last executing test programs: 15m10.679513745s ago: executing program 3 (id=45): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 15m7.769468513s ago: executing program 3 (id=46): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000c00)=""/83, 0x53}], 0x2}, 0x40010100) 15m4.73873154s ago: executing program 0 (id=52): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f0000000100)=0xfd, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0xb4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x42}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) 15m0.476169201s ago: executing program 0 (id=59): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x3, 0x401) 15m0.474316102s ago: executing program 1 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r1, 0x0, 0x80000}) 15m0.291089916s ago: executing program 3 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x5c, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7da8691e234232d8da0cd3c3d950294c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a1b8b1f3f92a57a4f3fdf80ac0d9ad47"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x401, 0x800}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r6, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r5) 14m59.84243569s ago: executing program 0 (id=63): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 14m59.522712335s ago: executing program 1 (id=67): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 14m58.672227677s ago: executing program 3 (id=68): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18}], 0x1, 0x4008880) recvmsg$can_raw(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000600)=""/70, 0x46}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) 14m57.769499614s ago: executing program 3 (id=69): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f0000000100)=0xfd, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0xb4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x42}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64], 0x18}}, 0x2080) 14m57.551379981s ago: executing program 1 (id=71): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet(0x2, 0x2, 0x1) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10, 0x0, 0x100000000}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x718, 0x8000000000000000, 0x0, 0x80000000000000, 0x8, 0x20000}, 0x0, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfce) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 14m54.930531099s ago: executing program 1 (id=74): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x10, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={0x0, 0xc046, 0x7fffffff, 0x8, 0x1, [], [0xffff0001, 0xff, 0x400, 0x6], [0x80000000, 0x4, 0x14, 0x39b], [0x7f, 0x7, 0x7a, 0x10001]}) 14m54.802328698s ago: executing program 4 (id=75): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 14m54.481688373s ago: executing program 0 (id=76): syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @random="0000080e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 14m53.422110796s ago: executing program 1 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r1, 0x0, 0x80000}) 14m53.267672102s ago: executing program 4 (id=79): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x5e}], 0x18}], 0x1, 0x4008880) recvmsg$can_raw(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000600)=""/70, 0x46}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) 14m52.488157801s ago: executing program 0 (id=80): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) close(0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket(0x2, 0x3, 0x67) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r7 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000008100), 0x4) 14m52.103122864s ago: executing program 4 (id=81): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x41, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x5, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xd, 0x5, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0xfffffffe, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x0, 0xf9, 0xd, 0x2bf, 0x6c9, 0x2, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x8, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x1, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x81, 0x9, 0x2, 0x5, 0x9, 0x1, 0x7, 0x10, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x5, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x17ec12b8, 0x800004, 0x5, 0x5, 0x0, 0x0, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e3, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x20000004, 0x65], [0x9, 0xffffffff, 0x3, 0xb, 0x5, 0x938, 0x2, 0x6, 0x7, 0x5, 0x2, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x4, 0x10000, 0x6, 0x7ffe, 0x80000004, 0x200a620, 0x2, 0xa, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0x0, 0x3, 0x7f, 0x100, 0x9606, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0xb0b2748, 0x1, 0x1, 0x400, 0xffbf2441, 0xffd]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 14m51.797930919s ago: executing program 1 (id=83): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000280)={0x20, 0x30, 0xd, "f5ce9ab8df87932eea24e647d4"}, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0xe0100, 0x0) 14m50.837279031s ago: executing program 4 (id=84): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x10, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0), 0x0, 0x0, 0x0}) 14m50.538967833s ago: executing program 0 (id=85): socket$can_raw(0x1d, 0x3, 0x1) bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x40000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x86) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) 14m49.973902665s ago: executing program 3 (id=86): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x3, 0x401) socket$packet(0x11, 0x3, 0x300) open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 14m49.818417523s ago: executing program 4 (id=87): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x10, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={0x0, 0xc046, 0x7fffffff, 0x8, 0x1, [], [0xffff0001, 0xff, 0x400, 0x6], [0x80000000, 0x4, 0x14, 0x39b], [0x7f, 0x7, 0x7a, 0x10001]}) 14m49.511337558s ago: executing program 4 (id=88): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 14m36.289122157s ago: executing program 32 (id=83): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000280)={0x20, 0x30, 0xd, "f5ce9ab8df87932eea24e647d4"}, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0xe0100, 0x0) 14m35.222608742s ago: executing program 33 (id=85): socket$can_raw(0x1d, 0x3, 0x1) bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x40000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x86) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) 14m34.583521922s ago: executing program 34 (id=86): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x3, 0x401) socket$packet(0x11, 0x3, 0x300) open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 14m34.088244042s ago: executing program 35 (id=88): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 14m22.523138525s ago: executing program 2 (id=105): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) read$dsp(r4, &(0x7f0000000140)=""/60, 0xffffffcc) read$dsp(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) add_key(&(0x7f00000002c0)='ceph\x00', 0x0, &(0x7f0000000400)="36704957bb563643a26d31827c37a8bb39db9492b9e4a5df098e1e0a1514cec238f74d5ed3d8b4f1d5aa6f1dfa7b2dba88c40dd6d72b63128862f244a267c558f88f3e84b61e16239826725778502efdbb9425ef2efcdc6a4db06be0d3a11f8dcd55d2f570a8eb6b5ed6b8af413d4d7ae09cc049a78eec96e1b4c6c25f5230506f077c713aeabb9dc3af0cac0ec348a14df5722f9627a704", 0x98, 0xfffffffffffffffe) 14m21.479146728s ago: executing program 2 (id=106): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x43) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={0x0, 0x1ff, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0], [0xa13, 0x0, 0x3, 0x2], [0x2, 0x2, 0x40001, 0x3], [0x0, 0xfffffffffffffffa, 0xfffffffffefffff8, 0xb]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x36314742, 0x3, [r2, 0x0, 0x0, r3], [0x2b8], [0x0, 0x0, 0x0, 0x2]}) 14m21.392692203s ago: executing program 2 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 14m20.804910712s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 14m20.721280426s ago: executing program 2 (id=109): r0 = memfd_create(0x0, 0x4) ftruncate(r0, 0x806ffffff) 14m19.547369572s ago: executing program 2 (id=110): unshare(0x400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x6) 14m19.393916686s ago: executing program 36 (id=110): unshare(0x400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x6) 39.627550642s ago: executing program 5 (id=2137): syz_usb_connect(0x0, 0x24, 0x0, 0x0) 38.884105286s ago: executing program 5 (id=2139): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 38.834971548s ago: executing program 5 (id=2140): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0x800, 0x0, 0x1ff, 0x7d, 0x3, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x3, 0x4, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 36.922880846s ago: executing program 5 (id=2142): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 35.420980488s ago: executing program 5 (id=2147): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x95, 0x0, &(0x7f0000000240)="b469802305624431ed33730100010446b20aed0200000000000000d5fe008c6090009c5bbd000000003683b7ee0fae7a6a53200386ce515ef6a4effbb7574d5eeb79bf8c4718e6b25de1d33cca488f87e31fd1385561b8b4cbf8611a1295fa69669e8fc61481728b796af2000000000000000000000000742226d7c6859ac0c133fc532eef548dada041703ffdebdd9562c105150e", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 35.255973146s ago: executing program 5 (id=2148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 18.748836947s ago: executing program 37 (id=2148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 16.982586711s ago: executing program 9 (id=2186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010025bd", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b00000000000800290041010000bf94536a2fbafff10f3e091ebd5ee018b3900433aae8bc5626bf63d991000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60b1ac607c5fa7ce2868b36bfd60d3ffff00403a00fe880000000000000000000000000001ff02000000000008000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe8000000000000000000000000000bb"], 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@remote, @rand_addr=' \x01\x00', @empty, 0x7, 0xc6, 0x9, 0x400, 0x80004, 0x1000040}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000080008"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe8) r4 = userfaultfd(0x801) r5 = timerfd_create(0x0, 0x800) timerfd_gettime(r5, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r6, 0xfffffe4d}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e28000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000aaa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e28000/0x3000)=nil, &(0x7f0000e27000/0x2000)=nil, &(0x7f00004ba000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') 16.113141168s ago: executing program 6 (id=2187): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$revoke(0x3, r5) r6 = add_key(0x0, 0x0, &(0x7f0000000540)="375f9c2beeffdc181e10d1f414139b0116cbadc3452c1117bf184c04000000c7b54100d1feb9f7e86bafda0432be1b1d99c4d5d6bc4e9cf792e3b9025e8659e716", 0x41, r5) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) 12.891288259s ago: executing program 6 (id=2191): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004811) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.576415735s ago: executing program 9 (id=2192): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 12.500905837s ago: executing program 6 (id=2193): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1b8, 0x1e0, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x1d}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25080000002c0004800900010073797a30000000001c000780080003005d07000008000100060000000800030001000100500005800800010075647000340002800800020008000000080004000300000008000100140000000800010018000000080003000300000008000200008000000800010065746800080001007564700024000980080001000600000008000200000000000800010080"], 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x8980) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4c083) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 10.72195796s ago: executing program 6 (id=2198): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.449560158s ago: executing program 7 (id=2202): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004811) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.508012555s ago: executing program 8 (id=2203): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 6.23502492s ago: executing program 9 (id=2204): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xc00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 6.071332184s ago: executing program 7 (id=2205): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/175, 0xaf}, {0x0}], 0x2) io_uring_enter(r1, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 5.446822783s ago: executing program 8 (id=2206): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x3, 0x401) r1 = open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) statx(r1, 0x0, 0x800, 0x0, 0x0) r6 = getgid() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) setgroups(0x4, &(0x7f00000004c0)=[0x0, r6, 0x0, 0x0]) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) 5.348850595s ago: executing program 6 (id=2207): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1b8, 0x1e0, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x1d}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25080000002c0004800900010073797a30000000001c000780080003005d07000008000100060000000800030001000100500005800800010075647000340002800800020008000000080004000300000008000100140000000800010018000000080003000300000008000200008000000800010065746800080001007564700024000980080001000600000008000200000000000800010080"], 0x218}, 0x1, 0x0, 0x0, 0x20000000}, 0x8980) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 4.927098948s ago: executing program 7 (id=2208): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.2060633s ago: executing program 9 (id=2209): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 4.04482957s ago: executing program 8 (id=2210): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$revoke(0x3, r5) r6 = add_key(0x0, 0x0, &(0x7f0000000540)="375f9c2beeffdc181e10d1f414139b0116cbadc3452c1117bf184c04000000c7b54100d1feb9f7e86bafda0432be1b1d99c4d5d6bc4e9cf792e3b9025e8659e716", 0x41, r5) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) 3.304749627s ago: executing program 7 (id=2211): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) close(0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000380)=0x9, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000008100), 0x4) 2.650742769s ago: executing program 8 (id=2212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 1.491917857s ago: executing program 7 (id=2213): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x8001) 1.411770666s ago: executing program 8 (id=2214): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004811) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 346.516332ms ago: executing program 9 (id=2215): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) statx(r1, 0x0, 0x400, 0x100, &(0x7f0000002980)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fcntl$getown(0xffffffffffffffff, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioprio_get$uid(0x3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$nl_route(r5, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005cc0)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000005dc0)=0xe8) sendmsg$netlink(r2, &(0x7f0000005f80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005f00)=[{&(0x7f0000000900)={0x201c, 0x2f, 0x200, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x56, 0x0, 0x0, @u32=0x6d}, @generic="a86d0c8bf5086cf3d959645baf37ae769d086fc4cb51d07353b71b8616281f57159b4ceb94595280eaf87039810864c9720c8a6ee524ecf94100ce35b564c521cffc1e824a0c877f50400d452a712c66d047362a3d4c983d2664ee5fd388ec77bb76184623ff513e27c139007905c1a1e0db321a8329642a278db4b9892fc19d82e1406431632a4ad786f95327ec76e714b451434ada84271d0f0d424b4fdb9fff15d6f06bfeb22665abcbd2e2a07d7dee4971c844a9907b379b6b385e30de6ca3579745433b149ba1fa06473fbc187b0b5ca42002b5023217f878a83701258306d1243892119fc4988eaf1241cc04ca5bb20033a8e69e23f9d331716fbd10c1c25fe187b6cf8910ac66b3b0ec19d0b425d4fbc6904b1831cf16e77a30d08cc85c24baa3c620e777423094d334c838a5c7a8311bd0894fcd0e8dfd1f308e232f3be0ea98db5fb39f96d8f59f7cf7b89ab3aef149959cc91cfc0a00f480f8aae4805a5e59c1b02090d54b337890fbaed7f09fb0e03897dcaa611d5f3dae386ae2fc10104d2248963466c6a0f93e5a0b9fe90ea7ed6318eb48c978f3925e294e43487619d9e6137c47ff90f7cac253e231a92ce3096746e9673e1165ff72cfec946ca1fbedbf408e0405f9dd77e7ad33b9f9989c61917c90bc5d04eebe4654b57fbda7bcb353fe0ab831d08d65fc3512ff048574d9bc736b486eb14eb8f60bbe48b92d3235a33e519d174e1fab7ec187a0c3a0aa788886f4872a4c73ccf8fed26a9d6d79d537e12b03d7122cc1feb60ef153fb7eaedf65c7d6e9333888ea121311ae23b40c13c290c2d8250547088099cb7ed7f303fa48fa3308e95c037748f46108bf39e651018fa2756065af2c2f6e48edf01f29aa92247348f1d14aa1af52c3733c8a443a8a17c7a3d256e0461202ddee877ef6720e42d73435fb555e037cdb9b0890f2f9ea983c88d6be1d048b8f1f8a7ea056257f50a3abedefca53aeca9ea8c1720609b98510297812df043370cd709fbc7f16246bb591b9b367a7a94bb69b3afccdc5bcc66743565816abbd3bc9330feb078ed72628c83f12d8b4d7d51215da76dfd86e9ad1f4398331597389ad912bf576de34ba883883877ddc5d2e2af75be5edb49d2296823093b388117addc7418e7b8b391443fb4fba63c3233a14c3783310bf7e29606499467a55eedc6ec4ae565df3b1e689950a96740419425c2a605faad38358a79abc99491d47fd19350485ca326a335eb95dda967fb8f7ca6ca793e64a920966a4dcc50512d9551a6ca4585bcd8a582554a1f2876e6a423dbdd81f5a5525aed8b029d5784c169d2f898c52258ec306944689cb3e15ae701079e9d86207450f26eedf667fc50186bb3e58a2aa9de563e72d89b6c0176f156ddd81eddec8ac58d17c32b2f1c1b34935c442285fe6b10590e036e9b73ff900833f4ce8d11a0b1e25b8bf0ad42c97097e3ef8e3de26c1d6d8e25a38f5014608f64e8d18b4b76d38bf8216fb6e2b0f1727c294bd776944597f9b70eeda073d90388584f5e17a95f2461389b4b699d5233e9a3751ef842bc79711b3523d861437969bf6e4fa9b444efdd8b5b615368bb905fcd4d8e830c70a82f30d889247efb29a87aed9bdab5e6d0a71e61ed84c8eaa4ac5ea56724b1168f39adc65af1826eb033e21b16c1e5d4c304b59e8fa080835c015b1db1aa25059b7c10c2c4cc04177a5efc373a4271e667bf5ac38f76e83f65d00981383f42bb95817c029072f18c5f9f8c99ddd35b5ac07b9846afcd3194c03f45c7760ed0a848c06788710f43d8ee53d5435214a7eee8d669e53ed42cf188b02e0a30e506baec913a78a5e83f735b240b1ffec97acd10051f53a3d29711379950b0c2fd82223ca78357da21877c5b262bf62823430ac9cd5f38799974206c447708b83b8a0bdbb862662688e6ee738191117295e1efcbcd194e5abb00fc1c9c1916dc32e55cd87805f33927364b6b161e2c28c86535e8db387c110a3c2cd79db152a64f6c0a269592b49e2fb87a26dc2f9fb15f17572cd8ce057bb9ef494afb2957ea41d04e7e23ae2ceec144a656020755bae9dfbf8f3735b554a93be5bada9758da60e5a7d20d8d042b8b0654e6305937e5d15fe925d34dcc63ce18432319d51246a678dda01a8ac0cd86615570adc14b6cd869be234b5dbf0d427926d18728f7ac3e55013351631dd689cb2df9274da42ab5460919ca979274f6009b2740ae25c9dd2fb93ff8907b551ac3edff1fa82e9d5dc30f39ffc2b263e5561ac8af58a1f483439c08cd2bfabc69398c546113042a58ed7c5757b90fb8eff98ed2631fcef3eeb35f6df160a8ae6f2b9051056da45243067154f9d7bce5fa18b8c79451e5a2cd1dfd2f9fea162c84d34fa52fed1f7a4fae906b6f20de1e3b71ec63da414e97f41b80d8381de1dddcfd58b30a6968f1ae96c01bf98f0f80478cd506134f95d8c76a87eeb01fbee9d394558e35c833239047b64ee06f7a88f465ab0144e5b06ca6f7ef12c3a9a8cde62cc8771534ebd42c8b3be265a90a614e19bd66cbbb72e591ddf52a440e228b0169f385ddbe534a1e24ccc09e14f294bec9310e02b885e36d60eb8a95cd28057682502aa3da8bf91527f024d84f303896bf942d34d71e2d6df60bdfa17843c1b7ce447eade2aac6ac723c7272a26aded96ac23c826b43f93113ca1d81d05ee7e86354a2dd731e986eabc3648d45047b35806339