkill_fop_read+0x470/0x470 [ 1452.312647][ T28] vfs_write+0x2d9/0xbc0 [ 1452.318174][ T28] ? file_end_write+0x250/0x250 [ 1452.326963][ T28] ? do_futex+0x375/0x490 [ 1452.331942][ T28] ? mntput_no_expire+0xbe/0x850 [ 1452.337246][ T28] ? __ia32_sys_get_robust_list+0x80/0x80 [ 1452.346964][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1452.352236][ T28] ? lockref_put_or_lock+0x71/0xb0 [ 1452.358324][ T28] ? mntput+0xb0/0xb0 [ 1452.406923][ T28] ? __fdget_pos+0x1db/0x360 [ 1452.430528][ T28] ksys_write+0x19c/0x2c0 [ 1452.434950][ T28] ? print_irqtrace_events+0x210/0x210 [ 1452.440672][ T28] ? __ia32_sys_read+0x80/0x80 [ 1452.450966][ T28] ? syscall_user_dispatch+0x45/0x90 [ 1452.457527][ T28] ? syscall_enter_from_user_mode+0x51/0x230 [ 1452.464316][ T28] do_syscall_64+0x3b/0xb0 [ 1452.470161][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1452.474882][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.480994][ T28] RIP: 0033:0x7f603fb8d169 [ 1452.485451][ T28] RSP: 002b:00007f6040983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1452.499042][ T28] RAX: ffffffffffffffda RBX: 00007f603fda6080 RCX: 00007f603fb8d169 [ 1452.510930][ T28] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1452.519067][ T28] RBP: 00007f603fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1452.531653][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.541115][ T28] R13: 0000000000000000 R14: 00007f603fda6080 R15: 00007ffc3976af28 [ 1452.558153][ T28] [ 1452.561577][ T28] INFO: task syz.2.3000:15685 blocked for more than 145 seconds. [ 1452.574975][ T28] Not tainted 6.1.131-syzkaller #0 [ 1452.581935][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1452.596243][ T28] task:syz.2.3000 state:D stack:28120 pid:15685 ppid:14768 flags:0x00004004 [ 1452.606297][ T28] Call Trace: [ 1452.612879][ T28] [ 1452.616469][ T28] __schedule+0x143f/0x4570 [ 1452.624347][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1452.631017][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1452.641115][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1452.649064][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1452.655762][ T28] schedule+0xbf/0x180 [ 1452.662865][ T28] schedule_preempt_disabled+0xf/0x20 [ 1452.669500][ T28] __mutex_lock+0x6b9/0xd80 [ 1452.674640][ T28] ? kobject_put+0x422/0x460 [ 1452.680509][ T28] ? __mutex_lock+0x53c/0xd80 [ 1452.686006][ T28] ? rfkill_unregister+0xcc/0x220 [ 1452.691926][ T28] ? mutex_lock_nested+0x10/0x10 [ 1452.697044][ T28] ? kill_device+0x160/0x160 [ 1452.702416][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 1452.709238][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 1452.716229][ T28] rfkill_unregister+0xcc/0x220 [ 1452.721703][ T28] nfc_unregister_device+0x92/0x290 [ 1452.727021][ T28] virtual_ncidev_close+0x55/0x90 [ 1452.732082][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 1452.737340][ T28] __fput+0x3f6/0x8d0 [ 1452.742834][ T28] task_work_run+0x246/0x300 [ 1452.747545][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 1452.752618][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1452.758339][ T28] exit_to_user_mode_loop+0xde/0x100 [ 1452.763720][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1452.770510][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1452.776095][ T28] do_syscall_64+0x47/0xb0 [ 1452.780755][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1452.785494][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.791506][ T28] RIP: 0033:0x7f32c3d8d169 [ 1452.795949][ T28] RSP: 002b:00007f32c4c76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1452.804525][ T28] RAX: 0000000000000000 RBX: 00007f32c3fa6240 RCX: 00007f32c3d8d169 [ 1452.812542][ T28] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1452.820632][ T28] RBP: 00007f32c3e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1452.828690][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.836678][ T28] R13: 0000000000000000 R14: 00007f32c3fa6240 R15: 00007fff7ee366d8 [ 1452.844793][ T28] [ 1452.847932][ T28] INFO: task syz-executor:15830 blocked for more than 145 seconds. [ 1452.855864][ T28] Not tainted 6.1.131-syzkaller #0 [ 1452.861956][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1452.871009][ T28] task:syz-executor