last executing test programs: 14m37.632167244s ago: executing program 4 (id=4647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r2, &(0x7f00000000c0)="510003000000", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c000055"], 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, 0x0, 0x2a) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xa8, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x94, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) 14m32.625027964s ago: executing program 4 (id=4662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(&(0x7f0000000040), 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) dup3(0xffffffffffffffff, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x4}}, 0x28) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 14m31.548582634s ago: executing program 4 (id=4664): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) mkdir(0x0, 0x12) migrate_pages(0x0, 0x3, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) 14m31.002566713s ago: executing program 4 (id=4666): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setpgid(0x0, r0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) 14m30.881262654s ago: executing program 4 (id=4667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r2, &(0x7f00000000c0)="510003000000", 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000008004500"], 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x2a) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000001c0)) 14m30.547023815s ago: executing program 4 (id=4670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1e8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x1cc, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 14m30.384690988s ago: executing program 32 (id=4670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x1e8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x1cc, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 14m24.556011342s ago: executing program 3 (id=4691): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m22.95309008s ago: executing program 3 (id=4695): mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) socket(0x1, 0x1, 0x9) 14m22.246157909s ago: executing program 3 (id=4698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m21.218094285s ago: executing program 3 (id=4701): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000000)) 14m20.629280885s ago: executing program 3 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 14m20.416942707s ago: executing program 3 (id=4705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x12, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 14m5.308635443s ago: executing program 33 (id=4705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x12, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 13m50.660049122s ago: executing program 1 (id=4798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x13, 0x3, "d67a8527f76ec1d39e537c4c3060c6"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x4048010) 13m50.095158691s ago: executing program 1 (id=4799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 13m48.996580709s ago: executing program 1 (id=4801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 13m47.705512177s ago: executing program 1 (id=4802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}}, 0x0) 13m47.328139275s ago: executing program 1 (id=4805): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13m47.215944698s ago: executing program 1 (id=4807): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) 13m43.02097124s ago: executing program 0 (id=4816): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13m42.353945629s ago: executing program 0 (id=4818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x16, 0x3, "d67a8527f76ec1d39e537c4c3060c6a40510"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 13m42.167707954s ago: executing program 0 (id=4821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 13m41.241779486s ago: executing program 0 (id=4823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 13m39.552259942s ago: executing program 0 (id=4827): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 13m39.332881729s ago: executing program 0 (id=4830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902020000000000c6701f19ef4247a03f2c1bcc16382258f123a6d85fbfa752af15af27bdeaa07fe138b6571b83c068ce191aacacf6c0d4b8c500"/73], 0x2d}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000", @ANYRES16=r6, @ANYBLOB="080425bd7000fcdbdf25870000000c009900020000004e0000430600480040000000060048004200000038002a002503000a7f72060303030303032a010403016c831f001001080211000000000000040d0e000040000000080211000000a900000061002a007e1540080608021100000107000000090062ca650000040000007e150b07ff08021100000002008113e70800000700000004ed2800000008010b2d1a4000130600000000000000e20002000000000001000e000000070006020202020202040607040100990b0000000a000600ffffffffffff00007e002a00010206038ba4601205b68262ea040800800000ffffffffffff05000000ffffffffffff0d0000000400000052a299180604ffffffffffff00100000050802110000014000000000ffffffffffff0200000005ffffffffffff04000000000802f66ee48a110000000000000005ffffffffffff800000"], 0x158}, 0x1, 0x0, 0x0, 0x400004a}, 0x4001) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r10, 0x6, {0x2, 0xff, 0x4}}, 0x18) bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r10, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) close(r11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000004c0)={r8, 0x1000, 0x6, 0x8, 0x1, 0x1, 0x5, 0xc, {r8, @in6={{0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x19}, 0xf1e}}, 0x101, 0x4, 0x3, 0x4, 0xc}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={r13, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x4, 0x4, 0x100, 0xa, 0x3}, 0x9c) 13m31.55366409s ago: executing program 34 (id=4807): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) 13m24.236592235s ago: executing program 35 (id=4830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902020000000000c6701f19ef4247a03f2c1bcc16382258f123a6d85fbfa752af15af27bdeaa07fe138b6571b83c068ce191aacacf6c0d4b8c500"/73], 0x2d}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000", @ANYRES16=r6, @ANYBLOB="080425bd7000fcdbdf25870000000c009900020000004e0000430600480040000000060048004200000038002a002503000a7f72060303030303032a010403016c831f001001080211000000000000040d0e000040000000080211000000a900000061002a007e1540080608021100000107000000090062ca650000040000007e150b07ff08021100000002008113e70800000700000004ed2800000008010b2d1a4000130600000000000000e20002000000000001000e000000070006020202020202040607040100990b0000000a000600ffffffffffff00007e002a00010206038ba4601205b68262ea040800800000ffffffffffff05000000ffffffffffff0d0000000400000052a299180604ffffffffffff00100000050802110000014000000000ffffffffffff0200000005ffffffffffff04000000000802f66ee48a110000000000000005ffffffffffff800000"], 0x158}, 0x1, 0x0, 0x0, 0x400004a}, 0x4001) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r10, 0x6, {0x2, 0xff, 0x4}}, 0x18) bind$can_j1939(r11, &(0x7f0000000140)={0x1d, r10, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) close(r11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000004c0)={r8, 0x1000, 0x6, 0x8, 0x1, 0x1, 0x5, 0xc, {r8, @in6={{0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x19}, 0xf1e}}, 0x101, 0x4, 0x3, 0x4, 0xc}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={r13, @in={{0x2, 0x4e23, @multicast1}}, 0x2, 0x4, 0x4, 0x100, 0xa, 0x3}, 0x9c) 12.026392514s ago: executing program 2 (id=7016): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @mcast2, 0x7}, r2, 0xb}}, 0x48) 10.184990533s ago: executing program 2 (id=7023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r7, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80800) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.2797212s ago: executing program 5 (id=7025): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, 0x0, 0x52cc) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 9.176070333s ago: executing program 2 (id=7026): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 8.626781571s ago: executing program 8 (id=7027): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r10, r9, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r7, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 8.616323737s ago: executing program 7 (id=7028): unshare(0x28000400) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x8801) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/244, 0xf4}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 8.384323814s ago: executing program 5 (id=7029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60) getdents64(r1, 0x0, 0x22) 7.681771942s ago: executing program 8 (id=7030): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) gettid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 7.432545118s ago: executing program 6 (id=7031): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 7.234443481s ago: executing program 5 (id=7032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0}, 0x18) timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$sock_bt_hci(r6, 0x400448e4, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 6.874138663s ago: executing program 7 (id=7033): prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000006000)=@buf) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) 6.858291505s ago: executing program 6 (id=7034): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 5.952626788s ago: executing program 6 (id=7035): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r1}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r3], 0x1, 0x80800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2000, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) 5.034867349s ago: executing program 8 (id=7036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4$inet(r7, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x0, 0x80800) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.006564177s ago: executing program 6 (id=7037): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x8}}}, 0x24}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) gettid() r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa) 4.256982238s ago: executing program 5 (id=7038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/244, 0xf4}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 3.993029862s ago: executing program 7 (id=7039): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, 0x0, 0x52cc) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3.605621777s ago: executing program 8 (id=7040): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) 2.704863934s ago: executing program 7 (id=7041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x204, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xc4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 2.545478233s ago: executing program 8 (id=7042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60) getdents64(r1, 0x0, 0x22) 2.544308548s ago: executing program 6 (id=7043): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.543676143s ago: executing program 5 (id=7044): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r1}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2000, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) 2.444221349s ago: executing program 7 (id=7045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 2.438445783s ago: executing program 2 (id=7046): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0) 1.682687021s ago: executing program 2 (id=7047): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r1}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r3], 0x1, 0x80800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x2000, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) 1.20381859s ago: executing program 6 (id=7048): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)={0x0, 0x1, r1}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r3], 0x1, 0x80800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x24048880) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.202160276s ago: executing program 5 (id=7049): prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES64=0x0, @ANYRES64], 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000006000)=@buf) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) 1.175652422s ago: executing program 7 (id=7050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS \x00'}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c80116b1dac1414bb0c0002800800014064010101d30c294821d24366796a9c6870020d310bb6ea20836ddc444a5e8ee74835e0503de5d0f8ccc767117eb6e07c5df687d19458be9757802895cb2dc34b464fe46ef1a124c189c0c58d3dc4734fe0fd4614219f321e1ed9000f26c23da7e51d2398fe7ab14dbe435548a9e0a27bdde86c7b80109eb6d8d3f3db9e0700a526aa382e50288bcc3198b68f82a26a9278455cf8f36006f0bc92bdfd76568be157062d0f4de8bb9baf4f38c6d8ceb4cd0007eab8315bd2b6af954111b347b815267cc6aaf77c5f06bb499507aa1829924bbad78462516e250afdff1a9359831d187b4c885664e200"/307], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000780)="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", &(0x7f0000000700)=""/83, &(0x7f0000000600)="1807b198f06505475b67d1544026487a7d049c40b713d2a2ab30f5d2c96fb234e7df2de0721f9a0eeac5d467e204d8ac82e68ab485972000d6fbf3f93bb03e59a67626e29f36576a531f1e979573e8e804080dc68e2312d7e9468f40a8b5a4cd5d1a992d2e257d27ded871f928ff0ebca2bbf95b63a2f71b2d2ac25192985c74f909ee2f94867f9dbb7e5efe280b9efeb1ff2622e234a07fea167d8a6906c763750cb0b7ae2e2e8ad1b7feaf79f2f044ff23a59d040abb03f280403d29e3b69a26", &(0x7f0000000400)="c9e14e4abdfeb5e71ad623e84919ed528d34b06fce16d7e0146f211e69364d", 0x4, r0, 0x4}, 0x38) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="58000000020601080000894b00000000c00000020c0007800500150009000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000129b13f48ae7dc694093bba93ba86e508ba576c5dc7a207e427c4b2e37acb10d0a415d67c5a326ff87a88f1780daee3c9c5aac5a1528cc4f16cdc12b1c9a29acda020e95cc95a9787223e9bdbf74e328b6b92420e2c300d0c728626b5c30d405f4d7320f0c579437aa58496d48c8249e58c46a87082734a8f107bae549492a0d3be385aa6dc14c0cba8d88"], 0x58}}, 0x0) 1.146755913s ago: executing program 8 (id=7051): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x2561, 0x4c28, 0x3, 0x1ba}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r9, 0x0, 0x881) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x1, 0x9, 0xff}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=7052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x9}, 0x3}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): w USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.153147][T22626] usb 8-1: Product: syz [ 1570.161682][T22626] usb 8-1: Manufacturer: syz [ 1570.171719][T22626] usb 8-1: SerialNumber: syz [ 1570.197001][T22626] usb 8-1: config 0 descriptor?? [ 1570.213089][T22626] streamzap 