a1b63091e4654318d851a1ee6d6673dee39a8a18e5d7d7ca8ed853bfa0a54f842c28a54b045b7a48cdc547570529f57df4ebc3e489d3e74de18678aceec909e4cc1135abe70b6f3821fcb836c692f7eb144f786e3dfd4353173c20b915f06bf34f886e829f9a7e4bd1950d9a417e9c7730d4971f73fe14c7d0c92552ad3f77c3906d2f3db47b096f809297dba5f46fbf7e11766cc5416d3c600962cbb6e714de2d2688c42fc5f6ca5d92408d9b13af71574a9e57334696ced86220f61db9b57a0fb6113261f2d80aaf990cc6a9fc3031fe7043e6872c29472d6085864adeafcb97a59ee91badb58dd59088e49a0753e98a3686093f3a2d94a5245554e8738a9551033cebb817dbcbf4f8aa2f3f237f72d1d0438e64f3af32eb9ac59744883f2337859f1d5c71e094e67984cce93d09a0a72042fe3870b2d1f1dd7e375083fc688dc3dfa297e941d8be8a24d7d88f2a0f52707378b26850691feed2a24f7f5a9c4cf9e2458c3b2ce33d2d68a59c65a58bd05f02be212005dd7cafb3391c3dd266c88f7c9b2af4c64cd5c2a6f25005e2822d096ecdc4749702ee9012df688b0a830f13fa4dc75d201d5c1ee346601c754a96505a191be604e739d82b44e33614f45717a7455f22695a6871201712e630caaefb8a4dbdadd54db3ba0a5ae06752fbfd6165d5c48c567d555feb86e03e647d89faefbd1de87e4392d82537bddb1566920019f36a1ac4b361dd29cbd748ae3e7fdcfc5213b84cb40b353130eed340a459fffdb18460c350bb2f5c7d5588f6dd05e25c3b8f98e4534741486e27ab798c0bfb197412029e34b250c5669ab526c9dbac5c4e5e6b4dcf1db3055a583bb8cbc5831267edf58138bab1cd3018c35e4e36d712c81d63f5abbb90dd195aebe9c1b475aa07099b78d3a2c406b86311bbc7529c63f66f0242b7c34e7f85cb59eabea352a555c933bcb8ffa6c6e96260761ec28782284b1ab037598cd7f946dc0fb4d304e2f9b38a31e67c47726cb38fbd55d8fe271b3363ea3a239dd3dd469ab9d137de293eb8c71d65d04b95a04f5016d11d73de2b2721c8b676b82ba27e051c81a412bf1f7304b2dbd5e355b04b5d4c6ca130674d4a00d99d2592c347858cc2ade4810f6e44ebb2fc4d180bdb2d1f054f249de684edada7f0c130b5975c05548e72a4cb67e94516c9e3c035e2657b84f3b291f458be3f97336907a5adda255a77cd188814663a3742c7c7e2447dd7ae8a9c1901775b9d386cd3705901c847e685d3c5e47f49fe08dc15305dc646548c80f20773d287bc7d7aa1110b673c5f7a398b324f0befb0eaf131f8264804e5693d2f16db67be29acdca7c2491658cd0cc318a4dd0e6367fdfd64c232745eec67e013d5b30419b957be963f808eaa85f675d54589521ff9b0c00cca8023d3291ce6da969bfdb35fc9fc05e32b0e3b49d325e507b1a578474f24d55a0e9bbef35fb2e20e2bdaf587ebfca3f12848e6605193845885b66fa35b421e45a9e63db64771997edecd1c2a2976a64762fc32801af2b08a73bb11441b0d50bcc7a5d5b072de795251d9505788b9a20907e3bd8ae22703cc955e6372f2f91082d38cf67853ca44c96a9bcca2ee427808f8c117ce7c088a99ca95d82eedf39c2ffdbe9abf14fc68200174083e51402d6d9e7561bfd0987c1b8b95d515f12fdb6677a62c532955e5e7709d772d7008b447428e73bdb12ec0318eb95d3f62679e750261e9a70b339a3b7cfa625913a98e41db8d5048ae1c65cddcccaf928d0a72acf7e3a0565d4902494bf86462b1841e7c504b8dcdd7b0398fec65317018b9a2dcdc9d7ea168a5ad77300cc0288ea8a1bd534567ceb822b7c4f7ef55376e6834166ddbd893c62a81ab73b92a49ed8edff212e070e7877f4fc2bd9784399ff9c24bf7b24c595128668eb59aece9fa91c57c5f45bae24226e13861d4ee03335e9cf7c95340f9e783677b19df6f4d10188bd3da5909b926485b4437bf878f9f2b5a83d425d01d0da0a6612eb833801fbf2441c759b3ef4d97a13397eab91f083510634003f0f6b3933a706439d57c495a27711451cb76daf67e6dfbe6c7ae6047c0a68bc05622484d37d1a8ea46959c35e7e776caa9d03cdef98eaac6e86b3528e9dc0811e1ecd9a023e9a064791d0d3e1b7e0424431a9fd88b41552ba94f63f37c34b45530f6fb06d714f79a9ede4cb08bebf3255a7b64815a7a75a364be15f37ae421b221cfaecc087ad91198bce5f4a7b4a50861cf199b701b0d93b2db19ea596015f6199dce6215dbb070e74e3595ecfd5a230c2f7f463028242de23c0edfebc4081e390a9524251d03675cd9ffd75fc540bfb3929d7bebed317982ca8f2e6e35ca080f512abfc72a1153d9a1064562cd7016a5fb1fbe3b1a1c4ffc5e8d606bfbe7ad1a36cdc6f9f30ce84241c8aa4e1846fd8ed32dc75fcfcec7bcd86569ecfb0e0ada2f311fbfe909b899b5f0e840c967938ed22ac2e70267810934892855d5961179cedc94fefaf2a2f549bb6296884179d1c28555bbaf7f857a7a4cd894931420876c7075b00beecc592948183abec32802e215cb3855de44d9f135db258e4ddcdc55af0ebcc764e7fc8867a445467181fadfec1489e53778a425b758919fa8455ebf182be4bc0361f6646f2856a9bba3b3f14e07f1f240f1f0f007d862b98ac8c474c52cbd7024f45670e4b08d3f097fdcf13d5ce91cfc689ecb3223fdbd91195389cd2f175fa66bc360496f1081164aff96d06a7274c1958d79aac8915a8fcc700723864ce0b50929f6e042eccb41929f5c5daeff6bd7faeb75a06592076b97f77666954269af2e14cce0f13db74407c3f0779c63f798813828d15b7c24ef47b09c72c13415caab0128e3bd7a2d2f49f0c7667dc886e5bbb1fd8ecbc5d69c32608555bfc61fe944f1c3c46459b8f4efa75252eed3bbe2b67ac96108beb68f194a5b3f5d9ce13024da66271dc2ac48f7ad0924a88d578e5d5321a151705d68536ed4700ffe2a49b095b153d2d6a5b3eb6ffe97937d39e7aca15a57db5d1afeec9abef8252", @typed={0x1004, 0xa2, 0x0, 0x0, @binary="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"}]}, 0x201c}, {&(0x7f0000002b80)={0x1198, 0x33, 0x8, 0x70bd29, 0x25dfdbfe, "", [@generic="273f7cb4f57f7cfa6d7b2c2fb0168e7388edf1efcc1d8d484e60052ffab625fd1c96250c7f605ec7c9f82ec929c52372dfcb79dae8d156c6fb65c0748e24657dd71b1760958350be34e79e0a0ca3c3f14b4254454e335dd35035034784f2084798ac3e2ae05d4f3e75aa64e6a88f4f846422ba567b2999aeb0d88b428a3c11cbd3ca0217ab14a6cde4ca60d12a3676a31a403c3bba4a7a857667408e214715a0d0c70e344980aa4ebf2bd5f9e31bbab1de303d9cc890029dfe4697415fbd89cc909f9a20c7f8f950500c6f", @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@loopback}, @generic="5401f1e864531a920dd583b56d72677b979304249199a4d072bc0997eec4d6eca5ccf18d934ee7c1848b74b804c978b61e5fd457a4b55d9eea5c0033df14afdbd2ebca1bf9d4b5a0e2073940b2eaf1450cd142785418596a1a50889dcf54a29dc8a1dda40fc4b0d62e569052668a3b64c8bd31eb2d712625467a1088cbcf54d91e058783244b61063a39363e10a8e5e040", @typed={0x8, 0x110, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xd5}, @generic="32a98ae6255789ee8de61eeeadf86614d45e81a570a7f7e2e8dffba1fe1c2fbebafba0f1baad46c80b2a5cdb1392a6fb5708bfcc63b1b88efd05432b49bcf125fd6a633bec51f4352604e79e2148ffccb36bb492c4b64e04ca267a65e35edf5b598bd2c798973456c79b41f982df2c3f7ec3603d4c7b3396fd52a2dd78e04dadfe18ede78e9dc63c3a48e91d7859028cdf7ac78a799dc000c23e56a02c6d9c708d47f362aa9164d8bd9ef816741eab54f516b2f633bddb851d824454d31470ee2b23cd7fba709ce7923ff1c90e9a3d9e1939115a2c4ceca3e83fcf8fb97b8a39eb46286b66efa75e66869101764121de6cfc9dbd79cc79e47df4323e113fff2a1324c773ef188f382f6772ff0bcc6bd18e99228d7842f22886e5f29235b98470ea1bf6c1be8ba089fc2696e68c1c0f17ef8cc1313ccf52d6a942be3f1f6056453cb4f392fd15eeeb3779ebb81351a4d45d8f266e18dc83ee290b1b894ae3f04e99c80a18cf6dc698ad7ea89e7944edb9154267cdd396af2d92b3e400c6ed38f8033a14a4b0ca7cca4d7611a4cb0f326f47b720fa8d1851fe0801de729201489d9363ad65246f287a7bc0ab38792b1f2545f140cccdec67a121b195b71b2e5237fabfeb32e2a08deebf2e5a787e4daa1f011ee01e88bb017bd61b3b24d7eee86add3a16b21c949cc30978dfee790a265cffec79fc7d5606b392f84b5e70fe4be599f491224df66bd2aafe509115a7dc2633c4470bab60e06beef49e2ed416a860a060cbf4a1c97953a848481d9a71c8260d07d128ed9b31e45ee25d1eb4744526401aabeded92e092405d11999cbcef04b0ee536d63c45eb2d0163e6df3899ad67de7754cc5a1ca11d547f9c881b1f7c5ad1b6d7bc0c64fae78a81fa6bba802a8b4b633217a1a5fbb58ee8ef7936ce88f00c307785568587ad091a25b61bc3530daabf30d4b814d7803f0a000ba92cefb0947f5721b7374f3a1f5258f97588679b118b8d86302422f3c62aa1896486dd0fb5bfd38ad16378a41610bd359ccfba937ee056fbb4ef83bc4bf38b47dda7ac7e4a4c5904fdc945f0160190b5c167bb4a3f34e238ee22ec3528b0fc07c1c5241fc4bebc5e0287c8955ee5323a5869607490043027c474773aae0beadc911b5c299b2bbf7408d6d629378d7019824abb46d3572381894f9976af0e3d460d652b222ded824b966775d87739b22d99be7022977614386f3fc8e1a4316493a5f5a2870a075ee8eb8ca51f6c7d92f810622e2e0a3dd2b0661504cd40e8eacc2cac0f13476e770f1ccf008fe162eae58e9b12543f356058d445390f3bb49b6ac059192bf01190be9ce7076831e7aebe3abe068c31360c5dfe10c217149939ed384129cbb19e58c6e132fd5e221637105ce40710b0fffad022ae085015306d6e28b3c436158e893870d4d013da331cbb5c5780e2b9209ea0078570f1fad9892367b3cc0a5e4bf1c0ff5834f74e8422aefcf534d00e87dcd666e173bb7b066d27050a598252a1fcbbe7dc31d8ee604969bb17c92fcb064d78cdd5177db7267510bbf81aba0e632ef8f1e488c90b64e54d2acbceba6b401261a2539215cd704b1cab5c11ac670830ca3675feb83b972ea60e2bffb893b9517b7080c729a3fe574a14a2c2fe9b2cccac73745ae2e322c432008f0010ce063d403d15f31650fb0cb6b47ed62139761bac9ecf724a631293d3f47dc0f7a354ddfadb4e045bd7de6fb9cdb708e84318f208b2f8f84c991f04e47d52cc652ef3b5fa6cecf87c47119f6ddee5e4135128855155ba4b116a4ae689317bb16ee54653315d48550f1dda3ec5d84c181562104245d746bf804443c2febbdf5edd85ebc231e5224c0b21f00d8725d9f4fa8fd202be49df8589dc383c09e6cf9dd872b99db19b6b987ddc79a817016786136c241b3b4203c53d7f47dc3678673249eef0ac0d2bee29a17a077cb7025edb9369179e14e97ae8f0fb0faa93761bc0b1b09730054ebda0acb42663bfc15a558ad4433d6a5246a9fea72407e994cfe9a655bebe55fc1cfb09e12078d1a72ba13dfe4051d3b7a2fe7a401328966524a16da74dbe8adc57b1168bc7b639c9a704cafef23dc977705d60d97ac6802bfbd5131615d9581dc7b6492583db21908c7613d3a5f2d2c97d7cd9ef21f71df8f13a2358b17159969eb986c605a5b6d25aa7b1808604e02854b096e6cc987973eec8594b6e6e4056995dd4298e30fb4fd59b107beeb2b374e2807e1169005a7b3ceaa5ea8ab2355c523faaba49a664bdbaf5a3570bf21e867b7f72a0f925047e825a4f33fac412c0b2f5b007086b43fa34719095e0b1ab5550e578359ca669bc472eea1b35fdf4f65d2664076826bf9ddf9e2353ad4317d170969f0cfd802ed78a7a209111cbfb3f69b451251c34c3d1af79f80974b7b04a74d5f66ed66d939d75e60c7e00b1f42759b8bbfa9b2fc3e286c11875d817e4f0cb1fecadaa7db465b95f9884507dbe4a3ea9f15f20b4db32fefa604fe2c25cdc78aaa97bf9c5eba0a09d342a00f62fe8cc83ddd4ebd8ab9cdf2263a9645e002908e92ca959d9aa34a3424b166e70e03e2cb08865567666208cc71b623d6721395ee5f6e32e72be5e1c4aca0421e92fa06d6ec78fb0c6ef406f404bce6fec17efa763a9e5a0c2e7e07f29eaf9ba4d4f56eb7a9d5cefbefd408697bc5f86409b6980334a03d9f717134912078c681296cda16c17783323dc33a131becc2de437d48be702ac43621d7f3bb800ecf15eee8379fe6308b51481965d9de644ac5d0e0f04973398f152ad2b13f968e8b581d39e74265ffddb9d7ff279094f240c259b7f005ab3bb952ea5dfb34871afb5dd66a2a177c403016a3f1ebb4423ebc1cac004f42d5115670a49ab2c95401f0e38be69c7729bc9e4cb7d1751de8b847bd4bdd2e746d3e0fd724dc04e3cc9b157ff3a67da2f64f46f939341397e414d5437e8608b9d8a032be6a251f5afdd214b9584e8ffa81b7ace40033ac4301e7006f4b29d1d474df986cecfe07a92a90d4fc972b6993e29af9b57a5328820aa610eaa659407726159e55922dc18dfe31abdd69734c7545cd844c546fcbe598de63f2b87895e1f8d70789daf092e572c397e63408a0426a15c52a81fc874df1f1cdf0fe55a02ecaf6c2db98303e09cd1e108bf1db104c4ae3c04454ce1acb48f49aa50e73473ec5bfca44549b72153248512011bf8a574621be254cc757de69c2ef2ddbee7393074c1833031c988dbd535a7cd0a39b945427d5a2aebe92524aec4c6be83334fcdd172378868e30d6e4c9c36700c179b93316f00b154d49156b2a1c94ce00577b6cd1f6224095c90d20291bb0272271a8cfcbab80729914c65efcff39861fd9399140540b9f0a3d8085a2f6636ed7f20eb1c29d2226b9f02de3c0d6b4ff28b9fb5d78379358c5884d34718e1eed892449fd7c7d04b79bf9324422081df1ff62abe378b4b03235337886dbfdf6ecbf4e825af3e3767de0e597a259c158642e7fdbe1c421f3a989ee26fd8c95a1e66d0d490398f1b1b0a19abacfc6821a4289df44ed878232b5885f3b430e76c412e88908b549f108078fae8d01f527959d5a7efa810a57e0fd3f83d8ec39d8de15128d5ac3929e614d69f677f207182a5cc0ed0ecee43c00755ffe28e0d54469a4cf759afcbbd1fa78ad1fc5c8258b1d1ef1c624f5ed69db691081d0306687f3fef817d4bc9de89a132b490b4cdc45c8b0776446ba253b501a246269c74edf8a1f239602f5308d0bdd14282538cc6042409c4c5f4cc09ac2ff2a9dbcc8f940c95b7ccab04aa47171c76c5c6c6209b40da5f643fde9303ae72ad7f5f70558db616b80f9e363905cb5e4df78355f864b481fbd93c261f260d07484890f2776555983cec16175da7a9c47d20cf9cc0d773cfb26e5335fa1ee84df712f98ec7aa3ec8e8eff251171d4d7a1816ef819a7002f3ca7ca81e0bdd3cbf99a74205199db5c9e3e9ce80f4635d9dd858d74c9ba29d734b5415750866d36918c73c39502930a066c0c37f28f2890ce8f2b461d7b7a52ddec0e3b59c7002595eac2520e1a459ddda8480d45b412b5a3c0eeeb931f9363e1718b1f20d5d0ebb6acb9065fa659166b4c0bb96e90c8e90fac77ac5614b9c8be541f741a19a913990deb0ceffc336003b9567f763dccaf0f484008e6e58d0ecab2f8378141c6b206907a7d957ebadb2f169f12c895b0ad803f9d53f30591628045ba8b24b79bfcbf215ffdd756e9ba1f12cc4585ff15868964b26dd0fd2a55823dca1fdaad6dd261cf20406a5b2c64c52070e2afdca6a61fd8a473baf49794ecf039e29dc622060cd5f9f5d4169decee8a292574c43451acdf31177913f1408b1d1a7dad313ade62ccab8b015e5c0f4441ff44f042381dd82c464289181dd594e6b1f9be75c1de192ecb6f54933f8c3b66f4c4844bcf07b54378c44735b0e3f75ba2ca179c9510f52698db246bfea9766fcc4fb1be361e55ac23ac0e78d1b5d6585bda9eaa903d490dd557829a7e5e9733ee1c30eb1321c1b9d2b3327a1a5151cadd4c6cdf1836c09119706f6ed88b06e286b4d46adbd9de4f9bc659db466a53945d5a3804e5cad2e3a865a2d390b1851747b0bbb1c27811e84798ca37982a576b7219061fc114b127207a6610c785d14ded14c34c1e343fbe3b824a1e68d25b091e5a12eac4d07d15cfaacc96550315e5d49d73fa7b06e5850a597b1f5fbdaa824c8b17d594a8d636ee588dcf6d750e4c7f8f5827ce81b06fc67898789b583629745fe6dec7178f07c432bc2d04ac64930bc26b934c63608727e41755c27b3406e7d4815717c8a22a63ca5d23924e229444b2104c767295839a62964e42325fb7c71cd61ff5c8aac870b9afa282d822e3904d69c73b5fcd7553f2d3fded5b4aa56e47e33011a80b840be0ce7818f7fa9ad722017f95bbf7af7cac9003d1bafd9201a78aa55592869756fb6db3f1b2b75f4ecbea00eef4764990ff795c9b4e05a58c62c965c55c85fcf53695fe989ce3adebe856d3ced15df12f0760f31f9138c9846f568afe25c4b93bd10004fa97e8fa1be6efc397440f1b68c3af5ef8d649cf71f8540ef73b274583e1b065d97fcf76c8d28a2c5c1d0c88a3bf56b824f0b2d86c593cc5fa3051d0af30d3c5dd6179a70c243b8c84e6f0347b7f2754c1f09d9e76a8888d9a5838597cfbfbb542b1055d2b5c98b5a8c3a7d441ddde4f631d6c3c12f1e44a2ad93f400e9bc0f35d86735ffbb85f0e3dcef4f10afad1cc7817bed3dd4fc22ba6548e98e4a885128a28c13e69f393b238c7eb844853167e5c0f539c64eebf968f8be2908ba1178eac472ac9e2b366c1c3aa3faa4465733e68c80b1339ec767a3d37014ca11299f8ba3382f3c1bc4edc86871557b027b1af4fe966c1fa57c86f098f6277629f75397f2674bf7e59d93163dc74607f95ac476f4d2c465454ead48d6927b8800b963f0f7eee917f2daa178608236fdd4d19499030eb428fcef14c410d442d0309d01d3ef53da0ed2fa55bf939ee8c53fa4f3b97386a97011f0fff5d02fbc0df47157d58d7d6713beaa304947fde42b3f81b5b72ec3452e842322d5e7ffa962cceac4cc4716aebcc6a18b2ccdb4805b8a7145b4b94b0e8bee2962626cdd5b923c727d678dcabc99648e20e8e06dcb57dfbfe488dbe2ea913eb4baa7bdbf14f4fa676a8cd7fa3974f753b3609240e7df221ef5ac10bfef2e6b9d35c8a6e73af63f308f6178bab9b60a3b4b2da0bad553e740f875304d9f03ba4ed5f84920b", @typed={0x8, 0x14f, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@loopback}]}, 0x1198}, {&(0x7f0000003e00)={0x268, 0x2f, 0x300, 0x70bd28, 0x25dfdbff, "", [@typed={0x19, 0xf1, 0x0, 0x0, @binary="4342e4ce572626701654744efefcd8fae6e82ca492"}, @nested={0x31, 0x11e, 0x0, 0x1, [@generic="cdcac2d90394b831ce2bb1660539e66788b99210ca5054ca51f221651008e437412418f78864b63f56", @nested={0x4, 0x54}]}, @nested={0x183, 0x4a, 0x0, 0x1, [@generic="87da68c470116c269e7019ceb58c4232257514a67fa3622ba2af3dacee25c584f1cb16bfb09c8f980aa726a0c5c67a173706", @typed={0x13, 0x23, 0x0, 0x0, @str='/dev/dri/card#\x00'}, @typed={0x5, 0xac, 0x0, 0x0, @binary='C'}, @typed={0xdb, 0x120, 0x0, 0x0, @binary="1f891ad5045181ac8e5f3a54b6f190f9ce989d481a183908f5c07a5f08a99694447ad8c62e418e75c424de99d74b5ccaafbd266d07841a8ba87ad114fbee9162049bafd76cd6dc4f9c04cd6da4164e3c863d277bc08fe5e83ffb0953f0cf9c845cacd92dbfc43d393a6e5a703f5b1d1667e5f14504b06227c1a82e77b0c1ae668e2a0b780bc7246a7a060f5e88aab63295066b914fb4c8aaee4f83aa311ecb241d4e2a224b5c7905e05170ce62bbd24fd8db1215a74a9a25c03cce993e3c07a87438c603cf24e7f5b04aec93f1c4bc0537321b691dcde9"}, @typed={0x4, 0xf7}, @typed={0xc, 0x104, 0x0, 0x0, @str='-,/^/)&\x00'}, @nested={0x4, 0x117}, @generic="9cadf1498bba0f9cce2be26180c15259c518ee2f8bf8b16cd294f46792207ca3ef5fba2736978add98dec9a22d18265c66fe187809212c7172c55911f1", @nested={0x4, 0xe8}]}, @nested={0x8, 0x122, 0x0, 0x1, [@typed={0x4}]}, @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x679}, @nested={0x14, 0xac, 0x0, 0x1, [@nested={0x4, 0x4f}, @generic, @typed={0xc, 0x5f, 0x0, 0x0, @u64=0x5}]}, @generic="63cc681bc0af158bb24be0d9275308e1ff57755502661d9802f5331ac045500c18600ec06bbebe94670d3ff093592b0ecef6213d69b5fe9c145f107954e0c908d21eef6d161d19083bcb7f4d8b949a47ff7ca966b2b3cdf3afc5b5bba053cf6a"]}, 0x268}, {&(0x7f0000004180)={0xfc, 0x1f, 0x8, 0x70bd27, 0x25dfdbff, "", [@nested={0x10, 0x80, 0x0, 0x1, [@typed={0xc, 0xde, 0x0, 0x0, @u64=0x2}]}, @generic="150cffb9d1f2524c4d8af76d7248cce6da613f955f4133d80fb9a59f5988ea0b5951b4f138312a1ab5eee255c8d4edd89b3a08885d4b3e5c1cc8f85f9af2e0c5023a1256bfebd570c3dda5f39750a1711755fe90b5b90bef1186bd57bf11b05a5710cca67de173e90af3f067cba612a58add9760e9fb1b58670b41a0e1c47f3972a8fc2ac6bb44cc9e058ea7716c84eb82e6e549bdf7460e838f26977cdddbcbe83b9c0a4dc0c5e5e1e792bbca270f74dd11a05f98a82f3d912e87705328fe64d0558dd76a76c87640c349b21c701a382e3e020e9c1629d4ea"]}, 0xfc}, {0x0}, {&(0x7f00000057c0)={0x2e0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xbf, 0x45, 0x0, 0x1, [@generic="b378ee35c65202090df59e6847dd7296db71dcae51", @generic="67ab5140534a4004bd7c19889cf2b3f7376975744433b151157591d09d43b6c954718e3490f49d808587f2bdead896fc7ad3daf92245aa513821018e6a18afff4f24a4be6a81ee1aba7469a492e4b5aa18ed0d47c2a53885ff7853549b90fb93eb72176f660419548fb2d453db36d0e4435a64fb4ffe5783a0e819607fdb718e743508f87cfe1daa4e193cbbeac976351e6c0c421d642ee0d9a0", @generic, @typed={0x4, 0x89}, @typed={0x8, 0x154, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x4, 0x5a}, @typed={0xc, 0x12a, 0x0, 0x0, @u64}, @nested={0x1c5, 0x44, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @u32=0x2}, @generic="05bf21cc83e3ba72fd0a92dccdeff3754944ee7333351f25fe9abf9e090d15c5b40b232d7c74d4379ca732fe8807", @generic="87e362d59702db24c4a85e90d59d023dea04a4b8eb8930e189110ebde90e9a4856c45b4afa486a", @generic="3728cdb5cac786f190a9c58884379cf56533fb5d58554da36a12ed0a5bd89ae52726c8b4f04c98357ae5be0d29ac4419fd729ba06164edd330e2600a845d50b353f3d9079baf34a2cc2cef6a7415d260a445d1974486ad0a5595ce81de4eb1c0a3", @generic="99054e80574fbea9ea358e456bdabbdac4bc8186f59e97f8cf6d85e07a02e94355167427abadebd27f97693f", @generic="0953a9825e4739237dd96d080d156d960794c5c8852dc5c895568a92", @generic="91016c315d6e6cb4e967ef4ad2b2cab3711832958ed983c9e6dcd3ddd2d3e50d56b93f527edbe61b31c82120bf5fa67afc750410f9ce7cafc672ed18a385adf3b2a7381b94596a2313a499134e34845271e9e7757b0223efac3daa069abb9229aab57c5da6ccbc04cd8e6e302dc3f77f48af909df9550ae002106841aef91287f9691f8f40bd0efb7f01af472230cfb0ef0bf9ba3e414de38c10bbeb8b6ec320722f443e0ae90876a42e8d0b03bbb0b328dbb6", @nested={0x4, 0x9e}, @nested={0x4, 0x45}]}, @nested={0x14, 0xb, 0x0, 0x1, [@typed={0xc, 0x154, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xdb}]}, @nested={0x24, 0x6c, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @fd=r0}, @typed={0x4, 0xd4}, @typed={0x4, 0x153}, @generic, @nested={0x4, 0x35}, @generic, @nested={0x4, 0xc9}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x2e0}, {&(0x7f0000005e00)={0xb8, 0x13, 0x10, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@empty}, @nested={0x8, 0x141, 0x0, 0x1, [@nested={0x4, 0x71}, @generic]}, @generic="08e80a2f9b991a88ab9ead33fb259cb0070634da58dd706fafc3e6a87e8731f301adf43620550e7da6e1fc6cabfc099f3667b8939a0a9f08481ab6df106806f72dbb856c0503ac7a825a55f58c8e5ada780fe60e9c5f153a26bffb7792861636f5e20121818b255c8b8c43dadc658c3d1d2d741fd8732e8b", @nested={0xc, 0xf0, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r6}]}, @nested={0x14, 0x11d, 0x0, 0x1, [@typed={0xc, 0x7b, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x53}]}]}, 0xb8}], 0x7, 0x0, 0x0, 0x28c0}, 0x40010) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000200)={0x0, 0x0, 0xfffff649, 0x5, 0x0, 0xfffffff6, 0x5, 0xfffffff8, 0x4}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 251.625711ms ago: executing program 7 (id=2216): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 116.660887ms ago: executing program 9 (id=2217): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/175, 0xaf}, {0x0}], 0x2) io_uring_enter(r1, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 2.020565ms ago: executing program 6 (id=2218): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xc00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 0s ago: executing program 8 (id=2219): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000002600)=""/4106, 0x100a}], 0x1, 0x3, 0x401) r1 = open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x8001, 0x1}}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) statx(r1, 0x0, 0x800, 0x0, 0x0) r6 = getgid() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) setgroups(0x4, &(0x7f00000004c0)=[0x0, r6, 0x0, 0x0]) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) kernel console output (not intermixed with test programs): running [ 428.758701][ T5911] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 428.983289][ T5911] usb 6-1: USB disconnect, device number 5 [ 429.121686][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.121701][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.123173][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.149187][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.149204][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.149231][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.234307][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.586225][ T5826] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 429.619075][ T8107] hsr_slave_0: entered promiscuous mode [ 429.620496][ T8107] hsr_slave_1: entered promiscuous mode [ 429.621346][ T8107] debugfs: 'hsr0' already exists in 'hsr' [ 429.621368][ T8107] Cannot create hsr debugfs directory [ 430.134263][ T1483] bridge_slave_1: left allmulticast mode [ 430.134293][ T1483] bridge_slave_1: left promiscuous mode [ 430.134553][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.219373][ T1483] bridge_slave_0: left allmulticast mode [ 430.219406][ T1483] bridge_slave_0: left promiscuous mode [ 430.234668][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.445365][ T1483] bridge_slave_1: left allmulticast mode [ 430.445393][ T1483] bridge_slave_1: left promiscuous mode [ 430.445612][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.538553][ T1483] bridge_slave_0: left allmulticast mode [ 430.538580][ T1483] bridge_slave_0: left promiscuous mode [ 430.541271][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.714195][ T5910] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 430.892387][ T5910] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.892442][ T5910] usb 6-1: config 0 has no interface number 0 [ 430.892483][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.892507][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.892530][ T5910] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 430.892555][ T5910] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 430.892580][ T5910] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.892618][ T5910] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.892640][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.036756][ T5910] usb 6-1: config 0 descriptor?? [ 431.037950][ T8205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 431.871770][ T5910] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.911586][ T5910] usb 6-1: USB disconnect, device number 6 [ 431.939752][ T8210] binder: BINDER_SET_CONTEXT_MGR already set [ 431.939765][ T8210] binder: 8209:8210 ioctl 4018620d 200000004a80 returned -16 [ 431.989386][ T5910] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 432.044985][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.125135][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.187922][ T1483] bond0 (unregistering): Released all slaves [ 432.757838][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.084827][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.177956][ T1483] bond0 (unregistering): Released all slaves [ 435.919986][ T1483] hsr_slave_0: left promiscuous mode [ 436.184891][ T1483] hsr_slave_1: left promiscuous mode [ 436.186314][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.297676][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.657925][ T1483] hsr_slave_0: left promiscuous mode [ 436.694156][ T1483] hsr_slave_1: left promiscuous mode [ 436.694939][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.745086][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.784126][ T5902] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 436.944251][ T5902] usb 8-1: Using ep0 maxpacket: 8 [ 436.949810][ T5902] usb 8-1: config 0 interface 0 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.949835][ T5902] usb 8-1: config 0 interface 0 has no altsetting 0 [ 436.949865][ T5902] usb 8-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 436.949882][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.002096][ T5902] usb 8-1: config 0 descriptor?? [ 437.024201][ T5902] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 437.296396][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 437.355033][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 437.959288][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 438.014678][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 439.390886][ T7984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 439.429723][ T9] usb 8-1: USB disconnect, device number 13 [ 439.469938][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.869763][ T7984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.690808][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.690875][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.728739][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.796121][ T7984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 441.028793][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.115012][ T7984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 441.185346][ T7984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.297746][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 441.454177][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 441.456177][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.456199][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.317805][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.317835][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.317856][ T9] usb 8-1: Product: syz [ 442.317870][ T9] usb 8-1: Manufacturer: syz [ 442.317885][ T9] usb 8-1: SerialNumber: syz [ 442.522595][ T9] usb 8-1: 0:2 : does not exist [ 443.350916][ T7973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 443.357572][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 443.424165][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.448938][ T7973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 443.471513][ T9] usb 8-1: USB disconnect, device number 14 [ 443.516813][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.546251][ T7973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.629711][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.753386][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.870947][ T7973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.915234][ T7973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.411754][ T1483] bridge_slave_1: left allmulticast mode [ 444.411783][ T1483] bridge_slave_1: left promiscuous mode [ 444.412010][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.475177][ T1483] bridge_slave_0: left allmulticast mode [ 444.475197][ T1483] bridge_slave_0: left promiscuous mode [ 444.475366][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.504437][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 444.654188][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 444.661683][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.661709][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.664365][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.664391][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.664429][ T10] usb 8-1: Product: syz [ 444.664467][ T10] usb 8-1: Manufacturer: syz [ 444.664493][ T10] usb 8-1: SerialNumber: syz [ 444.753589][ T10] usb 8-1: 0:2 : does not exist [ 444.937759][ T1483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.962237][ T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 445.562133][ T1483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.622643][ T10] usb 8-1: USB disconnect, device number 15 [ 445.639126][ T1483] bond0 (unregistering): Released all slaves [ 445.852786][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.944225][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 446.983532][ T8107] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 447.032308][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.044416][ T8107] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 447.159396][ T9] usb 6-1: device descriptor read/64, error -71 [ 447.222990][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.244552][ T8107] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 447.308763][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.312280][ T8107] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 447.399726][ T8107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.414372][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.554252][ T9] usb 6-1: device descriptor read/64, error -71 [ 447.566604][ T1483] hsr_slave_0: left promiscuous mode [ 447.604428][ T1483] hsr_slave_1: left promiscuous mode [ 447.605259][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.645788][ T1483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.665018][ T9] usb usb6-port1: attempt power cycle [ 447.774386][ T1243] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 447.954431][ T1243] usb 8-1: Using ep0 maxpacket: 16 [ 447.958338][ T1243] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.958361][ T1243] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.961854][ T1243] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.961881][ T1243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.961901][ T1243] usb 8-1: Product: syz [ 447.961916][ T1243] usb 8-1: Manufacturer: syz [ 447.961930][ T1243] usb 8-1: SerialNumber: syz [ 448.036567][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 448.054859][ T9] usb 6-1: device descriptor read/8, error -71 [ 448.096703][ T1243] usb 8-1: 0:2 : does not exist [ 448.195685][ T1483] team0 (unregistering): Port device team_slave_1 removed [ 448.212326][ T1243] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 448.274987][ T1483] team0 (unregistering): Port device team_slave_0 removed [ 448.294406][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 448.314952][ T9] usb 6-1: device descriptor read/8, error -71 [ 448.321609][ T1243] usb 8-1: USB disconnect, device number 16 [ 448.424658][ T9] usb usb6-port1: unable to enumerate USB device [ 448.802765][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.891707][ T8338] sctp: [Deprecated]: syz.7.509 (pid 8338) Use of int in max_burst socket option. [ 448.891707][ T8338] Use struct sctp_assoc_value instead [ 448.986179][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.7.510'. [ 449.861145][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.917199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.917416][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.069255][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.069481][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.360178][ T7973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.545354][ T7973] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.634712][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.634860][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.761017][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.761221][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.778668][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 451.883690][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.960341][ T31] usb 6-1: device descriptor read/64, error -71 [ 452.626426][ T8107] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.641084][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 452.707931][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.710928][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.774381][ T31] usb 6-1: device descriptor read/64, error -71 [ 452.781689][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.781805][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.894484][ T31] usb usb6-port1: attempt power cycle [ 453.228521][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.254137][ T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 453.285281][ T31] usb 6-1: device descriptor read/8, error -71 [ 453.534143][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 453.564794][ T31] usb 6-1: device descriptor read/8, error -71 [ 453.673625][ T31] usb usb6-port1: unable to enumerate USB device [ 453.879277][ T7973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.003734][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.237973][ T7984] veth0_vlan: entered promiscuous mode [ 454.306113][ T7984] veth1_vlan: entered promiscuous mode [ 454.804339][ T7984] veth0_macvtap: entered promiscuous mode [ 454.833821][ T7984] veth1_macvtap: entered promiscuous mode [ 454.907569][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.947303][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.988913][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.988960][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.988996][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.989029][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.091385][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.520'. [ 456.257690][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.257722][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.563876][ T8107] veth0_vlan: entered promiscuous mode [ 456.566954][ T7973] veth0_vlan: entered promiscuous mode [ 457.380225][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.380249][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.422931][ T7973] veth1_vlan: entered promiscuous mode [ 457.439022][ T8107] veth1_vlan: entered promiscuous mode [ 457.733673][ T7973] veth0_macvtap: entered promiscuous mode [ 457.746283][ T8107] veth0_macvtap: entered promiscuous mode [ 457.781607][ T7973] veth1_macvtap: entered promiscuous mode [ 457.792462][ T8107] veth1_macvtap: entered promiscuous mode [ 457.890366][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.925987][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.962214][ T7973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.966075][ T8452] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 458.007372][ T8107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.068602][ T147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.086695][ T147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.105339][ T8452] usb 6-1: device descriptor read/64, error -71 [ 458.190133][ T147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.208963][ T147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.235741][ T147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.270127][ T147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.298637][ T147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.309028][ T147] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.344439][ T8452] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 458.504249][ T8452] usb 6-1: device descriptor read/64, error -71 [ 458.595182][ T5910] IPVS: starting estimator thread 0... [ 458.614564][ T8452] usb usb6-port1: attempt power cycle [ 458.695427][ T8476] IPVS: using max 11 ests per chain, 26400 per kthread [ 459.014590][ T8452] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 459.037890][ T8452] usb 6-1: device descriptor read/8, error -71 [ 459.354150][ T8452] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 459.378900][ T8452] usb 6-1: device descriptor read/8, error -71 [ 459.489131][ T8452] usb usb6-port1: unable to enumerate USB device [ 459.898834][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.898853][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.470735][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.470757][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.511411][ T348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.511429][ T348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.030784][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.529'. [ 461.116486][ T348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.116508][ T348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.535482][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.589180][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.591929][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.615372][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.639818][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.714162][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 463.865146][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 463.868441][ T10] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.868471][ T10] usb 9-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.868493][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 463.868523][ T10] usb 9-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 463.868545][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.200961][ T10] usb 9-1: config 0 descriptor?? [ 464.872424][ T5806] IPVS: starting estimator thread 0... [ 464.887524][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 464.887637][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 464.918655][ T10] usb 9-1: USB disconnect, device number 2 [ 465.006906][ T8522] IPVS: using max 8 ests per chain, 19200 per kthread [ 465.074094][ T1243] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 465.244683][ T1243] usb 6-1: Using ep0 maxpacket: 16 [ 465.246805][ T1243] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 465.246829][ T1243] usb 6-1: config 252 has no interface number 0 [ 465.246869][ T1243] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 465.249976][ T1243] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 465.250008][ T1243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.250031][ T1243] usb 6-1: Product: syz [ 465.250047][ T1243] usb 6-1: Manufacturer: syz [ 465.250065][ T1243] usb 6-1: SerialNumber: syz [ 465.734171][ T1243] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 465.770099][ T1243] usb 6-1: USB disconnect, device number 19 [ 465.785813][ T5821] Bluetooth: hci0: command tx timeout [ 465.859489][ T155] usb 6-1: Failed to submit usb control message: -71 [ 465.859529][ T155] usb 6-1: unable to send the bmi data to the device: -71 [ 465.859549][ T155] usb 6-1: unable to get target info from device [ 465.859567][ T155] usb 6-1: could not get target info (-71) [ 465.859587][ T155] usb 6-1: could not probe fw (-71) [ 466.510045][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.8.539'. [ 469.180146][ T5821] Bluetooth: hci0: command tx timeout [ 469.639780][ T1438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.928395][ T5806] IPVS: starting estimator thread 0... [ 470.166163][ T8581] IPVS: using max 11 ests per chain, 26400 per kthread [ 471.122542][ T1438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.225608][ T5821] Bluetooth: hci0: command tx timeout [ 472.054211][ T5997] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 472.214259][ T5997] usb 10-1: Using ep0 maxpacket: 16 [ 472.238282][ T5997] usb 10-1: config 252 has an invalid interface number: 15 but max is 0 [ 472.238311][ T5997] usb 10-1: config 252 has no interface number 0 [ 472.238356][ T5997] usb 10-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 472.241487][ T5997] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 472.241516][ T5997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.241536][ T5997] usb 10-1: Product: syz [ 472.241550][ T5997] usb 10-1: Manufacturer: syz [ 472.241581][ T5997] usb 10-1: SerialNumber: syz [ 472.527915][ T1438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.593928][ T5997] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 472.663617][ T5997] usb 10-1: USB disconnect, device number 2 [ 472.673377][ T56] usb 10-1: Failed to submit usb control message: -71 [ 472.673410][ T56] usb 10-1: unable to send the bmi data to the device: -71 [ 472.673427][ T56] usb 10-1: unable to get target info from device [ 472.673442][ T56] usb 10-1: could not get target info (-71) [ 472.673460][ T56] usb 10-1: could not probe fw (-71) [ 472.812934][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.554'. [ 473.315812][ T5821] Bluetooth: hci0: command tx timeout [ 475.851159][ T5911] IPVS: starting estimator thread 0... [ 476.303932][ T8638] IPVS: using max 9 ests per chain, 21600 per kthread [ 477.559006][ T1438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.986241][ T8511] chnl_net:caif_netlink_parms(): no params data found [ 479.482633][ T8667] 9p: Bad value for 'rfdno' [ 481.632141][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.632268][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.632466][ T8511] bridge_slave_0: entered allmulticast mode [ 481.665987][ T8511] bridge_slave_0: entered promiscuous mode [ 481.764465][ T8695] fuse: Bad value for 'fd' [ 481.886404][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.887827][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.888007][ T8511] bridge_slave_1: entered allmulticast mode [ 481.916966][ T8511] bridge_slave_1: entered promiscuous mode [ 482.593127][ T8701] program syz.7.