last executing test programs: 21.365821639s ago: executing program 1 (id=348): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 16.136219953s ago: executing program 1 (id=360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, r2, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 14.351123828s ago: executing program 0 (id=364): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, &(0x7f0000000340)) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13.705737374s ago: executing program 0 (id=366): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r5, 0x0, 0x0, 0x7, 0x1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 13.691230108s ago: executing program 1 (id=367): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$sock(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = epoll_create(0xfffffff8) epoll_wait(r3, 0x0, 0x0, 0x800) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="040028bd7000fbdbdf250300000068688c4835569bd56ca2f5b7ea368234b48508e232402e0d8a5d7583dd8781b838d3c105f6970bcfc5c9f876027660fddfb4d3238717fe0940a334f806dd6fb4c8f3563b96da07b4e8589406f351ff7de654181a6146a6cccb5288d357a0b62aa6ec"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x90) 12.700080825s ago: executing program 0 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10.820627406s ago: executing program 4 (id=374): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c885, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x7f}, 0x1c) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000080)="1d", 0x1, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x2, 0x4c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={r5}) 9.77013356s ago: executing program 4 (id=375): openat(0xffffffffffffff9c, 0x0, 0x2, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 9.698874278s ago: executing program 2 (id=377): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c885, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x7f}, 0x1c) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000080)="1d", 0x1, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='i', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x2, 0x4c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={r5}) 9.584545047s ago: executing program 3 (id=378): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, r1, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 9.581186042s ago: executing program 0 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = fanotify_init(0x1, 0x80000) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'macsec0\x00', 0x400}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020601080000000000000000030000060c00078005001500000000000500010006000000050005000a02000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0xd0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(r8, 0xaa00) 9.574807272s ago: executing program 4 (id=380): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000240012800b0001006970766c616e00001400028006000200010000000600010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 8.530212386s ago: executing program 2 (id=381): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x404c885, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x7f}, 0x1c) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000080)="1d", 0x1, 0xfffffffffffffffe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='i', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)='[', 0x1}], 0x1}}], 0x3, 0x4c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={r5}) 8.438714208s ago: executing program 1 (id=382): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000235cefad3798c4d8062b6cc00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0x8000, 0x8, 0x7fffffff}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 7.021505777s ago: executing program 2 (id=383): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x313041, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020339c4c87cd5dc710ddda8cce48c3024010100000000000000000100"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40084) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) 6.410196229s ago: executing program 4 (id=384): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10048, 0xd0, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.874686895s ago: executing program 3 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.116105037s ago: executing program 0 (id=386): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x275a, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x3, 0xb, {0xb, 0x22, "e749c54c8810b252e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x20008888) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001c00)={0x0, 0xfffffffffffffffa}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e24ff574cc76a8e664c56fe7dca21b4f7bdef4dee59b829c2e3b245e156f6f208f3e4d34966"], 0x27) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x3ecc, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_ublk_setup_io_uring(0x7bb6, &(0x7f0000000380)={0x0, 0x3349, 0x2000, 0x2, 0x30a}, &(0x7f0000000400)=0x0, 0x0, &(0x7f0000000480)) timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000300), 0x0) syz_io_uring_modify_offsets$generic(r2, 0x0, 0x6c, 0x1) timer_create(0x6, &(0x7f0000000240)={0x0, 0x40, 0x4, @thr={&(0x7f0000000080), &(0x7f0000000180)="565b3898efd3a3f9360940fcc5d7afa91c67c8bb0e2053f01c26d6d331cbce9df982d0fcce3f0f89a368443dcb73d0e25d74b8b9801769689a94e6876d7f7f37fad76ea211face55633ea4f136558d892951b067420b5f40e3849160df0ccad03c63b515b8cd3ba28b732c07ff62da4fdf67e021cac3870c99e3a86e0867927639ee27286b"}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 3.917591329s ago: executing program 1 (id=387): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000532d0a21f385bee0867ef96634a64ba3fbe845f69d003b7b70e14dd08dc32ce2074db34a86fe2277898e1d5f18f94e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.627489038s ago: executing program 3 (id=388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xa096a000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x6}, 0x1c) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}}], 0x1, 0x12041, 0x0) 3.543823217s ago: executing program 3 (id=389): epoll_create1(0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) mq_notify(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607", 0x8, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1.042072058s ago: executing program 2 (id=392): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.009281691s ago: executing program 3 (id=393): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 934.667348ms ago: executing program 1 (id=394): ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @auto=[0x31, 0x37, 0x36, 0x66, 0x64, 0x66, 0x61, 0x65, 0x35, 0x65, 0x66, 0x63, 0x30, 0x0, 0x37, 0x30]}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x8c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000f7ff0105daa8d9ff85c3000000c0000000000003000003"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x10) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000005c0)={r3}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r6}) 787.425455ms ago: executing program 2 (id=395): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$sock(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = epoll_create(0xfffffff8) epoll_wait(r3, 0x0, 0x0, 0x800) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002ac0), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="040028bd7000fbdbdf250300000068688c4835569bd56ca2f5b7ea368234b48508e232402e0d8a5d7583dd8781b838d3c105f6970bcfc5c9f876027660fddfb4d3238717fe0940a334f806dd6fb4c8f3563b96da07b4e8589406f351ff7de654181a6146a6cccb5288d357a0b62aa6ec"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x90) 705.433497ms ago: executing program 0 (id=396): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x11e, 0x83, 0x0, &(0x7f0000001100)=0xffffffffffffff33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5e7b000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04140601c9"], 0x9) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) close_range(r0, r1, 0x2) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a0878"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 5.437453ms ago: executing program 3 (id=397): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() sync() sync() sync() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='(8\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000fedbdf25030000000c000300030000000000000005000d0009000000"], 0x28}, 0x1, 0x0, 0x0, 0xc851}, 0x40810) 0s ago: executing program 4 (id=398): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, r1, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 74.897512][ T5592] cgroup: Unknown subsys name 'net' [ 75.139233][ T5592] cgroup: Unknown subsys name 'cpuset' [ 75.193786][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.908012][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.770173][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.780047][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.781002][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.807002][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.808764][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.813396][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.823281][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.825277][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.835524][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.856332][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.002239][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.026741][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.038603][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.043594][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.047588][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.049103][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.063717][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.095263][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.105028][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.115735][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.117002][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.132085][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.140457][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.162164][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.188155][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.866087][ T4921] Bluetooth: hci1: command tx timeout [ 83.024216][ T4921] Bluetooth: hci0: command tx timeout [ 83.104032][ T4921] Bluetooth: hci3: command tx timeout [ 83.183685][ T4921] Bluetooth: hci2: command tx timeout [ 83.263095][ T4921] Bluetooth: hci4: command tx timeout [ 83.735344][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.736302][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.736473][ T5615] bridge_slave_0: entered allmulticast mode [ 83.738452][ T5615] bridge_slave_0: entered promiscuous mode [ 83.786995][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.787163][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.787520][ T5606] bridge_slave_0: entered allmulticast mode [ 83.789557][ T5606] bridge_slave_0: entered promiscuous mode [ 83.836233][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.836525][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.836713][ T5615] bridge_slave_1: entered allmulticast mode [ 83.838607][ T5615] bridge_slave_1: entered promiscuous mode [ 83.897033][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.897325][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.897558][ T5606] bridge_slave_1: entered allmulticast mode [ 83.899549][ T5606] bridge_slave_1: entered promiscuous mode [ 83.947923][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.948090][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.948240][ T5616] bridge_slave_0: entered allmulticast mode [ 83.950436][ T5616] bridge_slave_0: entered promiscuous mode [ 83.952783][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.954210][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.954698][ T5614] bridge_slave_0: entered allmulticast mode [ 83.958506][ T5614] bridge_slave_0: entered promiscuous mode [ 83.994963][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.995262][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.995835][ T5605] bridge_slave_0: entered allmulticast mode [ 83.999706][ T5605] bridge_slave_0: entered promiscuous mode [ 84.053124][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.053420][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.053676][ T5614] bridge_slave_1: entered allmulticast mode [ 84.055510][ T5614] bridge_slave_1: entered promiscuous mode [ 84.077746][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.078039][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.078294][ T5605] bridge_slave_1: entered allmulticast mode [ 84.082483][ T5605] bridge_slave_1: entered promiscuous mode [ 84.118301][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.118518][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.118742][ T5616] bridge_slave_1: entered allmulticast mode [ 84.120583][ T5616] bridge_slave_1: entered promiscuous mode [ 84.131609][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.173579][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.209763][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.234864][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.291628][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.328790][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.347318][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.370558][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.400834][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.407560][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.416106][ T5615] team0: Port device team_slave_0 added [ 84.437346][ T5606] team0: Port device team_slave_0 added [ 84.471392][ T5615] team0: Port device team_slave_1 added [ 84.498326][ T5606] team0: Port device team_slave_1 added [ 84.548732][ T5614] team0: Port device team_slave_0 added [ 84.578718][ T5605] team0: Port device team_slave_0 added [ 84.582094][ T5616] team0: Port device team_slave_0 added [ 84.611084][ T5614] team0: Port device team_slave_1 added [ 84.637881][ T5605] team0: Port device team_slave_1 added [ 84.640589][ T5616] team0: Port device team_slave_1 added [ 84.642150][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.642159][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.642172][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.674865][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.674882][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.674906][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.730926][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.730942][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.730969][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.762337][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.762354][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.762379][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.836953][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.836965][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.836979][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.850738][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.850754][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.850778][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.855303][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.855317][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.855341][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.884321][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.884338][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.884363][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.889827][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.889841][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.889866][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.892916][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.893569][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.893597][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.943105][ T4921] Bluetooth: hci1: command tx timeout [ 85.102623][ T5615] hsr_slave_0: entered promiscuous mode [ 85.103156][ T4921] Bluetooth: hci0: command tx timeout [ 85.108860][ T5615] hsr_slave_1: entered promiscuous mode [ 85.141709][ T5606] hsr_slave_0: entered promiscuous mode [ 85.144624][ T5606] hsr_slave_1: entered promiscuous mode [ 85.145789][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 85.145866][ T5606] Cannot create hsr debugfs directory [ 85.183114][ T4921] Bluetooth: hci3: command tx timeout [ 85.263196][ T4921] Bluetooth: hci2: command tx timeout [ 85.343353][ T4921] Bluetooth: hci4: command tx timeout [ 85.638867][ T5614] hsr_slave_0: entered promiscuous mode [ 85.640425][ T5614] hsr_slave_1: entered promiscuous mode [ 85.641543][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.641571][ T5614] Cannot create hsr debugfs directory [ 85.661637][ T5605] hsr_slave_0: entered promiscuous mode [ 85.668528][ T5605] hsr_slave_1: entered promiscuous mode [ 85.670374][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.670397][ T5605] Cannot create hsr debugfs directory [ 85.684203][ T5616] hsr_slave_0: entered promiscuous mode [ 85.686429][ T5616] hsr_slave_1: entered promiscuous mode [ 85.688187][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.688211][ T5616] Cannot create hsr debugfs directory [ 86.738051][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.784591][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.804121][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.842277][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.846328][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.891152][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.916583][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.997947][ T32] cfg80211: failed to load regulatory.db [ 87.009109][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.024851][ T4921] Bluetooth: hci1: command tx timeout [ 87.183140][ T4921] Bluetooth: hci0: command tx timeout [ 87.188936][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.260648][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.266179][ T4921] Bluetooth: hci3: command tx timeout [ 87.274660][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.308066][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.327121][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.353424][ T4921] Bluetooth: hci2: command tx timeout [ 87.361123][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.390774][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.421636][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.425325][ T4921] Bluetooth: hci4: command tx timeout [ 87.570078][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.610776][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.638154][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.678737][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.697743][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.729486][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.771615][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.809026][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.992490][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.022295][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.041436][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.078666][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.087523][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.130656][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.177295][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.210414][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.360488][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.411646][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.455631][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.470173][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.498851][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.521970][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.552415][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.573821][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.618661][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.755100][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.767682][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.835607][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.835862][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.927384][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.927499][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.979396][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.049311][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.049460][ T1696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.060356][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.111291][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.112309][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.114100][ T4921] Bluetooth: hci1: command tx timeout [ 89.211326][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.264431][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.264607][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.274859][ T4921] Bluetooth: hci0: command tx timeout [ 89.280494][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.316732][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.316842][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.353908][ T4921] Bluetooth: hci3: command tx timeout [ 89.429632][ T4921] Bluetooth: hci2: command tx timeout [ 89.480315][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.504231][ T4921] Bluetooth: hci4: command tx timeout [ 89.509190][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.586851][ T1696] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.587683][ T1696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.670610][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.670773][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.768033][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.886860][ T1689] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.887033][ T1689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.000874][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.001000][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.607524][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.994213][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.155660][ T5615] veth0_vlan: entered promiscuous mode [ 91.345448][ T5615] veth1_vlan: entered promiscuous mode [ 91.532801][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.816182][ T5615] veth0_macvtap: entered promiscuous mode [ 91.857521][ T5615] veth1_macvtap: entered promiscuous mode [ 91.916883][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.062463][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.077611][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.106629][ T5616] veth0_vlan: entered promiscuous mode [ 92.135854][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.195458][ T5606] veth0_vlan: entered promiscuous mode [ 92.196412][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218914][ T5616] veth1_vlan: entered promiscuous mode [ 92.230986][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.246561][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.259815][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.361723][ T5606] veth1_vlan: entered promiscuous mode [ 92.644025][ T5605] veth0_vlan: entered promiscuous mode [ 92.779477][ T5614] veth0_vlan: entered promiscuous mode [ 92.812607][ T5605] veth1_vlan: entered promiscuous mode [ 92.832195][ T5616] veth0_macvtap: entered promiscuous mode [ 92.899529][ T5616] veth1_macvtap: entered promiscuous mode [ 92.922018][ T5614] veth1_vlan: entered promiscuous mode [ 92.931406][ T5606] veth0_macvtap: entered promiscuous mode [ 92.975280][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.975295][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.988967][ T5606] veth1_macvtap: entered promiscuous mode [ 93.102016][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.140991][ T1689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.141024][ T1689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.152783][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.179184][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.206830][ T5605] veth0_macvtap: entered promiscuous mode [ 93.258982][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.282070][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.317808][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.332492][ T5605] veth1_macvtap: entered promiscuous mode [ 93.341772][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.382761][ T1694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.406694][ T1686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.409179][ T5614] veth0_macvtap: entered promiscuous mode [ 93.466117][ T1686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.504505][ T1686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.527200][ T1694] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.602317][ T5614] veth1_macvtap: entered promiscuous mode [ 93.761556][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.250502][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.425098][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.441265][ T1694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.470668][ T1694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.507765][ T1694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.592269][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.592484][ T1694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.630975][ T1689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.630992][ T1689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.652978][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.739438][ T1686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.754525][ T1686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.757894][ T1686] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.833188][ T1686] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.325576][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.325598][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.637749][ T1707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.637762][ T1707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.148358][ T1707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.148378][ T1707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.596376][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.596396][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.859490][ T1689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.859511][ T1689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.652261][ T1707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.652280][ T1707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.325551][ T1694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.325574][ T1694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.161216][ T5817] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 101.238245][ T5817] 8021q: VLANs not supported on ip6_vti0 [ 101.944538][ T5826] evm: overlay not supported [ 107.596488][ T5825] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 107.596529][ T5825] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 107.596548][ T5825] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 107.639436][ T38] audit: type=1800 audit(1784372866.909:2): pid=5825 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.9" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 112.371032][ T5841] syz.4.12 (5841) used greatest stack depth: 15120 bytes left [ 115.333014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.353008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.396708][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.994060][ T5794] IPVS: starting estimator thread 0... [ 116.173459][ T5867] IPVS: using max 11 ests per chain, 26400 per kthread [ 117.060550][ T5874] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 120.412993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.422988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.433005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.442986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.123446][ T5722] IPVS: starting estimator thread 0... [ 128.214006][ T5928] IPVS: using max 15 ests per chain, 36000 per kthread [ 128.258741][ T5932] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 128.284364][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 133.407790][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.430812][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.373445][ T5722] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 135.143003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.329529][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 137.553195][ T5975] binder: 5972:5975 ioctl c0306201 0 returned -14 [ 137.553903][ T5974] binder: 5972:5974 ioctl c0306201 0 returned -14 [ 140.255407][ T5994] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 140.255459][ T5994] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 140.255507][ T5994] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.278997][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'. [ 143.799167][ T5993] infiniband syz2: set down [ 143.799348][ T5993] infiniband syz2: added ipvlan0 [ 143.810891][ T5993] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 143.817296][ T5993] infiniband syz2: Couldn't open port 1 [ 143.817686][ T5993] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 143.817716][ T5993] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 143.817754][ T5993] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 144.041424][ T5993] RDS/IB: syz2: added [ 144.042165][ T5993] smc: adding ib device syz2 with port count 1 [ 144.042671][ T5993] smc: ib device syz2 port 1 has no pnetid [ 144.242998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.403035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.513032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.362599][ T6018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54'. [ 145.498341][ T6018] netlink: 56 bytes leftover after parsing attributes in process `syz.0.54'. [ 145.829401][ T6024] tmpfs: Unknown parameter 'grpquota_blo' [ 146.467188][ T5701] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.705161][ T5701] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 149.705201][ T5701] usb 1-1: can't read configurations, error -71 [ 150.440977][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 152.436144][ T6049] binder: 6048:6049 ioctl c0306201 0 returned -14 [ 152.436428][ T6049] binder: 6048:6049 ioctl c0306201 0 returned -14 [ 152.508127][ T6052] autofs: Unknown parameter 'fd0x0000000000000000' [ 155.148039][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.123142][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.437144][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 157.481516][ T9] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 157.481543][ T9] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 157.481559][ T9] usb 1-1: config 166 has no interface number 0 [ 157.481572][ T9] usb 1-1: config 166 has no interface number 1 [ 157.481644][ T9] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 157.481665][ T9] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 157.481696][ T9] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 157.481719][ T9] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 157.481741][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 157.481766][ T9] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 157.481789][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 157.481813][ T9] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 157.481848][ T9] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.481873][ T9] usb 1-1: config 166 interface 177 has no altsetting 0 [ 157.481890][ T9] usb 1-1: config 166 interface 34 has no altsetting 0 [ 157.487869][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 157.487899][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.487917][ T9] usb 