state:D stack:26176 pid:15830 ppid:1 flags:0x00004000 [ 1452.880369][ T28] Call Trace: [ 1452.883681][ T28] [ 1452.886619][ T28] __schedule+0x143f/0x4570 [ 1452.891261][ T28] ? __mutex_lock+0x6b4/0xd80 [ 1452.895972][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 1452.902032][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 1452.907606][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 1452.912863][ T28] schedule+0xbf/0x180 [ 1452.917082][ T28] schedule_preempt_disabled+0xf/0x20 [ 1452.922500][ T28] __mutex_lock+0x6b9/0xd80 [ 1452.927086][ T28] ? __mutex_lock+0x53c/0xd80 [ 1452.931810][ T28] ? rfkill_register+0x30/0x880 [ 1452.936890][ T28] ? mutex_lock_nested+0x10/0x10 [ 1452.941875][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 1452.947326][ T28] ? device_initialize+0x24a/0x450 [ 1452.952579][ T28] rfkill_register+0x30/0x880 [ 1452.957396][ T28] hci_register_dev+0x4df/0xa40 [ 1452.962283][ T28] vhci_create_device+0x3ba/0x700 [ 1452.967498][ T28] vhci_write+0x38b/0x440 [ 1452.971869][ T28] vfs_write+0x857/0xbc0 [ 1452.976141][ T28] ? file_end_write+0x250/0x250 [ 1452.981268][ T28] ? __fdget_pos+0x1db/0x360 [ 1452.985987][ T28] ksys_write+0x19c/0x2c0 [ 1452.990439][ T28] ? print_irqtrace_events+0x210/0x210 [ 1452.995940][ T28] ? __ia32_sys_read+0x80/0x80 [ 1453.000868][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1453.006920][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1453.012166][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1453.018469][ T28] do_syscall_64+0x3b/0xb0 [ 1453.022917][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1453.027674][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.033593][ T28] RIP: 0033:0x7f6a1d18bbe0 [ 1453.038156][ T28] RSP: 002b:00007ffc0183ea08 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1453.046598][ T28] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6a1d18bbe0 [ 1453.054644][ T28] RDX: 0000000000000002 RSI: 00007ffc0183ea1a RDI: 00000000000000ca [ 1453.062702][ T28] RBP: 00007f6a1d3a6738 R08: 0000000000000000 R09: 00007f6a1dedd6c0 [ 1453.070737][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1453.078787][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1453.086976][ T28] [ 1453.090053][ T28] [ 1453.090053][ T28] Showing all locks held in the system: [ 1453.097880][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1453.103178][ T28] #0: ffffffff8d32e890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1453.113723][ T28] 1 lock held by rcu_tasks_trace/13: [ 1453.119101][ T28] #0: ffffffff8d32f090 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1453.130208][ T28] 1 lock held by khungtaskd/28: [ 1453.135074][ T28] #0: ffffffff8d32e6c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1453.145055][ T28] 5 locks held by kworker/u4:3/51: [ 1453.150320][ T28] 2 locks held by getty/4012: [ 1453.155009][ T28] #0: ffff888030d4e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1453.164883][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 1453.175099][ T28] 3 locks held by kworker/1:5/4302: [ 1453.180394][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1453.190826][ T28] #1: ffffc900042b7d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 1453.203909][ T28] #2: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 1453.215353][ T28] 1 lock held by syz-executor/4493: [ 1453.220638][ T28] #0: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 1453.230858][ T28] 1 lock held by syz-executor/14768: [ 1453.236159][ T28] #0: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 1453.246353][ T28] 2 locks held by syz.3.2999/15681: [ 1453.251609][ T28] #0: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 1453.261819][ T28] #1: ffff8880633f3100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 1453.271597][ T28] 2 locks held by syz.2.3000/15685: [ 1453.276910][ T28] #0: ffff8880633f3100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 1453.286783][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 1453.297009][ T28] 2 locks held by syz-executor/15830: [ 1453.302436][ T28] #0: ffff88805639f118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.312673][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.322723][ T28] 2 locks held