8-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1570.272236][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.284055][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.297830][T25070] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.305362][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.316104][T25070] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.327806][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.339103][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.881287][ T5915] usb 8-1: USB disconnect, device number 18 [ 1570.917681][T25070] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.929557][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.940940][T25070] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.953788][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.965007][T25070] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.989880][T25070] usb 6-1: string descriptor 0 read error: -22 [ 1571.004262][T25070] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1571.153949][T25070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.189439][T25070] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1572.294756][T25070] usb 6-1: USB disconnect, device number 42 [ 1572.357065][T26329] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6248'. [ 1573.487525][T26338] input: syz1 as /devices/virtual/input/input59 [ 1574.737862][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6252'. [ 1574.756319][T26347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6252'. [ 1578.326121][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1578.330128][ T5170] Bluetooth: hci5: command 0x1003 tx timeout [ 1579.278553][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6264'. [ 1579.287614][T26394] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6264'. [ 1583.274141][T26426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6274'. [ 1583.284401][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6274'. [ 1584.751880][T26443] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6277'. [ 1585.006883][ T5922] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1585.166742][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 1585.190174][ T5922] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1585.209275][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.248212][ T5922] usb 9-1: config 0 has no interface number 0 [ 1585.264740][ T5922] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1585.281053][ T5922] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.282093][T26452] libceph: resolve '4' (ret=-3): failed [ 1585.309200][ T5922] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1585.328821][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.340355][ T5922] usb 9-1: Product: syz [ 1585.344609][ T5922] usb 9-1: Manufacturer: syz [ 1585.350402][ T5922] usb 9-1: SerialNumber: syz [ 1585.392632][ T5922] usb 9-1: config 0 descriptor?? [ 1585.413328][T26454] input: syz1 as /devices/virtual/input/input60 [ 1585.424031][ T5922] plusb 9-1:0.231: probe with driver plusb failed with error -22 [ 1585.446571][ T5858] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1585.622825][ T5858] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1585.696573][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1585.745706][ T5858] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1585.798817][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1585.870516][ T5858] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1585.941502][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1586.290112][T26464] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1586.680504][ T5858] usb 6-1: string descriptor 0 read error: -22 [ 1586.686904][ T5858] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1586.719229][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.753996][ T5858] adutux 6-1:168.0: interrupt endpoints not found [ 1587.241944][ T5858] usb 6-1: USB disconnect, device number 43 [ 1587.818964][T25070] usb 9-1: USB disconnect, device number 22 [ 1590.495738][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6298'. [ 1591.201377][T26513] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1591.303692][T25070] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1591.684437][T25070] usb 7-1: Using ep0 maxpacket: 32 [ 1591.745946][T25070] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1591.840170][T25070] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.858667][T25070] usb 7-1: config 0 has no interface number 0 [ 1591.889658][T25070] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1591.913215][T25070] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1591.950149][T25070] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1592.247929][T25070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.272569][T25070] usb 7-1: Product: syz [ 1592.290971][T25070] usb 7-1: Manufacturer: syz [ 1592.307335][T25070] usb 7-1: SerialNumber: syz [ 1592.333348][T25070] usb 7-1: config 0 descriptor?? [ 1592.370569][T25070] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1592.499281][T26538] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6305'. [ 1592.582914][T22380] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1592.817225][T22380] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1592.826575][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1592.839601][T22380] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1592.852051][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1592.863325][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1592.875622][T22380] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1592.888355][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1592.900728][T22380] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1592.914396][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1592.926025][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1592.939427][T22380] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1592.946958][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1592.960291][T22380] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1592.972712][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1592.984020][T22380] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1592.999103][T22380] usb 9-1: string descriptor 0 read error: -22 [ 1593.024073][T22380] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1593.054303][T22380] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.132540][T22380] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1593.643863][ T5858] usb 7-1: USB disconnect, device number 26 [ 1593.783914][T22380] usb 9-1: USB disconnect, device number 23 [ 1594.461977][ T5923] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 1594.643184][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1594.694919][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1594.866008][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1595.543395][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1595.840523][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1595.855686][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1595.865138][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1595.876440][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1595.888328][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1595.899557][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1595.911545][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1595.918926][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1595.929660][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1595.941506][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1595.952666][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1595.966415][ T5923] usb 7-1: string descriptor 0 read error: -22 [ 1595.972739][ T5923] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1595.983430][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.019137][ T5923] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1597.219003][T26572] input: syz1 as /devices/virtual/input/input62 [ 1597.376609][T26571] input: syz1 as /devices/virtual/input/input63 [ 1597.552006][ T5923] usb 7-1: USB disconnect, device number 27 [ 1601.174776][T25070] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1601.356924][T26619] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1601.429538][T25070] usb 6-1: Using ep0 maxpacket: 32 [ 1601.496862][T25070] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1601.549403][T25070] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1601.583963][T25070] usb 6-1: config 0 has no interface number 0 [ 1601.619200][T25070] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1601.684622][T25070] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.701876][ T5858] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1601.702426][T25070] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1601.732689][T26627] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6327'. [ 1601.902038][ T5858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1601.913959][T25070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.935373][ T5858] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1601.977156][ T5858] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1602.011853][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.047929][T26624] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1602.065827][T25070] usb 6-1: Product: syz [ 1602.077363][T25070] usb 6-1: Manufacturer: syz [ 1602.091959][ T5858] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1602.127864][T25070] usb 6-1: SerialNumber: syz [ 1602.128587][ T5915] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1602.214007][T25070] usb 6-1: config 0 descriptor?? [ 1602.225466][T25070] plusb 6-1:0.231: probe with driver plusb failed with error -22 [ 1602.384396][ T5915] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1602.453942][ T5915] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1602.510997][ T5915] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1602.553292][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.592788][T26634] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6329'. [ 1602.609354][T26631] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1602.618981][ T5915] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1602.775629][T25070] usb 3-1: USB disconnect, device number 59 [ 1602.896429][ T30] audit: type=1326 audit(1755007581.230:347780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.027339][ T30] audit: type=1326 audit(1755007581.230:347781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.094551][T26619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.136028][T17186] usb 8-1: USB disconnect, device number 19 [ 1603.307618][ T30] audit: type=1326 audit(1755007581.230:347782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.385733][ T30] audit: type=1326 audit(1755007581.230:347783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.450667][ T30] audit: type=1326 audit(1755007581.230:347784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.526236][ T30] audit: type=1326 audit(1755007581.230:347785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.587818][ T30] audit: type=1326 audit(1755007581.230:347786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.648303][ T5915] usb 6-1: USB disconnect, device number 44 [ 1603.710569][ T30] audit: type=1326 audit(1755007581.230:347787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.785863][ T30] audit: type=1326 audit(1755007581.230:347788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1603.852856][ T30] audit: type=1326 audit(1755007581.230:347789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.8.6329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f458ebe9 code=0x7fc00000 [ 1604.415059][T26619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.446112][T26619] bond0 (unregistering): Released all slaves [ 1604.824896][T26650] input: syz1 as /devices/virtual/input/input64 [ 1606.428476][ T5858] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 1606.446386][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.037107][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1607.929141][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1607.975192][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.058992][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1608.125732][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1608.284282][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.291868][ T5915] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1608.750976][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1608.770697][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1608.789105][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1608.957036][ T5915] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.984800][T25070] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1609.063218][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1609.080899][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1609.094637][ T5915] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.115740][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1609.124796][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1609.135579][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1609.146915][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.161892][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1609.175588][T25070] usb 7-1: Using ep0 maxpacket: 32 [ 1609.188168][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1609.200714][T25070] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1609.204488][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1609.227605][ T5915] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1609.243014][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1609.259446][ T5915] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.271427][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1609.284574][ T5858] usb 6-1: string descriptor 0 read error: -71 [ 1609.290831][ T5858] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1609.304271][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.312669][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1609.332980][ T5858] usb 6-1: can't set config #168, error -71 [ 1609.346576][T25070] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1609.357392][T25070] usb 7-1: config 0 has no interface number 0 [ 1609.363590][T25070] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1609.363909][ T5915] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1609.374868][T25070] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1609.402943][ T5858] usb 6-1: USB disconnect, device number 45 [ 1609.410084][T25070] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1609.412068][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1609.622834][ T2985] Bluetooth: hci5: Frame reassembly failed (-84) [ 