last executing test programs: 1m50.253461141s ago: executing program 3 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 1m43.687668478s ago: executing program 3 (id=188): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x800, 0x5}, {0x3, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 1m41.683132963s ago: executing program 3 (id=190): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb601"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x20, 0xe, 0x1, "bf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) 1m37.168576129s ago: executing program 3 (id=201): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 1m36.097528668s ago: executing program 3 (id=205): openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f00000035c0), 0x0, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0x6, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1m35.619659427s ago: executing program 4 (id=206): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m29.682450261s ago: executing program 3 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 1m29.17472847s ago: executing program 4 (id=211): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m26.58591629s ago: executing program 4 (id=215): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @hyper}, 0x9) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@ipv6_newaddr={0x6c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x1, 0x0, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffff, 0xe4c, 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x32c4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m24.818997482s ago: executing program 4 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) 1m19.879321667s ago: executing program 4 (id=223): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 1m17.63846014s ago: executing program 4 (id=226): syz_clone(0x41000300, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.698465074s ago: executing program 32 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) 1m1.341966577s ago: executing program 33 (id=226): syz_clone(0x41000300, 0x0, 0x0, 0x0, 0x0, 0x0) 59.576321859s ago: executing program 5 (id=234): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x14, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 16.925383405s ago: executing program 1 (id=308): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lstat(0x0, 0x0) lstat(0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 15.132242568s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x9) 13.41263446s ago: executing program 0 (id=316): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x0, 0x7, 0x5, 0x7a18fde9, 0x9, 0xf12, 0x8, 0x3, 0x378, 0x9, 0x4, 0x0, 0x2001, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x403, 0x7, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x2, 0x4b, 0x9, 0x2, 0xb, 0x2, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10002, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x20201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x80000, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x6, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0xa, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x5, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0xb, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x800008, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x1005, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80002000, 0x3, 0x7, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x6, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xa, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x405, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0xb, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x8, 0xa, 0x5, 0x6, 0xbd1b, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x8000004, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x7, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x3821, 0x7b, 0x0, 0x8, 0xfffffffe, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x1, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x80000003, 0xd7, 0x8009, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x5, 0x1, 0x6, 0x1, 0xff, 0x841, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x5, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x8000009f, 0x7, 0x3, 0x9, 0xca, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x4, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x23be, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0xe40, 0xffffff81, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x0, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x9, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x4, 0xc, 0x401, 0x6, 0x7, 0x9, 0x10, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32, @ANYBLOB="24002d800500010003000000080004000000000008000200"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 10.407573413s ago: executing program 0 (id=319): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lstat(0x0, 0x0) lstat(0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 8.554421857s ago: executing program 0 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.436768687s ago: executing program 1 (id=322): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @dev}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 6.863238944s ago: executing program 0 (id=324): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000002c0)={0x20, 0x11, 0x2, "f52d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.630011222s ago: executing program 1 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) 4.211340993s ago: executing program 0 (id=328): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x0, 0x7, 0x5, 0x7a18fde9, 0x9, 0xf12, 0x8, 0x3, 0x378, 0x9, 0x4, 0x0, 0x2001, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x403, 0x7, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x2, 0x4b, 0x9, 0x2, 0xb, 0x2, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10002, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x20201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x80000, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x6, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0xa, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x5, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0xb, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x800008, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x1005, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80002000, 0x3, 0x7, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x6, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xa, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x405, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0xb, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x8, 0xa, 0x5, 0x6, 0xbd1b, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x8000004, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x7, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x3821, 0x7b, 0x0, 0x8, 0xfffffffe, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x1, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x80000003, 0xd7, 0x8009, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x5, 0x1, 0x6, 0x1, 0xff, 0x841, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x5, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x8000009f, 0x7, 0x3, 0x9, 0xca, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x4, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x23be, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0xe40, 