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.466127][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.508684][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.147093][ T8720] 9p: Bad value for 'rfdno' [ 485.617334][ T1438] bridge_slave_1: left allmulticast mode [ 485.617362][ T1438] bridge_slave_1: left promiscuous mode [ 485.617588][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.034381][ T1438] bridge_slave_0: left allmulticast mode [ 487.034420][ T1438] bridge_slave_0: left promiscuous mode [ 487.034645][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.021624][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.8.584'. [ 492.145394][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.8.591'. [ 492.861554][ T1438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.915951][ T1438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.978619][ T1438] bond0 (unregistering): Released all slaves [ 493.228102][ T8511] team0: Port device team_slave_0 added [ 493.231503][ T8511] team0: Port device team_slave_1 added [ 493.898405][ T8792] netlink: 20 bytes leftover after parsing attributes in process `syz.9.597'. [ 495.659198][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.659215][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.659241][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.665887][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.665925][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.665965][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.011706][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.604'. [ 497.682483][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.7.610'. [ 498.669134][ T8847] program syz.7.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.740999][ T8511] hsr_slave_0: entered promiscuous mode [ 499.765290][ T8511] hsr_slave_1: entered promiscuous mode [ 499.787862][ T8511] debugfs: 'hsr0' already exists in 'hsr' [ 499.787893][ T8511] Cannot create hsr debugfs directory [ 501.375003][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.5.617'. [ 501.638646][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.638712][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.874359][ T1438] hsr_slave_0: left promiscuous mode [ 501.908080][ T1438] hsr_slave_1: left promiscuous mode [ 501.911221][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.911248][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.971309][ T1438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.971337][ T1438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.164371][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.7.622'. [ 502.839659][ T1438] veth1_macvtap: left promiscuous mode [ 502.839769][ T1438] veth0_macvtap: left promiscuous mode [ 502.853716][ T1438] veth1_vlan: left promiscuous mode [ 502.867930][ T1438] veth0_vlan: left promiscuous mode [ 502.992278][ T8886] fuse: Invalid rootmode [ 503.081366][ T8888] program syz.7.626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.810760][ T8912] netlink: 20 bytes leftover after parsing attributes in process `syz.9.634'. [ 507.173235][ T1438] team0 (unregistering): Port device team_slave_1 removed [ 507.247133][ T1438] team0 (unregistering): Port device team_slave_0 removed [ 507.825352][ T8920] fuse: Bad value for 'rootmode' [ 510.654171][ T1243] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 510.779283][ T8962] fuse: Bad value for 'rootmode' [ 510.804090][ T1243] usb 6-1: Using ep0 maxpacket: 16 [ 510.806541][ T1243] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.806559][ T1243] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 510.806575][ T1243] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.807781][ T1243] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.810401][ T1243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 510.810420][ T1243] usb 6-1: SerialNumber: syz [ 510.923892][ T1243] cdc_acm 6-1:1.0: skipping garbage [ 511.132175][ T8452] usb 6-1: USB disconnect, device number 20 [ 513.358589][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.652'. [ 514.910027][ T9001] fuse: Bad value for 'rootmode' [ 515.424118][ T5909] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 515.574111][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 515.576802][ T5909] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 515.576828][ T5909] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 515.576851][ T5909] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.578376][ T5909] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.578401][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 515.578421][ T5909] usb 10-1: SerialNumber: syz [ 515.662461][ T5909] cdc_acm 10-1:1.0: skipping garbage [ 515.866316][ T5909] usb 10-1: USB disconnect, device number 3 [ 518.311525][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.9.666'. [ 518.357393][ T8511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.441567][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.478711][ T8511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 518.929629][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.935060][ T8511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 519.060910][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 519.087347][ T8511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 519.751787][ T9050] fuse: Unknown parameter 'use00000000000000000000' [ 520.957907][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.558729][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.650139][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.675488][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.675670][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.735049][ T9073] program syz.7.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.739127][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.739252][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.754262][ T5909] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 521.904218][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 521.909281][ T5909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.909305][ T5909] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.909356][ T5909] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 521.909382][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.968872][ T5909] usb 9-1: config 0 descriptor?? [ 522.574459][ T5902] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 522.755158][ T5902] usb 8-1: Using ep0 maxpacket: 16 [ 522.757219][ T5902] usb 8-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 522.757243][ T5902] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.812856][ T5902] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.812888][ T5902] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.812907][ T5902] usb 8-1: Product: syz [ 522.812921][ T5902] usb 8-1: Manufacturer: syz [ 522.812936][ T5902] usb 8-1: SerialNumber: syz [ 522.959633][ T5902] usb 8-1: 0:2 : does not exist [ 523.317959][ T5902] usb 8-1: USB disconnect, device number 17 [ 523.505706][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.421685][ T9108] fuse: Bad value for 'fd' [ 524.918680][ T8452] usb 9-1: USB disconnect, device number 3 [ 526.218656][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.274305][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.292181][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.319083][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.326430][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 526.436964][ T9127] program syz.7.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.034352][ T8452] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 527.286058][ T8452] usb 9-1: Using ep0 maxpacket: 16 [ 527.287939][ T8452] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.287955][ T8452] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.290780][ T8452] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.290798][ T8452] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.290811][ T8452] usb 9-1: Product: syz [ 527.290821][ T8452] usb 9-1: Manufacturer: syz [ 527.290847][ T8452] usb 9-1: SerialNumber: syz [ 527.542200][ T8452] usb 9-1: 0:2 : does not exist [ 527.661521][ T8452] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 528.540376][ T5823] Bluetooth: hci1: command tx timeout [ 529.151693][ T8452] usb 9-1: USB disconnect, device number 4 [ 529.308386][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 529.726562][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.917058][ T9152] fuse: Unknown parameter 'use00000000000000000000' [ 531.204108][ T5826] Bluetooth: hci1: command tx timeout [ 533.091056][ T9176] program syz.7.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.225334][ T5826] Bluetooth: hci1: command tx timeout [ 534.583259][ T9201] fuse: Unknown parameter 'user_i00000000000000000000' [ 535.800106][ T5826] Bluetooth: hci1: command tx timeout [ 536.702906][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 536.859032][ T5826] Bluetooth: hci2: ACL packet for unknown connection handle 153 [ 540.343354][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.343540][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.343731][ T9121] bridge_slave_0: entered allmulticast mode [ 540.377425][ T9121] bridge_slave_0: entered promiscuous mode [ 540.407839][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.408084][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.408312][ T9121] bridge_slave_1: entered allmulticast mode [ 540.411389][ T9121] bridge_slave_1: entered promiscuous mode [ 540.586897][ T3573] bridge_slave_1: left allmulticast mode [ 540.586925][ T3573] bridge_slave_1: left promiscuous mode [ 540.588571][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.759536][ T3573] bridge_slave_0: left allmulticast mode [ 540.759566][ T3573] bridge_slave_0: left promiscuous mode [ 540.759829][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.857683][ T9272] fuse: Unknown parameter 'user_i00000000000000000000' [ 541.701725][ T5826] Bluetooth: hci7: ACL packet for unknown connection handle 153 [ 545.353657][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 546.502632][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.392070][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.428953][ T5821] Bluetooth: hci5: ACL packet for unknown connection handle 153 [ 549.452119][ T3573] bond0 (unregistering): Released all slaves [ 549.661858][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.711777][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.872801][ T9121] team0: Port device team_slave_0 added [ 551.038509][ T3573] hsr_slave_0: left promiscuous mode [ 551.078263][ T3573] hsr_slave_1: left promiscuous mode [ 551.079242][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.328287][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.189238][ T9373] fuse: Unknown parameter 'user_id00000000000000000000' [ 553.884152][ T822] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 554.064145][ T822] usb 9-1: Using ep0 maxpacket: 16 [ 554.066361][ T822] usb 9-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 554.066385][ T822] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.069159][ T822] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.069185][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.069204][ T822] usb 9-1: Product: syz [ 554.069218][ T822] usb 9-1: Manufacturer: syz [ 554.069232][ T822] usb 9-1: SerialNumber: syz [ 554.174990][ T822] usb 9-1: 0:2 : does not exist [ 554.175073][ T822] usb 9-1: unit 6 not found! [ 554.350761][ T822] usb 9-1: USB disconnect, device number 5 [ 554.865098][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 554.936288][ T3573] team0 (unregistering): Port device team_slave_0 removed [ 555.698644][ T9121] team0: Port device team_slave_1 added [ 557.663540][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.663560][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.663591][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.741800][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.741814][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.741837][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.934357][ T9414] fuse: Unknown parameter 'user_id00000000000000000000' [ 558.182082][ T9121] hsr_slave_0: entered promiscuous mode [ 558.192535][ T9121] hsr_slave_1: entered promiscuous mode [ 558.202501][ T9121] debugfs: 'hsr0' already exists in 'hsr' [ 558.202529][ T9121] Cannot create hsr debugfs directory [ 559.785071][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 560.005665][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 560.021060][ T9] usb 10-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 560.021086][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.060974][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.061001][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.061019][ T9] usb 10-1: Product: syz [ 560.061032][ T9] usb 10-1: Manufacturer: syz [ 560.061044][ T9] usb 10-1: SerialNumber: syz [ 560.214296][ T9] usb 10-1: 0:2 : does not exist [ 560.214385][ T9] usb 10-1: unit 6 not found! [ 560.468307][ T9] usb 10-1: USB disconnect, device number 4 [ 560.563914][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.194100][ T9465] fuse: Bad value for 'fd' [ 563.073639][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.073705][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.254656][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.8.774'. [ 564.153447][ T9501] fuse: Bad value for 'fd' [ 565.412613][ T9121] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 565.478121][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.480777][ T9121] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 565.562475][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.592174][ T9121] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 565.753232][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.756394][ T9121] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.807134][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 565.856835][ T8452] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 566.065497][ T8452] usb 10-1: Using ep0 maxpacket: 32 [ 566.068492][ T8452] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 566.068524][ T8452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.156291][ T8452] usb 10-1: config 0 descriptor?? [ 566.203178][ T9546] fuse: Bad value for 'fd' [ 566.566687][ T8452] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 567.232406][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.330994][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.379223][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.379895][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.414571][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.415336][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.479970][ T8452] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 567.480006][ T8452] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 568.525932][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.717285][ T9580] Bluetooth: MGMT ver 1.23 [ 568.937955][ T5909] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 569.184678][ T5909] usb 8-1: Using ep0 maxpacket: 16 [ 569.188534][ T5909] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.188558][ T5909] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.192090][ T5909] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.192116][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.192136][ T5909] usb 8-1: Product: syz [ 569.192149][ T5909] usb 8-1: Manufacturer: syz [ 569.192163][ T5909] usb 8-1: SerialNumber: syz [ 569.325499][ T5909] usb 8-1: 0:2 : does not exist [ 569.456109][ T9597] program syz.9.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.491841][ T5909] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 569.648383][ T5909] usb 8-1: USB disconnect, device number 18 [ 569.852923][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.905097][ T9121] veth0_vlan: entered promiscuous mode [ 569.947215][ T9121] veth1_vlan: entered promiscuous mode [ 570.011188][ T9121] veth0_macvtap: entered promiscuous mode [ 570.029652][ T9121] veth1_macvtap: entered promiscuous mode [ 570.086886][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.659637][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.697223][ T1427] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.698286][ T1427] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.698719][ T1427] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.698759][ T1427] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.719880][ T8671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.719903][ T8671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.804098][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 571.954182][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 571.956622][ T9] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 571.956648][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.968555][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.968631][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.013705][ T9] usb 8-1: config 0 descriptor?? [ 572.866783][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 573.157599][ T9643] program syz.8.810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.204214][ T1243] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 576.025623][ T1243] usb 9-1: Using ep0 maxpacket: 16 [ 576.029362][ T1243] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 576.029390][ T1243] usb 9-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 576.029412][ T1243] usb 9-1: config 252 has no interface number 0 [ 576.029445][ T1243] usb 9-1: too many endpoints for config 252 interface 15 altsetting 80: 186, using maximum allowed: 30 [ 576.029536][ T1243] usb 9-1: config 252 interface 15 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 186 [ 576.029573][ T1243] usb 9-1: config 252 interface 15 has no altsetting 0 [ 576.099544][ T1243] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 576.099579][ T1243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.099601][ T1243] usb 9-1: Product: syz [ 576.099617][ T1243] usb 9-1: Manufacturer: syz [ 576.099632][ T1243] usb 9-1: SerialNumber: syz [ 576.212339][ T1243] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 576.415976][ T8319] usb 9-1: USB disconnect, device number 6 [ 576.443869][ T1438] usb 9-1: Failed to submit usb control message: -71 [ 576.443901][ T1438] usb 9-1: unable to send the bmi data to the device: -71 [ 576.443917][ T1438] usb 9-1: unable to get target info from device [ 576.467859][ T1438] usb 9-1: could not get target info (-71) [ 576.467885][ T1438] usb 9-1: could not probe fw (-71) [ 577.488014][ T9697] program syz.5.