1609.831422][ T5915] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.843146][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1609.854321][ T5915] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1609.868137][ T5915] usb 3-1: string descriptor 0 read error: -22 [ 1609.874890][ T5915] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1609.885563][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.899246][ T5915] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1609.918150][T25070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.934648][T25070] usb 7-1: Product: syz [ 1609.943364][T25070] usb 7-1: Manufacturer: syz [ 1609.948143][T25070] usb 7-1: SerialNumber: syz [ 1609.954109][T25070] usb 7-1: config 0 descriptor?? [ 1609.960959][T25070] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1610.673209][T22380] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1610.835818][T22380] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.848427][T22380] usb 8-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1610.886412][T22380] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1610.914185][T22380] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice=e6.00 [ 1610.927464][T22380] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 1610.945559][T22380] usb 8-1: Product: syz [ 1610.949776][T22380] usb 8-1: Manufacturer: syz [ 1610.954636][T22380] usb 8-1: SerialNumber: syz [ 1610.961552][T22380] usb 8-1: config 0 descriptor?? [ 1611.203020][T25070] usb 8-1: USB disconnect, device number 20 [ 1611.323811][T17186] usb 7-1: USB disconnect, device number 28 [ 1611.593657][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1612.316532][T22626] usb 3-1: USB disconnect, device number 60 [ 1614.049936][T26738] fuse: Unknown parameter 'group_id00000000000000000000' [ 1614.112400][T22626] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 1614.233370][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6359'. [ 1614.354317][T26744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6360'. [ 1614.607436][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1614.638683][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1614.664724][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1614.676953][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1614.689673][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1614.702948][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1614.715484][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1614.759086][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.136618][ T5922] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1615.581469][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1615.596528][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1615.608798][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.619082][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1615.676246][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.702806][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1615.728915][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1615.732837][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1615.763234][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1615.771071][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1615.777024][T22626] usb 8-1: string descriptor 0 read error: -22 [ 1615.795372][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1615.801535][T22626] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1615.808425][ T5922] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1615.823282][T26757] libceph: resolve '4' (ret=-3): failed [ 1615.829944][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.842820][T22626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.846139][ T5922] usb 3-1: config 0 descriptor?? [ 1615.898495][T22626] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1616.001200][T22380] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 1616.152635][T22380] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1616.160091][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1616.193351][T22380] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1616.369362][ T5922] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1616.397963][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1616.468265][T22626] usb 8-1: USB disconnect, device number 21 [ 1616.873835][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1616.905708][T22380] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1616.928723][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1616.939823][T22380] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1616.964624][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1617.010485][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1617.054762][T22380] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1617.069940][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1617.095944][T22380] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1617.135637][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1617.147917][T22380] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1617.170418][T22380] usb 6-1: string descriptor 0 read error: -22 [ 1617.190308][T22380] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1617.216429][T22380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.235740][T22380] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1618.115999][ T5922] usb 3-1: USB disconnect, device number 61 [ 1619.067734][T22380] usb 6-1: USB disconnect, device number 46 [ 1619.074576][ T5922] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 1619.329017][ T5922] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1619.470270][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1619.482789][ T5922] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1619.495708][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1619.513161][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1619.648592][T26792] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6372'. [ 1620.339145][ T5922] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1620.346679][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1620.358085][ T5922] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.369927][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1620.381350][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1620.394247][ T5922] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1620.401746][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1620.413828][ T5922] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.425662][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1620.479593][ T5922] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1620.496262][ T5922] usb 3-1: string descriptor 0 read error: -22 [ 1620.504048][ T5922] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1620.518964][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.702655][ T5922] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1620.777202][T26800] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1622.284238][T26808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6375'. [ 1622.322015][T22380] usb 3-1: USB disconnect, device number 62 [ 1622.461979][T26810] No control pipe specified [ 1622.587910][ T5922] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1623.846018][ T5922] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1623.949509][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1623.968951][ T5922] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1623.981464][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1623.998964][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1624.021228][ T5922] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1624.029120][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1624.040475][ T5922] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.052330][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1624.063685][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1624.087530][ T5922] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1624.111003][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1624.161047][ T5922] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.197647][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1624.212219][ T5922] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1624.472854][ T5922] usb 9-1: string descriptor 0 read error: -71 [ 1624.532899][ T5922] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1624.566867][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.605871][ T5922] usb 9-1: can't set config #168, error -71 [ 1624.615656][ T5922] usb 9-1: USB disconnect, device number 24 [ 1625.484145][T15591] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 1625.761582][T15591] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1625.772885][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1626.743395][T15591] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.102421][T15591] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1627.113030][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1627.125016][T15591] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.139456][T15591] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1627.187804][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1627.199699][T15591] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1627.218384][T15591] usb 8-1: string descriptor 0 read error: -22 [ 1627.224785][T15591] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1627.233996][T15591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.956100][T15591] usb 8-1: can't set config #168, error -71 [ 1627.977533][T15591] usb 8-1: USB disconnect, device number 22 [ 1628.175138][T25070] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1628.365071][T25070] usb 6-1: Using ep0 maxpacket: 32 [ 1628.515819][T25070] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1628.527166][T25070] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1628.541579][T25070] usb 6-1: config 0 has no interface number 0 [ 1628.547882][T25070] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1628.562330][T25070] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1628.579952][T25070] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1628.589166][T25070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.598804][T25070] usb 6-1: Product: syz [ 1628.603018][T25070] usb 6-1: Manufacturer: syz [ 1628.630405][T25070] usb 6-1: SerialNumber: syz [ 1628.639210][T25070] usb 6-1: config 0 descriptor?? [ 1628.672849][T25070] plusb 6-1:0.231: probe with driver plusb failed with error -22 [ 1629.834412][T26871] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6392'. [ 1631.006629][T25070] usb 6-1: USB disconnect, device number 47 [ 1631.182141][T26882] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6395'. [ 1631.193783][T26882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6395'. [ 1633.592628][T26910] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1636.640971][T15591] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1636.972020][T15591] usb 6-1: Using ep0 maxpacket: 16 [ 1636.984420][T15591] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1637.008228][T15591] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.049124][T15591] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1637.186685][T15591] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1637.209088][T15591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.580453][T25070] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1637.664132][T15591] usb 6-1: Product: syz [ 1637.677120][T15591] usb 6-1: Manufacturer: syz [ 1637.690184][T15591] usb 6-1: SerialNumber: syz [ 1637.706441][T26949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6410'. [ 1637.810385][T25070] usb 7-1: Using ep0 maxpacket: 32 [ 1637.834451][T25070] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1637.885484][T25070] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1637.956941][T25070] usb 7-1: config 0 has no interface number 0 [ 1638.010186][ T5915] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1638.019543][T25070] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1638.113265][T25070] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1638.900896][T25070] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1638.922884][T15591] usb 6-1: 0:2 : does not exist [ 1639.159787][T25070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.172619][ T5915] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1639.203667][T25070] usb 7-1: Product: syz [ 1639.219857][T25070] usb 7-1: Manufacturer: syz [ 1639.225846][T25070] usb 7-1: SerialNumber: syz [ 1639.281310][T25070] usb 7-1: config 0 descriptor?? [ 1639.304507][T25070] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1639.606033][T15591] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1639.689086][T15591] usb 6-1: USB disconnect, device number 48 [ 1639.847279][ T5915] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1639.899330][ T5915] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1639.908434][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.340657][T26195] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 1640.437837][ T5915] usb 3-1: can't set config #27, error -71 [ 1640.452525][ T5915] usb 3-1: USB disconnect, device number 63 [ 1640.567495][T15591] usb 7-1: USB disconnect, device number 29 [ 1641.838583][T26977] fuse: Unknown parameter 'grou00000000000000000000' [ 1642.282302][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6419'. [ 1643.747384][T22626] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 1644.076734][T22626] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.096692][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1644.127157][T22626] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1644.147133][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1644.177250][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1644.266751][T22626] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.285573][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1644.310390][T22626] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1644.576881][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1644.599475][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1644.639001][T22626] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1644.682592][T27009] libceph: resolve '4' (ret=-3): failed [ 1644.859077][T27024] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6426'. [ 1644.868377][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1644.886947][T22626] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1644.908026][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1645.156701][ T5915] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1645.557368][T22626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1645.624509][T22626] usb 