last executing test programs: 2m8.198971015s ago: executing program 0 (id=344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 2m7.029579433s ago: executing program 0 (id=349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.425864155s ago: executing program 0 (id=353): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m53.103842577s ago: executing program 0 (id=382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2170, 0x1, 0x1, 0x1c5}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x30, 0x6000, @fd_index=0x8, 0xd2e, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m51.420172366s ago: executing program 0 (id=389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10) 1m50.519084458s ago: executing program 0 (id=392): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m33.376113631s ago: executing program 32 (id=392): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m11.646336039s ago: executing program 3 (id=453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9f}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @alu={0xce29e5354d59a59e, 0x1, 0x0, 0x5, 0x6, 0x10, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m6.479608351s ago: executing program 3 (id=460): r0 = socket(0x25, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) 1m1.955933205s ago: executing program 3 (id=467): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 58.734047798s ago: executing program 3 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x1000001, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, 0x0) setpriority(0x1, 0x0, 0x3) socket$kcm(0x10, 0x0, 0x4) 56.056443393s ago: executing program 3 (id=474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2e8, 0x30, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x2d4, 0x1, [@m_nat={0xe4, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x7}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xc0, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x94, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x9571, 0x6}}]}, {0x35, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea265bd8be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xa0, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x71, 0x6, "244f1d5e491793fe299ae91a500c9cc02390a453351e3b982d0e4762ca9b14a043390c938c41ebe65abfb7c2dbfdc7d1d006c8f9867aa3bb9051f0951b266ce4d8419fd8b7a1c04d731783e7872e4ebcd5c8300847a122181b464b4be56c8a232b4d8824e0a62135fd29145bd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2e8}}, 0x40000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 54.167640964s ago: executing program 3 (id=477): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x420e, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r6, 0x11e, 0x1, 0x0, &(0x7f0000000000)=0x38) 36.659010284s ago: executing program 33 (id=477): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x420e, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r6, 0x11e, 0x1, 0x0, &(0x7f0000000000)=0x38) 16.428495209s ago: executing program 2 (id=529): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}], 0x3}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 16.331674068s ago: executing program 1 (id=530): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_uring_enter(r0, 0x1b1, 0x59be, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1d7d, 0xe00c, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 14.022990702s ago: executing program 1 (id=531): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200"], 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 14.020949008s ago: executing program 2 (id=532): socket$kcm(0x10, 0x2, 0x0) iopl(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x28, 0x800, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x402, 0x60200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x21, 0x3f, 0x1, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010428bd700000000000000000", @ANYBLOB="5a3f02000000000028001280090001007665746800000000180002801400010000", @ANYRES32=0x0, @ANYBLOB="de00000001200000080001"], 0x50}}, 0x0) iopl(0xfb) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 12.526879714s ago: executing program 4 (id=535): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2f0, 0x30, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x2dc, 0x1, [@m_nat={0xe4, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x7}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xc8, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x9b, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x9571, 0x6}}]}, {0x35, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea265bd8be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xa0, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x71, 0x6, "244f1d5e491793fe299ae91a500c9cc02390a453351e3b982d0e4762ca9b14a043390c938c41ebe65abfb7c2dbfdc7d1d006c8f9867aa3bb9051f0951b266ce4d8419fd8b7a1c04d731783e7872e4ebcd5c8300847a122181b464b4be56c8a232b4d8824e0a62135fd29145bd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2f0}}, 0x40000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12.309816656s ago: executing program 5 (id=536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x51) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40015b19, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007bacdc10431955220d910102030109022400010000000009048e0002ba92dc000905f302000409088c09050b"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x9, 0x2, "c0f0"}, 0x0, 0x0, 0x0, 0x0}) 11.344415451s ago: executing program 4 (id=537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9f}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @alu={0xce29e5354d59a59e, 0x1, 0x0, 0x5, 0x6, 0x10, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.965391888s ago: executing program 1 (id=538): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 9.698410987s ago: executing program 1 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x1000001, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, 0x0) setpriority(0x1, 0x0, 0x3) socket$kcm(0x10, 0x0, 0x4) 9.455596372s ago: executing program 2 (id=540): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_uring_enter(r0, 0x1b1, 0x59be, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1d7d, 0xe00c, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 8.502819314s ago: executing program 5 (id=541): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x4, 0x7ba, 0x9, 0xc07b}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x2, 0x0, 0x42, 0x0, &(0x7f0000000040)=[{}, {}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000008}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.390756527s ago: executing program 1 (id=542): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0xe4, 0x30, 0x1, 0x0, 0x20, {}, [{0xd0, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x8c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}, 0x1}}]}, {0x47, 0x6, "eadc4c29b66eb405ce05ebf4d13ee5734f83fcf33263e02d8d9199ded7798f4dabef453230fcfae1ba5ee0e84728e716d767e72fcda8bbd01d00"/67}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x0, 0xc9}, {0x10}, {0x0, 0x1000000}, {}, {}, {}, {0x0, 0x9}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x400000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000880)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x3, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000003c0)={0x1, r2, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r4, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000eb"], 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 8.316140535s ago: executing program 2 (id=543): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b23a88020301090212000100020000090400"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x18, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.633672715s ago: executing program 4 (id=544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x9, 0xa, 0x6af, {0x2, 0x1, 0x4, 0x8001, 0x6}, {0x31, 0x0, 0x5, 0x4439, 0x1, 0x8}, 0x200, 0xcb82348}}]}]}}]}, 0x74}}, 0x0) 5.565403512s ago: executing program 5 (id=545): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x2f) close_range(r0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r2) 4.177705621s ago: executing program 2 (id=546): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2f0, 0x30, 0x2, 0x70bd29, 0x25dfdbff, {}, [{0x2dc, 0x1, [@m_nat={0xe4, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x800, 0x0, 0x6, 0x7}, @broadcast, @private=0xa010101, 0xff, 0x1}}]}, {0x91, 0x6, "10e888c9612e2e34f2a5c0d7a87138e300765dba5074c9d374932654344b0c3962c5b1337fa6db0058e4c409791d8494eb4f1d5e393184346fed949d96f5daa0ce947de3daaa6e95d07edeca20c84c34c3d590793d972426d03baeb20ac6787db577296c99e3e931b99974120505982554b03c14cf350d002b5185962405187e60822f26f3d3d50fc809abad8c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xc8, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x9b, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x0, 0x9571, 0x6}}]}, {0x35, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea265bd8be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xa0, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x71, 0x6, "244f1d5e491793fe299ae91a500c9cc02390a453351e3b982d0e4762ca9b14a043390c938c41ebe65abfb7c2dbfdc7d1d006c8f9867aa3bb9051f0951b266ce4d8419fd8b7a1c04d731783e7872e4ebcd5c8300847a122181b464b4be56c8a232b4d8824e0a62135fd29145bd1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2f0}}, 0x40000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.194817679s ago: executing program 4 (id=547): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.105065272s ago: executing program 5 (id=548): r0 = socket(0x21, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x110, 0x6b, 0x0, 0x0) 2.149999126s ago: executing program 1 (id=549): socket$kcm(0x10, 0x2, 0x0) iopl(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x28, 0x800, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x402, 0x60200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000100)={0x1, 0x21, 0x3f, 0x1, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010428bd700000000000000000", @ANYBLOB="5a3f02000000000028001280090001007665746800000000180002801400010000", @ANYRES32=0x0, @ANYBLOB="de00000001200000080001"], 0x50}}, 0x0) iopl(0xfb) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x40, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 1.922899988s ago: executing program 2 (id=550): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x51) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40015b19, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007bacdc10431955220d910102030109022400010000000009048e0002ba92dc000905f302000409088c09050b"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.839824109s ago: executing program 4 (id=551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x1000001, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r9, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, 0x0) setpriority(0x1, 0x0, 0x3) socket$kcm(0x10, 0x0, 0x4) 1.608992097s ago: executing program 5 (id=552): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_uring_enter(r0, 0x1b1, 0x59be, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x1d7d, 0xe00c, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 238.411844ms ago: executing program 4 (id=553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x20, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9f}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, @alu={0xce29e5354d59a59e, 0x1, 0x0, 0x5, 0x6, 0x10, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xf, 0x8c8e, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): :aa:3f) already exists on: batadv_slave_1 [ 241.035939][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.046876][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.060240][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.073351][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.084209][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.094852][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.105678][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.120924][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.442450][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.453914][ T5785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.468088][ T5785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.480547][ T5785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.151557][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.160102][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.217343][ T3861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.226555][ T3861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.408364][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.418053][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.495118][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.503471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.152770][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 246.226485][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.235102][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.243259][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.251795][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.491594][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.501913][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.603882][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.614159][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.027307][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 247.077793][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 247.953609][ T5980] netlink: 'syz.0.6': attribute type 9 has an invalid length. [ 248.190937][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.199276][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.485287][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.493389][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.995606][ T30] audit: type=1326 audit(1741505786.289:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.9" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 249.210590][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 249.785789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 249.885304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.060969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.399692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 