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.632891][ T9702] 9p: Bad value for 'wfdno' [ 579.024051][ T8319] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 580.236695][ T8319] usb 6-1: Using ep0 maxpacket: 16 [ 580.239226][ T8319] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.239251][ T8319] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 580.239287][ T8319] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 580.281706][ T8319] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.281738][ T8319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.281758][ T8319] usb 6-1: Product: syz [ 580.281772][ T8319] usb 6-1: Manufacturer: syz [ 580.281786][ T8319] usb 6-1: SerialNumber: syz [ 580.371840][ T8319] usb 6-1: 0:2 : does not exist [ 580.371918][ T8319] usb 6-1: unit 6 not found! [ 580.594106][ T8319] usb 6-1: USB disconnect, device number 21 [ 581.632580][ T7598] udevd[7598]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.911532][ T9737] program syz.7.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.335247][ T9777] fuse: Unknown parameter '0x0000000000000003' [ 586.553722][ T9779] program syz.5.851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.144132][ T5909] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 589.321072][ T5909] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 589.321103][ T5909] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 589.366478][ T5909] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 589.370997][ T5909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.371023][ T5909] usb 9-1: Product: syz [ 589.371037][ T5909] usb 9-1: Manufacturer: syz [ 589.371051][ T5909] usb 9-1: SerialNumber: syz [ 589.461067][ T5909] usb 9-1: config 0 descriptor?? [ 589.483546][ T5909] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 589.857777][ T9810] fuse: Unknown parameter '0x0000000000000003' [ 589.889891][ T5909] gspca_sunplus: reg_r err -32 [ 589.890006][ T5909] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 590.087570][ T9817] program syz.6.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.819657][ T822] usb 9-1: USB disconnect, device number 7 [ 593.129721][ T9849] fuse: Unknown parameter '0x0000000000000003' [ 594.369848][ T9860] program syz.5.877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.911545][ T9889] binder: 9885:9889 ioctl 4018620d 0 returned -22 [ 599.134133][ T822] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 599.298308][ T9893] bond1: Unable to set down delay as MII monitoring is disabled [ 599.320341][ T822] usb 9-1: Using ep0 maxpacket: 32 [ 599.322605][ T822] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 599.322633][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.364631][ T822] usb 9-1: config 0 descriptor?? [ 599.452911][ T9893] bond1 (unregistering): Released all slaves [ 599.581556][ T822] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 602.571624][ T9932] binder: 9931:9932 ioctl 4018620d 0 returned -22 [ 604.274276][ T1243] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 604.434208][ T1243] usb 7-1: Using ep0 maxpacket: 16 [ 604.436232][ T1243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.436274][ T1243] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 604.436315][ T1243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.445482][ T1243] usb 7-1: config 0 descriptor?? [ 604.966742][ T1243] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 604.966788][ T1243] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 604.966816][ T1243] pantherlord 0003:0E8F:0003.0002: item fetching failed at offset 2/41 [ 604.967635][ T1243] pantherlord 0003:0E8F:0003.0002: parse failed [ 604.967713][ T1243] pantherlord 0003:0E8F:0003.0002: probe with driver pantherlord failed with error -22 [ 605.346561][ T5902] usb 7-1: USB disconnect, device number 2 [ 606.284577][ T9972] binder: 9971:9972 ioctl c0306201 0 returned -14 [ 607.904204][ T5909] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 608.054259][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 608.057228][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 608.096442][ T5909] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 608.096471][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.096490][ T5909] usb 6-1: Product: syz [ 608.096550][ T5909] usb 6-1: Manufacturer: syz [ 608.096564][ T5909] usb 6-1: SerialNumber: syz [ 608.493855][ T5909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 608.511879][ T5909] usb 6-1: MIDIStreaming interface descriptor not found [ 609.053213][ T5909] usb 6-1: USB disconnect, device number 22 [ 610.328371][ T7350] udevd[7350]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.501878][T10017] binder: 10016:10017 ioctl c0306201 0 returned -14 [ 618.044161][ T5902] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 618.204154][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 618.206280][ T5902] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 618.206301][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.278587][ T5902] usb 6-1: config 0 descriptor?? [ 618.502686][ T5902] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 622.182262][T10144] syzkaller0: entered promiscuous mode [ 622.182281][T10144] syzkaller0: entered allmulticast mode [ 624.510071][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.510143][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.898944][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 629.899020][ T9] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 629.900905][ T5902] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 629.900972][ T5902] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 629.901244][ T822] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 629.901301][ T822] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 630.074623][T10208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.990'. [ 630.326247][ T9] usb 8-1: USB disconnect, device number 19 [ 631.253817][ T5902] usb 6-1: USB disconnect, device number 23 [ 631.274186][ T822] usb 9-1: USB disconnect, device number 8 [ 631.300646][ T8452] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 631.300707][ T8452] dvb_usb_az6027 10-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 631.554686][ T8452] usb 10-1: USB disconnect, device number 5 [ 632.504116][ T822] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 632.656353][ T822] usb 9-1: Using ep0 maxpacket: 32 [ 632.687350][ T822] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 632.687404][ T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.734595][ T822] usb 9-1: config 0 descriptor?? [ 632.979190][ T822] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 632.980768][ T822] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 632.980794][ T822] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 634.794040][ T5909] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 634.946436][ T5909] usb 8-1: Using ep0 maxpacket: 16 [ 634.948211][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.948241][ T5909] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 634.948256][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.014267][ T5909] usb 8-1: config 0 descriptor?? [ 635.461463][ T5909] usbhid 8-1:0.0: can't add hid device: -71 [ 635.461597][ T5909] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 635.594136][ T5909] usb 8-1: USB disconnect, device number 20 [ 636.674361][T10255] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 636.713672][T10255] bond1: (slave lo): Enslaving as an active interface with an up link [ 636.751922][T10255] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 640.903745][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1018'. [ 642.551251][T10304] program syz.7.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.278712][ T8319] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 643.293494][T10322] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1029'. [ 644.204108][ T8319] usb 8-1: Using ep0 maxpacket: 32 [ 644.206285][ T8319] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 644.206311][ T8319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.269430][ T8319] usb 8-1: config 0 descriptor?? [ 644.484797][ T8319] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 648.634070][ T5909] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 648.874133][ T5909] usb 10-1: Using ep0 maxpacket: 32 [ 648.876230][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 648.879237][ T5909] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 648.879263][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.879284][ T5909] usb 10-1: Product: syz [ 648.879297][ T5909] usb 10-1: Manufacturer: syz [ 648.879312][ T5909] usb 10-1: SerialNumber: syz [ 648.905111][ T5909] usb 10-1: config 0 descriptor?? [ 648.953125][ T5909] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 650.161236][T10373] 9p: Bad value for 'wfdno' [ 650.288024][ T3532] usb 10-1: Failed to submit usb control message: -71 [ 650.288058][ T3532] usb 10-1: unable to send the bmi data to the device: -71 [ 650.288074][ T3532] usb 10-1: unable to get target info from device [ 650.288088][ T3532] usb 10-1: could not get target info (-71) [ 650.288104][ T3532] usb 10-1: could not probe fw (-71) [ 650.298493][ T5997] usb 10-1: USB disconnect, device number 6 [ 652.823809][T10407] 9pnet_fd: Insufficient options for proto=fd [ 653.210481][ T37] audit: type=1800 audit(1776924877.152:2): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1057" name="file0" dev="overlay" ino=636 res=0 errno=0 [ 656.196031][T10445] program syz.8.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.730446][T10494] program syz.7.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.777398][T10537] netlink: 'syz.5.1104': attribute type 3 has an invalid length. [ 663.806045][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1105'. [ 666.513676][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1116'. [ 667.794098][ T8452] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 667.824111][ T5909] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 667.949218][ T8452] usb 10-1: Using ep0 maxpacket: 16 [ 667.951594][ T8452] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 667.951621][ T8452] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 667.951646][ T8452] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.005279][ T8452] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.005310][ T8452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 668.005328][ T8452] usb 10-1: SerialNumber: syz [ 668.060154][ T5909] usb 6-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 668.060198][ T5909] usb 6-1: too many endpoints for config 0 interface 0 altsetting 22: 69, using maximum allowed: 30 [ 668.060239][ T5909] usb 6-1: config 0 interface 0 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 668.060270][ T5909] usb 6-1: config 0 interface 0 has no altsetting 0 [ 668.060306][ T5909] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 668.060332][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.147164][ T5909] usb 6-1: config 0 descriptor?? [ 668.182167][ T8452] cdc_acm 10-1:1.0: skipping garbage [ 668.366841][ T5909] usb 6-1: language id specifier not provided by device, defaulting to English [ 668.481033][ T8452] usb 10-1: USB disconnect, device number 7 [ 669.639573][ T5909] usb 6-1: USB disconnect, device number 24 [ 670.966272][T10614] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1132'. [ 674.232727][ T37] audit: type=1800 audit(1776924898.142:3): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1149" name="file0" dev="overlay" ino=747 res=0 errno=0 [ 683.329341][T10776] program syz.9.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 683.450151][T10781] program syz.9.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 685.216293][T10785] netlink: 'syz.8.1192': attribute type 3 has an invalid length. [ 685.745322][ T1243] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 686.048739][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.050211][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.676398][ T1243] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 687.676428][ T1243] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 687.680385][ T1243] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 687.680475][ T1243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.680498][ T1243] usb 6-1: Product: syz [ 687.680514][ T1243] usb 6-1: Manufacturer: syz [ 687.680529][ T1243] usb 6-1: SerialNumber: syz [ 687.748875][ T1243] usb 6-1: config 0 descriptor?? [ 687.763180][ T1243] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 689.369241][ T1243] gspca_sunplus: reg_r err -110 [ 689.369325][ T1243] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 689.412071][ T5909] usb 6-1: USB disconnect, device number 25 [ 689.909084][T10833] netlink: 'syz.6.1207': attribute type 3 has an invalid length. [ 690.915695][ T37] audit: type=1804 audit(1776924914.862:4): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1210" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=31734 res=1 errno=0 [ 692.108299][T10851] Invalid logical block size (8192) [ 692.876619][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 694.826192][ T9] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 694.827046][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 694.832385][ T9] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 694.832420][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.832441][ T9] usb 10-1: Product: syz [ 694.832455][ T9] usb 10-1: Manufacturer: syz [ 694.832470][ T9] usb 10-1: SerialNumber: syz [ 694.901341][ T9] usb 10-1: config 0 descriptor?? [ 694.919689][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 695.098268][T10882] netlink: 'syz.6.1223': attribute type 3 has an invalid length. [ 696.197804][ T8319] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 696.197875][ T8319] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 696.326405][ T8319] usb 8-1: USB disconnect, device number 21 [ 696.388751][ T822] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 696.389053][ T822] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 696.483563][ T822] usb 9-1: USB disconnect, device number 9 [ 696.940477][ T9] gspca_sunplus: reg_r err -32 [ 696.958273][ T9] sunplus 10-1:0.0: probe with driver sunplus failed with error -32 [ 697.354094][ T8319] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 697.480931][ T1243] usb 10-1: USB disconnect, device number 8 [ 697.514136][ T8319] usb 8-1: Using ep0 maxpacket: 16 [ 697.517596][ T8319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.517619][ T8319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.523684][ T8319] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.523712][ T8319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.523732][ T8319] usb 8-1: Product: syz [ 697.523746][ T8319] usb 8-1: Manufacturer: syz [ 697.523759][ T8319] usb 8-1: SerialNumber: syz [ 697.636491][ T8319] usb 8-1: 0:2 : does not exist [ 697.847922][ T8319] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 697.945999][ T8319] usb 8-1: USB disconnect, device number 22 [ 698.136263][T10584] udevd[10584]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.078665][T10921] program syz.8.1236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.118174][T10922] netlink: 'syz.7.1237': attribute type 3 has an invalid length. [ 700.244072][ T1243] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 700.397394][ T1243] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 700.397421][ T1243] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 700.423573][ T1243] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 700.423602][ T1243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.423621][ T1243] usb 6-1: Product: syz [ 700.423635][ T1243] usb 6-1: Manufacturer: syz [ 700.423648][ T1243] usb 6-1: SerialNumber: syz [ 700.478912][ T1243] usb 6-1: config 0 descriptor?? [ 700.495477][ T1243] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 700.608633][T10951] netlink: 'syz.8.1249': attribute type 3 has an invalid length. [ 701.448209][ T1243] gspca_sunplus: reg_r err -110 [ 701.448273][ T1243] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 702.158734][T10962] program syz.6.1250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 703.890127][ T822] usb 6-1: USB disconnect, device number 26 [ 704.030958][T10995] netlink: 'syz.9.1263': attribute type 3 has an invalid length. [ 704.258739][T11002] program syz.5.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.540765][ T31] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 708.594716][T11048] netlink: 'syz.5.1279': attribute type 3 has an invalid length. [ 708.657275][ T31] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 708.657303][ T31] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 708.689399][ T31] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 708.689448][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.689495][ T31] usb 9-1: Product: syz [ 708.689510][ T31] usb 9-1: Manufacturer: syz [ 708.689525][ T31] usb 9-1: SerialNumber: syz [ 708.752891][ T31] usb 9-1: config 0 descriptor?? [ 708.795597][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.796599][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 708.798228][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.837004][T11051] program syz.6.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 710.009866][ T31] gspca_sunplus: reg_r err -32 [ 710.009959][ T31] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 710.107665][T11060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.418641][T11019] bridge_slave_0: left allmulticast mode [ 710.418672][T11019] bridge_slave_0: left promiscuous mode [ 710.418877][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.507933][T11019] bridge_slave_1: left allmulticast mode [ 710.507961][T11019] bridge_slave_1: left promiscuous mode [ 710.530017][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.426859][ T8424] usb 9-1: USB disconnect, device number 10 [ 711.628867][T11019] bond0: (slave bond_slave_0): Releasing backup interface [ 711.764876][T11019] bond0: (slave bond_slave_1): Releasing backup interface [ 711.831942][T11082] program syz.8.