6-1: string descriptor 0 read error: -22 [ 1645.630908][T22626] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1645.716780][T22626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.733010][ T5915] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1645.758887][ T5915] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1645.770314][T22626] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1645.784733][ T5915] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1645.796055][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.867651][T27031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6429'. [ 1646.075074][T27024] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1646.214309][ T5915] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.316813][ T5858] usb 6-1: USB disconnect, device number 49 [ 1646.524185][ T5915] usb 7-1: USB disconnect, device number 30 [ 1646.755821][ T5858] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1648.233575][ T5858] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.248302][T27052] libceph: resolve '4' (ret=-3): failed [ 1648.355056][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.514978][ T5858] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.534953][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1648.564925][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1648.660374][ T5858] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.684833][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.707630][ T5858] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.941402][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1648.952972][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.001710][ T5858] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.016093][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1649.055190][ T5858] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.203111][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1649.266157][ T5858] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.291620][ T5858] usb 9-1: string descriptor 0 read error: -22 [ 1649.329226][ T5858] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1649.355075][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.564513][ T5858] usb 9-1: can't set config #168, error -71 [ 1649.593102][ T5858] usb 9-1: USB disconnect, device number 25 [ 1650.764062][T27074] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6445'. [ 1651.123744][ T5922] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1651.325939][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 1651.342801][ T5922] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1651.361897][ T5922] usb 9-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1651.382420][ T5922] usb 9-1: config 0 has no interface number 0 [ 1651.402414][ T5922] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1651.417028][T27087] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6447'. [ 1651.434185][ T5922] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.465824][ T5922] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1651.488825][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.506999][ T5922] usb 9-1: Product: syz [ 1651.531453][ T5922] usb 9-1: Manufacturer: syz [ 1651.539488][T27089] input: syz1 as /devices/virtual/input/input67 [ 1651.549706][ T5922] usb 9-1: SerialNumber: syz [ 1651.601574][ T5922] usb 9-1: config 0 descriptor?? [ 1651.656682][ T5922] plusb 9-1:0.231: probe with driver plusb failed with error -22 [ 1651.742891][T27093] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6448'. [ 1651.958941][T27094] input: syz1 as /devices/virtual/input/input68 [ 1652.284019][T27098] fuse: Bad value for 'fd' [ 1653.066350][ T5922] usb 9-1: USB disconnect, device number 26 [ 1653.338333][T27113] fuse: Invalid rootmode [ 1653.502507][T17186] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1654.276965][T17186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1654.327890][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1654.432415][ T5858] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1654.637389][T17186] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1654.696136][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1654.746980][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1654.784594][ T5858] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1654.810198][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1654.811047][T17186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1654.839435][ T5858] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1654.869770][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1654.900272][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1654.911328][T17186] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1654.923119][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1654.935044][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1654.948495][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1654.961964][ T5858] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1654.963886][T17186] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1655.229148][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1655.241353][T17186] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1655.506032][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1655.507781][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1655.528023][ T5858] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1655.528055][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1655.528079][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1655.564107][ T5858] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1655.583921][T17186] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1655.606649][T17186] usb 3-1: string descriptor 0 read error: -22 [ 1655.613031][T17186] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1655.631789][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1655.633762][T17186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.671348][ T5858] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1655.707129][T17186] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1655.721379][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1655.733716][ T5858] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1655.752631][ T5858] usb 8-1: string descriptor 0 read error: -22 [ 1655.758937][ T5858] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1655.768159][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.801926][ T5858] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1656.252055][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6462'. [ 1656.265641][T27138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6462'. [ 1656.843375][T22626] usb 8-1: USB disconnect, device number 23 [ 1657.145528][T17186] usb 3-1: USB disconnect, device number 64 [ 1659.211779][T27168] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6468'. [ 1662.607499][T27191] libceph: resolve '4' (ret=-3): failed [ 1664.519108][T27206] tipc: Enabling of bearer rejected, already enabled [ 1665.135354][T27218] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1665.442128][T27223] libceph: resolve '4' (ret=-3): failed [ 1665.923623][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1666.012924][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6486'. [ 1666.589289][T27235] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1668.115086][T27243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6489'. [ 1668.137828][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.585890][T27257] libceph: resolve '4' (ret=-3): failed [ 1670.484657][T27273] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6499'. [ 1670.497633][T27254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1670.504887][T27254] IPv6: NLM_F_CREATE should be set when creating new route [ 1670.781623][T27283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6500'. [ 1670.794293][T27283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6500'. [ 1673.324639][ T5923] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1673.532621][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 1673.784787][ T5923] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1673.810488][T27317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6508'. [ 1673.822997][ T5923] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1673.882140][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6506'. [ 1674.316710][ T5923] usb 7-1: config 0 has no interface number 0 [ 1674.352281][ T5923] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1674.394210][T27321] fuse: Bad value for 'rootmode' [ 1674.402856][T27319] input: syz1 as /devices/virtual/input/input69 [ 1674.421952][ T5923] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.501820][ T5923] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1674.535987][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.544193][ T2149] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1674.568165][ T5923] usb 7-1: Product: syz [ 1674.581854][ T5923] usb 7-1: Manufacturer: syz [ 1674.605661][ T5923] usb 7-1: SerialNumber: syz [ 1674.644439][ T5923] usb 7-1: config 0 descriptor?? [ 1674.715092][ T5923] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1674.768421][ T2149] usb 6-1: Using ep0 maxpacket: 32 [ 1674.793115][ T2149] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1674.901582][ T2149] usb 6-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1674.912062][ T5923] usb 7-1: USB disconnect, device number 31 [ 1674.937223][ T2149] usb 6-1: config 0 has no interface number 0 [ 1674.969183][ T2149] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1675.067148][ T2149] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1675.140980][ T2149] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1675.171279][ T2149] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.197664][T27328] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6512'. [ 1675.229839][ T2149] usb 6-1: Product: syz [ 1675.247353][ T2149] usb 6-1: Manufacturer: syz [ 1675.277760][T27328] input: syz1 as /devices/virtual/input/input70 [ 1675.293792][ T2149] usb 6-1: SerialNumber: syz [ 1675.321699][ T2149] usb 6-1: config 0 descriptor?? [ 1675.349730][ T2149] plusb 6-1:0.231: probe with driver plusb failed with error -22 [ 1675.654650][T27333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6513'. [ 1676.628073][ T2149] usb 6-1: USB disconnect, device number 50 [ 1677.993053][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1678.218292][T27352] autofs: Unknown parameter '00000000000000000000' [ 1680.339697][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1680.346735][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1681.258164][T27391] fuse: Unknown parameter 'user_i00000000000000000000' [ 1681.768646][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6525'. [ 1682.412895][T27400] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6531'. [ 1683.145661][T27405] fuse: Unknown parameter 'group_id00000000000000000000' [ 1683.535786][T27412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6532'. [ 1683.548802][T27412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6532'. [ 1683.988537][T27410] autofs: Unknown parameter 'fd00000000000000000000' [ 1688.364568][T27438] tipc: Started in network mode [ 1688.372100][T27438] tipc: Node identity 7f000001, cluster identity 4711 [ 1688.379479][T27438] tipc: Enabled bearer , priority 10 [ 1688.966315][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1688.973198][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1689.109214][T27450] autofs: Unknown parameter 'fd00000000000000000000' [ 1689.498847][T22380] tipc: Node number set to 2130706433 [ 1690.106002][T27447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1690.278027][T27454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6545'. [ 1690.287694][T27454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6545'. [ 1690.484549][T22380] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 1691.075751][T22380] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1691.205231][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1691.223136][T22380] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.249964][ T5922] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1691.670550][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1691.682792][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1691.778341][T22380] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1691.819409][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1691.923222][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 1691.937508][T22380] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1691.944159][ T5922] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1691.962894][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1692.403185][ T5922] usb 9-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1692.424540][ T5922] usb 9-1: config 0 has no interface number 0 [ 1692.436983][ T5922] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1692.474287][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1692.485479][ T5922] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1692.505730][T22380] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1692.517194][ T5922] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1692.520799][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1692.538015][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.538846][T22380] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1692.546949][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1692.570402][T22380] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1692.583019][ T5922] usb 9-1: Product: syz [ 1692.585175][T22380] usb 3-1: string descriptor 0 read error: -22 [ 1692.587183][ T5922] usb 9-1: Manufacturer: syz [ 1692.587202][ T5922] usb 9-1: SerialNumber: syz [ 1692.611778][T22380] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1692.633289][ T5922] usb 9-1: config 0 descriptor?? [ 1692.641348][ T5922] plusb 9-1:0.231: probe with driver plusb failed with error -22 [ 1692.811546][T22380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.827830][T22380] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1692.969025][T27483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6553'. [ 1692.979737][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6553'. [ 1693.389387][ T5922] usb 3-1: USB disconnect, device number 65 [ 1694.073069][T22380] usb 9-1: USB disconnect, device number 27 [ 1695.158681][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1695.170843][T27506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1696.450951][ T2149] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1696.493984][T27517] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6560'. [ 1696.628165][T27518] input: syz1 as /devices/virtual/input/input71 [ 1696.640856][ T2149] usb 7-1: Using ep0 maxpacket: 32 [ 1696.659084][ T2149] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1696.700606][ T2149] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1696.783331][ T2149] usb 7-1: config 0 has no interface number 0 [ 1696.828800][ T2149] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1697.211133][ T2149] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1697.234200][ T2149] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1697.243540][ T2149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.251589][ T2149] usb 7-1: Product: syz [ 1697.255911][ T2149] usb 7-1: Manufacturer: syz [ 1697.260591][ T2149] usb 7-1: SerialNumber: syz [ 1697.280018][ T2149] usb 7-1: config 0 descriptor?? [ 1697.288683][ T2149] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1697.699970][T27527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6564'. [ 1697.715375][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6564'. [ 1698.642714][ T2149] usb 7-1: USB disconnect, device number 32 [ 1698.679944][T22626] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1698.951241][T27538] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1699.533600][T22626] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1699.699715][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1699.713723][T22626] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1699.729353][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1699.740867][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1699.753197][T22626] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1699.761614][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1699.772334][T22626] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1699.784001][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1699.795155][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1699.821791][T22626] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1699.836617][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1699.852179][T22626] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1699.864957][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1699.886379][T22626] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1699.913996][T22626] usb 3-1: string descriptor 0 read error: -22 [ 1699.930172][T22626] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1699.964720][T22626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.028397][T22626] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1700.337191][T27552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1700.354846][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1700.460492][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1700.460550][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1701.315232][ T5923] usb 3-1: USB disconnect, device number 66 [ 1701.598177][T27567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6572'. [ 1701.843307][T27567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6572'. [ 1704.381720][T27590] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1704.958577][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6580'. [ 1708.525035][ T5923] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1708.664831][T22626] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 1708.816233][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1708.824002][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1708.847579][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1708.903272][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1708.924808][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1708.931130][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1709.367380][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1709.383487][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1709.402186][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1709.420844][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1709.432754][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1709.452380][T22626] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1709.466768][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1709.495225][T22626] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1709.504684][ T5923] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1709.524396][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1709.545020][T22626] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1709.573249][T22626] usb 8-1: string descriptor 0 read error: -22 [ 1709.581150][T22626] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1709.603547][T22626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.620329][T22626] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1709.624418][ T2149] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1709.664396][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1709.822411][ T5923] usb usb6-port1: attempt power cycle [ 1709.834331][ T2149] usb 7-1: Using ep0 maxpacket: 32 [ 1709.840998][ T2149] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1709.849316][ T2149] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1709.859640][ T2149] usb 7-1: config 0 has no interface number 0 [ 1709.865997][ T2149] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1709.877153][ T2149] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1710.332965][ T2149] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1710.342317][ T2149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.350483][ T2149] usb 7-1: Product: syz [ 1710.355004][ T2149] usb 7-1: Manufacturer: syz [ 1710.359674][ T2149] usb 7-1: SerialNumber: syz [ 1710.481196][ T2149] usb 7-1: config 0 descriptor?? [ 1710.490066][ T2149] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1710.982156][ T5923] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1710.990475][ T5922] usb 8-1: USB disconnect, device number 24 [ 1711.018142][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1712.030230][ T5922] usb 7-1: USB disconnect, device number 33 [ 1714.929751][T27678] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6600'. [ 1715.222209][T27675] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6599'. [ 1716.016040][T27688] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1716.045614][T22380] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1716.166200][T27691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1716.304929][T22380] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1716.519544][T27701] fuse: Unknown parameter '0x0000000000000007' [ 1717.435329][T22380] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1717.536773][T22380] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1717.784882][T22380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.293630][T22380] usb 6-1: can't set config #27, error -71 [ 1720.321898][T22380] usb 6-1: USB disconnect, device number 55 [ 1722.052239][T27743] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6619'. [ 1722.384522][T27748] fuse: Bad value for 'fd' [ 1724.085400][T27763] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6625'. [ 1724.848069][T27768] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6626'. [ 1724.866723][T27768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6626'. [ 1725.851534][T27780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6628'. [ 1727.580707][T27796] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6633'. [ 1728.249198][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 1728.525026][ T5989] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1729.161331][ T5989] usb 7-1: Using ep0 maxpacket: 32 [ 1729.168021][ T5989] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1729.180035][ T5989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.191254][ T5989] usb 7-1: config 0 has no interface number 0 [ 1729.198513][ T5989] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1729.208384][ T5989] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1729.226037][ T5989] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1729.258164][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.278820][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.309193][ T5989] usb 7-1: Product: syz [ 1729.314546][ T5989] usb 7-1: Manufacturer: syz [ 1729.323675][ T5989] usb 7-1: SerialNumber: syz [ 1729.515500][ T5989] usb 7-1: config 0 descriptor?? [ 1729.523063][ T5989] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1730.164098][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6638'. [ 1730.173778][T27820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6638'. [ 1731.668874][ T5989] usb 7-1: USB disconnect, device number 34 [ 1732.494047][T27839] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6645'. [ 1733.065017][T27848] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6647'. [ 1733.155381][T27850] input: syz1 as /devices/virtual/input/input72 [ 1736.650686][T27303] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1736.930790][T27303] usb 6-1: Using ep0 maxpacket: 32 [ 1736.966735][T27303] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1736.992044][T27303] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.067179][T27303] usb 6-1: config 0 has no interface number 0 [ 1737.166456][T27303] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1737.192677][T27303] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.194195][T27880] No control pipe specified [ 1737.211836][T27303] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1737.992949][T27303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.104736][T27303] usb 6-1: Product: syz [ 1738.199168][T27303] usb 6-1: Manufacturer: syz [ 1738.386470][T27303] usb 6-1: SerialNumber: syz [ 1738.537000][T27303] usb 6-1: config 0 descriptor?? [ 1739.780075][T27303] usb 6-1: can't set config #0, error -71 [ 1739.799380][ T5989] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1740.057614][T27303] usb 6-1: USB disconnect, device number 56 [ 1740.691629][T27909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1741.199755][ T5989] usb 9-1: Using ep0 maxpacket: 32 [ 1741.271667][ T5989] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1741.288244][ T5989] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.322326][ T5989] usb 9-1: config 0 has no interface number 0 [ 1741.340792][ T5989] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1741.359246][ T5989] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.369153][T27919] input: syz1 as /devices/virtual/input/input73 [ 1742.831458][ T5989] usb 9-1: string descriptor 0 read error: -71 [ 1743.090837][ T5989] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1743.219619][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.743589][ T5989] usb 9-1: config 0 descriptor?? [ 1743.758393][ T5989] usb 9-1: can't set config #0, error -71 [ 1743.785813][ T5989] usb 9-1: USB disconnect, device number 28 [ 1744.159150][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6670'. [ 1744.171820][T27934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6670'. [ 1744.297151][ T5989] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1744.726964][ T5989] usb 9-1: Using ep0 maxpacket: 32 [ 1744.847416][ T5989] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1744.872601][ T5989] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.951611][ T5989] usb 9-1: config 0 has no interface number 0 [ 1744.969573][ T5989] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1745.021500][ T5989] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1745.039787][ T5989] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1745.049272][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.073492][ T5989] usb 9-1: Product: syz [ 1745.078716][ T5989] usb 9-1: Manufacturer: syz [ 1745.083636][ T5989] usb 9-1: SerialNumber: syz [ 1745.107473][ T5989] usb 9-1: config 0 descriptor?? [ 1745.124922][T27948] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1745.424032][ T5989] plusb 9-1:0.231: probe with driver plusb failed with error -22 [ 1745.450817][T27948] input: syz1 as /devices/virtual/input/input74 [ 1745.575502][ T5989] usb 9-1: USB disconnect, device number 29 [ 1748.676187][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6684'. [ 1748.764834][T27983] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6684'. [ 1750.582683][T27998] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6688'. [ 1753.232075][T28016] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1754.280299][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6695'. [ 1754.303239][T28031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6695'. [ 1754.528565][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6697'. [ 1757.260565][ T2149] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1758.940624][ T2149] usb 3-1: Using ep0 maxpacket: 8 [ 1759.205715][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1760.322283][ T2149] usb 3-1: string descriptor 0 read error: -71 [ 1760.328568][ T2149] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1760.465417][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.500715][ T2149] usb 3-1: config 0 descriptor?? [ 1760.506233][ T2149] usb 3-1: can't set config #0, error -71 [ 1760.991497][ T2149] usb 3-1: USB disconnect, device number 67 [ 1763.077987][ T5989] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1763.632786][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 1763.783755][ T5989] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1763.840935][ T5989] usb 3-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1763.878411][ T5989] usb 3-1: config 0 has no interface number 0 [ 1763.899779][ T5989] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1763.944722][ T5989] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1765.003256][ T5989] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1765.135130][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.145187][ T5989] usb 3-1: Product: syz [ 1765.150379][ T5989] usb 3-1: Manufacturer: syz [ 1765.154977][ T5989] usb 3-1: SerialNumber: syz [ 1765.811362][ T2149] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1765.848232][ T5989] usb 3-1: config 0 descriptor?? [ 1765.863161][ T5989] usb 3-1: can't set config #0, error -71 [ 1765.891981][ T5989] usb 3-1: USB disconnect, device number 68 [ 1766.061778][ T2149] usb 8-1: Using ep0 maxpacket: 32 [ 1766.165795][ T2149] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1766.197406][ T2149] usb 8-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1766.332821][ T2149] usb 8-1: config 0 has no interface number 0 [ 1766.383905][ T2149] usb 8-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1766.544298][T28121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1766.567397][ T2149] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.771722][ T2149] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1766.790824][ T2149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.869259][ T2149] usb 8-1: Product: syz [ 1766.886099][T11967] Bluetooth: hci5: Frame reassembly failed (-84) [ 1767.159261][ T2149] usb 8-1: Manufacturer: syz [ 1767.165358][ T2149] usb 8-1: SerialNumber: syz [ 1767.183005][ T2149] usb 8-1: config 0 descriptor?? [ 1767.192665][ T2149] plusb 8-1:0.231: probe with driver plusb failed with error -22 [ 1768.013413][T28133] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6723'. [ 1768.870239][ T5922] usb 8-1: USB disconnect, device number 25 [ 1768.941097][T14596] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1771.455881][T28171] libceph: resolve '4' (ret=-3): failed [ 1771.796984][T28175] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6734'. [ 1772.940010][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 1773.697307][T28193] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6738'. [ 1774.182107][ T5923] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1774.897459][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1774.907423][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1776.821221][T14073] Bluetooth: hci5: Frame reassembly failed (-84) [ 1777.410571][ T5915] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 1777.569118][ T5915] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1778.518552][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1778.578271][ T5915] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1778.787426][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1778.811672][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1778.830226][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1778.832060][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1778.936973][T28228] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6749'. [ 1779.010970][ T5915] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.037523][T28228] input: syz1 as /devices/virtual/input/input75 [ 1779.041238][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1779.054649][ T5915] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.074950][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1779.125884][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1779.507077][ T5915] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1779.524212][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1779.564499][ T5915] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.589316][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1779.619624][ T5915] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1779.650227][ T5915] usb 8-1: string descriptor 0 read error: -22 [ 1779.657133][ T5915] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1779.683334][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.651143][ T5915] usb 8-1: can't set config #168, error -71 [ 1780.685741][ T5915] usb 8-1: USB disconnect, device number 26 [ 1781.925101][ T5915] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1782.149113][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 1782.156294][ T5915] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1782.168230][ T5915] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.205110][ T5915] usb 8-1: config 0 has no interface number 0 [ 1782.211379][ T5915] usb 8-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1782.221385][ T5915] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1782.938449][ T5915] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1782.947516][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.955592][ T5915] usb 8-1: Product: syz [ 1782.988919][ T5915] usb 8-1: Manufacturer: syz [ 1783.024584][ T5915] usb 8-1: SerialNumber: syz [ 1783.318198][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6758'. [ 1783.612346][ T5915] usb 8-1: config 0 descriptor?? [ 1783.642926][ T5915] plusb 8-1:0.231: probe with driver plusb failed with error -22 [ 1783.757405][ T2149] usb 8-1: USB disconnect, device number 27 [ 1786.486024][ T2149] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1786.875813][ T2149] usb 9-1: Using ep0 maxpacket: 32 [ 1786.907867][ T2149] usb 9-1: config 0 has an invalid interface number: 231 but max is 0 [ 1786.942578][ T2149] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.993206][ T5923] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1787.139790][ T2149] usb 9-1: config 0 has no interface number 0 [ 1787.149776][ T2149] usb 9-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1787.162093][ T2149] usb 9-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1787.193711][ T2149] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1787.245466][ T2149] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.254968][ T2149] usb 9-1: Product: syz [ 1787.310458][ T2149] usb 9-1: Manufacturer: syz [ 1787.335628][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 1787.353866][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1787.376525][ T2149] usb 9-1: SerialNumber: syz [ 1787.389695][ T5923] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1787.429477][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.597458][ T2149] usb 9-1: config 0 descriptor?? [ 1787.612069][ T5923] usb 3-1: Product: syz [ 1787.618009][ T2149] usb 9-1: can't set config #0, error -71 [ 1787.626737][ T2149] usb 9-1: USB disconnect, device number 30 [ 1787.632705][ T5923] usb 3-1: Manufacturer: syz [ 1787.745254][ T5923] usb 3-1: SerialNumber: syz [ 1787.757275][ T5923] usb 3-1: config 0 descriptor?? [ 1787.764618][ T5923] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1787.975624][T28305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6769'. [ 1789.142781][ T5922] usb 3-1: USB disconnect, device number 70 [ 1789.197172][T28312] netlink: 'syz.6.6773': attribute type 1 has an invalid length. [ 1789.209463][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1790.675572][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.702322][ T2913] Bluetooth: hci5: Frame reassembly failed (-84) [ 1792.262075][ T2913] Bluetooth: hci5: Frame reassembly failed (-84) [ 1793.802375][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1793.802454][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1795.983216][T28362] fuse: Unknown parameter 'fd0x0000000000000004' [ 1797.047579][T28370] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6785'. [ 1802.729062][T28405] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6795'. [ 1804.327107][ T5915] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 1804.987951][ T5915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1804.995482][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1805.015198][ T5915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1805.030901][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1805.042137][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1805.054613][ T5915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1805.067283][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1805.124689][ T5915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1806.072707][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1806.539823][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1806.552038][ T5915] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1806.575974][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1806.586819][ T5915] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1806.598868][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1806.639350][T28445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6806'. [ 1806.666968][ T5915] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1806.719296][ T5915] usb 7-1: string descriptor 0 read error: -22 [ 1806.742189][ T5915] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1806.769605][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.800945][ T5915] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1807.325536][ T5989] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1807.481062][ T5915] usb 7-1: USB disconnect, device number 35 [ 1807.485500][ T5989] usb 8-1: Using ep0 maxpacket: 32 [ 1807.532335][ T5989] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1807.575425][ T5989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.596119][ T5989] usb 8-1: config 0 has no interface number 0 [ 1807.603085][ T5989] usb 8-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1807.619484][ T5989] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1807.632937][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.753810][ T5989] usb 8-1: Product: syz [ 1807.766946][ T5989] usb 8-1: Manufacturer: syz [ 1807.773989][ T5989] usb 8-1: SerialNumber: syz [ 1807.796234][ T5989] usb 8-1: config 0 descriptor?? [ 1807.949351][T28457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6808'. [ 1808.257159][ T5989] plusb 8-1:0.231: probe with driver plusb failed with error -22 [ 1808.716742][T28460] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6810'. [ 1809.804462][T22380] usb 8-1: USB disconnect, device number 28 [ 1810.542018][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 1810.593871][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1810.958572][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1811.562459][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1811.596415][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1811.612589][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.632794][ T10] usb 3-1: Product: syz [ 1811.647609][ T10] usb 3-1: Manufacturer: syz [ 1811.657679][ T10] usb 3-1: SerialNumber: syz [ 1811.690071][ T10] usb 3-1: config 0 descriptor?? [ 1811.708785][ T10] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1811.911290][T22380] usb 3-1: USB disconnect, device number 71 [ 1812.333728][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1813.739716][T28503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6822'. [ 1813.955229][ T5923] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1814.182164][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 1814.354054][ T5923] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1814.372450][ T5923] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1814.415069][ T5923] usb 7-1: config 0 has no interface number 0 [ 1814.469059][ T5923] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1814.496419][ T5923] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1814.517044][ T5923] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1814.527847][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.538019][ T5923] usb 7-1: Product: syz [ 1814.542396][ T5923] usb 7-1: Manufacturer: syz [ 1814.547032][ T5923] usb 7-1: SerialNumber: syz [ 1814.556627][ T5923] usb 7-1: config 0 descriptor?? [ 1814.565420][ T5923] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1816.017506][ T10] usb 7-1: USB disconnect, device number 36 [ 1818.127281][T28552] libceph: resolve '4' (ret=-3): failed [ 1819.240360][T28575] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6844'. [ 1820.267222][T28586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6846'. [ 1820.285213][T28586] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6846'. [ 1821.430348][T28597] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6849'. [ 1823.662271][T28614] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6854'. [ 1823.844826][T28614] input: syz1 as /devices/virtual/input/input76 [ 1824.599013][T28627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6858'. [ 1831.501743][T28674] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6871'. [ 1831.969779][T28683] libceph: resolve '4' (ret=-3): failed [ 1834.283904][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1834.293476][T28702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1835.430916][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1835.651405][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1835.659196][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1835.673743][ T10] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1835.692953][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.795766][ T10] usb 9-1: Product: syz [ 1835.799961][ T10] usb 9-1: Manufacturer: syz [ 1835.804657][ T10] usb 9-1: SerialNumber: syz [ 1835.835302][ T10] usb 9-1: config 0 descriptor?? [ 1836.311364][ T10] streamzap 9-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1836.423932][ T10] usb 9-1: USB disconnect, device number 31 [ 1836.472453][T28730] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1838.986735][T28744] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6887'. [ 1839.092527][T28748] input: syz1 as /devices/virtual/input/input77 [ 1839.440793][ T5858] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1839.448482][T26195] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1839.579464][T28755] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6890'. [ 1840.139098][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1840.170536][ T5858] usb 9-1: Using ep0 maxpacket: 8 [ 1840.176795][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1840.247825][ T5858] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1840.257627][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.283339][ T5858] usb 9-1: Product: syz [ 1840.297759][ T5858] usb 9-1: Manufacturer: syz [ 1840.302481][ T5858] usb 9-1: SerialNumber: syz [ 1840.318638][ T5858] usb 9-1: config 0 descriptor?? [ 1840.331582][ T5858] streamzap 9-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1841.304872][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1841.339089][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1841.369792][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1841.378908][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.403412][ T5858] usb 9-1: USB disconnect, device number 32 [ 1841.489014][T28755] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1841.535467][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1842.109151][ T10] usb 3-1: USB disconnect, device number 72 [ 1844.646640][T28788] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6898'. [ 1844.686789][ T10] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1844.872786][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1844.921147][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1844.984696][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.106690][ T2149] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1845.126527][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1845.277960][ T2149] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.285415][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1845.744327][ T2149] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.761855][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1845.796311][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1845.798322][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1845.869187][ T2149] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.876965][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1845.908296][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1845.928786][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1845.957504][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.976310][ T2149] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.986106][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.006280][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.018663][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.021701][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.045353][ T2149] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1846.052901][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1846.053278][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1846.072545][ T2149] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.085647][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.096883][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1846.096922][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1846.096946][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1846.096970][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.099269][ T10] usb 3-1: string descriptor 0 read error: -22 [ 1846.153757][ T2149] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1846.170660][ T2149] usb 7-1: string descriptor 0 read error: -22 [ 1846.180486][ T2149] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1846.189719][ T2149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.196282][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1846.215611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.228673][ T2149] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1846.267040][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1846.684041][T22575] Bluetooth: hci5: Frame reassembly failed (-84) [ 1847.616807][ T10] usb 3-1: USB disconnect, device number 73 [ 1847.930978][ T5989] usb 7-1: USB disconnect, device number 37 [ 1848.724988][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1848.732685][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1849.189963][T28833] fuse: Unknown parameter 'group_id00000000000000000000' [ 1849.384594][ T5989] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1850.174051][ T5989] usb 8-1: Using ep0 maxpacket: 32 [ 1850.191031][ T5989] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1850.216897][ T5989] usb 8-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1850.244139][ T5989] usb 8-1: config 0 has no interface number 0 [ 1850.254837][ T5989] usb 8-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1850.278115][ T5989] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1850.323804][ T5989] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1850.333085][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.342067][ T5989] usb 8-1: Product: syz [ 1850.347032][ T5989] usb 8-1: Manufacturer: syz [ 1850.353919][ T5989] usb 8-1: SerialNumber: syz [ 1850.395220][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6912'. [ 1850.409262][ T5989] usb 8-1: config 0 descriptor?? [ 1850.419816][ T5989] plusb 8-1:0.231: probe with driver plusb failed with error -22 [ 1850.424315][ T10] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1850.652036][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1851.283758][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1851.292841][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.301014][ T10] usb 9-1: Product: syz [ 1851.311119][ T10] usb 9-1: Manufacturer: syz [ 1851.316034][ T10] usb 9-1: SerialNumber: syz [ 1851.322938][ T10] usb 9-1: config 0 descriptor?? [ 1851.332030][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1851.729815][ T5989] usb 8-1: USB disconnect, device number 29 [ 1851.793372][ T5858] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1851.906210][T28857] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6918'. [ 1851.936504][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1852.183885][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.193084][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1852.213705][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1852.238821][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.274265][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1852.384336][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1852.398088][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.410508][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1852.418022][ T5858] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1852.454843][ T5858] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.499316][ T5858] usb 6-1: string descriptor 0 read error: -22 [ 1852.512474][ T5858] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1852.544815][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.579047][ T5858] adutux 6-1:168.0: interrupt endpoints not found [ 1853.182614][ T2149] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1853.532127][ T5858] usb 6-1: USB disconnect, device number 57 [ 1853.839586][ T2149] usb 8-1: Using ep0 maxpacket: 32 [ 1853.910292][ T2149] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 1853.923734][ T5858] usb 9-1: USB disconnect, device number 33 [ 1853.929824][ T2149] usb 8-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1853.940203][ T2149] usb 8-1: config 0 has no interface number 0 [ 1853.950171][ T2149] usb 8-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1853.961186][ T2149] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1854.144775][ T2149] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1854.158485][ T2149] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.167092][ T2149] usb 8-1: Product: syz [ 1854.171284][ T2149] usb 8-1: Manufacturer: syz [ 1854.175930][ T2149] usb 8-1: SerialNumber: syz [ 1854.386224][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6921'. [ 1854.723281][ T2149] usb 8-1: config 0 descriptor?? [ 1854.744855][ T2149] plusb 8-1:0.231: probe with driver plusb failed with error -22 [ 1856.015646][ T10] usb 8-1: USB disconnect, device number 30 [ 1856.169533][T28887] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6926'. [ 1857.383711][T28903] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6928'. [ 1857.766066][T28909] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6932'. [ 1857.875918][ T5923] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1857.990734][T28914] input: syz1 as /devices/virtual/input/input78 [ 1858.704219][ T5923] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1858.731212][ T5923] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1859.117749][ T5923] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1859.187839][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.976165][ T5923] usb 8-1: can't set config #27, error -71 [ 1862.996577][ T5923] usb 8-1: USB disconnect, device number 31 [ 1864.142560][T28965] overlayfs: overlapping lowerdir path [ 1864.666786][T28713] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1864.765652][T28962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6945'. [ 1864.827716][ T5923] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1864.851646][T28713] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.865274][T28713] usb 8-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1864.888655][T28713] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1864.906332][T28713] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice=e6.00 [ 1864.989428][ T5858] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1865.006923][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 1865.027961][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 1865.033882][T28713] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 1865.053892][ T5923] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1865.074266][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.105733][ T5923] usb 6-1: Product: syz [ 1865.108103][T28713] usb 8-1: Product: syz [ 1865.114416][T28713] usb 8-1: Manufacturer: syz [ 1865.116497][ T5923] usb 6-1: Manufacturer: syz [ 1865.137649][ T5923] usb 6-1: SerialNumber: syz [ 1865.138739][T28713] usb 8-1: SerialNumber: syz [ 1865.246466][ T5858] usb 3-1: Using ep0 maxpacket: 8 [ 1865.310935][T28713] usb 8-1: config 0 descriptor?? [ 1865.312469][ T5923] usb 6-1: config 0 descriptor?? [ 1865.317387][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1865.334376][ T5923] streamzap 6-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1865.340887][ T5858] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1865.364153][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.374260][ T5858] usb 3-1: Product: syz [ 1865.378535][ T5858] usb 3-1: Manufacturer: syz [ 1865.384692][ T5858] usb 3-1: SerialNumber: syz [ 1865.391420][ T5858] usb 3-1: config 0 descriptor?? [ 1865.399051][ T5858] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1865.554744][ T5858] usb 8-1: USB disconnect, device number 32 [ 1865.610451][T28713] usb 3-1: USB disconnect, device number 74 [ 1865.636575][ T10] usb 6-1: USB disconnect, device number 58 [ 1865.696950][T28978] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6951'. [ 1866.934382][T29003] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1867.325707][ T5923] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1867.663419][T29006] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6955'. [ 1867.926175][T29014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1868.005242][ T5989] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1868.458849][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1868.491411][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1868.587192][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1868.774702][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1868.814675][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1868.845952][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1868.853719][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1868.881723][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1869.105499][T29019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1869.272928][ T5989] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1869.290410][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1869.307951][ T5989] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1869.327096][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1869.345599][ T5989] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1869.359502][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.370470][ T5923] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1869.380093][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1869.405188][ T5923] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1869.419145][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1869.594586][ T5923] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1869.778638][T29027] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1870.069877][ T5923] usb 7-1: string descriptor 0 read error: -71 [ 1870.077130][ T5923] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1870.086613][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.101309][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 1870.158469][ T5923] usb 7-1: can't set config #168, error -71 [ 1870.355706][ T5923] usb 7-1: USB disconnect, device number 38 [ 1870.827957][ T5989] usb 8-1: can't set config #27, error -71 [ 1870.838232][ T5989] usb 8-1: USB disconnect, device number 33 [ 1871.203879][ T5923] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1871.538872][ T5923] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1871.556501][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1871.570168][ T5923] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1871.582270][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1871.609711][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1871.627189][ T5923] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1871.638915][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1871.650336][ T5923] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1871.753253][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1871.765244][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1871.785389][ T5923] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1871.794211][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1871.805427][ T5923] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1871.851728][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1871.926125][ T5923] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1871.962768][ T5923] usb 6-1: string descriptor 0 read error: -22 [ 1871.970720][ T5923] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1871.980413][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.103785][ T5923] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1872.145518][T14596] Bluetooth: hci5: command 0x1003 tx timeout [ 1872.152389][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1872.165767][T29053] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6972'. [ 1872.987578][ T10] usb 6-1: USB disconnect, device number 59 [ 1873.172023][T29066] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6974'. [ 1873.905226][T29074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6976'. [ 1874.085549][T29068] input: syz1 as /devices/virtual/input/input79 [ 1875.565660][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 1876.713730][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6985'. [ 1876.821735][ T5989] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1877.793599][T26195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1877.998022][ T5989] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1878.133998][ T5989] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1878.368361][ T5915] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 1878.398006][ T5989] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1878.482131][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.563007][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1878.570628][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1878.667527][T29109] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1878.681875][ T5989] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1878.997707][ T2935] Bluetooth: hci5: Frame reassembly failed (-84) [ 1879.199495][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1879.444118][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1879.459384][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1879.498453][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1879.506187][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1879.518370][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1879.579279][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1879.631909][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1879.677395][ T5915] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1879.688434][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1879.728227][ T5915] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1879.759315][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1879.811578][ T5915] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1880.799578][ T5915] usb 6-1: string descriptor 0 read error: -22 [ 1880.843150][T28713] usb 7-1: USB disconnect, device number 39 [ 1880.850437][ T5915] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1880.858813][T14596] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1880.970685][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.115760][ T5915] usb 6-1: can't set config #168, error -71 [ 1881.125403][ T5915] usb 6-1: USB disconnect, device number 60 [ 1883.361012][T29160] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7000'. [ 1885.577937][T29180] fuse: Unknown parameter 'user_i00000000000000000000' [ 1885.726367][ T5989] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1885.896148][ T5989] usb 7-1: Using ep0 maxpacket: 32 [ 1885.907976][ T5989] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1885.930795][ T5989] usb 7-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 1885.963213][T29187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7003'. [ 1885.972570][ T5989] usb 7-1: config 0 has no interface number 0 [ 1885.986608][ T5989] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1216, setting to 64 [ 1885.998215][ T5989] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1886.022015][ T5989] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1886.031313][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.040838][ T5989] usb 7-1: Product: syz [ 1886.045153][ T5989] usb 7-1: Manufacturer: syz [ 1886.049923][ T5989] usb 7-1: SerialNumber: syz [ 1886.056814][ T5989] usb 7-1: config 0 descriptor?? [ 1886.070877][ T2913] Bluetooth: hci5: Frame reassembly failed (-84) [ 1886.081892][ T5989] plusb 7-1:0.231: probe with driver plusb failed with error -22 [ 1886.106102][ T5858] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1886.347436][ T5858] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1886.355133][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1886.388933][ T5858] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1886.494778][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1886.558436][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1886.723552][ T5858] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1886.755046][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1886.803988][ T5858] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1886.815785][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1886.827595][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1886.840128][ T5858] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1886.847612][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1886.859651][ T5858] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1886.871451][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1886.882736][ T5858] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1886.899961][ T5858] usb 3-1: string descriptor 0 read error: -22 [ 1886.909539][ T5858] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1886.919222][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.937369][ T5858] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1887.981378][T26195] Bluetooth: hci5: command 0x1003 tx timeout [ 1888.015192][T14596] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1888.546282][T28713] usb 7-1: USB disconnect, device number 40 [ 1888.715000][ T5989] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1889.408164][ T2149] usb 3-1: USB disconnect, device number 75 [ 1889.444728][T29212] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7013'. [ 1889.544391][ T5989] usb 6-1: Using ep0 maxpacket: 32 [ 1889.559212][ T5989] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 1889.633675][ T5989] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.684505][ T5989] usb 6-1: config 0 has no interface number 0 [ 1889.701507][ T5989] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1889.711650][ T5989] usb 6-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1889.771483][ T5989] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1889.824568][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.832691][ T5989] usb 6-1: Product: syz [ 1889.836900][ T5989] usb 6-1: Manufacturer: syz [ 1889.847251][ T5989] usb 6-1: SerialNumber: syz [ 1889.859868][ T5989] usb 6-1: config 0 descriptor?? [ 1889.868203][ T5989] plusb 6-1:0.231: probe with driver plusb failed with error -22 [ 1889.987375][T28713] usb 6-1: USB disconnect, device number 61 [ 1890.139431][T29223] overlayfs: overlapping lowerdir path [ 1891.934931][T28713] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1892.792795][T28713] usb 9-1: Using ep0 maxpacket: 32 [ 1892.973132][T29254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7025'. [ 1893.321141][T28713] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1893.403515][T28713] usb 9-1: can't read configurations, error -71 [ 1894.581838][T29267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1894.591517][T29267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1894.679015][T29269] overlayfs: overlapping lowerdir path [ 1895.403168][ T2913] Bluetooth: hci5: Frame reassembly failed (-84) [ 1897.430887][T14596] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1897.439218][T26195] Bluetooth: hci5: command 0x1003 tx timeout [ 1898.727095][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7039'. [ 1899.096786][T29308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7040'. [ 1899.109169][T29308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7040'. [ 1899.726495][T29317] overlayfs: overlapping lowerdir path [ 1899.811968][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7043'. [ 1901.728143][T29345] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7050'. [ 1901.828314][ T5915] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 1902.286316][T29331] ------------[ cut here ]------------ [ 1902.292192][T29331] WARNING: CPU: 1 PID: 29331 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.303566][T29331] Modules linked in: [ 1902.308584][T29331] CPU: 1 UID: 0 PID: 29331 Comm: syz.6.7048 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1902.321577][T29331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1902.331700][T29331] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.338156][T29331] Code: ac fb e8 9c 36 9a fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 ea da ac fb 90 <0f> 0b 90 eb b5 e8 af 32 13 fc e9 dc fe ff ff e8 35 33 13 fc e9 14 [ 1902.357785][T29331] RSP: 0018:ffffc90012a077e8 EFLAGS: 00010293 [ 1902.363948][T29331] RAX: 0000000000000000 RBX: ffff888022354028 RCX: ffffffff860eb7be [ 1902.372004][T29331] RDX: ffff888036a6a440 RSI: ffffffff860eb836 RDI: 0000000000000006 [ 1902.379997][T29331] RBP: 000001bb0d8dc26d R08: 0000000000000006 R09: 000001bb0d8dc26d [ 1902.387979][T29331] R10: 000001bb0d8dc26d R11: 0000000000000000 R12: ffffc90012a07950 [ 1902.395942][T29331] R13: 000001bb0d8dc26d R14: 0000000000004e20 R15: ffffffff860eb6d0 [ 1902.403927][T29331] FS: 000055558ace6500(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 1902.413683][T29331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1902.420906][T29331] CR2: 0000001b31cf0ff8 CR3: 000000005761d000 CR4: 00000000003526f0 [ 1902.428894][T29331] Call Trace: [ 1902.432165][T29331] [ 1902.435093][T29331] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 1902.441209][T29331] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 1902.447844][T29331] drm_crtc_next_vblank_start+0x182/0x300 [ 1902.453571][T29331] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 1902.459925][T29331] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1902.466768][T29331] ? drm_atomic_helper_prepare_planes+0x5aa/0xbb0 [ 1902.473209][T29331] drm_atomic_helper_commit+0x1cf/0x380 [ 1902.478771][T29331] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1902.484842][T29331] drm_atomic_commit+0x231/0x300 [ 1902.489818][T29331] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1902.495276][T29331] ? __pfx___drm_printfn_info+0x10/0x10 [ 1902.500875][T29331] ? drm_client_rotation+0x4da/0x6a0 [ 1902.506165][T29331] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 1902.513220][T29331] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1902.520626][T29331] ? rcu_is_watching+0x12/0xc0 [ 1902.525422][T29331] drm_client_modeset_commit_locked+0x14d/0x580 [ 1902.531690][T29331] drm_client_modeset_commit+0x4f/0x80 [ 1902.537148][T29331] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1902.544380][T29331] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1902.550484][T29331] drm_fbdev_client_restore+0x2c/0x40 [ 1902.555846][T29331] drm_client_dev_restore+0x1f6/0x2a0 [ 1902.561261][T29331] drm_release+0x2c4/0x360 [ 1902.565679][T29331] ? __pfx_drm_release+0x10/0x10 [ 1902.570631][T29331] __fput+0x3ff/0xb70 [ 1902.574620][T29331] task_work_run+0x150/0x240 [ 1902.579226][T29331] ? __pfx_task_work_run+0x10/0x10 [ 1902.584334][T29331] ? __pfx___do_sys_close_range+0x10/0x10 [ 1902.590212][T29331] exit_to_user_mode_loop+0xeb/0x110 [ 1902.595494][T29331] do_syscall_64+0x3f6/0x4c0 [ 1902.600126][T29331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.606014][T29331] RIP: 0033:0x7f6464f8ebe9 [ 1902.610457][T29331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1902.630969][T29331] RSP: 002b:00007fffa3c78f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1902.640089][T29331] RAX: 0000000000000000 RBX: 00007f64651b7da0 RCX: 00007f6464f8ebe9 [ 1902.648092][T29331] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1902.656064][T29331] RBP: 00007f64651b7da0 R08: 0000000000032a6c R09: 0000001da3c7921f [ 1902.664076][T29331] R10: 00007f64651b7cb0 R11: 0000000000000246 R12: 00000000001d08cf [ 1902.672072][T29331] R13: 00007f64651b6090 R14: ffffffffffffffff R15: 00007fffa3c79040 [ 1902.680094][T29331] [ 1902.683115][T29331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1902.690382][T29331] CPU: 1 UID: 0 PID: 29331 Comm: syz.6.7048 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1902.702433][T29331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1902.712475][T29331] Call Trace: [ 1902.715742][T29331] [ 1902.718666][T29331] dump_stack_lvl+0x3d/0x1f0 [ 1902.723255][T29331] vpanic+0x6e8/0x7a0 [ 1902.727238][T29331] ? __pfx_vpanic+0x10/0x10 [ 1902.731745][T29331] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.737548][T29331] panic+0xca/0xd0 [ 1902.741269][T29331] ? __pfx_panic+0x10/0x10 [ 1902.745696][T29331] ? check_panic_on_warn+0x1f/0xb0 [ 1902.750806][T29331] check_panic_on_warn+0xab/0xb0 [ 1902.755744][T29331] __warn+0xf6/0x3c0 [ 1902.759626][T29331] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.765435][T29331] report_bug+0x3c3/0x580 [ 1902.769767][T29331] ? vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.775570][T29331] handle_bug+0x184/0x210 [ 1902.779891][T29331] exc_invalid_op+0x17/0x50 [ 1902.784389][T29331] asm_exc_invalid_op+0x1a/0x20 [ 1902.789234][T29331] RIP: 0010:vkms_get_vblank_timestamp+0x167/0x1b0 [ 1902.795652][T29331] Code: ac fb e8 9c 36 9a fb 4c 89 e1 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 43 49 89 04 24 eb c0 e8 ea da ac fb 90 <0f> 0b 90 eb b5 e8 af 32 13 fc e9 dc fe ff ff e8 35 33 13 fc e9 14 [ 1902.815257][T29331] RSP: 0018:ffffc90012a077e8 EFLAGS: 00010293 [ 1902.821322][T29331] RAX: 0000000000000000 RBX: ffff888022354028 RCX: ffffffff860eb7be [ 1902.829377][T29331] RDX: ffff888036a6a440 RSI: ffffffff860eb836 RDI: 0000000000000006 [ 1902.838134][T29331] RBP: 000001bb0d8dc26d R08: 0000000000000006 R09: 000001bb0d8dc26d [ 1902.846105][T29331] R10: 000001bb0d8dc26d R11: 0000000000000000 R12: ffffc90012a07950 [ 1902.854070][T29331] R13: 000001bb0d8dc26d R14: 0000000000004e20 R15: ffffffff860eb6d0 [ 1902.862042][T29331] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1902.868208][T29331] ? vkms_get_vblank_timestamp+0xee/0x1b0 [ 1902.873923][T29331] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 1902.879733][T29331] ? vkms_get_vblank_timestamp+0x166/0x1b0 [ 1902.885537][T29331] drm_crtc_get_last_vbltimestamp+0x105/0x1b0 [ 1902.891615][T29331] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 1902.898235][T29331] drm_crtc_next_vblank_start+0x182/0x300 [ 1902.903967][T29331] drm_atomic_helper_wait_for_fences+0x203/0x830 [ 1902.910305][T29331] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1902.917154][T29331] ? drm_atomic_helper_prepare_planes+0x5aa/0xbb0 [ 1902.923573][T29331] drm_atomic_helper_commit+0x1cf/0x380 [ 1902.929123][T29331] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1902.935193][T29331] drm_atomic_commit+0x231/0x300 [ 1902.940129][T29331] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1902.945583][T29331] ? __pfx___drm_printfn_info+0x10/0x10 [ 1902.951136][T29331] ? drm_client_rotation+0x4da/0x6a0 [ 1902.956422][T29331] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 1902.962671][T29331] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1902.969430][T29331] ? rcu_is_watching+0x12/0xc0 [ 1902.974218][T29331] drm_client_modeset_commit_locked+0x14d/0x580 [ 1902.980463][T29331] drm_client_modeset_commit+0x4f/0x80 [ 1902.985921][T29331] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1902.993114][T29331] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1902.999177][T29331] drm_fbdev_client_restore+0x2c/0x40 [ 1903.004543][T29331] drm_client_dev_restore+0x1f6/0x2a0 [ 1903.009923][T29331] drm_release+0x2c4/0x360 [ 1903.014343][T29331] ? __pfx_drm_release+0x10/0x10 [ 1903.019281][T29331] __fput+0x3ff/0xb70 [ 1903.023271][T29331] task_work_run+0x150/0x240 [ 1903.027859][T29331] ? __pfx_task_work_run+0x10/0x10 [ 1903.032966][T29331] ? __pfx___do_sys_close_range+0x10/0x10 [ 1903.038687][T29331] exit_to_user_mode_loop+0xeb/0x110 [ 1903.043968][T29331] do_syscall_64+0x3f6/0x4c0 [ 1903.048554][T29331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.054439][T29331] RIP: 0033:0x7f6464f8ebe9 [ 1903.058847][T29331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.078443][T29331] RSP: 002b:00007fffa3c78f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1903.086847][T29331] RAX: 0000000000000000 RBX: 00007f64651b7da0 RCX: 00007f6464f8ebe9 [ 1903.094820][T29331] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1903.102779][T29331] RBP: 00007f64651b7da0 R08: 0000000000032a6c R09: 0000001da3c7921f [ 1903.110743][T29331] R10: 00007f64651b7cb0 R11: 0000000000000246 R12: 00000000001d08cf [ 1903.118701][T29331] R13: 00007f64651b6090 R14: ffffffffffffffff R15: 00007fffa3c79040 [ 1903.126676][T29331] [ 1903.129889][T29331] Kernel Offset: disabled [ 1903.134190][T29331] Rebooting in 86400 seconds..