250.585554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.595511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 250.796291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.806470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 251.830799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 251.912407][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 251.919396][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 252.041151][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.215774][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 252.222020][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 252.550029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.847010][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 252.860738][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 253.051849][ T6005] ceph: No mds server is up or the cluster is laggy [ 253.051889][ T6002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.069257][ T6002] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 253.102346][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 253.200401][ T6002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.207409][ T6002] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 253.353723][ T6002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 253.361018][ T6002] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 255.037738][ T6002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.044109][ T6002] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.965462][ T6002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 255.971669][ T6002] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 256.846239][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 256.905221][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 257.057339][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 257.135745][ T30] audit: type=1326 audit(1741505794.419:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.1.23" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 257.166983][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.178361][ T11] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 257.188583][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.245045][ T11] usb 4-1: config 0 descriptor?? [ 257.309509][ T11] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 257.513687][ T6044] input: syz1 as /devices/virtual/input/input6 [ 259.047689][ T3063] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 259.255277][ T3063] usb 2-1: Using ep0 maxpacket: 8 [ 259.272936][ T3063] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.281981][ T3063] usb 2-1: config 0 has no interface number 0 [ 259.306258][ T3063] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 259.316331][ T3063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.325058][ T3063] usb 2-1: Product: syz [ 259.329730][ T3063] usb 2-1: Manufacturer: syz [ 259.335003][ T3063] usb 2-1: SerialNumber: syz [ 259.348099][ T3063] usb 2-1: config 0 descriptor?? [ 259.375463][ T3063] usb 2-1: selecting invalid altsetting 1 [ 259.383083][ T3063] dvb_ttusb_budget: ttusb_init_controller: error [ 259.390223][ T3063] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 259.876142][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.887110][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.924405][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.935498][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.985828][ T5128] bcm5974 4-1:0.0: could not read from device [ 259.993075][ T3063] DVB: Unable to find symbol stv0299_attach() [ 260.037690][ T5128] bcm5974 4-1:0.0: could not read from device [ 260.125425][ T5128] bcm5974 4-1:0.0: could not read from device [ 260.133628][ T11] usb 4-1: USB disconnect, device number 2 [ 260.331039][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.343568][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.440487][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.450803][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.545397][ T3063] DVB: Unable to find symbol tda8083_attach() [ 260.551782][ T3063] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 260.811737][ T3063] usb 2-1: USB disconnect, device number 2 [ 261.075335][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33'. [ 262.195940][ T3063] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 262.345191][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 262.445097][ T3063] usb 4-1: Using ep0 maxpacket: 8 [ 262.567519][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 262.599855][ T3063] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.609853][ T3063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.618506][ T3063] usb 4-1: Product: syz [ 262.622961][ T3063] usb 4-1: Manufacturer: syz [ 262.628250][ T3063] usb 4-1: SerialNumber: syz [ 262.698513][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.710235][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.720569][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 262.730292][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.898248][ T3063] usb 4-1: config 0 descriptor?? [ 263.017706][ T26] usb 3-1: config 0 descriptor?? [ 263.220500][ T3063] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.400859][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 263.408612][ T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.486439][ T26] usb 3-1: USB disconnect, device number 2 [ 263.835892][ T30] audit: type=1326 audit(1741505801.129:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.0.37" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x0 [ 264.045126][ T26] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 264.265247][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 264.322097][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.334128][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.344990][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 264.354402][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.515626][ T26] usb 3-1: config 0 descriptor?? [ 264.996297][ T26] kye 0003:0458:0153.0001: item fetching failed at offset 4/5 [ 265.019002][ T3063] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.031900][ T3063] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 265.044370][ T3063] usb 4-1: media controller created [ 265.069282][ T26] kye 0003:0458:0153.0001: parse failed [ 265.075642][ T26] kye 0003:0458:0153.0001: probe with driver kye failed with error -22 [ 265.176812][ T3063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.367172][ T11] usb 3-1: USB disconnect, device number 3 [ 265.786908][ T3063] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MT2063 [ 266.165287][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 266.430356][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 266.499680][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.510348][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 266.518487][ T3063] usb 4-1: USB disconnect, device number 3 [ 266.519737][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.701477][ T5847] usb 1-1: config 0 descriptor?? [ 266.812374][ T5847] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 266.927788][ T6124] input: syz1 as /devices/virtual/input/input8 [ 267.055895][ T3063] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 267.156308][ T11] libceph: connect (1)[c::]:6789 error -101 [ 267.162883][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 267.276216][ T3063] usb 4-1: config 0 interface 0 altsetting 63 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.289095][ T3063] usb 4-1: config 0 interface 0 altsetting 63 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.307138][ T3063] usb 4-1: config 0 interface 0 altsetting 63 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 267.320916][ T3063] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.328155][ T3063] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 267.338185][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.449955][ T11] libceph: connect (1)[c::]:6789 error -101 [ 267.457543][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 267.487699][ T3063] usb 4-1: config 0 descriptor?? [ 268.116002][ T3063] wacom 0003:056A:0018.0002: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 268.137120][ T11] libceph: connect (1)[c::]:6789 error -101 [ 268.143608][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 268.184932][ T3063] wacom 0003:056A:0018.0002: hidraw0: USB HID v0.03 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 268.200390][ T3063] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0002/input/input9 [ 268.251258][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.262946][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.918107][ T6129] ceph: No mds server is up or the cluster is laggy [ 269.886532][ T11] libceph: connect (1)[c::]:6789 error -101 [ 269.892914][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 269.904043][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.913871][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.880168][ T11] libceph: connect (1)[c::]:6789 error -101 [ 270.886824][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 271.289137][ T11] libceph: connect (1)[c::]:6789 error -101 [ 271.295659][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 271.858719][ T5128] bcm5974 1-1:0.0: could not read from device [ 271.896604][ T5128] bcm5974 1-1:0.0: could not read from device [ 271.995424][ T5128] bcm5974 1-1:0.0: could not read from device [ 272.037238][ T5847] usb 1-1: USB disconnect, device number 2 [ 272.076422][ T5128] bcm5974 1-1:0.0: could not read from device [ 272.192663][ T3063] usb 4-1: USB disconnect, device number 4 [ 272.206723][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.49'. [ 272.845501][ T30] audit: type=1326 audit(1741505810.129:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6167 comm="syz.0.51" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x0 [ 273.521054][ T3063] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 273.731334][ T3063] usb 4-1: Using ep0 maxpacket: 8 [ 273.765210][ T3063] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 273.773838][ T3063] usb 4-1: config 2 has no interface number 0 [ 273.780562][ T3063] usb 4-1: config 2 interface 31 has no altsetting 0 [ 273.903540][ T3063] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 273.905475][ T5847] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 273.915987][ T3063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.929331][ T3063] usb 4-1: Product: syz [ 273.933766][ T3063] usb 4-1: Manufacturer: syz [ 273.938784][ T3063] usb 4-1: SerialNumber: syz [ 274.205621][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 274.266151][ T5847] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 274.275538][ T5847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.286775][ T5847] usb 5-1: config 0 has no interface number 0 [ 274.362912][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 274.372659][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.381204][ T5847] usb 5-1: Product: syz [ 274.385730][ T5847] usb 5-1: Manufacturer: syz [ 274.390566][ T5847] usb 5-1: SerialNumber: syz [ 274.546656][ T6188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 274.573103][ T5847] usb 5-1: config 0 descriptor?? [ 274.687754][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.698237][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.799936][ T5847] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 274.807446][ T5847] usb 5-1: No valid video chain found. [ 274.834036][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.843990][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.907016][ T5847] usb 5-1: USB disconnect, device number 2 [ 275.421805][ T3063] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 275.470584][ T3063] usb 4-1: USB disconnect, device number 5 [ 276.116142][ T5847] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 276.315465][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 276.358597][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.369977][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 276.379645][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.513050][ T5847] usb 1-1: config 0 descriptor?? [ 276.568610][ T5847] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 276.748186][ T6202] input: syz1 as /devices/virtual/input/input13 [ 277.118284][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 277.502385][ T30] audit: type=1326 audit(1741505814.799:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.1.67" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 279.195220][ T5128] bcm5974 1-1:0.0: could not read from device [ 279.274054][ T11] libceph: connect (1)[c::]:6789 error -101 [ 279.281481][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 279.294012][ T5128] bcm5974 1-1:0.0: could not read from device [ 279.381204][ T5128] bcm5974 1-1:0.0: could not read from device [ 279.389443][ T5847] usb 1-1: USB disconnect, device number 3 [ 279.407136][ T5128] bcm5974 1-1:0.0: could not read from device [ 279.666983][ T9] libceph: connect (1)[c::]:6789 error -101 [ 279.673285][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 279.896146][ T11] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 280.156289][ T11] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 280.167088][ T11] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.210077][ T9] libceph: connect (1)[c::]:6789 error -101 [ 280.216758][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 280.709489][ T30] audit: type=1326 audit(1741505817.589:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 280.731533][ T30] audit: type=1326 audit(1741505817.589:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 280.812441][ T11] usb 4-1: string descriptor 0 read error: -22 [ 280.819200][ T11] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.828600][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.897309][ T11] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.944491][ T30] audit: type=1326 audit(1741505818.189:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 280.967384][ T30] audit: type=1326 audit(1741505818.