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.875325][T11019] team0: Port device team_slave_0 removed [ 711.964430][T11019] team0: Port device team_slave_1 removed [ 711.992335][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.003040][T11019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.039372][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.055318][T11019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.093228][T11019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.268351][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1298'. [ 718.708951][T11127] program syz.6.1302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.534673][T11122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 719.535681][T11129] netlink: 'syz.6.1307': attribute type 29 has an invalid length. [ 719.540046][T11136] netlink: 'syz.6.1307': attribute type 29 has an invalid length. [ 719.784069][T11046] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 720.630942][T11046] usb 6-1: device descriptor read/64, error -71 [ 720.890454][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1314'. [ 721.219037][T11046] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 721.494026][T11046] usb 6-1: device descriptor read/64, error -71 [ 721.822162][T11046] usb usb6-port1: attempt power cycle [ 722.673302][T11037] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 722.848764][T11037] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 722.848797][T11037] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 722.851921][T11037] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 722.851951][T11037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.851972][T11037] usb 9-1: Product: syz [ 722.851987][T11037] usb 9-1: Manufacturer: syz [ 722.852002][T11037] usb 9-1: SerialNumber: syz [ 722.947027][T11037] usb 9-1: config 0 descriptor?? [ 723.001846][T11037] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 723.054096][T11046] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 723.074607][T11046] usb 6-1: device descriptor read/8, error -71 [ 723.324132][T11046] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 723.345877][T11046] usb 6-1: device descriptor read/8, error -71 [ 723.457021][T11046] usb usb6-port1: unable to enumerate USB device [ 724.304453][T11037] gspca_sunplus: reg_r err -110 [ 724.304550][T11037] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 726.121698][T11037] usb 9-1: USB disconnect, device number 11 [ 726.704006][ T5902] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 726.886214][ T5902] usb 10-1: device descriptor read/64, error -71 [ 727.534182][ T5902] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 727.664061][ T5902] usb 10-1: device descriptor read/64, error -71 [ 727.774359][ T5902] usb usb10-port1: attempt power cycle [ 727.841758][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1346'. [ 728.514300][ T5902] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 728.538311][ T5902] usb 10-1: device descriptor read/8, error -71 [ 728.804072][ T5902] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 728.824829][ T5902] usb 10-1: device descriptor read/8, error -71 [ 729.074626][ T5902] usb usb10-port1: unable to enumerate USB device [ 730.416569][T11269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.884162][T11046] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 732.962959][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.014113][T11046] usb 6-1: device descriptor read/64, error -71 [ 733.264179][T11046] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 733.394096][T11046] usb 6-1: device descriptor read/64, error -71 [ 733.506095][T11046] usb usb6-port1: attempt power cycle [ 733.844095][T11046] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 733.865060][T11046] usb 6-1: device descriptor read/8, error -71 [ 734.314132][T11046] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 734.335018][T11046] usb 6-1: device descriptor read/8, error -71 [ 734.444376][T11046] usb usb6-port1: unable to enumerate USB device [ 740.115243][T11037] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 740.520317][T11037] usb 10-1: device descriptor read/64, error -71 [ 741.433694][T11037] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 741.857097][T11037] usb 10-1: device descriptor read/64, error -71 [ 742.004184][T11037] usb usb10-port1: attempt power cycle [ 747.394457][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.394523][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.429210][ T8424] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 747.564749][ T8424] usb 6-1: device descriptor read/64, error -71 [ 747.814070][ T8424] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 748.788821][ T5821] Bluetooth: hci2: unexpected event 0x05 length: 0 < 4 [ 749.204099][ T8424] usb 6-1: device descriptor read/64, error -71 [ 749.325235][ T8424] usb usb6-port1: attempt power cycle [ 750.364356][ T8424] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 751.284974][ T8424] usb 6-1: device not accepting address 37, error -71 [ 754.578380][T11523] program syz.5.1443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 758.211469][T11563] program syz.8.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.604047][ T8424] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 760.804092][ T8424] usb 6-1: Using ep0 maxpacket: 16 [ 760.852746][ T8424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.852791][ T8424] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 760.852813][ T8424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.950106][ T8424] usb 6-1: config 0 descriptor?? [ 761.827528][ T8424] usbhid 6-1:0.0: can't add hid device: -71 [ 761.827646][ T8424] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 761.863433][ T8424] usb 6-1: USB disconnect, device number 39 [ 763.342832][T11617] syz.7.1474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 763.364962][T11617] CPU: 0 UID: 0 PID: 11617 Comm: syz.7.1474 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 763.364987][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.365025][T11617] Call Trace: [ 763.365032][T11617] [ 763.365043][T11617] dump_stack_lvl+0xe8/0x150 [ 763.365084][T11617] warn_alloc+0x263/0x3e0 [ 763.365106][T11617] ? irqentry_exit+0x218/0x730 [ 763.365133][T11617] ? trace_irq_disable+0x3b/0x140 [ 763.365160][T11617] ? __pfx_warn_alloc+0x10/0x10 [ 763.365185][T11617] ? __vmalloc_node_range_noprof+0x21/0x1750 [ 763.365216][T11617] ? __vmalloc_node_range_noprof+0xe4/0x1750 [ 763.365244][T11617] ? kasan_check_range+0x97/0x2c0 [ 763.365262][T11617] ? do_sock_setsockopt+0x17c/0x1b0 [ 763.365292][T11617] __vmalloc_node_range_noprof+0x132/0x1750 [ 763.365341][T11617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 763.365374][T11617] ? __kasan_kmalloc+0x93/0xb0 [ 763.365403][T11617] vmalloc_user_noprof+0xad/0xe0 [ 763.365430][T11617] ? xskq_create+0xbf/0x170 [ 763.365455][T11617] xskq_create+0xbf/0x170 [ 763.365474][T11617] xsk_init_queue+0x8a/0xe0 [ 763.365491][T11617] xsk_setsockopt+0x54c/0x990 [ 763.365517][T11617] ? irqentry_exit+0x218/0x730 [ 763.365538][T11617] ? __pfx_xsk_setsockopt+0x10/0x10 [ 763.365570][T11617] ? __pfx_xsk_setsockopt+0x10/0x10 [ 763.365596][T11617] ? do_sock_setsockopt+0x15e/0x1b0 [ 763.365623][T11617] ? __pfx_xsk_setsockopt+0x10/0x10 [ 763.365650][T11617] do_sock_setsockopt+0x17c/0x1b0 [ 763.365679][T11617] __x64_sys_setsockopt+0x143/0x1b0 [ 763.365710][T11617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.365728][T11617] do_syscall_64+0x15f/0xf80 [ 763.365749][T11617] ? clear_bhb_loop+0x40/0x90 [ 763.365769][T11617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.365790][T11617] RIP: 0033:0x7f61aff9c819 [ 763.365810][T11617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.365826][T11617] RSP: 002b:00007f61ae1ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 763.365843][T11617] RAX: ffffffffffffffda RBX: 00007f61b0216180 RCX: 00007f61aff9c819 [ 763.365856][T11617] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 763.365866][T11617] RBP: 00007f61b0032c91 R08: 0000000000000004 R09: 0000000000000000 [ 763.365878][T11617] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.365888][T11617] R13: 00007f61b0216218 R14: 00007f61b0216180 R15: 00007ffd5ed1a768 [ 763.365915][T11617] [ 763.367107][T11617] Mem-Info: [ 763.367121][T11617] active_anon:23238 inactive_anon:11609 isolated_anon:0 [ 763.367121][T11617] active_file:19997 inactive_file:40018 isolated_file:0 [ 763.367121][T11617] unevictable:768 dirty:183 writeback:0 [ 763.367121][T11617] slab_reclaimable:12662 slab_unreclaimable:110723 [ 763.367121][T11617] mapped:33038 shmem:27208 pagetables:2106 [ 763.367121][T11617] sec_pagetables:0 bounce:0 [ 763.367121][T11617] kernel_misc_reclaimable:0 [ 763.367121][T11617] free:1267666 free_pcp:5269 free_cma:0 [ 763.367533][T11617] Node 0 active_anon:92952kB inactive_anon:46436kB active_file:79788kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132152kB dirty:728kB writeback:0kB shmem:107296kB kernel_stack:15192kB pagetables:8248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 763.367740][T11617] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 763.367935][T11617] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.368390][T11617] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 763.369819][T11617] Node 0 DMA32 free:1116908kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:92952kB inactive_anon:46436kB active_file:79788kB inactive_file:160072kB unevictable:1536kB writepending:728kB zspages:0kB present:3129332kB managed:2564804kB mlocked:0kB bounce:0kB free_pcp:21076kB local_pcp:9444kB free_cma:0kB [ 763.370111][T11617] lowmem_reserve[]: 0 0 0 0 0 [ 763.370725][T11617] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.370937][T11617] lowmem_reserve[]: 0 0 0 0 0 [ 763.374655][T11617] Node 1 Normal free:3938396kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.374881][T11617] lowmem_reserve[]: 0 0 0 0 0 [ 763.375668][T11617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 763.391740][T11617] Node 0 DMA32: 1669*4kB (UM) 2159*8kB (UM) 1378*16kB (UME) 272*32kB (UME) 401*64kB (UME) 398*128kB (UME) 338*256kB (UM) 236*512kB (UME) 116*1024kB (UME) 68*2048kB (UM) 127*4096kB (UM) = 1116908kB [ 763.393247][T11617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 763.394695][T11617] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 16*16kB (UM) 8*32kB (UM) 11*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3938396kB [ 763.396712][T11617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.396814][T11617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.396883][T11617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.397002][T11617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.397099][T11617] 87219 total pagecache pages [ 763.397163][T11617] 0 pages in swap cache [ 763.397333][T11617] Free swap = 124996kB [ 763.397402][T11617] Total swap = 124996kB [ 763.397557][T11617] 2097051 pages RAM [ 763.397619][T11617] 0 pages HighMem/MovableOnly [ 763.397734][T11617] 424203 pages reserved [ 763.397797][T11617] 0 pages cma reserved [ 770.686921][T11697] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1494'. [ 771.802263][ T8719] Bluetooth: (null): Invalid header checksum [ 771.904543][ T39] Bluetooth: (null): Invalid header checksum [ 772.014359][ T39] Bluetooth: (null): Invalid header checksum [ 772.325402][ T56] Bluetooth: (null): Invalid header checksum [ 781.915565][ T8479] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 781.993512][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1527'. [ 782.084047][ T8479] usb 10-1: Using ep0 maxpacket: 16 [ 782.086823][ T8479] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.086846][ T8479] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.090543][ T8479] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.090565][ T8479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.090580][ T8479] usb 10-1: Product: syz [ 782.090622][ T8479] usb 10-1: Manufacturer: syz [ 782.090638][ T8479] usb 10-1: SerialNumber: syz [ 782.202406][ T8479] usb 10-1: 0:2 : does not exist [ 783.718782][ T8479] usb 10-1: USB disconnect, device number 16 [ 784.765270][T11107] udevd[11107]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.785271][T11037] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 784.964964][T11037] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.964989][T11037] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 784.965009][T11037] usb 9-1: config 1 has no interface number 0 [ 784.965048][T11037] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.029136][T11037] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 785.029164][T11037] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.029183][T11037] usb 9-1: Product: syz [ 785.029196][T11037] usb 9-1: Manufacturer: syz [ 785.029210][T11037] usb 9-1: SerialNumber: syz [ 785.109074][T11037] cdc_ncm 9-1:1.1: NCM or ECM functional descriptors missing [ 785.109106][T11037] cdc_ncm 9-1:1.1: bind() failure [ 785.167172][T11810] binder: BINDER_SET_CONTEXT_MGR already set [ 785.167185][T11810] binder: 11809:11810 ioctl 4018620d 200000004a80 returned -16 [ 785.560893][T11817] netlink: 'syz.7.1517': attribute type 1 has an invalid length. [ 785.560920][T11817] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1517'. [ 787.647159][ T5806] usb 9-1: USB disconnect, device number 12 [ 788.974097][T11041] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 789.134975][T11041] usb 10-1: Using ep0 maxpacket: 16 [ 789.137491][T11041] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.137507][T11041] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.170038][T11041] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.170088][T11041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.170111][T11041] usb 10-1: Product: syz [ 789.170127][T11041] usb 10-1: Manufacturer: syz [ 789.170143][T11041] usb 10-1: SerialNumber: syz [ 789.259908][T11855] binder: BINDER_SET_CONTEXT_MGR already set [ 789.259925][T11855] binder: 11853:11855 ioctl 4018620d 200000004a80 returned -16 [ 789.282548][T11041] usb 10-1: 0:2 : does not exist [ 789.966107][T11864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.298550][T11041] usb 10-1: USB disconnect, device number 17 [ 793.055402][T11107] udevd[11107]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.265965][T11892] program syz.9.1564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 797.578882][T11935] program syz.7.1578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.724057][ T31] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 802.765807][T11973] program syz.6.1590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.886478][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.886508][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 802.886531][ T31] usb 6-1: config 1 has no interface number 0 [ 802.886596][ T31] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.889615][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.889645][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.889668][ T31] usb 6-1: Product: syz [ 802.889683][ T31] usb 6-1: Manufacturer: syz [ 802.889699][ T31] usb 6-1: SerialNumber: syz [ 803.126835][ T31] cdc_ncm 6-1:1.1: NCM or ECM functional descriptors missing [ 803.126886][ T31] cdc_ncm 6-1:1.1: bind() failure [ 805.684036][ T31] usb 6-1: USB disconnect, device number 40 [ 806.938947][T12014] program syz.5.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.021202][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 808.979072][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.979136][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.856508][T12032] Bluetooth: (null): Invalid header checksum [ 812.009679][T12052] program syz.8.1616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.364003][ T5806] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 816.431603][T11041] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 816.884099][T11041] usb 10-1: Using ep0 maxpacket: 32 [ 816.888921][ T5806] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.888962][ T5806] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 816.888984][ T5806] usb 7-1: config 1 has no interface number 0 [ 816.889026][ T5806] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.891448][ T5806] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.891474][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.891493][ T5806] usb 7-1: Product: syz [ 816.891611][ T5806] usb 7-1: Manufacturer: syz [ 816.891626][ T5806] usb 7-1: SerialNumber: syz [ 816.893330][T11041] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 816.893359][T11041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.011382][T11041] usb 10-1: config 0 descriptor?? [ 817.023833][ T5806] cdc_ncm 7-1:1.1: NCM or ECM functional descriptors missing [ 817.024053][ T5806] cdc_ncm 7-1:1.1: bind() failure [ 817.025499][T11041] gspca_main: sq930x-2.14.0 probing 041e:403c [ 818.392193][T12117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.127834][T11037] usb 7-1: USB disconnect, device number 3 [ 819.195400][T11041] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 819.195509][T11041] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 819.273019][T11041] usb 10-1: USB disconnect, device number 18 [ 823.261225][T12152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.341537][T12155] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 823.959686][T11037] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 824.126081][T11037] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 824.126109][T11037] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 824.126130][T11037] usb 10-1: config 1 has no interface number 0 [ 824.126169][T11037] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.130757][T11037] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.130786][T11037] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.130806][T11037] usb 10-1: Product: syz [ 824.130821][T11037] usb 10-1: Manufacturer: syz [ 824.130837][T11037] usb 10-1: SerialNumber: syz [ 824.338958][T11037] cdc_ncm 10-1:1.1: skipping garbage [ 824.338980][T11037] cdc_ncm 10-1:1.1: NCM or ECM functional descriptors missing [ 824.339020][T11037] cdc_ncm 10-1:1.1: bind() failure [ 825.421255][T12185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.275618][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 827.440481][T12191] syzkaller0: entered promiscuous mode [ 827.440508][T12191] syzkaller0: entered allmulticast mode [ 827.536468][ T5902] usb 10-1: USB disconnect, device number 19 [ 828.502767][T12200] tipc: Started in network mode [ 828.502807][T12200] tipc: Node identity 3277346df1e6, cluster identity 4711 [ 828.530617][T12200] tipc: Enabled bearer , priority 0 [ 828.558458][T12190] tipc: Resetting bearer [ 829.039704][T12190] tipc: Disabling bearer [ 829.514261][T12224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.799035][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1672'. [ 830.880754][T12207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.881694][ T5902] tipc: Node number set to 3281073261 [ 831.074070][ T5902] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 832.199290][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.199325][ T5902] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.199365][ T5902] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 832.199388][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.282898][ T5902] usb 9-1: config 0 descriptor?? [ 833.534267][T11041] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 833.534595][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 833.670661][ T5902] usbhid 9-1:0.0: can't add hid device: -71 [ 833.670790][ T5902] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 833.751289][ T5902] usb 9-1: USB disconnect, device number 13 [ 834.663961][T11041] usb 6-1: device descriptor read/64, error -32 [ 835.074477][T11041] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 835.615584][T12269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 836.323563][T11041] usb 6-1: device descriptor read/all, error -71 [ 836.333744][T11041] usb usb6-port1: attempt power cycle [ 836.488550][T12276] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.532070][T12276] bond1: (slave lo): Enslaving as an active interface with an up link [ 836.573963][T12276] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 839.704020][T12295] Bluetooth: hci1: command 0x0406 tx timeout [ 841.115173][T12321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.826237][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 842.110639][T12326] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 842.171587][T12332] overlayfs: missing 'lowerdir' [ 845.487754][T12359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.315132][T12406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.591159][T12462] tipc: Enabling of bearer rejected, failed to enable media [ 860.134910][T12484] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1751'. [ 