0xffffff81, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x0, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x9, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x4, 0xc, 0x401, 0x6, 0x7, 0x9, 0x10, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="370626bd7000fcdbdf252000000008000300", @ANYRES32=r0, @ANYBLOB="24002d800500010003000000080004000000000008000200"], 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) 4.201595835s ago: executing program 1 (id=329): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lstat(0x0, 0x0) lstat(0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 4.061950868s ago: executing program 2 (id=330): clock_nanosleep(0x1, 0x891db894d17f9ce9, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00'], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = dup2(r3, r3) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r6 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x301c00, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000140)={0x90002, 0x0, {[0x0, 0x5, 0x8, 0x8, 0x70e2, 0x2, 0x6, 0x3]}}) 2.676373876s ago: executing program 1 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080)=0x9) 1.221752371s ago: executing program 0 (id=332): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 991.117293ms ago: executing program 2 (id=333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 729.897952ms ago: executing program 2 (id=334): r0 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 198.927148ms ago: executing program 2 (id=335): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x800, 0x5}, {0x3, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x40004) 82.475621ms ago: executing program 2 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) 0s ago: executing program 2 (id=337): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000002c0)={0x20, 0x11, 0x2, "f52d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 81.668105][ T5596] cgroup: Unknown subsys name 'net' [ 81.908432][ T5596] cgroup: Unknown subsys name 'cpuset' [ 81.963081][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.857284][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.441307][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.458651][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.496574][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.526765][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.527571][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.527981][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.570077][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.571717][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.572242][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.582025][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.592865][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.602130][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.626158][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.627392][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.627462][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.644223][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.658938][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.659440][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.677177][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.681582][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.702802][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.704598][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.710316][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.726680][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.727118][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.813452][ T5625] Bluetooth: hci1: command tx timeout [ 88.813457][ T60] Bluetooth: hci0: command tx timeout [ 88.813590][ T5625] Bluetooth: hci3: command tx timeout [ 88.892658][ T5629] Bluetooth: hci4: command tx timeout [ 88.906279][ T5629] Bluetooth: hci2: command tx timeout [ 89.627451][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.628570][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.628780][ T5613] bridge_slave_0: entered allmulticast mode [ 89.631422][ T5613] bridge_slave_0: entered promiscuous mode [ 89.676677][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.676890][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.677260][ T5612] bridge_slave_0: entered allmulticast mode [ 89.679443][ T5612] bridge_slave_0: entered promiscuous mode [ 89.744894][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.745140][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.745326][ T5613] bridge_slave_1: entered allmulticast mode [ 89.749491][ T5613] bridge_slave_1: entered promiscuous mode [ 89.790475][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.790811][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.791074][ T5612] bridge_slave_1: entered allmulticast mode [ 89.813987][ T5612] bridge_slave_1: entered promiscuous mode [ 89.831488][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.831746][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.831947][ T5610] bridge_slave_0: entered allmulticast mode [ 89.854425][ T5610] bridge_slave_0: entered promiscuous mode [ 89.865979][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.866309][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.867052][ T5609] bridge_slave_0: entered allmulticast mode [ 89.869684][ T5609] bridge_slave_0: entered promiscuous mode [ 89.912178][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.919917][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.920140][ T5611] bridge_slave_0: entered allmulticast mode [ 89.927297][ T5611] bridge_slave_0: entered promiscuous mode [ 89.962121][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.963839][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.965653][ T5610] bridge_slave_1: entered allmulticast mode [ 89.976580][ T5610] bridge_slave_1: entered promiscuous mode [ 89.978106][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.978968][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.980933][ T5609] bridge_slave_1: entered allmulticast mode [ 89.996167][ T5609] bridge_slave_1: entered promiscuous mode [ 90.031942][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.034567][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.043244][ T5611] bridge_slave_1: entered allmulticast mode [ 90.053211][ T5611] bridge_slave_1: entered promiscuous mode [ 90.131126][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.170193][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.220935][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.253347][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.259022][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.286334][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.315570][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.344412][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.348869][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.391311][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.477455][ T5613] team0: Port device team_slave_0 added [ 90.507010][ T5612] team0: Port device team_slave_0 added [ 90.556099][ T5613] team0: Port device team_slave_1 added [ 90.584924][ T5612] team0: Port device team_slave_1 added [ 90.588399][ T5610] team0: Port device team_slave_0 added [ 90.598963][ T5609] team0: Port device team_slave_0 