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 280.989872][ T30] audit: type=1326 audit(1741505818.239:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.012318][ T30] audit: type=1326 audit(1741505818.239:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.026642][ T6237] ceph: No mds server is up or the cluster is laggy [ 281.034498][ T30] audit: type=1326 audit(1741505818.239:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.063592][ T30] audit: type=1326 audit(1741505818.239:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.221362][ T3063] usb 4-1: USB disconnect, device number 6 [ 281.300370][ T11] libceph: connect (1)[c::]:6789 error -101 [ 281.307053][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 281.337515][ T30] audit: type=1326 audit(1741505818.419:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.360901][ T30] audit: type=1326 audit(1741505818.419:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.2.74" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 281.964604][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 282.610137][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 284.450994][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 284.635358][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 284.679512][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.690099][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 284.699625][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.827781][ T11] usb 2-1: config 0 descriptor?? [ 284.886109][ T11] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 285.050296][ T5128] bcm5974 2-1:0.0: could not read from device [ 285.087590][ T5128] bcm5974 2-1:0.0: could not read from device [ 285.142022][ T5128] bcm5974 2-1:0.0: could not read from device [ 285.178513][ T11] usb 2-1: USB disconnect, device number 3 [ 285.285994][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 285.308157][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 285.485133][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 285.514167][ T9] usb 3-1: config 127 has an invalid interface number: 129 but max is 0 [ 285.523346][ T9] usb 3-1: config 127 has no interface number 0 [ 285.530105][ T9] usb 3-1: config 127 interface 129 has no altsetting 0 [ 285.563998][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=1202, bcdDevice=12.1e [ 285.573636][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.582254][ T9] usb 3-1: Product: syz [ 285.586658][ T9] usb 3-1: Manufacturer: syz [ 285.591495][ T9] usb 3-1: SerialNumber: syz [ 285.651160][ T11] libceph: connect (1)[c::]:6789 error -101 [ 285.658668][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 285.886683][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.893500][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.966716][ T11] libceph: connect (1)[c::]:6789 error -101 [ 285.973430][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 286.084470][ T9] usb-storage 3-1:127.129: USB Mass Storage device detected [ 286.592991][ T11] libceph: connect (1)[c::]:6789 error -101 [ 286.600130][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 286.670577][ T9] usb-storage 3-1:127.129: Quirks match for vid 05ac pid 1202: 10 [ 286.777687][ T6308] ceph: No mds server is up or the cluster is laggy [ 286.961450][ T9] apple-mfi-fastcharge 3-1: USB disconnect, device number 4 [ 287.805250][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 287.805326][ T30] audit: type=1326 audit(1741505825.099:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.834385][ T30] audit: type=1326 audit(1741505825.099:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.856605][ T30] audit: type=1326 audit(1741505825.119:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.878719][ T30] audit: type=1326 audit(1741505825.119:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.900986][ T30] audit: type=1326 audit(1741505825.139:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.917906][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 287.923508][ T30] audit: type=1326 audit(1741505825.199:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.954411][ T30] audit: type=1326 audit(1741505825.249:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.976719][ T30] audit: type=1326 audit(1741505825.259:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 287.998950][ T30] audit: type=1326 audit(1741505825.259:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 288.021598][ T30] audit: type=1326 audit(1741505825.259:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 292.960877][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 293.212256][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 293.222496][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 293.305100][ T3063] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 293.487305][ T3063] usb 4-1: Using ep0 maxpacket: 16 [ 293.540466][ T3063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.551205][ T3063] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 293.560779][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.653325][ T9] libceph: connect (1)[c::]:6789 error -101 [ 293.660080][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 293.712466][ T3063] usb 4-1: config 0 descriptor?? [ 293.744534][ T3063] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 293.935393][ T5128] bcm5974 4-1:0.0: could not read from device [ 293.970969][ T5128] bcm5974 4-1:0.0: could not read from device [ 294.006399][ T9] libceph: connect (1)[c::]:6789 error -101 [ 294.012973][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 294.045302][ T5128] bcm5974 4-1:0.0: could not read from device [ 294.056868][ T3063] usb 4-1: USB disconnect, device number 7 [ 294.092929][ T5128] bcm5974 4-1:0.0: could not read from device [ 294.311274][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 294.311324][ T30] audit: type=1326 audit(1741505831.609:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 294.435830][ T30] audit: type=1326 audit(1741505831.679:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 294.459278][ T30] audit: type=1326 audit(1741505831.729:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 294.481486][ T30] audit: type=1326 audit(1741505831.729:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 294.547188][ T9] libceph: connect (1)[c::]:6789 error -101 [ 294.553664][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 295.058066][ T30] audit: type=1326 audit(1741505831.819:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 295.080559][ T30] audit: type=1326 audit(1741505831.869:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 295.103450][ T30] audit: type=1326 audit(1741505831.869:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 295.126244][ T30] audit: type=1326 audit(1741505831.869:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 295.150450][ T30] audit: type=1326 audit(1741505831.879:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 295.172672][ T30] audit: type=1326 audit(1741505831.879:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.109" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 296.236274][ T6364] ceph: No mds server is up or the cluster is laggy [ 296.486629][ T9] libceph: connect (1)[c::]:6789 error -101 [ 296.493918][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 297.837271][ T9] libceph: connect (1)[c::]:6789 error -101 [ 297.843686][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 298.140395][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 299.366835][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 299.791143][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 299.800669][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'. [ 300.645346][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.845042][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 300.885895][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.896985][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 300.906459][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.027905][ T9] usb 2-1: config 0 descriptor?? [ 301.054396][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 301.093706][ T11] libceph: connect (1)[c::]:6789 error -101 [ 301.100272][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 301.245030][ T5128] bcm5974 2-1:0.0: could not read from device [ 301.405835][ T9] usb 2-1: USB disconnect, device number 4 [ 301.422738][ T5128] bcm5974 2-1:0.0: could not read from device [ 301.430707][ T11] libceph: connect (1)[c::]:6789 error -101 [ 301.437837][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 302.141495][ T11] libceph: connect (1)[c::]:6789 error -101 [ 302.148080][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 302.437043][ T6416] ceph: No mds server is up or the cluster is laggy [ 304.643543][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 305.640170][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 305.963508][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 305.973267][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 305.982747][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 306.795470][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 307.475108][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 307.516793][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.528569][ T11] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 307.538211][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.716530][ T11] usb 1-1: config 0 descriptor?? [ 307.778129][ T11] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 307.981242][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 308.042587][ T5128] bcm5974 1-1:0.0: could not read from device [ 308.044490][ T3063] usb 1-1: USB disconnect, device number 4 [ 308.075673][ T5128] bcm5974 1-1:0.0: could not read from device [ 308.121989][ T5128] bcm5974 1-1:0.0: could not read from device [ 308.266378][ T26] libceph: connect (1)[c::]:6789 error -101 [ 308.272653][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 308.629199][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 308.636123][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 309.167614][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 309.174057][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 309.378639][ T6473] ceph: No mds server is up or the cluster is laggy [ 310.081995][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 310.337330][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 310.346892][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 310.357014][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 310.957813][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.154'. [ 311.040971][ T6506] Zero length message leads to an empty skb [ 311.225377][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 311.457321][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 311.511876][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.524543][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 311.534275][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.743649][ T11] usb 2-1: config 0 descriptor?? [ 311.808740][ T11] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 312.251985][ T5128] bcm5974 2-1:0.0: could not read from device [ 312.297810][ T5128] bcm5974 2-1:0.0: could not read from device [ 312.392036][ T5128] bcm5974 2-1:0.0: could not read from device [ 312.476790][ T11] usb 2-1: USB disconnect, device number 5 [ 312.567440][ T5128] bcm5974 2-1:0.0: could not read from device [ 314.377192][ T11] libceph: connect (1)[c::]:6789 error -101 [ 314.383422][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 314.706128][ T11] libceph: connect (1)[c::]:6789 error -101 [ 314.712610][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 315.157684][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 315.236098][ T11] libceph: connect (1)[c::]:6789 error -101 [ 315.242607][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 315.382963][ T6526] ceph: No mds server is up or the cluster is laggy [ 315.928250][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 315.938774][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 315.950723][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 316.034513][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 316.495151][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.715354][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 316.766763][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.777511][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 316.786992][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.904646][ T11] usb 2-1: config 0 descriptor?? [ 316.981615][ T11] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 317.183940][ T5128] bcm5974 2-1:0.0: could not read from device [ 317.223787][ T5128] bcm5974 2-1:0.0: could not read from device [ 317.335731][ T5128] bcm5974 2-1:0.0: could not read from device [ 317.369362][ T11] usb 2-1: USB disconnect, device number 6 [ 317.411591][ T5128] bcm5974 2-1:0.0: could not read from device [ 319.736857][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 320.173721][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 320.180469][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 320.466070][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 320.472558][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 321.223436][ T6584] ceph: No mds server is up or the cluster is laggy [ 321.286320][ T26] libceph: connect (1)[c::]:6789 error -101 [ 321.292915][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 321.583631][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 321.785740][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 321.975063][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 322.028175][ T11] usb 2-1: config 3 has an invalid interface number: 98 but max is 0 [ 322.036856][ T11] usb 2-1: config 3 has no interface number 0 [ 322.043353][ T11] usb 2-1: config 3 interface 98 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 322.057493][ T11] usb 2-1: config 3 interface 98 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 322.068758][ T11] usb 2-1: config 3 interface 98 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 322.078899][ T11] usb 2-1: config 3 interface 98 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 322.090211][ T11] usb 2-1: config 3 interface 98 altsetting 1 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 322.102234][ T11] usb 2-1: config 3 interface 98 altsetting 1 endpoint 0x82 has invalid maxpacket 15472, setting to 1024 [ 322.114092][ T11] usb 2-1: config 3 interface 98 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 