861.168882][T12500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.487895][T11046] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 862.931080][T11046] usb 9-1: Using ep0 maxpacket: 16 [ 863.084329][T11046] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.084358][T11046] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.088732][T11046] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.088805][T11046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.088827][T11046] usb 9-1: Product: syz [ 863.088842][T11046] usb 9-1: Manufacturer: syz [ 863.088858][T11046] usb 9-1: SerialNumber: syz [ 863.267861][T11046] usb 9-1: 0:2 : does not exist [ 863.267953][T11046] usb 9-1: unit 6 not found! [ 863.597706][T11046] usb 9-1: USB disconnect, device number 14 [ 864.840898][T12508] udevd[12508]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.227144][T12526] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1762'. [ 867.164023][ T5806] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 867.344512][ T5806] usb 9-1: device descriptor read/64, error -71 [ 867.873993][ T5806] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 868.193929][ T5806] usb 9-1: device descriptor read/64, error -71 [ 868.300578][T12550] bond1: option mode: unable to set because the bond device has slaves [ 868.305360][ T5806] usb usb9-port1: attempt power cycle [ 868.518156][T12554] random: crng reseeded on system resumption [ 868.673985][ T5806] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 868.702305][ T5806] usb 9-1: device descriptor read/8, error -71 [ 869.229984][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1775'. [ 869.264491][ T5806] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 869.287727][ T5806] usb 9-1: device descriptor read/8, error -71 [ 869.394562][ T5806] usb usb9-port1: unable to enumerate USB device [ 870.274588][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.274656][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.389364][T11046] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 873.514201][T11046] usb 7-1: device descriptor read/64, error -71 [ 873.570741][T12620] cgroup: noprefix used incorrectly [ 874.069984][T11046] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 874.194125][T11046] usb 7-1: device descriptor read/64, error -71 [ 874.304572][T11046] usb usb7-port1: attempt power cycle [ 875.155755][T11046] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 875.262987][T11046] usb 7-1: device descriptor read/8, error -71 [ 875.494328][T11046] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 875.515633][T11046] usb 7-1: device descriptor read/8, error -71 [ 875.777842][T11046] usb usb7-port1: unable to enumerate USB device [ 882.474021][ T8479] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 882.485897][T12706] syzkaller0: entered promiscuous mode [ 882.485971][T12706] syzkaller0: entered allmulticast mode [ 882.613176][ T8479] usb 9-1: device descriptor read/64, error -71 [ 882.843998][ T8479] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 882.994275][ T8479] usb 9-1: device descriptor read/64, error -71 [ 883.114689][ T8479] usb usb9-port1: attempt power cycle [ 883.521416][ T8479] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 883.558579][ T8479] usb 9-1: device descriptor read/8, error -71 [ 884.794012][ T8479] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 884.814718][ T8479] usb 9-1: device descriptor read/8, error -71 [ 884.925809][ T8479] usb usb9-port1: unable to enumerate USB device [ 886.061333][T12750] tipc: Enabled bearer , priority 0 [ 886.091999][T12734] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 886.146762][ T8479] IPVS: starting estimator thread 0... [ 886.241761][T12756] IPVS: using max 10 ests per chain, 24000 per kthread [ 886.388614][T12749] tipc: Disabling bearer [ 887.824234][T12770] netlink: 'syz.5.1844': attribute type 1 has an invalid length. [ 887.829755][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1843'. [ 887.925620][T12774] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1843'. [ 890.243968][T11046] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 890.373945][T11046] usb 6-1: device descriptor read/64, error -71 [ 890.562534][T12801] syzkaller0: entered promiscuous mode [ 890.562562][T12801] syzkaller0: entered allmulticast mode [ 890.624121][T11046] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 890.842413][T11046] usb 6-1: device descriptor read/64, error -71 [ 890.959116][T11046] usb usb6-port1: attempt power cycle [ 891.733951][T11046] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 891.754746][T11046] usb 6-1: device descriptor read/8, error -71 [ 892.194394][T11046] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 892.765467][T12803] tipc: Started in network mode [ 892.765553][T12803] tipc: Node identity 4e73d198b74d, cluster identity 4711 [ 892.828467][T11046] usb 6-1: device descriptor read/8, error -71 [ 892.899705][T12803] tipc: Enabled bearer , priority 0 [ 892.935326][T11046] usb usb6-port1: unable to enumerate USB device [ 892.961727][T12800] tipc: Resetting bearer [ 893.180031][T12800] tipc: Disabling bearer [ 895.830049][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 895.876421][T12842] netlink: 'syz.5.1865': attribute type 10 has an invalid length. [ 895.962368][T12846] netlink: 'syz.5.1865': attribute type 10 has an invalid length. [ 896.016982][T12817] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 896.018096][T12817] block device autoloading is deprecated and will be removed. [ 896.054359][T12842] team0: Port device dummy0 added [ 896.133565][T12846] team0: Port device dummy0 removed [ 896.198942][T12846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 896.465818][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1871'. [ 896.466262][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1871'. [ 896.593971][T11041] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 896.751405][T11041] usb 7-1: config index 0 descriptor too short (expected 2084, got 36) [ 896.751447][T11041] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 896.751485][T11041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 896.751511][T11041] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 896.751550][T11041] usb 7-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 896.751572][T11041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.757211][ T8479] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 896.885128][ T8479] usb 9-1: device descriptor read/64, error -71 [ 897.250457][T12862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 897.497353][T11041] usb 7-1: config 0 descriptor?? [ 897.498336][T12856] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 897.703958][ T8479] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 897.845448][ T8479] usb 9-1: device descriptor read/64, error -71 [ 897.956110][ T8479] usb usb9-port1: attempt power cycle [ 898.057205][T12876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.059109][T12876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.625032][ T8479] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 899.034037][ T8479] usb 9-1: device descriptor read/8, error -71 [ 899.061737][T11041] usbhid 7-1:0.0: can't add hid device: -71 [ 899.061851][T11041] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 899.104566][T11041] usb 7-1: USB disconnect, device number 8 [ 899.284852][ T8479] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 899.305324][ T8479] usb 9-1: device descriptor read/8, error -71 [ 899.414325][ T8479] usb usb9-port1: unable to enumerate USB device [ 900.694800][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1884'. [ 900.696074][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1884'. [ 902.397871][T12919] program syz.7.1886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.933999][T11041] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 904.389434][T11041] usb 7-1: device descriptor read/64, error -71 [ 905.753981][T11041] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 905.934088][T11041] usb 7-1: device descriptor read/64, error -71 [ 906.049065][T11041] usb usb7-port1: attempt power cycle [ 908.444155][T11041] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 909.461067][T11041] usb 7-1: device not accepting address 11, error -71 [ 913.254064][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 913.436094][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.436120][ T31] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.436153][ T31] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 913.436176][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.498052][ T31] usb 7-1: config 0 descriptor?? [ 913.616610][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1915'. [ 916.035334][ T5806] usb 7-1: USB disconnect, device number 13 [ 917.019312][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1926'. [ 917.322489][T12996] Bluetooth: (null): Invalid header checksum [ 917.329207][T12996] Bluetooth: (null): Invalid header checksum [ 917.434547][ T8671] Bluetooth: (null): Invalid header checksum [ 917.696152][T12994] Bluetooth: (null): Invalid header checksum [ 917.817913][T12994] Bluetooth: (null): Invalid header checksum [ 918.324484][ T5806] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 918.540820][ T5806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.540838][ T5806] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 918.540862][ T5806] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 918.540909][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.740823][ T5806] usb 7-1: config 0 descriptor?? [ 920.859024][ T5902] usb 7-1: USB disconnect, device number 14 [ 921.817794][ T3573] Bluetooth: (null): Invalid header checksum [ 921.818068][ T3573] Bluetooth: (null): Invalid header checksum [ 921.918144][ T3573] Bluetooth: (null): Invalid header checksum [ 925.453946][ T5806] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 925.616406][ T5806] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.616459][ T5806] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 925.616482][ T5806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.666620][ T5806] usb 8-1: config 0 descriptor?? [ 925.689518][ T5806] pwc: Askey VC010 type 2 USB webcam detected. [ 926.134598][ T5806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 927.981655][T11041] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 928.107214][T13136] netlink: 'syz.5.1951': attribute type 3 has an invalid length. [ 928.107236][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1951'. [ 928.152151][T11041] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.152169][T11041] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.152231][T11041] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 928.152246][T11041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.431897][T11041] usb 9-1: config 0 descriptor?? [ 928.721518][T10768] Bluetooth: hci0: Frame reassembly failed (-84) [ 929.004680][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1956'. [ 929.004934][T13145] bridge_slave_0: default FDB implementation only supports local addresses [ 929.008306][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1956'. [ 929.008342][T13145] bridge_slave_0: default FDB implementation only supports local addresses [ 930.425128][T11041] usb 9-1: USB disconnect, device number 27 [ 930.583996][ T5821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 931.146471][ T5806] pwc: recv_control_msg error -110 req 02 val 2700 [ 931.148538][ T5806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 931.149025][ T5806] pwc: recv_control_msg error -32 req 04 val 1000 [ 931.149897][ T5806] pwc: recv_control_msg error -32 req 04 val 1300 [ 931.150410][ T5806] pwc: recv_control_msg error -32 req 04 val 1400 [ 931.150915][ T5806] pwc: recv_control_msg error -32 req 02 val 2000 [ 931.151519][ T5806] pwc: recv_control_msg error -32 req 02 val 2100 [ 931.203497][ T5806] pwc: recv_control_msg error -32 req 04 val 1500 [ 931.204571][ T5806] pwc: recv_control_msg error -32 req 02 val 2500 [ 931.205055][ T5806] pwc: recv_control_msg error -32 req 02 val 2400 [ 931.228414][ T5806] pwc: recv_control_msg error -32 req 02 val 2600 [ 931.228879][ T5806] pwc: recv_control_msg error -32 req 02 val 2900 [ 931.229584][ T5806] pwc: recv_control_msg error -32 req 02 val 2800 [ 931.259742][ T5806] pwc: recv_control_msg error -32 req 04 val 1100 [ 931.274742][ T5806] pwc: recv_control_msg error -32 req 04 val 1200 [ 931.359115][ T5806] pwc: Registered as video103. [ 931.715476][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.715542][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.749502][ T5806] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input36 [ 931.984958][T13167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.215076][T13171] netlink: 'syz.6.1962': attribute type 3 has an invalid length. [ 932.215101][T13171] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1962'. [ 932.924165][ T31] usb 8-1: USB disconnect, device number 23 [ 937.028464][T13217] netlink: 'syz.7.1975': attribute type 3 has an invalid length. [ 937.028480][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1975'. [ 941.618277][T13254] program syz.9.1990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 946.577248][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2007'. [ 946.577891][T13305] netlink: 'syz.6.2007': attribute type 10 has an invalid length. [ 946.652039][T13305] team0: Port device dummy0 added [ 947.813950][ T31] usb 6-1: new low-speed USB device number 48 using dummy_hcd [ 949.001204][ T31] usb 6-1: config index 0 descriptor too short (expected 2084, got 36) [ 949.001248][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 949.001311][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 949.001337][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 949.001376][ T31] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 949.001398][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.094998][ T31] usb 6-1: config 0 descriptor?? [ 949.106290][T13301] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 950.004214][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 950.004333][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 950.034107][ T31] usb 6-1: USB disconnect, device number 48 [ 951.920770][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2023'. [ 951.921688][T13357] netlink: 'syz.7.2023': attribute type 10 has an invalid length. [ 952.044302][T13357] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 953.095200][ T5806] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 953.245957][ T5806] usb 7-1: config index 0 descriptor too short (expected 2084, got 36) [ 953.246003][ T5806] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 953.246054][ T5806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 953.246084][ T5806] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 953.246145][ T5806] usb 7-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 953.246172][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.319397][ T5806] usb 7-1: config 0 descriptor?? [ 953.511212][T13367] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 954.822631][ T5806] usbhid 7-1:0.0: can't add hid device: -71 [ 954.822745][ T5806] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 954.862730][ T5806] usb 7-1: USB disconnect, device number 15 [ 955.609653][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2037'. [ 955.611303][T13409] netlink: 'syz.6.2037': attribute type 10 has an invalid length. [ 955.877232][T13409] team0: Port device dummy0 removed [ 956.029125][T13409] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 959.073907][T11041] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 959.275879][T11041] usb 6-1: config index 0 descriptor too short (expected 2084, got 36) [ 959.275922][T11041] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 959.275960][T11041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 959.275985][T11041] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 959.276024][T11041] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 959.276045][T11041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.381322][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2050'. [ 959.383684][T11041] usb 6-1: config 0 descriptor?? [ 959.444501][T13447] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 959.908566][T11041] usbhid 6-1:0.0: can't add hid device: -71 [ 959.908682][T11041] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 960.006483][T11041] usb 6-1: USB disconnect, device number 49 [ 962.409053][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2061'. [ 964.194067][ T8424] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 964.357960][ T8424] usb 7-1: config index 0 descriptor too short (expected 2084, got 36) [ 964.358002][ T8424] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 964.358039][ T8424] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 964.358064][ T8424] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 964.358103][ T8424] usb 7-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 964.358124][ T8424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.437990][ T8424] usb 7-1: config 0 descriptor?? [ 964.438963][T13510] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 964.873369][ T8424] usbhid 7-1:0.0: can't add hid device: -71 [ 964.873485][ T8424] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 964.898065][ T8424] usb 7-1: USB disconnect, device number 16 [ 967.279869][T13544] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2074'. [ 972.451308][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2086'. [ 974.661454][T13603] fuse: Unknown parameter '0x0000000000000007' [ 979.765155][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2102'. [ 987.051545][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2117'. [ 993.383250][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.383315][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.251758][T13757] program syz.5.2135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.615449][ T31] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 995.796522][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.796575][ T31] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 995.796598][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.840532][ T31] usb 10-1: config 0 descriptor?? [ 995.854663][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 996.404633][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 996.716238][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 996.719918][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 996.759683][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 997.183924][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 997.185227][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 997.189126][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 997.191366][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 997.191840][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 997.193104][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 997.193557][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 997.195919][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 997.198383][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 997.198809][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 997.199440][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 997.199915][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 997.359962][ T31] pwc: Registered as video103. [ 997.479587][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input37 [ 997.919650][ T31] usb 10-1: USB disconnect, device number 20 [ 