added [ 90.627816][ T5611] team0: Port device team_slave_0 added [ 90.654812][ T5610] team0: Port device team_slave_1 added [ 90.658193][ T5609] team0: Port device team_slave_1 added [ 90.686724][ T5611] team0: Port device team_slave_1 added [ 90.743815][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.743828][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.743854][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.808266][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.808279][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.808298][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.882117][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.882130][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.882149][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.892724][ T5625] Bluetooth: hci1: command tx timeout [ 90.894253][ T5629] Bluetooth: hci0: command tx timeout [ 90.902547][ T5625] Bluetooth: hci3: command tx timeout [ 90.948958][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.948970][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.948988][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.950963][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.950973][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.950991][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.965273][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.965313][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.965380][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.973362][ T5629] Bluetooth: hci4: command tx timeout [ 90.973660][ T5625] Bluetooth: hci2: command tx timeout [ 91.080582][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.080625][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.080704][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.140512][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.140528][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.140554][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.645676][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.645690][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.645710][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.650117][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.650130][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.650149][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.889404][ T5613] hsr_slave_0: entered promiscuous mode [ 91.891383][ T5613] hsr_slave_1: entered promiscuous mode [ 91.926001][ T5612] hsr_slave_0: entered promiscuous mode [ 91.927825][ T5612] hsr_slave_1: entered promiscuous mode [ 91.929325][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 91.929402][ T5612] Cannot create hsr debugfs directory [ 91.993473][ T37] cfg80211: failed to load regulatory.db [ 92.045667][ T5610] hsr_slave_0: entered promiscuous mode [ 92.047149][ T5610] hsr_slave_1: entered promiscuous mode [ 92.048437][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 92.048461][ T5610] Cannot create hsr debugfs directory [ 92.076085][ T5609] hsr_slave_0: entered promiscuous mode [ 92.077780][ T5609] hsr_slave_1: entered promiscuous mode [ 92.079112][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 92.079140][ T5609] Cannot create hsr debugfs directory [ 92.111177][ T5611] hsr_slave_0: entered promiscuous mode [ 92.116284][ T5611] hsr_slave_1: entered promiscuous mode [ 92.121861][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 92.121929][ T5611] Cannot create hsr debugfs directory [ 92.972675][ T60] Bluetooth: hci0: command tx timeout [ 92.972789][ T5629] Bluetooth: hci1: command tx timeout [ 92.972860][ T5625] Bluetooth: hci3: command tx timeout [ 93.052537][ T5629] Bluetooth: hci4: command tx timeout [ 93.052615][ T5625] Bluetooth: hci2: command tx timeout [ 93.291357][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.356852][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.368668][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.410553][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.420818][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.447349][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.473778][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.509140][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.646591][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.697064][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.710646][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.737174][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.743700][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.790690][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.821624][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.847728][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.984970][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.008816][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.031954][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.068382][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.071089][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.108202][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.142550][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.189181][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.405827][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.438758][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.457378][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.498597][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.518060][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.557897][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.611932][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.669293][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.770029][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.858523][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.886428][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.905301][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.946674][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.964756][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.010224][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.035237][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.052819][ T60] Bluetooth: hci0: command tx timeout [ 95.052868][ T5629] Bluetooth: hci1: command tx timeout [ 95.052907][ T5625] Bluetooth: hci3: command tx timeout [ 95.081469][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.116183][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.133817][ T5629] Bluetooth: hci4: command tx timeout [ 95.133861][ T5625] Bluetooth: hci2: command tx timeout [ 95.200749][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.201178][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.256702][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.313664][ T1463] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.313815][ T1463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.465837][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.504177][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.528971][ T1350] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.529474][ T1350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.601931][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.602060][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.696579][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.756515][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.756679][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.786014][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.860529][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.860752][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.041670][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.096368][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.123485][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.123608][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.213565][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.213807][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.320842][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.434350][ T1463] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.434558][ T1463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.535565][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.535762][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.924337][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.298215][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.559173][ T5613] veth0_vlan: entered promiscuous mode [ 97.726126][ T5613] veth1_vlan: entered promiscuous mode [ 97.858677][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.985374][ T5612] veth0_vlan: entered promiscuous mode [ 98.121212][ T5612] veth1_vlan: entered promiscuous mode [ 98.195267][ T5613] veth0_macvtap: entered promiscuous mode [ 98.285517][ T5613] veth1_macvtap: entered promiscuous mode [ 98.319968][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.445163][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.508868][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.525368][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.526896][ T5612] veth0_macvtap: entered promiscuous mode [ 98.598158][ T5612] veth1_macvtap: entered promiscuous mode [ 98.608802][ T1120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.628725][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.643375][ T1120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.675857][ T1120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.878426][ T5610] veth0_vlan: entered promiscuous mode [ 98.897994][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.931084][ T5609] veth0_vlan: entered promiscuous mode [ 99.079965][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.149833][ T5610] veth1_vlan: entered promiscuous mode [ 99.265430][ T5609] veth1_vlan: entered promiscuous mode [ 99.280190][ T1356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.323932][ T1356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.347913][ T1356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.392799][ T1356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.412218][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.412246][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.496232][ T5611] veth0_vlan: entered promiscuous mode [ 99.660962][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.660982][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.812226][ T5611] veth1_vlan: entered promiscuous mode [ 100.011353][ T5610] veth0_macvtap: entered promiscuous mode [ 100.058696][ T5609] veth0_macvtap: entered promiscuous mode [ 100.101167][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.101188][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.122629][ T5610] veth1_macvtap: entered promiscuous mode [ 100.151152][ T5609] veth1_macvtap: entered promiscuous mode [ 100.427593][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.427611][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.459558][ T5611] veth0_macvtap: entered promiscuous mode [ 100.500237][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.532889][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.570425][ T5611] veth1_macvtap: entered promiscuous mode [ 100.591235][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.609058][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.690965][ T1350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.708392][ T1350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.745030][ T1350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.778233][ T1350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.818038][ T1350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.859026][ T1350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.875646][ T1350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.911990][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.914499][ T1350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.102155][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.314860][ T1356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.375809][ T1463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.381492][ T1463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.415749][ T1463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220324][ T1350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.220345][ T1350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.585223][ T1394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.585244][ T1394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.789239][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.789260][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.889944][ T5828] loop0: detected capacity change from 0 to 2048 [ 104.216630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.216652][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.276371][ T5828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.440847][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.440874][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.684160][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.069055][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.069076][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.264626][ T5618] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.272092][ T5747] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.550394][ T5618] usb 3-1: Using ep0 maxpacket: 16 [ 106.565076][ T5747] usb 1-1: Using ep0 maxpacket: 16 [ 107.370926][ T5747] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 107.370956][ T5747] usb 1-1: config 0 has no interface number 0 [ 107.371001][ T5747] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 107.371026][ T5747] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 107.424068][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.449050][ T5618] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 107.449083][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.449104][ T5618] usb 3-1: Product: syz [ 107.449119][ T5618] usb 3-1: Manufacturer: syz [ 107.449136][ T5618] usb 3-1: SerialNumber: syz [ 107.555611][ T5747] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 107.555643][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.555663][ T5747] usb 1-1: Product: syz [ 107.555684][ T5747] usb 1-1: Manufacturer: syz [ 107.555699][ T5747] usb 1-1: SerialNumber: syz [ 107.721832][ T5747] usb 1-1: config 0 descriptor?? [ 107.730011][ T5618] usb 3-1: config 0 descriptor?? [ 107.757594][ T5842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 107.803789][ T5842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.031276][ T5618] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.031311][ T5618] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 108.116508][ T5842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.116637][ T5842] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.357582][ T5747] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 108.615763][ T5618] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 109.125450][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.129573][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 109.336698][ T10] usb 4-1: device descriptor read/64, error -32 [ 109.401730][ T5618] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.401827][ T5618] em28xx 3-1:0.0: board has no eeprom [ 109.564776][ T5618] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.564825][ T5618] em28xx 3-1:0.0: dvb set to bulk mode. [ 109.571818][ T5824] em28xx 3-1:0.0: Binding DVB extension [ 109.722663][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.934860][ T5746] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.945579][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 109.958741][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 109.958792][ T10] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 109.990671][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 109.990701][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 109.990719][ T10] usb 4-1: Product: syz [ 109.990732][ T10] usb 4-1: Manufacturer: syz [ 109.991248][ T5747] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.991275][ T5747] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 109.991908][ T5747] asix 1-1:0.34: probe with driver asix failed with error -71 [ 110.095189][ T5746] usb 2-1: device descriptor read/64, error -71 [ 110.377581][ T5618] usb 3-1: USB disconnect, device number 2 [ 110.393881][ T5746] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.411861][ T5747] usb 1-1: USB disconnect, device number 2 [ 110.572924][ T5746] usb 2-1: device descriptor read/64, error -71 [ 110.685205][ T5746] usb usb2-port1: attempt power cycle [ 110.962219][ T5618] em28xx 3-1:0.0: Disconnecting em28xx [ 110.970045][ T5824] em28xx 3-1:0.0: Registering input extension [ 110.995078][ T5618] em28xx 3-1:0.0: Closing input extension [ 111.302488][ T5746] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.325051][ T5746] usb 2-1: device descriptor read/8, error -71 [ 111.752993][ T5746] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.776448][ T5746] usb 2-1: device descriptor read/8, error -71 [ 112.423577][ T5746] usb usb2-port1: unable to enumerate USB device [ 112.424789][ T5618] em28xx 3-1:0.0: Freeing device [ 113.472479][ T5749] usb 4-1: USB disconnect, device number 3 [ 114.147046][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.147594][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.187730][ T5618] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.323134][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 114.325314][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.366544][ T10] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.366574][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.366655][ T10] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 114.366674][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.440908][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.440938][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.440974][ T9] usb 2-1: Product: syz [ 114.441041][ T9] usb 2-1: Manufacturer: syz [ 114.441070][ T9] usb 2-1: SerialNumber: syz [ 114.562653][ T10] usb 5-1: config 0 descriptor?? [ 114.565640][ T9] usb 2-1: config 0 descriptor?? [ 114.891928][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.891965][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 114.929950][ T5618] usb 3-1: Using ep0 maxpacket: 8 [ 114.944585][ T5618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.944611][ T5618] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.978606][ T5618] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 114.978631][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.978649][ T5618] usb 3-1: Product: syz [ 114.978662][ T5618] usb 3-1: Manufacturer: syz [ 114.978674][ T5618] usb 3-1: SerialNumber: syz [ 115.024510][ T5618] usb 3-1: config 0 descriptor?? [ 115.293158][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.365442][ T9] em28xx 2-1:0.0: chip ID is em2765 [ 115.445063][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 115.445316][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.470398][ T5860] usb 1-1: device descriptor read/64, error -71 [ 115.536299][ T10] usb 5-1: USB disconnect, device number 2 [ 115.702911][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.833945][ T5860] usb 1-1: device descriptor read/64, error -71 [ 116.101067][ T5860] usb usb1-port1: attempt power cycle [ 116.864692][ T5862] usb 3-1: USB disconnect, device number 3 [ 116.903126][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.903158][ T9] em28xx 2-1:0.0: board has no eeprom [ 117.033241][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 117.033271][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 117.060669][ T5860] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.075679][ T5860] usb 1-1: device descriptor read/8, error -71 [ 118.050494][ T5749] em28xx 2-1:0.0: Binding DVB extension [ 118.185962][ T9] usb 2-1: USB disconnect, device number 6 [ 118.249557][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 118.461515][ T5749] em28xx 2-1:0.0: Registering input extension [ 118.470743][ T9] em28xx 2-1:0.0: Closing input extension [ 118.647106][ T5618] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.615179][ T5877] IPVS: starting estimator thread 0... [ 119.637085][ T9] em28xx 2-1:0.0: Freeing device [ 119.763656][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 119.782421][ T5877] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.830669][ T5618] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 119.830724][ T5618] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.858225][ T5618] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.858274][ T5618] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 119.858296][ T5618] usb 5-1: Product: syz [ 119.858311][ T5618] usb 5-1: Manufacturer: syz [ 119.964075][ T5956] IPVS: using max 8 ests per chain, 19200 per kthread [ 119.979566][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 119.984099][ T5877] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.002903][ T5877] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 120.002932][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.002950][ T5877] usb 4-1: Product: syz [ 120.002964][ T5877] usb 4-1: Manufacturer: syz [ 120.002978][ T5877] usb 4-1: SerialNumber: syz [ 120.069813][ T5618] hub 5-1:4.0: bad descriptor, ignoring hub [ 120.069853][ T5618] hub 5-1:4.0: probe with driver hub failed with error -5 [ 120.090921][ T5877] usb 4-1: config 0 descriptor?? [ 120.124918][ T5618] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 120.392400][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.553340][ T5860] usb 3-1: no configurations [ 120.553361][ T5860] usb 3-1: can't read configurations, error -22 [ 120.682449][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.843745][ T5860] usb 3-1: no configurations [ 120.843767][ T5860] usb 3-1: can't read configurations, error -22 [ 120.844089][ T5860] usb usb3-port1: attempt power cycle [ 120.872486][ T5746] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.032391][ T5746] usb 1-1: Using ep0 maxpacket: 16 [ 