322.124662][ T11] usb 2-1: config 3 interface 98 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 322.138300][ T11] usb 2-1: config 3 interface 98 has no altsetting 0 [ 322.286587][ T11] usb 2-1: New USB device found, idVendor=04bb, idProduct=0515, bcdDevice=bb.49 [ 322.296289][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.304564][ T11] usb 2-1: Product: syz [ 322.309210][ T11] usb 2-1: Manufacturer: syz [ 322.314055][ T11] usb 2-1: SerialNumber: syz [ 322.381095][ T6598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.396075][ T6598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.404211][ T6598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.695577][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 322.931796][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 322.956600][ T11] em28xx 2-1:3.98: New device syz syz @ 480 Mbps (04bb:0515, interface 98, class 98) [ 322.968004][ T11] em28xx 2-1:3.98: Video interface 98 found: bulk [ 322.988019][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.999191][ T26] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 323.011787][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.121132][ T26] usb 4-1: config 0 descriptor?? [ 323.215897][ T26] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 323.351221][ T6605] input: syz1 as /devices/virtual/input/input24 [ 324.672093][ T11] em28xx 2-1:3.98: unknown em28xx chip ID (0) [ 324.835616][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 325.919141][ T11] em28xx 2-1:3.98: reading from i2c device at 0xa0 failed (error=-5) [ 325.927804][ T11] em28xx 2-1:3.98: board has no eeprom [ 326.138677][ T5128] bcm5974 4-1:0.0: could not read from device [ 326.180899][ T5128] bcm5974 4-1:0.0: could not read from device [ 326.191087][ T11] em28xx 2-1:3.98: Identified as IO-DATA GV-MVP/SZ (card=65) [ 326.199852][ T11] em28xx 2-1:3.98: analog set to bulk mode. [ 326.209277][ T9] em28xx 2-1:3.98: Registering V4L2 extension [ 326.266250][ T5128] bcm5974 4-1:0.0: could not read from device [ 326.275543][ T26] usb 4-1: USB disconnect, device number 8 [ 326.330478][ T5128] bcm5974 4-1:0.0: could not read from device [ 326.357783][ T11] usb 2-1: USB disconnect, device number 7 [ 326.368063][ T11] em28xx 2-1:3.98: Disconnecting em28xx [ 327.037704][ T26] libceph: connect (1)[c::]:6789 error -101 [ 327.044150][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 327.247266][ T9] em28xx 2-1:3.98: Config register raw data: 0xffffffed [ 327.255923][ T9] em28xx 2-1:3.98: AC97 chip type couldn't be determined [ 327.263191][ T9] em28xx 2-1:3.98: No AC97 audio processor [ 327.406038][ T26] libceph: connect (1)[c::]:6789 error -101 [ 327.412264][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 327.472182][ T9] usb 2-1: Decoder not found [ 327.477135][ T9] em28xx 2-1:3.98: failed to create media graph [ 327.483651][ T9] em28xx 2-1:3.98: V4L2 device video103 deregistered [ 327.587886][ T9] em28xx 2-1:3.98: Remote control support is not available for this card. [ 327.597569][ T11] em28xx 2-1:3.98: Closing input extension [ 327.614634][ T11] em28xx 2-1:3.98: Freeing device [ 327.936236][ T26] libceph: connect (1)[c::]:6789 error -101 [ 327.942683][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 328.050719][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.200'. [ 328.062885][ T6636] ceph: No mds server is up or the cluster is laggy [ 328.945266][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 329.164060][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 329.229571][ T26] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.239319][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.247772][ T26] usb 4-1: Product: syz [ 329.252161][ T26] usb 4-1: Manufacturer: syz [ 329.257192][ T26] usb 4-1: SerialNumber: syz [ 329.375147][ T3063] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.413532][ T26] usb 4-1: config 0 descriptor?? [ 329.615449][ T3063] usb 1-1: Using ep0 maxpacket: 16 [ 329.682726][ T3063] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.693543][ T3063] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 329.703431][ T3063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.761098][ T26] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.909963][ T3063] usb 1-1: config 0 descriptor?? [ 329.989361][ T3063] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 330.171095][ T6663] input: syz1 as /devices/virtual/input/input26 [ 331.591291][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 332.424038][ T5128] bcm5974 1-1:0.0: could not read from device [ 332.470786][ T5128] bcm5974 1-1:0.0: could not read from device [ 332.588773][ T5128] bcm5974 1-1:0.0: could not read from device [ 332.626554][ T3063] usb 1-1: USB disconnect, device number 5 [ 332.639532][ T5128] bcm5974 1-1:0.0: could not read from device [ 332.850438][ T26] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 332.915948][ T26] usb 4-1: USB disconnect, device number 9 [ 333.804223][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'. [ 334.039528][ T26] libceph: connect (1)[c::]:6789 error -101 [ 334.045943][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 334.316041][ T26] libceph: connect (1)[c::]:6789 error -101 [ 334.322340][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 334.576644][ T11] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 334.926115][ T26] libceph: connect (1)[c::]:6789 error -101 [ 334.932714][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 336.676741][ T26] libceph: connect (1)[c::]:6789 error -101 [ 336.683304][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 336.697083][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 336.708033][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.718139][ T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 336.767243][ T6687] ceph: No mds server is up or the cluster is laggy [ 336.923509][ T11] usb 3-1: string descriptor 0 read error: -22 [ 336.930638][ T11] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 336.940323][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.050798][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 337.084431][ T6700] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.154418][ T11] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 337.459155][ T3063] usb 3-1: USB disconnect, device number 5 [ 337.485504][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 337.711973][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 337.795501][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.807066][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 337.816561][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.957636][ T26] usb 2-1: config 0 descriptor?? [ 337.998076][ T26] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 338.177410][ T6710] input: syz1 as /devices/virtual/input/input28 [ 340.685904][ T5128] bcm5974 2-1:0.0: could not read from device [ 340.745819][ T5128] bcm5974 2-1:0.0: could not read from device [ 340.880527][ T5128] bcm5974 2-1:0.0: could not read from device [ 340.884484][ T26] usb 2-1: USB disconnect, device number 8 [ 340.985991][ T11] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 341.323308][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 341.783500][ T11] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 341.792965][ T11] usb 3-1: config 0 has no interface number 0 [ 341.799748][ T11] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.839513][ T6745] netlink: 64 bytes leftover after parsing attributes in process `syz.0.231'. [ 341.848952][ T6745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.231'. [ 341.860504][ T6745] unsupported nlmsg_type 40 [ 341.969704][ T11] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 341.979561][ T11] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 341.988703][ T11] usb 3-1: Product: syz [ 341.993178][ T11] usb 3-1: SerialNumber: syz [ 342.104501][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 342.242002][ T11] usb 3-1: config 0 descriptor?? [ 342.334401][ T11] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 342.699931][ T11] usb 3-1: USB disconnect, device number 6 [ 343.109995][ T6741] sctp: failed to load transform for md5: -2 [ 345.193494][ T26] libceph: connect (1)[c::]:6789 error -101 [ 345.200330][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 345.765615][ T26] libceph: connect (1)[c::]:6789 error -101 [ 345.771924][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 345.823015][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 346.796872][ T6751] ceph: No mds server is up or the cluster is laggy [ 346.817629][ T26] libceph: connect (1)[c::]:6789 error -101 [ 346.824099][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 347.352303][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.359141][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.917746][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 350.055856][ T6797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.245'. [ 350.065210][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.245'. [ 353.470359][ T6794] sctp: failed to load transform for md5: -2 [ 355.626399][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 356.195167][ T26] libceph: connect (1)[c::]:6789 error -101 [ 356.201484][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 356.506204][ T26] libceph: connect (1)[c::]:6789 error -101 [ 356.512613][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 357.062835][ T26] libceph: connect (1)[c::]:6789 error -101 [ 357.069475][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 357.174236][ T6822] ceph: No mds server is up or the cluster is laggy [ 359.516864][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 360.750526][ T6862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.261'. [ 360.760096][ T6862] netlink: 60 bytes leftover after parsing attributes in process `syz.3.261'. [ 361.064860][ T6858] sctp: failed to load transform for md5: -2 [ 361.824622][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 365.052843][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.275'. [ 365.431571][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 367.049217][ T6925] process 'syz.2.283' launched '/dev/fd/3' with NULL argv: empty string added [ 367.344250][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 367.585079][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 367.651868][ T26] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.660376][ T26] usb 5-1: config 0 has no interface number 0 [ 368.165697][ T26] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 368.176143][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.185026][ T26] usb 5-1: Product: syz [ 368.189378][ T26] usb 5-1: Manufacturer: syz [ 368.194098][ T26] usb 5-1: SerialNumber: syz [ 368.433941][ T26] usb 5-1: config 0 descriptor?? [ 368.463043][ T26] usb 5-1: selecting invalid altsetting 1 [ 368.469523][ T26] dvb_ttusb_budget: ttusb_init_controller: error [ 368.476286][ T26] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 368.877949][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.887778][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.006250][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.017285][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.083410][ T26] DVB: Unable to find symbol stv0299_attach() [ 369.335990][ T26] DVB: Unable to find symbol tda8083_attach() [ 369.342460][ T26] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 369.453423][ T26] usb 5-1: USB disconnect, device number 3 [ 370.480642][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.293'. [ 370.638174][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 371.396391][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 371.606313][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 371.657264][ T11] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.665838][ T11] usb 2-1: config 0 has no interface number 0 [ 371.765770][ T11] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 371.776099][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.784376][ T11] usb 2-1: Product: syz [ 371.789157][ T11] usb 2-1: Manufacturer: syz [ 371.794091][ T11] usb 2-1: SerialNumber: syz [ 371.974019][ T11] usb 2-1: config 0 descriptor?? [ 372.061626][ T11] usb 2-1: selecting invalid altsetting 1 [ 372.068260][ T11] dvb_ttusb_budget: ttusb_init_controller: error [ 372.074996][ T11] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 372.674071][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.684940][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.669464][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.679505][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.937276][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.947410][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.151661][ T11] DVB: Unable to find symbol stv0299_attach() [ 374.288790][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 374.362993][ T11] DVB: Unable to find symbol tda8083_attach() [ 374.370025][ T11] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 374.545398][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 374.558409][ T11] usb 2-1: USB disconnect, device number 9 [ 374.566711][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 374.598156][ T6930] udevd[6930]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 374.603787][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.618901][ T9] usb 3-1: config 0 has no interface number 0 [ 374.699818][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 374.709295][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.717689][ T9] usb 3-1: Product: syz [ 374.722090][ T9] usb 3-1: Manufacturer: syz [ 374.727000][ T9] usb 3-1: SerialNumber: syz [ 374.771341][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 374.837418][ T5847] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 374.849360][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.857779][ T5847] usb 4-1: Product: syz [ 374.862188][ T5847] usb 4-1: Manufacturer: syz [ 374.867629][ T5847] usb 4-1: SerialNumber: syz [ 374.887907][ T9] usb 3-1: config 0 descriptor?? [ 374.959652][ T9] usb 3-1: selecting invalid altsetting 1 [ 374.967115][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 374.974294][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 375.047521][ T5847] r8152-cfgselector 4-1: Unknown version 0x0000 [ 375.054118][ T5847] r8152-cfgselector 4-1: config 0 descriptor?? [ 375.373118][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 375.456019][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.466495][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.556181][ T9] DVB: Unable to find symbol stv0299_attach() [ 375.787833][ T9] DVB: Unable to find symbol tda8083_attach() [ 375.794166][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 375.844649][ T9] usb 3-1: USB disconnect, device number 7 [ 376.242448][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 377.588653][ T26] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 379.448585][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 379.679396][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 379.723092][ T26] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.731716][ T26] usb 4-1: config 0 has no interface number 0 [ 379.868345][ T26] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 379.878337][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.886814][ T26] usb 4-1: Product: syz [ 379.891202][ T26] usb 4-1: Manufacturer: syz [ 379.896244][ T26] usb 4-1: SerialNumber: syz [ 380.044631][ T26] usb 4-1: config 0 descriptor?? [ 380.080643][ T26] usb 4-1: selecting invalid altsetting 1 [ 380.087528][ T26] dvb_ttusb_budget: ttusb_init_controller: error [ 380.094062][ T26] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 380.492111][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.502125][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.534111][ T26] DVB: Unable to find symbol stv0299_attach() [ 380.549778][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.559992][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.818671][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 380.825489][ T26] DVB: Unable to find symbol tda8083_attach() [ 380.834035][ T26] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 380.874374][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.884412][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.027822][ T26] usb 4-1: USB disconnect, device number 11 [ 381.335297][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 381.517068][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 381.555498][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.563807][ T9] usb 5-1: config 0 has no interface number 0 [ 381.645544][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 381.655219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.663512][ T9] usb 5-1: Product: syz [ 381.668081][ T9] usb 5-1: Manufacturer: syz [ 381.672914][ T9] usb 5-1: SerialNumber: syz [ 381.757741][ T9] usb 5-1: config 0 descriptor?? [ 381.790092][ T9] usb 5-1: selecting invalid altsetting 1 [ 381.796765][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 381.803302][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 381.888681][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 382.004281][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.014176][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.367755][ T9] DVB: Unable to find symbol stv0299_attach() [ 382.748109][ T9] DVB: Unable to find symbol tda8083_attach() [ 382.754578][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 382.867030][ T9] usb 5-1: USB disconnect, device number 4 [ 383.854132][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 384.875225][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 385.055510][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 385.070307][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.078831][ T9] usb 1-1: config 0 has no interface number 0 [ 385.137630][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 385.147593][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.156342][ T9] usb 1-1: Product: syz [ 385.160741][ T9] usb 1-1: Manufacturer: syz [ 385.165640][ T9] usb 1-1: SerialNumber: syz [ 385.246062][ T9] usb 1-1: config 0 descriptor?? [ 385.282938][ T9] usb 1-1: selecting invalid altsetting 1 [ 385.289522][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 385.296607][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 385.460821][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.338'. [ 385.668569][ T9] DVB: Unable to find symbol stv0299_attach() [ 385.692924][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.703417][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.809821][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.820627][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.974403][ T9] DVB: Unable to find symbol tda8083_attach() [ 385.981119][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 386.156158][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.166355][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.246081][ T26] usb 1-1: USB disconnect, device number 6 [ 386.805079][ T3063] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 386.985918][ T3063] usb 4-1: Using ep0 maxpacket: 8 [ 387.049089][ T3063] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.057752][ T3063] usb 4-1: config 0 has no interface number 0 [ 387.115912][ T3063] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 387.125595][ T3063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.133862][ T3063] usb 4-1: Product: syz [ 387.138574][ T3063] usb 4-1: Manufacturer: syz [ 387.143426][ T3063] usb 4-1: SerialNumber: syz [ 387.241515][ T3063] usb 4-1: config 0 descriptor?? [ 387.291064][ T3063] usb 4-1: selecting invalid altsetting 1 [ 387.297923][ T3063] dvb_ttusb_budget: ttusb_init_controller: error [ 387.304569][ T3063] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 387.491084][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.501161][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.659251][ T3063] DVB: Unable to find symbol stv0299_attach() [ 388.031295][ T3063] DVB: Unable to find symbol tda8083_attach() [ 388.037814][ T3063] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 388.085178][ T3063] usb 4-1: USB disconnect, device number 12 [ 388.303393][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 389.475283][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.350'. [ 391.505366][ T3063] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 391.685082][ T3063] usb 5-1: Using ep0 maxpacket: 8 [ 391.701243][ T3063] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 391.710014][ T3063] usb 5-1: config 0 has no interface number 0 [ 391.781679][ T3063] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 391.791572][ T3063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.800688][ T3063] usb 5-1: Product: syz [ 391.805362][ T3063] usb 5-1: Manufacturer: syz [ 391.810201][ T3063] usb 5-1: SerialNumber: syz [ 391.858232][ T3063] usb 5-1: config 0 descriptor?? [ 391.883529][ T3063] usb 5-1: selecting invalid altsetting 1 [ 391.890240][ T3063] dvb_ttusb_budget: ttusb_init_controller: error [ 391.897164][ T3063] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 392.098419][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.108554][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.296196][ T3063] DVB: Unable to find symbol stv0299_attach() [ 392.345433][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 392.345506][ T30] audit: type=1326 audit(1741505929.639:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7fc00000 [ 392.436957][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 392.592345][ T3063] DVB: Unable to find symbol tda8083_attach() [ 392.599113][ T3063] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 392.686176][ T3063] usb 5-1: USB disconnect, device number 5 [ 394.233391][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.366'. [ 395.425153][ T3063] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 395.629903][ T3063] usb 3-1: Using ep0 maxpacket: 8 [ 395.707678][ T3063] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 395.717512][ T3063] usb 3-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 395.726163][ T3063] usb 3-1: Product: syz [ 395.730545][ T3063] usb 3-1: Manufacturer: syz [ 395.735505][ T3063] usb 3-1: SerialNumber: syz [ 395.782302][ T3063] usb 3-1: config 0 descriptor?? [ 395.905118][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 396.078718][ T3063] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 396.115027][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 396.185465][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.210186][ T9] usb 5-1: config 112 has an invalid interface number: 196 but max is 0 [ 396.219224][ T9] usb 5-1: config 112 has no interface number 0 [ 396.225988][ T9] usb 5-1: config 112 interface 196 has no altsetting 0 [ 396.265796][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 396.290058][ T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=42.d7 [ 396.299672][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.308253][ T9] usb 5-1: Product: syz [ 396.312655][ T9] usb 5-1: Manufacturer: syz [ 396.317840][ T9] usb 5-1: SerialNumber: syz [ 396.653496][ T9] usb 5-1: selecting invalid altsetting 1 [ 396.660079][ T9] comedi comedi0: could not switch to alternate setting 1 [ 396.667658][ T9] usbduxfast 5-1:112.196: driver 'usbduxfast' failed to auto-configure device. [ 396.763590][ T9] usb 5-1: USB disconnect, device number 6 [ 397.043136][ T30] audit: type=1326 audit(1741505934.329:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.066186][ T30] audit: type=1326 audit(1741505934.329:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.088996][ T30] audit: type=1326 audit(1741505934.339:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.164630][ T3063] gspca_sunplus: reg_w_riv err -71 [ 397.170727][ T3063] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 397.203228][ T3063] usb 3-1: USB disconnect, device number 8 [ 397.245826][ T5847] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 397.275021][ T30] audit: type=1326 audit(1741505934.529:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.298781][ T30] audit: type=1326 audit(1741505934.529:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.321810][ T30] audit: type=1326 audit(1741505934.579:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.345078][ T30] audit: type=1326 audit(1741505934.579:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.368137][ T30] audit: type=1326 audit(1741505934.599:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.390837][ T30] audit: type=1326 audit(1741505934.599:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.413483][ T30] audit: type=1326 audit(1741505934.599:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.436301][ T30] audit: type=1326 audit(1741505934.599:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.475123][ T5847] usb 4-1: device descriptor read/64, error -71 [ 397.560866][ T30] audit: type=1326 audit(1741505934.769:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.583549][ T30] audit: type=1326 audit(1741505934.769:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.606154][ T30] audit: type=1326 audit(1741505934.779:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.629109][ T30] audit: type=1326 audit(1741505934.829:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.651415][ T30] audit: type=1326 audit(1741505934.829:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.674140][ T30] audit: type=1326 audit(1741505934.829:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7190 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 397.856567][ T5847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 398.115666][ T5847] usb 4-1: device descriptor read/64, error -71 [ 398.288025][ T5847] usb usb4-port1: attempt power cycle [ 398.774280][ T5847] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 398.929179][ T5847] usb 4-1: device descriptor read/8, error -71 [ 399.207027][ T5847] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 399.357629][ T5847] usb 4-1: device descriptor read/8, error -71 [ 399.471800][ T5847] usb usb4-port1: unable to enumerate USB device [ 402.239462][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.379'. [ 402.431235][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 402.438040][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 402.726653][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 402.733175][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 403.276383][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 403.282776][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 403.357815][ T7210] ceph: No mds server is up or the cluster is laggy [ 404.829382][ T5847] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 404.995077][ T5847] usb 3-1: device descriptor read/64, error -71 [ 405.041615][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 405.041691][ T30] audit: type=1326 audit(1741505942.339:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.155621][ T30] audit: type=1326 audit(1741505942.379:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.178828][ T30] audit: type=1326 audit(1741505942.389:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.201271][ T30] audit: type=1326 audit(1741505942.389:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.224234][ T30] audit: type=1326 audit(1741505942.399:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.246658][ T30] audit: type=1326 audit(1741505942.399:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.269072][ T30] audit: type=1326 audit(1741505942.399:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.291382][ T30] audit: type=1326 audit(1741505942.399:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.314035][ T30] audit: type=1326 audit(1741505942.399:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.336320][ T30] audit: type=1326 audit(1741505942.409:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 405.621138][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 405.806847][ T5847] usb 3-1: device descriptor read/64, error -71 [ 405.933154][ T5847] usb usb3-port1: attempt power cycle [ 406.675636][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 406.759235][ T5847] usb 3-1: device descriptor read/8, error -71 [ 406.952803][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 407.121414][ T5847] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 407.202347][ T5847] usb 3-1: device descriptor read/8, error -71 [ 407.316969][ T5847] usb usb3-port1: unable to enumerate USB device [ 408.779958][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.786983][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.015226][ T7260] netlink: 64 bytes leftover after parsing attributes in process `syz.2.396'. [ 411.024496][ T7260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.396'. [ 413.077749][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 413.084321][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 413.416486][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 413.423162][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 414.077638][ T7263] ceph: No mds server is up or the cluster is laggy [ 415.107652][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 415.405457][ T5847] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 415.555333][ T5847] usb 3-1: device descriptor read/64, error -71 [ 415.770407][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 415.770584][ T30] audit: type=1326 audit(1741505953.069:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 415.799801][ T30] audit: type=1326 audit(1741505953.069:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 415.859856][ T5847] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 416.531724][ T30] audit: type=1326 audit(1741505953.119:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.555415][ T30] audit: type=1326 audit(1741505953.169:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.578821][ T30] audit: type=1326 audit(1741505953.169:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.601884][ T30] audit: type=1326 audit(1741505953.169:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.625125][ T30] audit: type=1326 audit(1741505953.179:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.625177][ T5847] usb 3-1: device descriptor read/64, error -71 [ 416.654285][ T30] audit: type=1326 audit(1741505953.179:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.677279][ T30] audit: type=1326 audit(1741505953.179:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.701320][ T30] audit: type=1326 audit(1741505953.179:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 416.739443][ T5847] usb usb3-port1: attempt power cycle [ 417.116843][ T5847] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 417.199818][ T5847] usb 3-1: device descriptor read/8, error -71 [ 417.465292][ T5847] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 417.548315][ T5847] usb 3-1: device descriptor read/8, error -71 [ 417.676634][ T5847] usb usb3-port1: unable to enumerate USB device [ 419.646141][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 423.177349][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 424.139245][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.157447][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.169653][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.190019][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.212754][ T5796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 424.225505][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.376951][ T5081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.467327][ T5081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.517823][ T5081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.567706][ T5081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.579605][ T5081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 424.590017][ T5081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.999430][ T7338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.421'. [ 425.258194][ T3063] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 425.445674][ T3063] usb 2-1: device descriptor read/64, error -71 [ 425.720361][ T3063] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 425.898372][ T3063] usb 2-1: device descriptor read/64, error -71 [ 426.025604][ T3063] usb usb2-port1: attempt power cycle [ 426.407505][ T3063] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 426.471202][ T3063] usb 2-1: device descriptor read/8, error -71 [ 426.507636][ T26] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 426.655441][ T5081] Bluetooth: hci5: command tx timeout [ 426.694901][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 426.705220][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 426.746652][ T3063] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 426.757214][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 426.768638][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 426.780185][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.789810][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.819456][ T3063] usb 2-1: device descriptor read/8, error -71 [ 426.923479][ T26] usb 3-1: config 0 descriptor?? [ 427.000366][ T7352] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 427.002913][ T3063] usb usb2-port1: unable to enumerate USB device [ 427.123809][ T26] hub 3-1:0.0: USB hub found [ 427.962335][ T7352] overlayfs: missing 'lowerdir' [ 428.737367][ T5081] Bluetooth: hci5: command tx timeout [ 428.763677][ T26] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 428.788306][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 428.795643][ T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.839899][ T26] usb 3-1: USB disconnect, device number 17 [ 429.284617][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.630883][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.978488][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.450259][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.836150][ T5081] Bluetooth: hci5: command tx timeout [ 431.263247][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.271228][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.279078][ T7331] bridge_slave_0: entered allmulticast mode [ 431.287738][ T7331] bridge_slave_0: entered promiscuous mode [ 431.670507][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.678739][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.686601][ T7331] bridge_slave_1: entered allmulticast mode [ 431.695280][ T7331] bridge_slave_1: entered promiscuous mode [ 431.771384][ T52] bridge_slave_1: left allmulticast mode [ 431.777688][ T52] bridge_slave_1: left promiscuous mode [ 431.784571][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.786983][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 431.862854][ T52] bridge_slave_0: left allmulticast mode [ 431.869272][ T52] bridge_slave_0: left promiscuous mode [ 431.876182][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.656001][ T7363] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 432.662434][ T7363] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 432.760319][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.793392][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.819670][ T52] bond0 (unregistering): Released all slaves [ 433.196236][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.232939][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.697175][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.434'. [ 433.789637][ T7331] team0: Port device team_slave_0 added [ 433.933877][ T52] hsr_slave_0: left promiscuous mode [ 433.970770][ T52] hsr_slave_1: left promiscuous mode [ 433.983762][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.991929][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.028685][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.036608][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.165196][ T52] veth1_macvtap: left promiscuous mode [ 434.171091][ T52] veth0_macvtap: left promiscuous mode [ 434.177712][ T52] veth1_vlan: left promiscuous mode [ 434.183283][ T52] veth0_vlan: left promiscuous mode [ 434.549045][ T3063] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 434.629687][ T5848] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 434.703345][ T3063] usb 5-1: device descriptor read/64, error -71 [ 434.833810][ T52] team0 (unregistering): Port device team_slave_1 removed [ 434.949561][ T52] team0 (unregistering): Port device team_slave_0 removed [ 435.217281][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 435.223555][ T3063] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 435.311102][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 435.322787][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 435.335050][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.343758][ T7331] team0: Port device team_slave_1 added [ 435.344547][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.369080][ T5848] usb 4-1: config 0 descriptor?? [ 435.377873][ T7397] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 435.457140][ T5848] hub 4-1:0.0: USB hub found [ 435.512016][ T3063] usb 5-1: device descriptor read/64, error -71 [ 435.637394][ T3063] usb usb5-port1: attempt power cycle [ 435.657393][ T7397] overlayfs: missing 'lowerdir' [ 435.715258][ T5848] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 435.817232][ T5848] usbhid 4-1:0.0: can't add hid device: -71 [ 435.822757][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.823767][ T5848] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 435.830688][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.830833][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.873387][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.884905][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.911504][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.065812][ T3063] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 436.108956][ T3063] usb 5-1: device descriptor read/8, error -71 [ 436.117400][ T5848] usb 4-1: USB disconnect, device number 17 [ 436.392876][ T3063] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 436.433166][ T3063] usb 5-1: device descriptor read/8, error -71 [ 436.473321][ T7331] hsr_slave_0: entered promiscuous mode [ 436.483615][ T7331] hsr_slave_1: entered promiscuous mode [ 436.492640][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.500803][ T7331] Cannot create hsr debugfs directory [ 436.576776][ T3063] usb usb5-port1: unable to enumerate USB device [ 439.252020][ T7331] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.359746][ T7331] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.487597][ T7331] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.590603][ T7331] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.836689][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 442.097269][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 442.139647][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.256933][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.357426][ T3861] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.365210][ T3861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.379505][ T3861] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.387036][ T3861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.538067][ T7331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.549852][ T7331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 443.761276][ T3063] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 444.018409][ T3063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 444.029028][ T3063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.039755][ T3063] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 444.227605][ T3063] usb 2-1: string descriptor 0 read error: -22 [ 444.234452][ T3063] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.244540][ T3063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.351157][ T7452] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.416496][ T3063] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 444.655827][ T11] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 444.661499][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.667737][ T9] usb 2-1: USB disconnect, device number 14 [ 444.851295][ T11] usb 5-1: device descriptor read/64, error -71 [ 445.115502][ T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 445.265094][ T11] usb 5-1: device descriptor read/64, error -71 [ 445.385629][ T11] usb usb5-port1: attempt power cycle [ 445.769752][ T11] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 445.778560][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 445.778628][ T30] audit: type=1326 audit(1741505983.069:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 445.807564][ T30] audit: type=1326 audit(1741505983.069:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 445.877806][ T11] usb 5-1: device descriptor read/8, error -71 [ 446.035878][ T30] audit: type=1326 audit(1741505983.199:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.058525][ T30] audit: type=1326 audit(1741505983.199:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.081572][ T30] audit: type=1326 audit(1741505983.199:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.104189][ T30] audit: type=1326 audit(1741505983.199:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.126898][ T30] audit: type=1326 audit(1741505983.209:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.149321][ T30] audit: type=1326 audit(1741505983.209:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.171764][ T30] audit: type=1326 audit(1741505983.209:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.195238][ T30] audit: type=1326 audit(1741505983.209:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.455" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 446.475164][ T11] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 446.603656][ T11] usb 5-1: device descriptor read/8, error -71 [ 446.956590][ T11] usb usb5-port1: unable to enumerate USB device [ 447.504282][ T7331] veth0_vlan: entered promiscuous mode [ 447.629823][ T7331] veth1_vlan: entered promiscuous mode [ 447.709342][ T7491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 448.010500][ T7331] veth0_macvtap: entered promiscuous mode [ 448.183212][ T7331] veth1_macvtap: entered promiscuous mode [ 448.403238][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.415220][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.425741][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.436892][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.447435][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.458296][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.468582][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.479500][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.496171][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.533558][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.545210][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.555595][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.566619][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.577400][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.588382][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.598664][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.609594][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.625338][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.165632][ T7331] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.174699][ T7331] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.184102][ T7331] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.193359][ T7331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.570396][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 452.338553][ T11] libceph: connect (1)[c::]:6789 error -101 [ 452.345130][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 452.636715][ T11] libceph: connect (1)[c::]:6789 error -101 [ 452.643150][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 453.186265][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 453.192642][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 453.281730][ T11] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 453.421292][ T7509] ceph: No mds server is up or the cluster is laggy [ 453.536514][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 453.551069][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.561371][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 453.684364][ T11] usb 5-1: string descriptor 0 read error: -22 [ 453.691509][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.700998][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.762822][ T7524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 453.803703][ T11] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 454.102823][ T5848] usb 5-1: USB disconnect, device number 15 [ 454.431941][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 454.432018][ T30] audit: type=1326 audit(1741505991.719:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 454.461859][ T30] audit: type=1326 audit(1741505991.739:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 454.484526][ T30] audit: type=1326 audit(1741505991.739:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 454.507243][ T30] audit: type=1326 audit(1741505991.759:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.297139][ T30] audit: type=1326 audit(1741505991.889:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.319743][ T30] audit: type=1326 audit(1741505991.889:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.342320][ T30] audit: type=1326 audit(1741505991.909:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.365583][ T30] audit: type=1326 audit(1741505991.909:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.388074][ T30] audit: type=1326 audit(1741505991.909:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.410684][ T30] audit: type=1326 audit(1741505991.919:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 455.628911][ T7549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'. [ 457.206676][ T5848] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 457.396161][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 457.448891][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 457.461944][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.594515][ T5848] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 457.604106][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.612712][ T5848] usb 3-1: Product: syz [ 457.617844][ T5848] usb 3-1: Manufacturer: syz [ 457.622678][ T5848] usb 3-1: SerialNumber: syz [ 457.688542][ T5848] usb 3-1: config 0 descriptor?? [ 457.709009][ T5848] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 457.718778][ T5848] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 457.786194][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.472'. [ 458.366817][ T5848] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 458.382039][ T5848] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 459.358106][ T5848] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 459.417415][ T5848] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 459.706109][ T5848] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 459.715218][ T5848] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 459.904228][ T5848] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 459.995916][ T5848] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 460.005571][ T5848] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 460.077917][ T5848] usb 3-1: USB disconnect, device number 18 [ 461.315032][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.323141][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.962357][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.970619][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.762820][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 463.762900][ T30] audit: type=1326 audit(1741506001.039:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 463.792209][ T30] audit: type=1326 audit(1741506001.049:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.467414][ T30] audit: type=1326 audit(1741506001.299:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.490202][ T30] audit: type=1326 audit(1741506001.299:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.512510][ T30] audit: type=1326 audit(1741506001.309:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.535471][ T30] audit: type=1326 audit(1741506001.309:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.557844][ T30] audit: type=1326 audit(1741506001.309:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.580290][ T30] audit: type=1326 audit(1741506001.309:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.602952][ T30] audit: type=1326 audit(1741506001.309:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.625246][ T30] audit: type=1326 audit(1741506001.319:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 464.650515][ T3063] libceph: connect (1)[c::]:6789 error -1 [ 464.656795][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 465.006202][ T3063] libceph: connect (1)[c::]:6789 error -1 [ 465.012408][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 465.500512][ T7596] ceph: No mds server is up or the cluster is laggy [ 465.628214][ T3063] libceph: connect (1)[c::]:6789 error -1 [ 465.635062][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 470.217855][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.224459][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.249511][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 474.256729][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 474.610342][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 474.617179][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 475.271665][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 475.271745][ T30] audit: type=1326 audit(1741506012.559:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 475.307717][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 475.314088][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 475.465971][ T7663] ceph: No mds server is up or the cluster is laggy [ 475.927664][ T30] audit: type=1326 audit(1741506012.649:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 475.951476][ T30] audit: type=1326 audit(1741506012.649:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 475.974649][ T30] audit: type=1326 audit(1741506012.729:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 475.997347][ T30] audit: type=1326 audit(1741506012.729:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.019718][ T30] audit: type=1326 audit(1741506012.739:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.042720][ T30] audit: type=1326 audit(1741506012.739:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.065101][ T30] audit: type=1326 audit(1741506012.739:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.088919][ T30] audit: type=1326 audit(1741506012.779:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.111174][ T30] audit: type=1326 audit(1741506012.779:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 476.267842][ T3063] libceph: connect (1)[c::]:6789 error -101 [ 476.274526][ T3063] libceph: mon0 (1)[c::]:6789 connect error [ 481.075305][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.085854][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.095329][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.107553][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.118034][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.127691][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.155885][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.167252][ T5081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.182694][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.363031][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.467042][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.505214][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.736626][ T7715] chnl_net:caif_netlink_parms(): no params data found [ 483.695095][ T5796] Bluetooth: hci2: command tx timeout [ 484.857266][ T7744] tipc: Started in network mode [ 484.862405][ T7744] tipc: Node identity 4, cluster identity 4711 [ 484.870282][ T7744] tipc: Node number set to 4 [ 485.814989][ T5796] Bluetooth: hci2: command tx timeout [ 485.968265][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.976781][ T7715] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.984437][ T7715] bridge_slave_0: entered allmulticast mode [ 485.992903][ T7715] bridge_slave_0: entered promiscuous mode [ 486.246007][ T7715] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.253851][ T7715] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.262164][ T7715] bridge_slave_1: entered allmulticast mode [ 486.271657][ T7715] bridge_slave_1: entered promiscuous mode [ 486.470991][ T4105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.526154][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 486.670131][ T4105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.935250][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 486.935334][ T30] audit: type=1326 audit(1741506024.189:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 486.964432][ T30] audit: type=1326 audit(1741506024.189:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 486.992530][ T30] audit: type=1326 audit(1741506024.259:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.015358][ T30] audit: type=1326 audit(1741506024.259:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.037999][ T30] audit: type=1326 audit(1741506024.289:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.060738][ T30] audit: type=1326 audit(1741506024.289:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.083635][ T30] audit: type=1326 audit(1741506024.289:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.106412][ T30] audit: type=1326 audit(1741506024.289:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.128819][ T30] audit: type=1326 audit(1741506024.319:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.151354][ T30] audit: type=1326 audit(1741506024.319:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7761 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 487.368754][ T7715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.408319][ T7715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.466773][ T4105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.855121][ T5796] Bluetooth: hci2: command tx timeout [ 488.020113][ T4105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.123337][ T7715] team0: Port device team_slave_0 added [ 488.225040][ T7715] team0: Port device team_slave_1 added [ 490.057606][ T5796] Bluetooth: hci2: command tx timeout [ 491.659781][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.667407][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.694043][ T7715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.805215][ T5846] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 491.948157][ T4105] bridge_slave_1: left allmulticast mode [ 491.954113][ T4105] bridge_slave_1: left promiscuous mode [ 491.961123][ T4105] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.042352][ T5846] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.052519][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 492.059475][ T5846] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 492.068809][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.085195][ T5846] usb 2-1: config 0 descriptor?? [ 492.094240][ T4105] bridge_slave_0: left allmulticast mode [ 492.101087][ T4105] bridge_slave_0: left promiscuous mode [ 492.108381][ T4105] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.485340][ T4105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.533982][ T4105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.570238][ T4105] bond0 (unregistering): Released all slaves [ 492.605783][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.615717][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.672080][ T7715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.679443][ T7715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.706024][ T7715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.905594][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 492.912166][ T5846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 493.123487][ T5846] usb 2-1: USB disconnect, device number 15 [ 493.353272][ T4105] hsr_slave_0: left promiscuous mode [ 493.466099][ T4105] hsr_slave_1: left promiscuous mode [ 493.473853][ T4105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.481965][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.618829][ T4105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.626865][ T4105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.756304][ T4105] veth1_macvtap: left promiscuous mode [ 493.762101][ T4105] veth0_macvtap: left promiscuous mode [ 493.768122][ T4105] veth1_vlan: left promiscuous mode [ 493.773587][ T4105] veth0_vlan: left promiscuous mode [ 495.297068][ T4105] team0 (unregistering): Port device team_slave_1 removed [ 495.337036][ T4105] team0 (unregistering): Port device team_slave_0 removed [ 496.092585][ T7802] tipc: Started in network mode [ 496.098113][ T7802] tipc: Node identity 