999.591127][T13795] program syz.5.2147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.341280][T13803] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2149'. [ 1002.150184][T13810] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2149'. [ 1007.492142][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2163'. [ 1007.599069][T13851] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2163'. [ 1009.061727][T13855] netlink: 'syz.8.2165': attribute type 10 has an invalid length. [ 1009.133554][T13857] netlink: 'syz.8.2165': attribute type 10 has an invalid length. [ 1009.436637][T13855] team0: Port device dummy0 added [ 1009.586295][T13857] team0: Port device dummy0 removed [ 1009.697686][T13857] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1013.106819][T13886] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1013.236239][T13887] syzkaller0: entered promiscuous mode [ 1013.236267][T13887] syzkaller0: entered allmulticast mode [ 1013.504423][T13889] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2174'. [ 1016.282275][T13900] netlink: 'syz.6.2178': attribute type 10 has an invalid length. [ 1016.603264][T13904] netlink: 'syz.6.2178': attribute type 10 has an invalid length. [ 1016.612914][T13900] bond0: (slave dummy0): Releasing backup interface [ 1016.682028][T13900] team0: Port device dummy0 added [ 1017.059823][T12295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1017.148739][T12295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1017.157397][T12295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1017.161082][T12295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1017.165263][T12295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1017.170469][T13904] team0: Port device dummy0 removed [ 1017.175319][T13904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1019.248077][T13932] syzkaller0: entered promiscuous mode [ 1019.248102][T13932] syzkaller0: entered allmulticast mode [ 1019.253632][T13932] tipc: Started in network mode [ 1019.253659][T13932] tipc: Node identity 1a55defce622, cluster identity 4711 [ 1019.258360][T13932] tipc: Enabled bearer , priority 0 [ 1019.485365][ T5821] Bluetooth: hci0: command tx timeout [ 1019.651346][T13929] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2186'. [ 1019.781053][T13931] tipc: Resetting bearer [ 1019.887539][T13935] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2186'. [ 1020.336155][T13927] loop4: detected capacity change from 0 to 7 [ 1020.827223][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1020.827738][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1020.828095][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1020.828451][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1020.828914][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1021.747106][ T5821] Bluetooth: hci0: command tx timeout [ 1021.935356][T13931] tipc: Disabling bearer [ 1022.269327][ T5902] tipc: Node number set to 4235714300 [ 1022.562349][T13906] chnl_net:caif_netlink_parms(): no params data found [ 1022.596453][T13953] netlink: 'syz.6.2193': attribute type 10 has an invalid length. [ 1022.648816][T13958] netlink: 'syz.6.2193': attribute type 10 has an invalid length. [ 1022.714745][T13953] bond0: (slave dummy0): Releasing backup interface [ 1022.779477][T13953] team0: Port device dummy0 added [ 1022.855056][T13958] team0: Port device dummy0 removed [ 1022.879642][T13958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1023.850459][ T5821] Bluetooth: hci0: command tx timeout [ 1024.133237][T13906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.151785][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.152081][T13906] bridge_slave_0: entered allmulticast mode [ 1024.174969][T13906] bridge_slave_0: entered promiscuous mode [ 1024.191012][T13906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.191204][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.191418][T13906] bridge_slave_1: entered allmulticast mode [ 1024.223649][T13906] bridge_slave_1: entered promiscuous mode [ 1024.427593][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.454217][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.650180][T13906] team0: Port device team_slave_0 added [ 1024.671100][T13906] team0: Port device team_slave_1 added [ 1025.874463][ T5821] Bluetooth: hci0: command tx timeout [ 1026.088765][T13986] loop4: detected capacity change from 0 to 7 [ 1026.921814][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.921833][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.921861][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.969695][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.969709][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.969731][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.106593][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1027.110677][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1027.113434][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1027.127552][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1027.137785][T13914] Buffer I/O error on dev loop4, logical block 0, async page read [ 1027.182999][T13906] hsr_slave_0: entered promiscuous mode [ 1027.190587][T13906] hsr_slave_1: entered promiscuous mode [ 1027.191509][T13906] debugfs: 'hsr0' already exists in 'hsr' [ 1027.191531][T13906] Cannot create hsr debugfs directory [ 1027.372312][T13992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2201'. [ 1027.535031][T13993] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2201'. [ 1029.784105][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2207'. [ 1029.919653][T14015] netlink: 'syz.6.2207': attribute type 10 has an invalid length. [ 1030.880494][T14025] netlink: 'syz.6.2207': attribute type 10 has an invalid length. [ 1031.117803][T14030] loop4: detected capacity change from 0 to 7 [ 1032.134517][T13908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1032.135172][T13908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1032.139295][T13908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1032.139898][T13908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1032.152398][T13908] Buffer I/O error on dev loop4, logical block 0, async page read [ 1032.214061][T11041] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1032.344185][T11041] usb 10-1: device descriptor read/64, error -71 [ 1033.499747][T11041] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1033.634094][T11041] usb 10-1: device descriptor read/64, error -71 [ 1033.744423][T11041] usb usb10-port1: attempt power cycle [ 1033.837534][T14015] bond0: (slave dummy0): Releasing backup interface [ 1034.717714][T14015] team0: Port device dummy0 added [ 1034.823427][T14025] team0: Port device dummy0 removed [ 1034.840245][T14025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1036.313486][T14058] ================================================================== [ 1036.313501][T14058] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1036.313536][T14058] Read of size 1 at addr ffff88802a1c3200 by task syz.6.2218/14058 [ 1036.313550][T14058] [ 1036.313560][T14058] CPU: 0 UID: 0 PID: 14058 Comm: syz.6.2218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1036.313579][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1036.313589][T14058] Call Trace: [ 1036.313596][T14058] [ 1036.313603][T14058] dump_stack_lvl+0xe8/0x150 [ 1036.313633][T14058] print_address_description+0x55/0x1e0 [ 1036.313684][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.313726][T14058] print_report+0x58/0x70 [ 1036.313750][T14058] kasan_report+0x117/0x150 [ 1036.313774][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.313801][T14058] ? __wake_up_common_lock+0x2f/0x1e0 [ 1036.313820][T14058] __kasan_check_byte+0x2a/0x40 [ 1036.313837][T14058] lock_acquire+0x84/0x350 [ 1036.313861][T14058] rt_spin_lock+0x83/0x400 [ 1036.313883][T14058] ? __wake_up_common_lock+0x2f/0x1e0 [ 1036.313900][T14058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1036.313926][T14058] ? __pfx_rt_spin_lock+0x10/0x10 [ 1036.313949][T14058] ? rt_spin_unlock+0x14f/0x200 [ 1036.313974][T14058] ? rt_spin_unlock+0x160/0x200 [ 1036.313998][T14058] __wake_up_common_lock+0x2f/0x1e0 [ 1036.314018][T14058] snd_pcm_stop+0x428/0x550 [ 1036.314039][T14058] loopback_trigger+0x11ff/0x1cf0 [ 1036.314068][T14058] snd_pcm_start+0x43d/0x5d0 [ 1036.314088][T14058] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1036.314117][T14058] ? __pfx_interleaved_copy+0x10/0x10 [ 1036.314142][T14058] ? __pfx_default_write_copy+0x10/0x10 [ 1036.314187][T14058] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.314208][T14058] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1036.314231][T14058] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1036.314258][T14058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1036.314287][T14058] ? snd_pcm_oss_write3+0x191/0x300 [ 1036.314312][T14058] snd_pcm_oss_write3+0x1ab/0x300 [ 1036.314338][T14058] snd_pcm_oss_write2+0x2c2/0x440 [ 1036.314366][T14058] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1036.314390][T14058] ? rt_spin_unlock+0x14f/0x200 [ 1036.314420][T14058] ? rt_spin_unlock+0x160/0x200 [ 1036.314449][T14058] snd_pcm_oss_sync1+0x180/0x520 [ 1036.314481][T14058] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1036.314509][T14058] ? __pfx_default_wake_function+0x10/0x10 [ 1036.314538][T14058] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.314563][T14058] ? __asan_memset+0x22/0x50 [ 1036.314587][T14058] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1036.314607][T14058] snd_pcm_oss_sync+0xab2/0xfc0 [ 1036.314636][T14058] snd_pcm_oss_release+0x102/0x250 [ 1036.314669][T14058] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1036.314698][T14058] __fput+0x461/0xa70 [ 1036.314724][T14058] task_work_run+0x1d9/0x270 [ 1036.314747][T14058] ? __pfx_task_work_run+0x10/0x10 [ 1036.314771][T14058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.314788][T14058] exit_to_user_mode_loop+0xed/0x480 [ 1036.314807][T14058] ? rcu_is_watching+0x15/0xb0 [ 1036.314829][T14058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.314846][T14058] do_syscall_64+0x33e/0xf80 [ 1036.314866][T14058] ? trace_irq_disable+0x3b/0x140 [ 1036.314893][T14058] ? clear_bhb_loop+0x40/0x90 [ 1036.314913][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.314932][T14058] RIP: 0033:0x7f66a640c819 [ 1036.314946][T14058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.314961][T14058] RSP: 002b:00007ffdb83a5ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1036.314978][T14058] RAX: 0000000000000000 RBX: 00007f66a6687da0 RCX: 00007f66a640c819 [ 1036.314990][T14058] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1036.315000][T14058] RBP: 00007f66a6687da0 R08: 0000000000000006 R09: 0000000000000000 [ 1036.315011][T14058] R10: 00007f66a6687cb0 R11: 0000000000000246 R12: 00000000000fcc67 [ 1036.315022][T14058] R13: 00007f66a668609c R14: 00000000000fc9b4 R15: 00007f66a6686090 [ 1036.315041][T14058] [ 1036.315047][T14058] [ 1036.315060][T14058] Allocated by task 14060: [ 1036.315068][T14058] kasan_save_track+0x3e/0x80 [ 1036.315090][T14058] __kasan_kmalloc+0x93/0xb0 [ 1036.315114][T14058] __kmalloc_cache_noprof+0x3a6/0x690 [ 1036.315129][T14058] snd_pcm_attach_substream+0x5b7/0xb20 [ 1036.315155][T14058] snd_pcm_open_substream+0xbd/0x2420 [ 1036.315173][T14058] snd_pcm_oss_open+0xf90/0x1c20 [ 1036.315193][T14058] chrdev_open+0x4d0/0x5f0 [ 1036.315209][T14058] do_dentry_open+0x83d/0x13e0 [ 1036.315228][T14058] vfs_open+0x3b/0x350 [ 1036.315246][T14058] path_openat+0x2e43/0x38a0 [ 1036.315260][T14058] do_file_open+0x23e/0x4a0 [ 1036.315272][T14058] do_sys_openat2+0x113/0x200 [ 1036.315291][T14058] __x64_sys_openat+0x138/0x170 [ 1036.315312][T14058] do_syscall_64+0x15f/0xf80 [ 1036.315332][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.315348][T14058] [ 1036.315352][T14058] Freed by task 14060: [ 1036.315360][T14058] kasan_save_track+0x3e/0x80 [ 1036.315380][T14058] kasan_save_free_info+0x46/0x50 [ 1036.315398][T14058] __kasan_slab_free+0x5c/0x80 [ 1036.315418][T14058] kfree+0x1c5/0x6c0 [ 1036.315439][T14058] snd_pcm_detach_substream+0x1c8/0x270 [ 1036.315475][T14058] snd_pcm_oss_release+0x184/0x250 [ 1036.315493][T14058] __fput+0x461/0xa70 [ 1036.315511][T14058] task_work_run+0x1d9/0x270 [ 1036.315530][T14058] exit_to_user_mode_loop+0xed/0x480 [ 1036.315546][T14058] do_syscall_64+0x33e/0xf80 [ 1036.315563][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.315577][T14058] [ 1036.315581][T14058] The buggy address belongs to the object at ffff88802a1c3000 [ 1036.315581][T14058] which belongs to the cache kmalloc-2k of size 2048 [ 1036.315595][T14058] The buggy address is located 512 bytes inside of [ 1036.315595][T14058] freed 2048-byte region [ffff88802a1c3000, ffff88802a1c3800) [ 1036.315611][T14058] [ 1036.315616][T14058] The buggy address belongs to the physical page: [ 1036.315633][T14058] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a1c0 [ 1036.315653][T14058] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1036.315674][T14058] flags: 0x80000000000040(head|node=0|zone=1) [ 1036.315687][T14058] page_type: f5(slab) [ 1036.315700][T14058] raw: 0080000000000040 ffff88801a022000 dead000000000100 dead000000000122 [ 1036.315713][T14058] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1036.315727][T14058] head: 0080000000000040 ffff88801a022000 dead000000000100 dead000000000122 [ 1036.315741][T14058] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1036.315754][T14058] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1036.315768][T14058] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1036.315775][T14058] page dumped because: kasan: bad access detected [ 1036.315804][T14058] page_owner tracks the page as allocated [ 1036.315810][T14058] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 11330158392, free_ts 0 [ 1036.315842][T14058] post_alloc_hook+0x231/0x280 [ 1036.315870][T14058] get_page_from_freelist+0x27c8/0x2840 [ 1036.315886][T14058] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1036.315902][T14058] allocate_slab+0x77/0x660 [ 1036.315921][T14058] refill_objects+0x33c/0x3d0 [ 1036.315937][T14058] __pcs_replace_empty_main+0x373/0x720 [ 1036.315956][T14058] __kmalloc_noprof+0x530/0x7b0 [ 1036.315968][T14058] scsi_alloc_target+0x138/0xbd0 [ 1036.315985][T14058] __scsi_scan_target+0x164/0xe10 [ 1036.316012][T14058] scsi_scan_host_selected+0x3d3/0x780 [ 1036.316027][T14058] do_scan_async+0x124/0x6f0 [ 1036.316043][T14058] async_run_entry_fn+0xa8/0x440 [ 1036.316056][T14058] process_scheduled_works+0xb5d/0x1860 [ 1036.316077][T14058] worker_thread+0xa53/0xfc0 [ 1036.316088][T14058] kthread+0x388/0x470 [ 1036.316103][T14058] ret_from_fork+0x514/0xb70 [ 1036.316115][T14058] page_owner free stack trace missing [ 1036.316121][T14058] [ 1036.316124][T14058] Memory state around the buggy address: [ 1036.316133][T14058] ffff88802a1c3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.316144][T14058] ffff88802a1c3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.316154][T14058] >ffff88802a1c3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.316162][T14058] ^ [ 1036.316170][T14058] ffff88802a1c3280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.316180][T14058] ffff88802a1c3300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1036.316188][T14058] ================================================================== [ 1036.316253][T14058] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1036.316267][T14058] CPU: 0 UID: 0 PID: 14058 Comm: syz.6.2218 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1036.316285][T14058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1036.316295][T14058] Call Trace: [ 1036.316301][T14058] [ 1036.316307][T14058] vpanic+0x56c/0xa60 [ 1036.316326][T14058] ? __pfx_vpanic+0x10/0x10 [ 1036.316341][T14058] ? __pfx___schedule+0x10/0x10 [ 1036.316362][T14058] panic+0xc5/0xd0 [ 1036.316376][T14058] ? __pfx_panic+0x10/0x10 [ 1036.316393][T14058] ? preempt_schedule_common+0x82/0xd0 [ 1036.316412][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.316437][T14058] check_panic_on_warn+0x89/0xb0 [ 1036.316458][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.316481][T14058] end_report+0x73/0x170 [ 1036.316495][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.316515][T14058] kasan_report+0x128/0x150 [ 1036.316530][T14058] ? rt_spin_lock+0x83/0x400 [ 1036.316554][T14058] ? __wake_up_common_lock+0x2f/0x1e0 [ 1036.316570][T14058] __kasan_check_byte+0x2a/0x40 [ 1036.316584][T14058] lock_acquire+0x84/0x350 [ 1036.316606][T14058] rt_spin_lock+0x83/0x400 [ 1036.316630][T14058] ? __wake_up_common_lock+0x2f/0x1e0 [ 1036.316648][T14058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1036.316703][T14058] ? __pfx_rt_spin_lock+0x10/0x10 [ 1036.316728][T14058] ? rt_spin_unlock+0x14f/0x200 [ 1036.316758][T14058] ? rt_spin_unlock+0x160/0x200 [ 1036.316789][T14058] __wake_up_common_lock+0x2f/0x1e0 [ 1036.316813][T14058] snd_pcm_stop+0x428/0x550 [ 1036.316837][T14058] loopback_trigger+0x11ff/0x1cf0 [ 1036.316872][T14058] snd_pcm_start+0x43d/0x5d0 [ 1036.316896][T14058] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1036.316930][T14058] ? __pfx_interleaved_copy+0x10/0x10 [ 1036.316960][T14058] ? __pfx_default_write_copy+0x10/0x10 [ 1036.316991][T14058] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.317016][T14058] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1036.317045][T14058] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1036.317074][T14058] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1036.317108][T14058] ? snd_pcm_oss_write3+0x191/0x300 [ 1036.317137][T14058] snd_pcm_oss_write3+0x1ab/0x300 [ 1036.317165][T14058] snd_pcm_oss_write2+0x2c2/0x440 [ 1036.317194][T14058] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1036.317221][T14058] ? rt_spin_unlock+0x14f/0x200 [ 1036.317254][T14058] ? rt_spin_unlock+0x160/0x200 [ 1036.317284][T14058] snd_pcm_oss_sync1+0x180/0x520 [ 1036.317319][T14058] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1036.317348][T14058] ? __pfx_default_wake_function+0x10/0x10 [ 1036.317377][T14058] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1036.317403][T14058] ? __asan_memset+0x22/0x50 [ 1036.317428][T14058] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1036.317449][T14058] snd_pcm_oss_sync+0xab2/0xfc0 [ 1036.317482][T14058] snd_pcm_oss_release+0x102/0x250 [ 1036.317509][T14058] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1036.317536][T14058] __fput+0x461/0xa70 [ 1036.317566][T14058] task_work_run+0x1d9/0x270 [ 1036.317593][T14058] ? __pfx_task_work_run+0x10/0x10 [ 1036.317621][T14058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.317642][T14058] exit_to_user_mode_loop+0xed/0x480 [ 1036.317675][T14058] ? rcu_is_watching+0x15/0xb0 [ 1036.317702][T14058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.317723][T14058] do_syscall_64+0x33e/0xf80 [ 1036.317745][T14058] ? trace_irq_disable+0x3b/0x140 [ 1036.317765][T14058] ? clear_bhb_loop+0x40/0x90 [ 1036.317789][T14058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.317808][T14058] RIP: 0033:0x7f66a640c819 [ 1036.317825][T14058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.317854][T14058] RSP: 002b:00007ffdb83a5ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1036.317873][T14058] RAX: 0000000000000000 RBX: 00007f66a6687da0 RCX: 00007f66a640c819 [ 1036.317887][T14058] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1036.317898][T14058] RBP: 00007f66a6687da0 R08: 0000000000000006 R09: 0000000000000000 [ 1036.317910][T14058] R10: 00007f66a6687cb0 R11: 0000000000000246 R12: 00000000000fcc67 [ 1036.317924][T14058] R13: 00007f66a668609c R14: 00000000000fc9b4 R15: 00007f66a6686090 [ 1036.317945][T14058] [ 1036.318537][T14058] Kernel Offset: disabled