1-1: Product: syz [ 157.487930][ T9] usb 1-1: Manufacturer: syz [ 157.487944][ T9] usb 1-1: SerialNumber: syz [ 159.406976][ T9] usb 1-1: can't set config #166, error -71 [ 159.928305][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 160.138077][ T9] usb 1-1: USB disconnect, device number 4 [ 160.254140][ T6059] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.254449][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 160.386025][ T6059] usb 4-1: device descriptor read/64, error -32 [ 160.411783][ T6096] fuse: Unknown parameter 'f«:gX*Ý/zÙ#0x0000000000000003' [ 160.752716][ T6104] netlink: 'syz.2.79': attribute type 1 has an invalid length. [ 160.766530][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 162.383289][ T6059] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.316414][ T6130] ======================================================= [ 165.316414][ T6130] WARNING: The mand mount option has been deprecated and [ 165.316414][ T6130] and is ignored by this kernel. Remove the mand [ 165.316414][ T6130] option from the mount to silence this warning. [ 165.316414][ T6130] ======================================================= [ 165.320153][ T6130] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 167.110784][ T6134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.217317][ T6143] netlink: 84 bytes leftover after parsing attributes in process `syz.1.89'. [ 168.219750][ T822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.528506][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 169.803114][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 169.805240][ T822] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 169.805265][ T822] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 169.805284][ T822] usb 1-1: config 166 has no interface number 0 [ 169.805300][ T822] usb 1-1: config 166 has no interface number 1 [ 169.805354][ T822] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 169.805383][ T822] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 169.805418][ T822] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 169.805442][ T822] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 169.805467][ T822] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 169.805492][ T822] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 169.805516][ T822] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 169.805540][ T822] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 169.805561][ T822] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 169.805587][ T822] usb 1-1: config 166 interface 177 has no altsetting 0 [ 169.805604][ T822] usb 1-1: config 166 interface 34 has no altsetting 0 [ 170.003722][ T6153] input: syz0 as /devices/virtual/input/input5 [ 171.334766][ T5701] IPVS: starting estimator thread 0... [ 171.424298][ T6158] IPVS: using max 8 ests per chain, 19200 per kthread [ 172.297346][ T822] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 172.297380][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.297398][ T822] usb 1-1: Product: syz [ 172.344455][ T822] usb 1-1: can't set config #166, error -71 [ 172.621079][ T822] usb 1-1: USB disconnect, device number 5 [ 175.666346][ T6184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.934287][ T5701] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.065011][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 177.232323][ T5701] usb 2-1: device descriptor read/all, error -71 [ 177.677683][ T6194] netlink: 84 bytes leftover after parsing attributes in process `syz.4.101'. [ 182.428500][ T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.613305][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 182.629790][ T32] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 182.629817][ T32] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 182.629836][ T32] usb 2-1: config 166 has no interface number 0 [ 182.629851][ T32] usb 2-1: config 166 has no interface number 1 [ 182.629905][ T32] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 182.629934][ T32] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 182.629969][ T32] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 182.629994][ T32] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 182.630017][ T32] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 182.630043][ T32] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 182.630066][ T32] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 182.630090][ T32] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 182.630112][ T32] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 182.630136][ T32] usb 2-1: config 166 interface 177 has no altsetting 0 [ 182.630154][ T32] usb 2-1: config 166 interface 34 has no altsetting 0 [ 182.641479][ T32] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 182.641508][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.641527][ T32] usb 2-1: Product: syz [ 182.641540][ T32] usb 2-1: Manufacturer: syz [ 182.641552][ T32] usb 2-1: SerialNumber: syz [ 183.256282][ T32] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 183.331446][ T6059] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 183.767211][ T6059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 183.767243][ T6059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 183.767265][ T6059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 183.930857][ T6059] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 183.930884][ T6059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.930898][ T6059] usb 4-1: Product: syz [ 183.930908][ T6059] usb 4-1: Manufacturer: syz [ 183.930919][ T6059] usb 4-1: SerialNumber: syz [ 184.088626][ T6059] usb 4-1: config 0 descriptor?? [ 184.149481][ T6222] tmpfs: Unknown parameter 'grpquota_block_har' [ 185.797614][ T6059] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 185.862896][ T32] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 185.939401][ T6059] usb 4-1: USB disconnect, device number 4 [ 187.382242][ T32] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 188.235974][ T6246] tmpfs: Unknown parameter 'grpquota_block_' [ 188.497708][ T32] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 188.497805][ T32] uvcvideo 2-1:166.34: No valid video chain found. [ 190.002903][ T32] usb 2-1: USB disconnect, device number 5 [ 190.377797][ T6252] netlink: 68 bytes leftover after parsing attributes in process `syz.0.115'. [ 190.448242][ T6254] netlink: 56 bytes leftover after parsing attributes in process `syz.0.115'. [ 190.725277][ T5594] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.823349][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.890026][ T5594] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 190.890055][ T5594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.890074][ T5594] usb 1-1: Product: syz [ 190.890086][ T5594] usb 1-1: Manufacturer: syz [ 190.890099][ T5594] usb 1-1: SerialNumber: syz [ 190.920016][ T5594] usb 1-1: config 0 descriptor?? [ 190.973295][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 190.975885][ T32] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 190.975910][ T32] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 190.975930][ T32] usb 3-1: config 166 has no interface number 0 [ 190.975946][ T32] usb 3-1: config 166 has no interface number 1 [ 190.976000][ T32] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 190.976021][ T32] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 190.976067][ T32] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 190.976091][ T32] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 190.976116][ T32] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 190.976141][ T32] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 190.976164][ T32] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 190.976188][ T32] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 190.976208][ T32] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 190.976263][ T32] usb 3-1: config 166 interface 177 has no altsetting 0 [ 190.976280][ T32] usb 3-1: config 166 interface 34 has no altsetting 0 [ 190.982862][ T32] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 190.982890][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.982909][ T32] usb 3-1: Product: syz [ 190.982922][ T32] usb 3-1: Manufacturer: syz [ 190.983138][ T32] usb 3-1: SerialNumber: syz [ 191.035713][ T5594] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 191.397569][ T5594] (null): failure reading functionality [ 191.603813][ T32] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 191.805637][ T32] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 191.897675][ T5594] i2c i2c-1: connected i2c-tiny-usb device [ 191.953132][ T5701] usb 1-1: USB disconnect, device number 6 [ 192.236869][ T32] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 192.348920][ T32] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 192.348954][ T32] uvcvideo 3-1:166.34: No valid video chain found. [ 192.494933][ T32] usb 3-1: USB disconnect, device number 3 [ 192.981022][ T6276] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 193.202164][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'. [ 194.193972][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 194.321609][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.117'. [ 194.354040][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 194.360918][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.360943][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 194.360991][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 194.361017][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 194.361058][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 194.361080][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.374408][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.1.124'. [ 194.376588][ T6289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.124'. [ 196.413981][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 196.414031][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 196.517437][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 196.517464][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 196.542327][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 196.542369][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 196.826597][ T5701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.008729][ T5701] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 197.008760][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.008779][ T5701] usb 2-1: Product: syz [ 197.008793][ T5701] usb 2-1: Manufacturer: syz [ 197.008808][ T5701] usb 2-1: SerialNumber: syz [ 197.086336][ T5701] usb 2-1: config 0 descriptor?? [ 197.101429][ T5701] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 006 [ 197.622507][ T5701] (null): error -EIO: failure setting delay to 10us [ 197.622585][ T5701] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 197.777390][ T5701] usb 2-1: USB disconnect, device number 6 [ 198.813055][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.813164][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.666909][ T6305] fuse: Unknown parameter 'f«:gX*Ý/zÙ#0x0000000000000003' [ 201.553831][ T37] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.753801][ T5737] usb 1-1: USB disconnect, device number 7 [ 201.773228][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 201.775885][ T37] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 201.775910][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.775928][ T37] usb 4-1: config 0 has no interface number 0 [ 201.775969][ T37] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.803121][ T37] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 201.803151][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.803169][ T37] usb 4-1: Product: syz [ 201.803181][ T37] usb 4-1: Manufacturer: syz [ 201.803194][ T37] usb 4-1: SerialNumber: syz [ 201.936471][ T37] usb 4-1: config 0 descriptor?? [ 201.994929][ T37] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 201.995011][ T37] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 202.201288][ T37] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 202.201902][ T37] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 202.299255][ T37] usb 4-1: USB disconnect, device number 5 [ 206.948176][ T6326] Bluetooth: hci1: command 0x0406 tx timeout [ 206.948213][ T6326] Bluetooth: hci3: command 0x0406 tx timeout [ 206.967951][ T6326] Bluetooth: hci4: command 0x0406 tx timeout [ 207.029576][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 208.207908][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 208.876109][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.140'. [ 212.465020][ T6363] tmpfs: Unknown parameter 'grpquota_block_har' [ 213.996112][ T6377] netlink: 68 bytes leftover after parsing attributes in process `syz.3.147'. [ 214.018205][ T6377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.147'. [ 214.280607][ T60] Bluetooth: hci0: unexpected event for opcode 0x4c57 [ 214.313161][ T5737] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.487847][ T5737] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 214.487879][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.487898][ T5737] usb 4-1: Product: syz [ 214.487912][ T5737] usb 4-1: Manufacturer: syz [ 214.487926][ T5737] usb 4-1: SerialNumber: syz [ 214.519883][ T5737] usb 4-1: config 0 descriptor?? [ 214.613130][ T822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 214.620818][ T5737] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 006 [ 214.769646][ T822] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.769681][ T822] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.769718][ T822] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.769739][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.820365][ T6381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 214.949152][ T822] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.966048][ T5737] (null): failure reading functionality [ 215.085187][ T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 215.238384][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.238492][ T9] usb 2-1: config 0 has no interface number 0 [ 215.238534][ T9] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.238561][ T9] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.238585][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 215.238616][ T9] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 215.238637][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.243351][ T6381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 215.265555][ T37] IPVS: starting estimator thread 0... [ 215.381314][ T6388] IPVS: using max 15 ests per chain, 36000 per kthread [ 215.393249][ T5737] i2c i2c-1: connected i2c-tiny-usb device [ 215.410296][ T9] usb 2-1: config 0 descriptor?? [ 215.440564][ T5737] usb 4-1: USB disconnect, device number 6 [ 216.043582][ T9] uclogic 0003:2179:0053.0001: pen parameters not found [ 216.043603][ T9] uclogic 0003:2179:0053.0001: interface is invalid, ignoring [ 216.128182][ T60] Bluetooth: hci2: unexpected event for opcode 0x4c57 [ 216.253493][ T822] usb 3-1: USB disconnect, device number 4 [ 216.877645][ T6393] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 217.645977][ T32] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 217.807571][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.807685][ T32] usb 4-1: config 0 has no interface number 0 [ 217.807724][ T32] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.807750][ T32] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.807771][ T32] usb 4-1: config 0 interface 1 has no altsetting 0 [ 217.807801][ T32] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 217.807823][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.976446][ T9] usb 2-1: USB disconnect, device number 7 [ 218.184344][ T32] usb 4-1: config 0 descriptor?? [ 218.195056][ T6398] No control pipe specified [ 221.000146][ T6409] ubi31: attaching mtd0 [ 221.408567][ T6409] ubi31: scanning is finished [ 221.408643][ T6409] ubi31: empty MTD device detected [ 222.025577][ T32] uclogic 0003:2179:0053.0002: failed retrieving string descriptor #100: -71 [ 222.025613][ T32] uclogic 0003:2179:0053.0002: failed retrieving pen parameters: -71 [ 222.025622][ T32] uclogic 0003:2179:0053.0002: pen probing failed: -71 [ 222.025632][ T32] uclogic 0003:2179:0053.0002: failed probing parameters: -71 [ 222.025692][ T32] uclogic 0003:2179:0053.0002: probe with driver uclogic failed with error -71 [ 222.060036][ T32] usb 4-1: USB disconnect, device number 7 [ 222.099295][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 222.376203][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.376241][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.376263][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.376304][ T9] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 222.376325][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.620875][ T9] usb 1-1: config 0 descriptor?? [ 222.985581][ T32] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 223.089614][ T5620] IPVS: starting estimator thread 0... [ 223.093419][ T5594] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 223.106585][ T6417] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 223.150361][ T32] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 223.150393][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.150422][ T32] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 223.150443][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.186500][ T6418] IPVS: using max 10 ests per chain, 24000 per kthread [ 223.187182][ T32] usb 4-1: config 0 descriptor?? [ 223.192608][ T6413] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.479171][ T5594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.479208][ T5594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.479304][ T5594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.479318][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.906516][ T6415] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.313402][ T32] usbhid 4-1:0.0: can't add hid device: -71 [ 224.313519][ T32] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 224.453720][ T32] usb 4-1: USB disconnect, device number 8 [ 225.898704][ T6425] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 225.987665][ T6431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.164'. [ 226.004940][ T5594] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.009073][ T6431] netlink: 56 bytes leftover after parsing attributes in process `syz.4.164'. [ 226.594316][ T6409] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 228.369496][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 228.369634][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 228.476262][ T6444] No control pipe specified [ 228.867763][ T5701] usb 1-1: USB disconnect, device number 8 [ 230.040456][ T5594] usb 2-1: USB disconnect, device number 8 [ 230.179134][ T6458] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 230.711059][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 232.198992][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 234.711102][ T32] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 235.265044][ T5701] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.422575][ T32] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 235.422684][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 235.422716][ T32] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 235.422737][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.290430][ T32] usb 4-1: config 0 descriptor?? [ 236.304687][ T5701] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.304719][ T5701] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.304752][ T5701] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.304770][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.486888][ T32] usb 4-1: can't set config #0, error -71 [ 236.566414][ T32] usb 4-1: USB disconnect, device number 9 [ 236.686728][ T6492] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 236.774865][ T6487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 237.035128][ T5701] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.142590][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 238.050982][ T6487] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 238.070260][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'. [ 238.242196][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'. [ 238.523112][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 238.657123][ T5701] usb 3-1: USB disconnect, device number 5 [ 238.695517][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 238.695548][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.695570][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 238.722193][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 238.722225][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.722243][ T9] usb 1-1: Product: syz [ 238.722256][ T9] usb 1-1: Manufacturer: syz [ 238.722269][ T9] usb 1-1: SerialNumber: syz [ 239.135017][ T9] usb 1-1: config 0 descriptor?? [ 239.493071][ T9] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 240.619915][ T9] usb 1-1: USB disconnect, device number 9 [ 241.412203][ T6529] ubi31: attaching mtd0 [ 241.415739][ T6529] ubi31: scanning is finished [ 242.625308][ T32] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 242.789198][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.789218][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.789230][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.789251][ T32] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 