4, cluster identity 4711 [ 496.104496][ T7802] tipc: Node number set to 4 [ 496.253641][ T7715] hsr_slave_0: entered promiscuous mode [ 496.264050][ T7715] hsr_slave_1: entered promiscuous mode [ 496.977972][ T7818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'. [ 499.547901][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 499.799951][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 499.846737][ T7715] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 499.958292][ T11] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 499.968265][ T11] usb 6-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 499.977705][ T11] usb 6-1: Product: syz [ 499.982189][ T11] usb 6-1: Manufacturer: syz [ 499.987319][ T11] usb 6-1: SerialNumber: syz [ 500.021065][ T7715] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.082419][ T7715] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.097577][ T11] usb 6-1: config 0 descriptor?? [ 500.201385][ T7715] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.381683][ T11] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 501.239475][ T11] gspca_sunplus: reg_w_riv err -71 [ 501.245512][ T11] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 501.418085][ T11] usb 6-1: USB disconnect, device number 2 [ 501.687347][ T7715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.972152][ T7715] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.320586][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.328380][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.483643][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.491485][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.575648][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 504.825482][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 504.879735][ T5846] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 504.891202][ T5846] usb 6-1: config 2 has no interface number 0 [ 504.897782][ T5846] usb 6-1: config 2 interface 31 has no altsetting 0 [ 505.056280][ T5846] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 505.065997][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.074130][ T5846] usb 6-1: Product: syz [ 505.078676][ T5846] usb 6-1: Manufacturer: syz [ 505.083444][ T5846] usb 6-1: SerialNumber: syz [ 505.541605][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.856613][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.866703][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.991922][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.002124][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.663835][ T5846] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 506.681901][ T5846] usb 6-1: USB disconnect, device number 3 [ 506.817791][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 508.267479][ T5846] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 508.598388][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 508.758994][ T5846] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 508.768641][ T5846] usb 3-1: New USB device strings: Mfr=136, Product=2, SerialNumber=3 [ 508.777536][ T5846] usb 3-1: Product: syz [ 508.782158][ T5846] usb 3-1: Manufacturer: syz [ 508.787431][ T5846] usb 3-1: SerialNumber: syz [ 509.016399][ T5846] usb 3-1: config 0 descriptor?? [ 509.134434][ T7715] veth0_vlan: entered promiscuous mode [ 509.193338][ T7715] veth1_vlan: entered promiscuous mode [ 509.291415][ T5846] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 509.624434][ T7715] veth0_macvtap: entered promiscuous mode [ 509.742851][ T7715] veth1_macvtap: entered promiscuous mode [ 509.995664][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.007033][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.017503][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.028399][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.038952][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.049897][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.060363][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.071351][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.086550][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.162597][ T5846] gspca_sunplus: reg_w_riv err -71 [ 510.168793][ T5846] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 510.454146][ T5846] usb 3-1: USB disconnect, device number 19 [ 510.474362][ T6813] udevd[6813]: setting owner of /dev/bus/usb/003/019 to uid=0, gid=0 failed: No such file or directory [ 510.534014][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.545396][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.555616][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.566568][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.577111][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.588106][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.598523][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.609542][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.626921][ T7715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.362184][ T7715] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.372880][ T7715] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.382681][ T7715] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.393368][ T7715] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.720981][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.551'. [ 514.847190][ T5848] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 515.066033][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 515.119877][ T5848] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 515.128885][ T5848] usb 3-1: config 2 has no interface number 0 [ 515.135610][ T5848] usb 3-1: config 2 interface 31 has no altsetting 0 [ 515.281219][ T5848] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 515.290957][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.299916][ T5848] usb 3-1: Product: syz [ 515.305107][ T5848] usb 3-1: Manufacturer: syz [ 515.309951][ T5848] usb 3-1: SerialNumber: syz [ 515.828841][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.839494][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.908259][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.918260][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.353572][ T5848] ===================================================== [ 516.361710][ T5848] BUG: KMSAN: uninit-value in mii_nway_restart+0x119/0x1e0 [ 516.369365][ T5848] mii_nway_restart+0x119/0x1e0 [ 516.374376][ T5848] ch9200_bind+0x238/0xeb0 [ 516.379053][ T5848] usbnet_probe+0xdb0/0x3eb0 [ 516.383781][ T5848] usb_probe_interface+0xd33/0x12e0 [ 516.389462][ T5848] really_probe+0x4dc/0xd90 [ 516.394174][ T5848] __driver_probe_device+0x2ab/0x5d0 [ 516.401579][ T5848] driver_probe_device+0x72/0x890 [ 516.409933][ T5848] __device_attach_driver+0x568/0x9e0 [ 516.416304][ T5848] bus_for_each_drv+0x403/0x620 [ 516.421543][ T5848] __device_attach+0x3c1/0x650 [ 516.426772][ T5848] device_initial_probe+0x32/0x40 [ 516.431989][ T5848] bus_probe_device+0x3dc/0x5c0 [ 516.437315][ T5848] device_add+0x13aa/0x1ba0 [ 516.442162][ T5848] usb_set_configuration+0x31c9/0x38d0 [ 516.448352][ T5848] usb_generic_driver_probe+0x109/0x2a0 [ 516.454180][ T5848] usb_probe_device+0x3a7/0x690 [ 516.459643][ T5848] really_probe+0x4dc/0xd90 [ 516.464436][ T5848] __driver_probe_device+0x2ab/0x5d0 [ 516.472185][ T5848] driver_probe_device+0x72/0x890 [ 516.477661][ T5848] __device_attach_driver+0x568/0x9e0 [ 516.483565][ T5848] bus_for_each_drv+0x403/0x620 [ 516.489003][ T5848] __device_attach+0x3c1/0x650 [ 516.494055][ T5848] device_initial_probe+0x32/0x40 [ 516.499732][ T5848] bus_probe_device+0x3dc/0x5c0 [ 516.505088][ T5848] device_add+0x13aa/0x1ba0 [ 516.509820][ T5848] usb_new_device+0x15f0/0x2470 [ 516.515156][ T5848] hub_event+0x4ffb/0x72d0 [ 516.519726][ T5848] process_scheduled_works+0xc1a/0x1e80 [ 516.525547][ T5848] worker_thread+0xea7/0x14f0 [ 516.530378][ T5848] kthread+0x6b9/0xef0 [ 516.534663][ T5848] ret_from_fork+0x6d/0x90 [ 516.539390][ T5848] ret_from_fork_asm+0x1a/0x30 [ 516.544341][ T5848] [ 516.546933][ T5848] Local variable buff created at: [ 516.552095][ T5848] ch9200_mdio_read+0x3c/0x100 [ 516.557389][ T5848] mii_nway_restart+0x8a/0x1e0 [ 516.562450][ T5848] [ 516.565373][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/1:5 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 516.576587][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 516.586940][ T5848] Workqueue: usb_hub_wq hub_event [ 516.592238][ T5848] ===================================================== [ 516.599653][ T5848] Disabling lock debugging due to kernel taint [ 516.606096][ T5848] Kernel panic - not syncing: kmsan.panic set ... [ 516.612688][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: kworker/1:5 Tainted: G B 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 516.625269][ T5848] Tainted: [B]=BAD_PAGE [ 516.629553][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 516.639792][ T5848] Workqueue: usb_hub_wq hub_event [ 516.645090][ T5848] Call Trace: [ 516.648508][ T5848] [ 516.651572][ T5848] dump_stack_lvl+0x216/0x2d0 [ 516.656548][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 516.662650][ T5848] dump_stack+0x1e/0x24 [ 516.667003][ T5848] panic+0x4e2/0xcf0 [ 516.671136][ T5848] ? kmsan_get_metadata+0xd1/0x1c0 [ 516.676501][ T5848] kmsan_report+0x2c7/0x2d0 [ 516.681325][ T5848] ? __device_attach+0x3c1/0x650 [ 516.686467][ T5848] ? worker_thread+0xea7/0x14f0 [ 516.693144][ T5848] ? __switch_to_asm+0x50/0x60 [ 516.699430][ T5848] ? __msan_warning+0x95/0x120 [ 516.704618][ T5848] ? mii_nway_restart+0x119/0x1e0 [ 516.709800][ T5848] ? ch9200_bind+0x238/0xeb0 [ 516.714535][ T5848] ? usbnet_probe+0xdb0/0x3eb0 [ 516.719725][ T5848] ? usb_probe_interface+0xd33/0x12e0 [ 516.725337][ T5848] ? really_probe+0x4dc/0xd90 [ 516.730147][ T5848] ? __driver_probe_device+0x2ab/0x5d0 [ 516.735734][ T5848] ? driver_probe_device+0x72/0x890 [ 516.741337][ T5848] ? __device_attach_driver+0x568/0x9e0 [ 516.747057][ T5848] ? bus_for_each_drv+0x403/0x620 [ 516.752322][ T5848] ? __device_attach+0x3c1/0x650 [ 516.757453][ T5848] ? device_initial_probe+0x32/0x40 [ 516.762768][ T5848] ? bus_probe_device+0x3dc/0x5c0 [ 516.768033][ T5848] ? device_add+0x13aa/0x1ba0 [ 516.772879][ T5848] ? usb_set_configuration+0x31c9/0x38d0 [ 516.778675][ T5848] ? usb_generic_driver_probe+0x109/0x2a0 [ 516.784787][ T5848] ? usb_probe_device+0x3a7/0x690 [ 516.790021][ T5848] ? really_probe+0x4dc/0xd90 [ 516.795187][ T5848] ? __driver_probe_device+0x2ab/0x5d0 [ 516.800863][ T5848] ? driver_probe_device+0x72/0x890 [ 516.806222][ T5848] ? __device_attach_driver+0x568/0x9e0 [ 516.812244][ T5848] ? bus_for_each_drv+0x403/0x620 [ 516.817520][ T5848] ? __device_attach+0x3c1/0x650 [ 516.822598][ T5848] ? device_initial_probe+0x32/0x40 [ 516.827930][ T5848] ? bus_probe_device+0x3dc/0x5c0 [ 516.833131][ T5848] ? device_add+0x13aa/0x1ba0 [ 516.837981][ T5848] ? usb_new_device+0x15f0/0x2470 [ 516.843131][ T5848] ? hub_event+0x4ffb/0x72d0 [ 516.847854][ T5848] ? process_scheduled_works+0xc1a/0x1e80 [ 516.853715][ T5848] ? worker_thread+0xea7/0x14f0 [ 516.858673][ T5848] ? kthread+0x6b9/0xef0 [ 516.863115][ T5848] ? ret_from_fork+0x6d/0x90 [ 516.867859][ T5848] ? ret_from_fork_asm+0x1a/0x30 [ 516.873014][ T5848] ? control_read+0x25b/0x2d0 [ 516.877822][ T5848] ? kmsan_get_metadata+0x13e/0x1c0 [ 516.883158][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 516.889134][ T5848] __msan_warning+0x95/0x120 [ 516.893846][ T5848] mii_nway_restart+0x119/0x1e0 [ 516.898822][ T5848] ch9200_bind+0x238/0xeb0 [ 516.903450][ T5848] ? __pfx_ch9200_bind+0x10/0x10 [ 516.908519][ T5848] usbnet_probe+0xdb0/0x3eb0 [ 516.913259][ T5848] ? kmsan_get_metadata+0x13e/0x1c0 [ 516.918659][ T5848] ? __pfx_usbnet_probe+0x10/0x10 [ 516.923934][ T5848] usb_probe_interface+0xd33/0x12e0 [ 516.929362][ T5848] ? __pfx_usb_probe_interface+0x10/0x10 [ 516.935131][ T5848] really_probe+0x4dc/0xd90 [ 516.939828][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 516.945990][ T5848] __driver_probe_device+0x2ab/0x5d0 [ 516.951394][ T5848] driver_probe_device+0x72/0x890 [ 516.956555][ T5848] ? kmsan_get_metadata+0x13e/0x1c0 [ 516.961940][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 516.969556][ T5848] __device_attach_driver+0x568/0x9e0 [ 516.975226][ T5848] bus_for_each_drv+0x403/0x620 [ 516.980306][ T5848] ? __pfx___device_attach_driver+0x10/0x10 [ 516.986427][ T5848] __device_attach+0x3c1/0x650 [ 516.991441][ T5848] device_initial_probe+0x32/0x40 [ 516.996631][ T5848] bus_probe_device+0x3dc/0x5c0 [ 517.001684][ T5848] device_add+0x13aa/0x1ba0 [ 517.006522][ T5848] usb_set_configuration+0x31c9/0x38d0 [ 517.012181][ T5848] ? usb_set_configuration+0x8a1/0x38d0 [ 517.018082][ T5848] usb_generic_driver_probe+0x109/0x2a0 [ 517.023804][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 517.029917][ T5848] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 517.036268][ T5848] usb_probe_device+0x3a7/0x690 [ 517.041272][ T5848] ? __pfx_usb_probe_device+0x10/0x10 [ 517.046872][ T5848] really_probe+0x4dc/0xd90 [ 517.051544][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 517.057526][ T5848] __driver_probe_device+0x2ab/0x5d0 [ 517.063060][ T5848] driver_probe_device+0x72/0x890 [ 517.068254][ T5848] ? kmsan_get_metadata+0x13e/0x1c0 [ 517.073612][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 517.079596][ T5848] __device_attach_driver+0x568/0x9e0 [ 517.085104][ T5848] bus_for_each_drv+0x403/0x620 [ 517.090083][ T5848] ? __pfx___device_attach_driver+0x10/0x10 [ 517.096105][ T5848] __device_attach+0x3c1/0x650 [ 517.100981][ T5848] device_initial_probe+0x32/0x40 [ 517.106226][ T5848] bus_probe_device+0x3dc/0x5c0 [ 517.111230][ T5848] device_add+0x13aa/0x1ba0 [ 517.115886][ T5848] usb_new_device+0x15f0/0x2470 [ 517.120879][ T5848] hub_event+0x4ffb/0x72d0 [ 517.125470][ T5848] ? __pfx_hub_event+0x10/0x10 [ 517.130362][ T5848] process_scheduled_works+0xc1a/0x1e80 [ 517.136073][ T5848] worker_thread+0xea7/0x14f0 [ 517.140880][ T5848] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 517.146863][ T5848] kthread+0x6b9/0xef0 [ 517.151045][ T5848] ? __pfx_worker_thread+0x10/0x10 [ 517.156268][ T5848] ? __pfx_kthread+0x10/0x10 [ 517.161410][ T5848] ret_from_fork+0x6d/0x90 [ 517.165964][ T5848] ? __pfx_kthread+0x10/0x10 [ 517.170682][ T5848] ret_from_fork_asm+0x1a/0x30 [ 517.175575][ T5848] [ 517.178851][ T5848] Kernel Offset: disabled [ 517.183325][ T5848] Rebooting in 86400 seconds..