by syz-executor/16021: [ 1453.328170][ T28] #0: ffff88802b3e5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.338317][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.348336][ T28] 2 locks held by syz-executor/16025: [ 1453.353735][ T28] #0: ffff88807681c918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.363826][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.373891][ T28] 2 locks held by syz-executor/16581: [ 1453.379361][ T28] #0: ffff88807b95c118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.389478][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.399566][ T28] 2 locks held by syz-executor/16689: [ 1453.404960][ T28] #0: ffff88807513d118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.415059][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.426329][ T28] 2 locks held by syz-executor/16690: [ 1453.431957][ T28] #0: ffff888055e89118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.442125][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.453121][ T28] 2 locks held by syz-executor/17356: [ 1453.460245][ T28] #0: ffff88807dfc2918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.470466][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.480546][ T28] 2 locks held by syz-executor/17452: [ 1453.485932][ T28] #0: ffff8880249c1118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.496010][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.506055][ T28] 2 locks held by syz-executor/17453: [ 1453.511650][ T28] #0: ffff8880284c9118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 1453.521934][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 1453.532136][ T28] [ 1453.534480][ T28] ============================================= [ 1453.534480][ T28] [ 1453.543017][ T28] NMI backtrace for cpu 1 [ 1453.547371][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0 [ 1453.555294][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1453.565370][ T28] Call Trace: [ 1453.568661][ T28] [ 1453.571591][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1453.576272][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 1453.581731][ T28] ? panic+0x764/0x764 [ 1453.585817][ T28] ? vprintk_emit+0x622/0x740 [ 1453.590500][ T28] ? printk_sprint+0x490/0x490 [ 1453.595258][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1453.600376][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1453.605327][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 1453.611487][ T28] ? _printk+0xd1/0x111 [ 1453.615651][ T28] ? panic+0x764/0x764 [ 1453.619725][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1453.624581][ T28] ? panic+0x764/0x764 [ 1453.628656][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 1453.634730][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 1453.640807][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1453.646887][ T28] watchdog+0xf88/0xfd0 [ 1453.651092][ T28] ? watchdog+0x1f8/0xfd0 [ 1453.655438][ T28] kthread+0x28d/0x320 [ 1453.659516][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1453.664550][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1453.669145][ T28] ret_from_fork+0x1f/0x30 [ 1453.673584][ T28] [ 1453.676972][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1453.682221][ C0] NMI backtrace for cpu 0 [ 1453.682232][ C0] CPU: 0 PID: 51 Comm: kworker/u4:3 Not tainted 6.1.131-syzkaller #0 [ 1453.682248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1453.682259][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1453.682285][ C0] RIP: 0010:check_preemption_disabled+0x6/0x110 [ 1453.682308][ C0] Code: de e8 fe 5d bd f9 e9 6d ff ff ff cc cc cc cc cc cc cc cc cc 48 c7 c7 20 6f 5f 8b 48 c7 c6 60 6f 5f 8b eb 00 41 57 41 56 41 54 <53> 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d [ 1453.682322][ C0] RSP: 0018:ffffc90000bc7800 EFLAGS: 00000046 [ 1453.682335][ C0] RAX: 1ffff11003ccb512 RBX: ffff88801e65a890 RCX: ffffc90000bc7803 [ 1453.682352][ C0] RDX: 0000000000000004 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 1453.682364][ C0] RBP: ffffc90000bc7950 R08: dffffc0000000000 R09: fffffbfff1d4168e [ 1453.682376][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000178f10 [ 1453.682387][ C0] R13: 0000000000000246 R14: ffffc90000bc78b0 R15: dffffc0000000000 [ 1453.682399][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1453.682412][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1453.682423][ C0] CR2: 00007f692caa7866 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 1453.682437][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1453.682446][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1453.682456][ C0] Call Trace: [ 1453.682461][ C0] [ 1453.682467][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1453.682483][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1453.682509][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 1453.682532][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1453.682547][ C0] ? nmi_handle+0x12e/0x440 [ 1453.682571][ C0] ? nmi_handle+0x25/0x440 [ 1453.682595][ C0] ? check_preemption_disabled+0x6/0x110 [ 1453.682615][ C0] ? default_do_nmi+0x62/0x150 [ 1453.682632][ C0] ? exc_nmi+0xa8/0x100 [ 1453.682648][ C0] ? end_repeat_nmi+0x16/0x31 [ 1453.682672][ C0] ? check_preemption_disabled+0x6/0x110 [ 1453.682692][ C0] ? check_preemption_disabled+0x6/0x110 [ 1453.682713][ C0] ? check_preemption_disabled+0x6/0x110 [ 1453.682734][ C0] [ 1453.682739][ C0] [ 1453.682745][ C0] lock_release+0x5cb/0xa20 [ 1453.682769][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 1453.682788][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1453.682816][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 1453.682833][ C0] __mutex_unlock_slowpath+0xde/0x750 [ 1453.682856][ C0] ? text_poke_finish+0x30/0x30 [ 1453.682877][ C0] ? mutex_unlock+0x10/0x10 [ 1453.682900][ C0] ? static_key_disable_cpuslocked+0x97/0x1b0 [ 1453.682924][ C0] ? mutex_lock_nested+0x10/0x10 [ 1453.682947][ C0] arch_jump_label_transform_queue+0x7d/0xd0 [ 1453.682966][ C0] __jump_label_update+0x177/0x3a0 [ 1453.682991][ C0] static_key_disable_cpuslocked+0xce/0x1b0 [ 1453.683013][ C0] static_key_disable+0x16/0x20 [ 1453.683034][ C0] toggle_allocation_gate+0x3e0/0x480 [ 1453.683057][ C0] ? show_object+0xa0/0xa0 [ 1453.683078][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1453.683104][ C0] ? print_irqtrace_events+0x210/0x210 [ 1453.683127][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1453.683145][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 1453.683164][ C0] ? process_one_work+0x806/0x1260 [ 1453.683183][ C0] process_one_work+0x917/0x1260 [ 1453.683207][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1453.683228][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1453.683244][ C0] ? kthread_data+0x4e/0xc0 [ 1453.683268][ C0] ? wq_worker_running+0x97/0x190 [ 1453.683284][ C0] worker_thread+0xa47/0x1200 [ 1453.683312][ C0] kthread+0x28d/0x320 [ 1453.683326][ C0] ? worker_clr_flags+0x190/0x190 [ 1453.683349][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1453.683364][ C0] ret_from_fork+0x1f/0x30 [ 1453.683390][ C0] [ 1453.685908][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1454.069748][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0 [ 1454.077695][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1454.087758][ T28] Call Trace: [ 1454.091053][ T28] [ 1454.094019][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1454.098700][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 1454.104171][ T28] ? panic+0x764/0x764 [ 1454.108262][ T28] ? vscnprintf+0x59/0x80 [ 1454.112615][ T28] panic+0x318/0x764 [ 1454.116530][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 1454.122687][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1454.128075][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 1454.133471][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 1454.139633][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 1454.145806][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 1454.151973][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1454.158058][ T28] watchdog+0xfc7/0xfd0 [ 1454.162225][ T28] ? watchdog+0x1f8/0xfd0 [ 1454.166591][ T28] kthread+0x28d/0x320 [ 1454.170666][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1454.175709][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1454.180297][ T28] ret_from_fork+0x1f/0x30 [ 1454.184726][ T28] [ 1454.188081][ T28] Kernel Offset: disabled [ 1454.192437][ T28] Rebooting in 86400 seconds..