242.789263][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.813326][ T32] usb 2-1: config 0 descriptor?? [ 242.877719][ T60] Bluetooth: hci0: unexpected event for opcode 0x4c57 [ 243.324448][ T6529] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 243.324472][ T6529] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 243.324489][ T6529] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 243.324497][ T6529] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 243.324506][ T6529] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 243.324514][ T6529] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 243.324522][ T6529] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3159875572 [ 243.324532][ T6529] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 243.384926][ T6546] ubi31: background thread "ubi_bgt31d" started, PID 6546 [ 243.662661][ T5737] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 244.966812][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 244.966945][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 244.974554][ T32] usb 2-1: USB disconnect, device number 10 [ 245.852812][ T5737] usb 3-1: device descriptor read/all, error -71 [ 247.619896][ T6562] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 247.944623][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 254.493139][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 254.693423][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 254.700393][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.700419][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.700465][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.700503][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 254.700526][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.791049][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 254.791090][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 254.792000][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 254.792015][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 254.822634][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 255.415028][ T5722] usb 2-1: USB disconnect, device number 11 [ 255.557819][ T6620] netlink: 68 bytes leftover after parsing attributes in process `syz.4.217'. [ 255.561334][ T6620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.217'. [ 256.133216][ T5594] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 256.450135][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 256.450180][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.450202][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 256.477258][ T5594] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 256.477290][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.477308][ T5594] usb 3-1: Product: syz [ 256.477321][ T5594] usb 3-1: Manufacturer: syz [ 256.477335][ T5594] usb 3-1: SerialNumber: syz [ 256.499272][ T5594] usb 3-1: config 0 descriptor?? [ 258.484365][ T5594] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 258.834477][ T6419] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 258.853301][ T5594] usb 3-1: USB disconnect, device number 8 [ 258.986811][ T6419] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.987551][ T6419] usb 2-1: not running at top speed; connect to a high speed hub [ 258.999710][ T6419] usb 2-1: config 1 has an invalid interface number: 122 but max is 0 [ 258.999735][ T6419] usb 2-1: config 1 has no interface number 0 [ 258.999777][ T6419] usb 2-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 258.999799][ T6419] usb 2-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 258.999823][ T6419] usb 2-1: config 1 interface 122 has no altsetting 0 [ 259.006758][ T6419] usb 2-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 259.006787][ T6419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.006805][ T6419] usb 2-1: Product: syz [ 259.006819][ T6419] usb 2-1: Manufacturer: syz [ 259.006831][ T6419] usb 2-1: SerialNumber: syz [ 259.025991][ T6627] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 262.514604][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.514771][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.862640][ T6419] ti_usb_3410_5052 2-1:1.122: TI USB 5052 2 port adapter converter detected [ 263.051445][ T6419] usb 2-1: USB disconnect, device number 12 [ 263.423349][ T5794] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 263.423549][ T6419] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 263.579765][ T5794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.582308][ T5794] usb 3-1: not running at top speed; connect to a high speed hub [ 263.607358][ T5794] usb 3-1: config 1 has an invalid interface number: 122 but max is 0 [ 263.607389][ T5794] usb 3-1: config 1 has no interface number 0 [ 263.607436][ T5794] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 263.607465][ T5794] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 263.607511][ T5794] usb 3-1: config 1 interface 122 has no altsetting 0 [ 263.612108][ T5794] usb 3-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 263.612140][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.612160][ T5794] usb 3-1: Product: syz [ 263.612174][ T5794] usb 3-1: Manufacturer: syz [ 263.612188][ T5794] usb 3-1: SerialNumber: syz [ 263.661738][ T6656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 263.716571][ T6419] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.716598][ T6419] usb 2-1: config 0 has no interface number 0 [ 263.716634][ T6419] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.716686][ T6419] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.716699][ T6419] usb 2-1: config 0 interface 1 has no altsetting 0 [ 263.716716][ T6419] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 263.716729][ T6419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.771731][ T6419] usb 2-1: config 0 descriptor?? [ 263.972578][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.987063][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.145907][ T5794] ti_usb_3410_5052 3-1:1.122: TI USB 5052 2 port adapter converter detected [ 264.201316][ T5794] usb 3-1: USB disconnect, device number 9 [ 264.476835][ T6419] uclogic 0003:2179:0053.0003: pen parameters not found [ 264.476860][ T6419] uclogic 0003:2179:0053.0003: interface is invalid, ignoring [ 264.484262][ T60] Bluetooth: hci2: unexpected event for opcode 0x4c57 [ 265.876045][ T5794] usb 2-1: USB disconnect, device number 13 [ 265.978494][ T6682] netlink: 68 bytes leftover after parsing attributes in process `syz.3.235'. [ 265.980376][ T6682] netlink: 56 bytes leftover after parsing attributes in process `syz.3.235'. [ 266.973901][ T5794] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 267.123071][ T5794] usb 3-1: Using ep0 maxpacket: 16 [ 267.129518][ T5794] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 267.129546][ T5794] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 267.129565][ T5794] usb 3-1: config 166 has no interface number 0 [ 267.129580][ T5794] usb 3-1: config 166 has no interface number 1 [ 267.129634][ T5794] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 267.129654][ T5794] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 267.129689][ T5794] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 267.129719][ T5794] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 267.129742][ T5794] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 267.129767][ T5794] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 267.129791][ T5794] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 267.129814][ T5794] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 267.129835][ T5794] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 267.129860][ T5794] usb 3-1: config 166 interface 177 has no altsetting 0 [ 267.129877][ T5794] usb 3-1: config 166 interface 34 has no altsetting 0 [ 267.187573][ T5794] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 267.187600][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.187618][ T5794] usb 3-1: Product: syz [ 267.187630][ T5794] usb 3-1: Manufacturer: syz [ 267.187642][ T5794] usb 3-1: SerialNumber: syz [ 268.497061][ T5794] usb 3-1: can't set config #166, error -71 [ 268.519078][ T5794] usb 3-1: USB disconnect, device number 10 [ 268.601217][ T6703] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 269.001735][ T6707] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 269.001779][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 270.535595][ T5723] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 270.699912][ T5723] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.699947][ T5723] usb 2-1: config 0 has no interface number 0 [ 270.699992][ T5723] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.700019][ T5723] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.700041][ T5723] usb 2-1: config 0 interface 1 has no altsetting 0 [ 270.700074][ T5723] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 270.700095][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.741456][ T5723] usb 2-1: config 0 descriptor?? [ 271.875132][ T199] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 272.625821][ T199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.625876][ T199] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.626108][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 272.626136][ T199] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.679907][ T199] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 272.679938][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.680165][ T199] usb 3-1: Product: syz [ 272.680180][ T199] usb 3-1: Manufacturer: syz [ 272.680194][ T199] usb 3-1: SerialNumber: syz [ 272.952012][ T5723] uclogic 0003:2179:0053.0004: pen parameters not found [ 272.952038][ T5723] uclogic 0003:2179:0053.0004: interface is invalid, ignoring [ 272.955056][ T199] usb 3-1: config 0 descriptor?? [ 273.035746][ T60] Bluetooth: hci2: unexpected event for opcode 0x4c57 [ 273.553104][ T199] usb 3-1: can't set config #0, error -71 [ 273.636716][ T199] usb 3-1: USB disconnect, device number 11 [ 273.888339][ T199] usb 2-1: USB disconnect, device number 14 [ 277.123654][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 277.302611][ T6766] netlink: 68 bytes leftover after parsing attributes in process `syz.3.260'. [ 277.305050][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.260'. [ 277.356117][ T10] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 277.356150][ T10] usb 2-1: config 0 has no interface number 0 [ 277.356195][ T10] usb 2-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.358535][ T10] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 277.358568][ T10] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 277.358588][ T10] usb 2-1: Manufacturer: syz [ 277.358601][ T10] usb 2-1: SerialNumber: syz [ 277.420218][ T10] usb 2-1: config 0 descriptor?? [ 277.701806][ T6772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.261'. [ 277.722435][ T6772] netlink: 56 bytes leftover after parsing attributes in process `syz.0.261'. [ 280.080176][ T5594] usb 2-1: USB disconnect, device number 15 [ 280.877425][ T6807] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 280.877475][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 282.934327][ T6813] tipc: Started in network mode [ 282.934352][ T6813] tipc: Node identity 7f000001, cluster identity 4711 [ 282.977041][ T6813] tipc: Enabled bearer , priority 10 [ 283.144891][ T5594] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.317501][ T5594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.317536][ T5594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.317573][ T5594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.317594][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.334885][ T6815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 283.362094][ T5594] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.918694][ T5594] usb 2-1: USB disconnect, device number 16 [ 284.070594][ T199] tipc: Node number set to 2130706433 [ 284.468941][ T6832] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 284.586274][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.278'. [ 284.782308][ T6837] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 286.197998][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 286.902320][ T5723] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.902382][ T5723] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.902640][ T5723] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.902687][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.144931][ T6849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.234001][ T5723] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.467135][ T10] usb 3-1: USB disconnect, device number 12 [ 292.503545][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 294.473330][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 295.307123][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.307152][ T10] usb 3-1: config 0 has no interface number 0 [ 295.307196][ T10] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.307223][ T10] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.307245][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 295.307278][ T10] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 295.307300][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.412251][ T10] usb 3-1: config 0 descriptor?? [ 295.508901][ T6898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.298'. [ 295.654974][ T6902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.298'. [ 295.736048][ T6901] netlink: 68 bytes leftover after parsing attributes in process `syz.1.299'. [ 295.816432][ T6903] netlink: 56 bytes leftover after parsing attributes in process `syz.1.299'. [ 296.093078][ T6731] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.126641][ T10] uclogic 0003:2179:0053.0005: pen parameters not found [ 296.126668][ T10] uclogic 0003:2179:0053.0005: interface is invalid, ignoring [ 296.166599][ T60] Bluetooth: hci4: unexpected event for opcode 0x4c57 [ 296.266279][ T6731] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 296.266310][ T6731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.266330][ T6731] usb 2-1: Product: syz [ 296.266344][ T6731] usb 2-1: Manufacturer: syz [ 296.266358][ T6731] usb 2-1: SerialNumber: syz [ 296.327418][ T6731] usb 2-1: config 0 descriptor?? [ 296.396646][ T6731] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 017 [ 296.768498][ T6731] (null): failure reading functionality [ 296.769982][ T6905] tipc: Started in network mode [ 296.770008][ T6905] tipc: Node identity 7f000001, cluster identity 4711 [ 296.781363][ T6905] tipc: Enabled bearer , priority 10 [ 296.864821][ T6731] i2c i2c-1: connected i2c-tiny-usb device [ 296.988076][ T6731] usb 2-1: USB disconnect, device number 17 [ 297.267654][ T32] usb 3-1: USB disconnect, device number 13 [ 297.502759][ T6917] kAFS: No cell specified [ 298.383510][ T32] tipc: Node number set to 2130706433 [ 298.696399][ T6926] Zero length message leads to an empty skb [ 299.903139][ T60] Bluetooth: hci0: unexpected event for opcode 0x4c57 [ 302.617661][ T6954] syz.1.309 (6954): drop_caches: 2 [ 303.885296][ T4934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 304.160280][ T6419] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 304.160431][ T4934] usb 3-1: Using ep0 maxpacket: 16 [ 304.181621][ T6974] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 304.225583][ T6975] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 304.673514][ T4934] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 304.673546][ T4934] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 304.673567][ T4934] usb 3-1: config 166 has no interface number 0 [ 304.673583][ T4934] usb 3-1: config 166 has no interface number 1 [ 304.673637][ T4934] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 304.673657][ T4934] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 304.673692][ T4934] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 304.673715][ T4934] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 304.673740][ T4934] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 304.673765][ T4934] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 304.673789][ T4934] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 304.673812][ T4934] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 304.673833][ T4934] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 304.673858][ T4934] usb 3-1: config 166 interface 177 has no altsetting 0 [ 304.673875][ T4934] usb 3-1: config 166 interface 34 has no altsetting 0 [ 304.940603][ T4934] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 304.940693][ T4934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.940714][ T4934] usb 3-1: Product: syz [ 304.940728][ T4934] usb 3-1: Manufacturer: syz [ 304.940743][ T4934] usb 3-1: SerialNumber: syz [ 304.996194][ T6419] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.999203][ T6419] usb 2-1: not running at top speed; connect to a high speed hub [ 305.001006][ T6419] usb 2-1: config 1 has an invalid interface number: 122 but max is 0 [ 305.001030][ T6419] usb 2-1: config 1 has no interface number 0 [ 305.001073][ T6419] usb 2-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 305.001101][ T6419] usb 2-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 305.001126][ T6419] usb 2-1: config 1 interface 122 has no altsetting 0 [ 305.069628][ T6419] usb 2-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 305.069659][ T6419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.069678][ T6419] usb 2-1: Product: syz [ 305.069692][ T6419] usb 2-1: Manufacturer: syz [ 305.069706][ T6419] usb 2-1: SerialNumber: syz [ 305.142699][ T6968] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 305.384082][ T4934] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 305.501065][ T6419] ti_usb_3410_5052 2-1:1.122: TI USB 5052 2 port adapter converter detected [ 305.539570][ T6419] usb 2-1: USB disconnect, device number 18 [ 305.902030][ T6984] netlink: 68 bytes leftover after parsing attributes in process `syz.3.324'. [ 305.904777][ T6984] netlink: 56 bytes leftover after parsing attributes in process `syz.3.324'. [ 305.969302][ T4934] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 306.031101][ T4934] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 306.034512][ T4934] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 306.034545][ T4934] uvcvideo 3-1:166.34: No valid video chain found. [ 306.053670][ T4934] usb 3-1: USB disconnect, device number 14 [ 310.520029][ T7022] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 310.545705][ T7018] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 310.681657][ T7024] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 310.799980][ T7024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.407459][ T7027] vlan2: entered allmulticast mode [ 312.407491][ T7027] bond2: entered allmulticast mode [ 312.589798][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.3.337'. [ 312.616863][ T7035] netlink: 56 bytes leftover after parsing attributes in process `syz.3.337'. [ 312.860716][ T7024] geneve3: entered allmulticast mode [ 312.910142][ T7024] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 312.949839][ T6992] syz.1.328 (6992): drop_caches: 2 [ 313.165205][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 313.200986][ T7044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 313.206150][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 313.293908][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 315.006266][ T7068] netlink: 84 bytes leftover after parsing attributes in process `syz.2.347'. [ 316.894910][ T5723] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 317.065083][ T5723] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.065118][ T5723] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.065149][ T5723] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.065160][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.070992][ T7072] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 317.097756][ T5723] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.183166][ T4934] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 317.345581][ T4934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.346972][ T4934] usb 3-1: not running at top speed; connect to a high speed hub [ 317.381704][ T4934] usb 3-1: config 1 has an invalid interface number: 122 but max is 0 [ 317.381732][ T4934] usb 3-1: config 1 has no interface number 0 [ 317.381825][ T4934] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 317.381849][ T4934] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 317.381874][ T4934] usb 3-1: config 1 interface 122 has no altsetting 0 [ 317.410852][ T7079] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 317.441719][ T4934] usb 3-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 317.441748][ T4934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.441824][ T4934] usb 3-1: Product: syz [ 317.441839][ T4934] usb 3-1: Manufacturer: syz [ 317.441853][ T4934] usb 3-1: SerialNumber: syz [ 317.523459][ T7077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 317.876463][ T5794] usb 2-1: USB disconnect, device number 19 [ 317.946551][ T4934] ti_usb_3410_5052 3-1:1.122: TI USB 5052 2 port adapter converter detected [ 317.975519][ T4934] usb 3-1: USB disconnect, device number 15 [ 319.842263][ T7105] binder: 7101:7105 ioctl 4018620d 0 returned -22 [ 321.199805][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 324.122368][ T4934] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 324.181538][ T7138] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 324.281507][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 324.284755][ T4934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.284771][ T4934] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.284791][ T4934] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 324.284803][ T4934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.333962][ T4934] usb 2-1: config 0 descriptor?? [ 324.386632][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 324.438477][ T7139] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 324.463788][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.510637][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.533626][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.543292][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.543322][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 324.597776][ T5737] usb 2-1: USB disconnect, device number 20 [ 324.619749][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 324.640146][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 329.981199][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.089640][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.780004][ T7185] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 330.840011][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.385'. [ 331.761217][ T60] Bluetooth: hci3: unexpected event for opcode 0x4c57 [ 335.656261][ T7215] siw: device registration error -23 [ 335.823406][ T5737] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 335.834983][ T7215] smc: removing ib device syz2 [ 335.899410][ T7215] smbdirect: ib_dev[syz2] removed [ 336.796329][ T7215] ------------[ cut here ]------------ [ 336.796340][ T7215] !xa_empty(&pool->xa) [ 336.796351][ T7215] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#1: syz.0.396/7215 [ 336.796382][ T7215] Modules linked in: [ 336.796407][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.796419][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 336.796431][ T7215] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 336.796447][ T7215] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 bd b3 d0 f9 48 83 3b 00 75 0c e8 d2 5c 64 f9 5b e9 bc 29 e9 02 cc e8 c6 5c 64 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 336.796460][ T7215] RSP: 0018:ffffc9001d54f028 EFLAGS: 00010246 [ 336.796468][ T7215] RAX: ffffffff886126ea RBX: ffff8880378416b0 RCX: 0000000000080000 [ 336.796476][ T7215] RDX: ffffc90004ec1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 336.796483][ T7215] RBP: ffff888037841318 R08: 0000000000000000 R09: 0000000000000000 [ 336.796490][ T7215] R10: dffffc0000000000 R11: ffffffff885f5e00 R12: ffff888037841318 [ 336.796497][ T7215] R13: 1ffff11006f0822d R14: ffffffff885f5e00 R15: dffffc0000000000 [ 336.796504][ T7215] FS: 00007fc08c5d66c0(0000) GS:ffff888125d3c000(0000) knlGS:0000000000000000 [ 336.796513][ T7215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.796520][ T7215] CR2: 00007f8023a14d58 CR3: 000000003f7c0000 CR4: 00000000003526f0 [ 336.796529][ T7215] Call Trace: [ 336.796535][ T7215] [ 336.796540][ T7215] rxe_dealloc+0x25/0xc0 [ 336.796551][ T7215] ib_dealloc_device+0x54/0x200 [ 336.796568][ T7215] __ib_unregister_device+0x38f/0x400 [ 336.796586][ T7215] ib_unregister_device_and_put+0xb8/0xf0 [ 336.796600][ T7215] nldev_dellink+0x39c/0x430 [ 336.796616][ T7215] ? __pfx_nldev_dellink+0x10/0x10 [ 336.796674][ T7215] ? rcu_is_watching+0x15/0xb0 [ 336.796691][ T7215] ? cap_capable+0x123/0x460 [ 336.796707][ T7215] ? safesetid_security_capable+0xa9/0x1a0 [ 336.796725][ T7215] ? bpf_lsm_capable+0x9/0x20 [ 336.796738][ T7215] ? security_capable+0x74/0x280 [ 336.796751][ T7215] ? __pfx_nldev_dellink+0x10/0x10 [ 336.796762][ T7215] rdma_nl_rcv+0x6f6/0xa40 [ 336.796780][ T7215] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 336.796803][ T7215] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.796817][ T7215] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.796834][ T7215] netlink_unicast+0x7f5/0x990 [ 336.796852][ T7215] netlink_sendmsg+0x813/0xb40 [ 336.796871][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.796886][ T7215] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 336.796903][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.796916][ T7215] sock_sendmsg_nosec+0x13a/0x180 [ 336.796928][ T7215] ____sys_sendmsg+0x565/0x870 [ 336.796947][ T7215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.796965][ T7215] ? import_iovec+0x73/0xa0 [ 336.796978][ T7215] ___sys_sendmsg+0x2a5/0x360 [ 336.796995][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.797010][ T7215] ? futex_wait+0x2a2/0x390 [ 336.797029][ T7215] ? security_file_alloc+0x34/0x2d0 [ 336.797053][ T7215] ? __pfx_do_futex+0x10/0x10 [ 336.797070][ T7215] __x64_sys_sendmsg+0x1b7/0x290 [ 336.797086][ T7215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.797109][ T7215] do_syscall_64+0x17b/0x530 [ 336.797125][ T7215] ? irqentry_exit+0x10f/0x8f0 [ 336.797140][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.797151][ T7215] ? clear_bhb_loop+0x40/0x90 [ 336.797178][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.797188][ T7215] RIP: 0033:0x7fc08e37de99 [ 336.797205][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.797213][ T7215] RSP: 002b:00007fc08c5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.797224][ T7215] RAX: ffffffffffffffda RBX: 00007fc08e605fa0 RCX: 00007fc08e37de99 [ 336.797231][ T7215] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 336.797245][ T7215] RBP: 00007fc08e413eaf R08: 0000000000000000 R09: 0000000000000000 [ 336.797252][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.797258][ T7215] R13: 00007fc08e606038 R14: 00007fc08e605fa0 R15: 00007fffe44a7988 [ 336.797274][ T7215] [ 336.797284][ T7215] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 336.797291][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.797303][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 336.797309][ T7215] Call Trace: [ 336.797313][ T7215] [ 336.797317][ T7215] vpanic+0x56c/0xa60 [ 336.797329][ T7215] ? __pfx__printk+0x10/0x10 [ 336.797341][ T7215] ? __pfx_vpanic+0x10/0x10 [ 336.797350][ T7215] ? is_bpf_text_address+0x292/0x2b0 [ 336.797365][ T7215] ? is_bpf_text_address+0x26/0x2b0 [ 336.797383][ T7215] panic+0xc5/0xd0 [ 336.797393][ T7215] ? __pfx_panic+0x10/0x10 [ 336.797411][ T7215] __warn+0x315/0x4c0 [ 336.797421][ T7215] ? rxe_pool_cleanup+0x4b/0x60 [ 336.797434][ T7215] ? rxe_pool_cleanup+0x4b/0x60 [ 336.797446][ T7215] __report_bug+0x276/0x570 [ 336.797464][ T7215] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.797481][ T7215] ? rxe_pool_cleanup+0x4b/0x60 [ 336.797494][ T7215] ? __pfx___report_bug+0x10/0x10 [ 336.797510][ T7215] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 336.797530][ T7215] ? rxe_pool_cleanup+0x4b/0x60 [ 336.797542][ T7215] report_bug+0x16a/0x220 [ 336.797558][ T7215] ? rxe_pool_cleanup+0x4b/0x60 [ 336.797569][ T7215] ? rxe_pool_cleanup+0x4d/0x60 [ 336.797580][ T7215] handle_bug+0x9c/0x200 [ 336.797591][ T7215] exc_invalid_op+0x1a/0x50 [ 336.797602][ T7215] asm_exc_invalid_op+0x1a/0x20 [ 336.797612][ T7215] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 336.797624][ T7215] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 bd b3 d0 f9 48 83 3b 00 75 0c e8 d2 5c 64 f9 5b e9 bc 29 e9 02 cc e8 c6 5c 64 f9 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 336.797633][ T7215] RSP: 0018:ffffc9001d54f028 EFLAGS: 00010246 [ 336.797641][ T7215] RAX: ffffffff886126ea RBX: ffff8880378416b0 RCX: 0000000000080000 [ 336.797649][ T7215] RDX: ffffc90004ec1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 336.797656][ T7215] RBP: ffff888037841318 R08: 0000000000000000 R09: 0000000000000000 [ 336.797662][ T7215] R10: dffffc0000000000 R11: ffffffff885f5e00 R12: ffff888037841318 [ 336.797670][ T7215] R13: 1ffff11006f0822d R14: ffffffff885f5e00 R15: dffffc0000000000 [ 336.797678][ T7215] ? __pfx_rxe_dealloc+0x10/0x10 [ 336.797689][ T7215] ? __pfx_rxe_dealloc+0x10/0x10 [ 336.797700][ T7215] ? rxe_pool_cleanup+0x4a/0x60 [ 336.797714][ T7215] ? rxe_pool_cleanup+0x4a/0x60 [ 336.797726][ T7215] rxe_dealloc+0x25/0xc0 [ 336.797736][ T7215] ib_dealloc_device+0x54/0x200 [ 336.797750][ T7215] __ib_unregister_device+0x38f/0x400 [ 336.797768][ T7215] ib_unregister_device_and_put+0xb8/0xf0 [ 336.797783][ T7215] nldev_dellink+0x39c/0x430 [ 336.797797][ T7215] ? __pfx_nldev_dellink+0x10/0x10 [ 336.797853][ T7215] ? rcu_is_watching+0x15/0xb0 [ 336.797868][ T7215] ? cap_capable+0x123/0x460 [ 336.797882][ T7215] ? safesetid_security_capable+0xa9/0x1a0 [ 336.797899][ T7215] ? bpf_lsm_capable+0x9/0x20 [ 336.797911][ T7215] ? security_capable+0x74/0x280 [ 336.797924][ T7215] ? __pfx_nldev_dellink+0x10/0x10 [ 336.797936][ T7215] rdma_nl_rcv+0x6f6/0xa40 [ 336.797954][ T7215] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 336.797977][ T7215] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.797991][ T7215] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.798008][ T7215] netlink_unicast+0x7f5/0x990 [ 336.798026][ T7215] netlink_sendmsg+0x813/0xb40 [ 336.798046][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.798061][ T7215] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 336.798078][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.798093][ T7215] sock_sendmsg_nosec+0x13a/0x180 [ 336.798105][ T7215] ____sys_sendmsg+0x565/0x870 [ 336.798123][ T7215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.798142][ T7215] ? import_iovec+0x73/0xa0 [ 336.798154][ T7215] ___sys_sendmsg+0x2a5/0x360 [ 336.798171][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.798187][ T7215] ? futex_wait+0x2a2/0x390 [ 336.798205][ T7215] ? security_file_alloc+0x34/0x2d0 [ 336.798228][ T7215] ? __pfx_do_futex+0x10/0x10 [ 336.798251][ T7215] __x64_sys_sendmsg+0x1b7/0x290 [ 336.798267][ T7215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.798291][ T7215] do_syscall_64+0x17b/0x530 [ 336.798306][ T7215] ? irqentry_exit+0x10f/0x8f0 [ 336.798321][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.798332][ T7215] ? clear_bhb_loop+0x40/0x90 [ 336.798345][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.798355][ T7215] RIP: 0033:0x7fc08e37de99 [ 336.798364][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.798372][ T7215] RSP: 002b:00007fc08c5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.798382][ T7215] RAX: ffffffffffffffda RBX: 00007fc08e605fa0 RCX: 00007fc08e37de99 [ 336.798389][ T7215] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 336.798396][ T7215] RBP: 00007fc08e413eaf R08: 0000000000000000 R09: 0000000000000000 [ 336.798402][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.798408][ T7215] R13: 00007fc08e606038 R14: 00007fc08e605fa0 R15: 00007fffe44a7988 [ 336.798424][ T7215] [ 336.798743][ T7215] Kernel Offset: disabled