121.051274][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.068586][ T5746] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.068606][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.068619][ T5746] usb 1-1: Product: syz [ 121.068673][ T5746] usb 1-1: Manufacturer: syz [ 121.068683][ T5746] usb 1-1: SerialNumber: syz [ 121.113875][ T5746] usb 1-1: config 0 descriptor?? [ 121.156074][ T5746] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.156099][ T5746] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 121.202480][ T5860] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.237117][ T5860] usb 3-1: no configurations [ 121.237131][ T5860] usb 3-1: can't read configurations, error -22 [ 121.442503][ T5860] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.466995][ T5860] usb 3-1: no configurations [ 121.467010][ T5860] usb 3-1: can't read configurations, error -22 [ 121.469232][ T5860] usb usb3-port1: unable to enumerate USB device [ 121.574243][ T5862] usb 5-1: USB disconnect, device number 3 [ 121.775300][ T5746] em28xx 1-1:0.0: chip ID is em2765 [ 121.845677][ T5862] usb 4-1: USB disconnect, device number 4 [ 121.921347][ T5979] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 123.350559][ T5746] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 123.350597][ T5746] em28xx 1-1:0.0: board has no eeprom [ 123.482598][ T5746] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 123.482628][ T5746] em28xx 1-1:0.0: dvb set to bulk mode. [ 123.483009][ T10] em28xx 1-1:0.0: Binding DVB extension [ 123.574477][ T5746] usb 1-1: USB disconnect, device number 7 [ 123.629101][ T5746] em28xx 1-1:0.0: Disconnecting em28xx [ 124.710308][ T10] em28xx 1-1:0.0: Registering input extension [ 124.711548][ T5746] em28xx 1-1:0.0: Closing input extension [ 124.953077][ T5746] em28xx 1-1:0.0: Freeing device [ 127.227851][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 128.982431][ T5877] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.981891][ T6030] loop2: detected capacity change from 0 to 4096 [ 130.344025][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.333921][ T32] usb 5-1: no configurations [ 131.333939][ T32] usb 5-1: can't read configurations, error -22 [ 131.369935][ T6036] Zero length message leads to an empty skb [ 131.459258][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.463213][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.569988][ T38] audit: type=1800 audit(1778015089.334:2): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 131.674912][ T32] usb 5-1: no configurations [ 131.674949][ T32] usb 5-1: can't read configurations, error -22 [ 131.678327][ T32] usb usb5-port1: attempt power cycle [ 132.052421][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.072489][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.106746][ T32] usb 5-1: no configurations [ 132.106766][ T32] usb 5-1: can't read configurations, error -22 [ 132.196757][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.211477][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 132.218246][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.231947][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.231979][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.232001][ T5877] usb 4-1: Product: syz [ 132.232016][ T5877] usb 4-1: Manufacturer: syz [ 132.232031][ T5877] usb 4-1: SerialNumber: syz [ 132.247792][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.332111][ T32] usb 5-1: device descriptor read/8, error -71 [ 132.340927][ T5877] usb 4-1: config 0 descriptor?? [ 132.378235][ T5877] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.378270][ T5877] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 132.443250][ T32] usb usb5-port1: unable to enumerate USB device [ 132.610896][ T6046] capability: warning: `syz.0.81' uses deprecated v2 capabilities in a way that may be insecure [ 132.872070][ T6049] syz.1.83 uses obsolete (PF_INET,SOCK_PACKET) [ 132.881845][ T6049] syzkaller1: entered promiscuous mode [ 132.881931][ T6049] syzkaller1: entered allmulticast mode [ 132.939694][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955834][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.018209][ T5877] em28xx 4-1:0.0: chip ID is em2765 [ 133.166057][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.312437][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 133.339374][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.356571][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 133.356600][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.356619][ T9] usb 1-1: Product: syz [ 133.356633][ T9] usb 1-1: Manufacturer: syz [ 133.356647][ T9] usb 1-1: SerialNumber: syz [ 133.396439][ T9] usb 1-1: config 0 descriptor?? [ 133.406222][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.454499][ T5618] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 133.493956][ T5877] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 133.493978][ T5877] em28xx 4-1:0.0: board has no eeprom [ 133.562464][ T5877] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 133.562496][ T5877] em28xx 4-1:0.0: dvb set to bulk mode. [ 133.565350][ T5598] em28xx 4-1:0.0: Binding DVB extension [ 133.597452][ T5618] usb 5-1: device descriptor read/64, error -71 [ 133.617550][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 133.620030][ T32] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 133.620078][ T32] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.656118][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 133.656146][ T32] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 133.656166][ T32] usb 3-1: Product: syz [ 133.656179][ T32] usb 3-1: Manufacturer: syz [ 133.705134][ T5877] usb 4-1: USB disconnect, device number 5 [ 133.723956][ T6063] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.730701][ T5877] em28xx 4-1:0.0: Disconnecting em28xx [ 133.766568][ T32] hub 3-1:4.0: bad descriptor, ignoring hub [ 133.766602][ T32] hub 3-1:4.0: probe with driver hub failed with error -5 [ 133.787837][ T32] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 133.821138][ T5598] em28xx 4-1:0.0: Registering input extension [ 133.821971][ T5877] em28xx 4-1:0.0: Closing input extension [ 133.865765][ T5618] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.923967][ T5877] em28xx 4-1:0.0: Freeing device [ 134.002501][ T5618] usb 5-1: device descriptor read/64, error -71 [ 134.126021][ T5618] usb usb5-port1: attempt power cycle [ 134.472427][ T5618] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.493309][ T5618] usb 5-1: device descriptor read/8, error -71 [ 134.508675][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.602523][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.672441][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 134.674849][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.674878][ T5877] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 134.674894][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.682993][ T5877] usb 2-1: config 0 descriptor?? [ 134.755563][ T9] usb 4-1: no configurations [ 134.755583][ T9] usb 4-1: can't read configurations, error -22 [ 134.792867][ T5618] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.825518][ T5618] usb 5-1: device descriptor read/8, error -71 [ 134.882485][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.943089][ T5618] usb usb5-port1: unable to enumerate USB device [ 135.033360][ T9] usb 4-1: no configurations [ 135.033380][ T9] usb 4-1: can't read configurations, error -22 [ 135.033810][ T9] usb usb4-port1: attempt power cycle [ 135.330773][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 135.330879][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.367272][ T5877] usb 2-1: USB disconnect, device number 8 [ 135.383174][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 135.414529][ T9] usb 4-1: no configurations [ 135.414550][ T9] usb 4-1: can't read configurations, error -22 [ 135.562550][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 135.583864][ T9] usb 4-1: no configurations [ 135.583878][ T9] usb 4-1: can't read configurations, error -22 [ 135.587962][ T9] usb usb4-port1: unable to enumerate USB device [ 135.903672][ T9] usb 1-1: USB disconnect, device number 8 [ 136.809051][ T9] usb 3-1: USB disconnect, device number 8 [ 137.365761][ T6091] loop4: detected capacity change from 0 to 128 [ 137.389844][ T6095] loop2: detected capacity change from 0 to 1024 [ 137.511164][ T6095] ======================================================= [ 137.511164][ T6095] WARNING: The mand mount option has been deprecated and [ 137.511164][ T6095] and is ignored by this kernel. Remove the mand [ 137.511164][ T6095] option from the mount to silence this warning. [ 137.511164][ T6095] ======================================================= [ 137.882318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.922308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.932301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.942313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.952302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.962299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.972300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.982302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.992302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.002311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.613832][ T6095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.647594][ T6095] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.814307][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.102'. [ 138.962216][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 139.377410][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.963589][ T5824] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.173300][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.287191][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 140.335878][ T10] usb 1-1: device descriptor read/64, error -71 [ 140.443598][ T5824] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.443638][ T5824] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 140.443661][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.484646][ T5824] usb 5-1: config 0 descriptor?? [ 140.499578][ T5877] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.594155][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.642386][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 140.651890][ T5877] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 140.651921][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.652087][ T5877] usb 2-1: Product: syz [ 140.652156][ T5877] usb 2-1: Manufacturer: syz [ 140.652173][ T5877] usb 2-1: SerialNumber: syz [ 140.704403][ T5877] usb 2-1: config 0 descriptor?? [ 140.722600][ T10] usb 1-1: device descriptor read/64, error -71 [ 140.843520][ T10] usb usb1-port1: attempt power cycle [ 141.158608][ T5824] usbhid 5-1:0.0: can't add hid device: -71 [ 141.158705][ T5824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.199950][ T5877] usb read operation failed. (-32) [ 141.218360][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 141.233259][ T10] usb 1-1: device descriptor read/8, error -71 [ 141.270531][ T5824] usb 5-1: USB disconnect, device number 12 [ 141.482461][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 141.513879][ T10] usb 1-1: device descriptor read/8, error -71 [ 141.610886][ T5877] usb write operation failed. (-71) [ 141.610908][ T5877] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 141.632942][ T10] usb usb1-port1: unable to enumerate USB device [ 141.673839][ T5877] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 141.673859][ T5877] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 143.885874][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 144.092619][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 144.108162][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.108201][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.108234][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.167488][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.167532][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.167566][ T10] usb 3-1: Product: syz [ 144.167593][ T10] usb 3-1: Manufacturer: syz [ 144.167620][ T10] usb 3-1: SerialNumber: syz [ 144.351701][ T10] usb 3-1: 0:2 : does not exist [ 145.512463][ T5862] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.672349][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 145.724394][ T5862] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 145.726070][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.726094][ T5862] usb 1-1: Product: syz [ 145.726110][ T5862] usb 1-1: Manufacturer: syz [ 145.726125][ T5862] usb 1-1: SerialNumber: syz [ 145.788527][ T5862] usb 1-1: config 0 descriptor?? [ 146.028154][ T5862] usb read operation failed. (-32) [ 146.048429][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 146.048892][ T6181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.115'. [ 146.107503][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 146.441770][ T5862] usb write operation failed. (-71) [ 146.441793][ T5862] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 146.733709][ T5618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.831303][ T37] usb 3-1: USB disconnect, device number 9 [ 146.863837][ T5618] usb 5-1: device descriptor read/64, error -71 [ 147.122454][ T5618] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 147.258748][ T5618] usb 5-1: device descriptor read/64, error -71 [ 147.369838][ T5618] usb usb5-port1: attempt power cycle [ 148.052454][ T5618] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.074280][ T5618] usb 5-1: device descriptor read/8, error -71 [ 148.313766][ T5618] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 148.361541][ T5618] usb 5-1: device descriptor read/8, error -71 [ 148.478829][ T5618] usb usb5-port1: unable to enumerate USB device [ 150.771470][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.892252][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.007155][ T5746] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 151.024907][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 151.033723][ T37] usb 3-1: no configurations [ 151.033736][ T37] usb 3-1: can't read configurations, error -22 [ 151.061764][ T9] usb 4-1: device descriptor read/64, error -71 [ 151.220446][ T5746] usb 5-1: Using ep0 maxpacket: 16 [ 151.288945][ T5746] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 151.288987][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.289023][ T5746] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.339023][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.355028][ T37] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.357742][ T5746] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.357785][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.357811][ T5746] usb 5-1: Product: syz [ 151.357822][ T5746] usb 5-1: Manufacturer: syz [ 151.357832][ T5746] usb 5-1: SerialNumber: syz [ 151.442781][ T5746] usb 5-1: 0:2 : does not exist [ 151.508810][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 151.510193][ T37] usb 3-1: no configurations [ 151.510210][ T37] usb 3-1: can't read configurations, error -22 [ 151.512440][ T37] usb usb3-port1: attempt power cycle [ 151.541454][ T9] usb 4-1: device descriptor read/64, error -71 [ 151.659983][ T9] usb usb4-port1: attempt power cycle [ 151.872445][ T37] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.894220][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 151.898600][ T37] usb 3-1: no configurations [ 151.898618][ T37] usb 3-1: can't read configurations, error -22 [ 152.043093][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.044210][ T37] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.069839][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 152.070581][ T37] usb 3-1: no configurations [ 152.070591][ T37] usb 3-1: can't read configurations, error -22 [ 152.070972][ T37] usb usb3-port1: unable to enumerate USB device [ 152.099334][ T9] usb 4-1: device descriptor read/8, error -71 [ 152.352991][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.374913][ T9] usb 4-1: device descriptor read/8, error -71 [ 152.494602][ T9] usb usb4-port1: unable to enumerate USB device [ 152.613936][ T6257] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 152.657714][ T6257] bond1 (unregistering): Released all slaves [ 153.285906][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.469163][ T9] usb 3-1: no configurations [ 153.469177][ T9] usb 3-1: can't read configurations, error -22 [ 153.614023][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 153.786543][ T9] usb 3-1: no configurations [ 153.786558][ T9] usb 3-1: can't read configurations, error -22 [ 153.786911][ T9] usb usb3-port1: attempt power cycle [ 155.202459][ T37] usb 5-1: USB disconnect, device number 17 [ 155.399885][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 155.424318][ T9] usb 3-1: no configurations [ 155.424334][ T9] usb 3-1: can't read configurations, error -22 [ 155.563348][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 155.590138][ T9] usb 3-1: no configurations [ 155.590157][ T9] usb 3-1: can't read configurations, error -22 [ 155.597438][ T9] usb usb3-port1: unable to enumerate USB device [ 158.209287][ T5860] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 158.380268][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 158.383298][ T5860] usb 3-1: config 0 has no interfaces? [ 158.383324][ T5860] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.383340][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.447087][ T5860] usb 3-1: config 0 descriptor?? [ 159.773267][ T5748] usb 3-1: USB disconnect, device number 18 [ 160.753164][ T5860] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.936996][ T5860] usb 3-1: no configurations [ 160.937010][ T5860] usb 3-1: can't read configurations, error -22 [ 161.094275][ T5860] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 161.266090][ T5860] usb 3-1: no configurations [ 161.266109][ T5860] usb 3-1: can't read configurations, error -22 [ 161.268031][ T5860] usb usb3-port1: attempt power cycle [ 161.639307][ T5860] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 161.689971][ T5860] usb 3-1: no configurations [ 161.689986][ T5860] usb 3-1: can't read configurations, error -22 [ 161.836581][ T5860] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 161.876840][ T5860] usb 3-1: no configurations [ 161.876853][ T5860] usb 3-1: can't read configurations, error -22 [ 161.878863][ T5860] usb usb3-port1: unable to enumerate USB device [ 161.879425][ T6330] loop4: detected capacity change from 0 to 2048 [ 162.035856][ T6332] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 162.193454][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.752863][ T6342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.931360][ T6342] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 162.931409][ T6342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 162.931409][ T6342] [ 162.931425][ T6342] EXT4-fs (loop4): Total free blocks count 0 [ 162.931440][ T6342] EXT4-fs (loop4): Free/Dirty block details [ 162.931481][ T6342] EXT4-fs (loop4): free_blocks=2415919104 [ 162.931515][ T6342] EXT4-fs (loop4): dirty_blocks=32 [ 162.931529][ T6342] EXT4-fs (loop4): Block reservation details [ 162.931542][ T6342] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 163.020027][ T6342] EXT4-fs error (device loop4) in ext4_setattr:6120: error 28 [ 163.450170][ T1463] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 163.521998][ T5610] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 164.505431][ T6359] loop4: detected capacity change from 0 to 1024 [ 164.935469][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.109185][ T38] audit: type=1800 audit(1778015124.638:3): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.177" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 168.484627][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.020046][ T6388] netlink: 164 bytes leftover after parsing attributes in process `syz.3.188'. [ 171.065158][ T6396] veth0_to_team: entered promiscuous mode [ 173.051981][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.221261][ T6414] syzkaller0: entered promiscuous mode [ 173.221279][ T6414] syzkaller0: entered allmulticast mode [ 173.235609][ T5746] usb 4-1: no configurations [ 173.235629][ T5746] usb 4-1: can't read configurations, error -22 [ 173.472430][ T5746] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 173.673154][ T5746] usb 4-1: no configurations [ 173.673173][ T5746] usb 4-1: can't read configurations, error -22 [ 173.772250][ T5746] usb usb4-port1: attempt power cycle [ 175.043013][ T6425] netlink: 'syz.4.200': attribute type 4 has an invalid length. [ 175.296123][ T5746] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.545097][ T5746] usb 4-1: device not accepting address 16, error -71 [ 176.677578][ T6438] loop3: detected capacity change from 0 to 128 [ 178.071180][ T6444] syz.1.207 (6444) used greatest stack depth: 17144 bytes left [ 178.429184][ T37] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 180.276555][ T37] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.095231][ T37] usb 5-1: string descriptor 0 read error: -71 [ 183.095386][ T37] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.095412][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.208665][ T37] usb 5-1: config 0 descriptor?? [ 183.209125][ T37] usb 5-1: can't set config #0, error -71 [ 183.229698][ T37] usb 5-1: USB disconnect, device number 18 [ 187.807662][ T6493] loop2: detected capacity change from 0 to 128 [ 187.818529][ T5625] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 195.085262][ T6524] netlink: 264 bytes leftover after parsing attributes in process `syz.1.227'. [ 195.085293][ T6524] netlink: 264 bytes leftover after parsing attributes in process `syz.1.227'. [ 197.427142][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.432917][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.555309][ T6539] loop0: detected capacity change from 0 to 128 [ 203.492473][ T6557] netlink: 264 bytes leftover after parsing attributes in process `syz.2.239'. [ 203.492494][ T6557] netlink: 264 bytes leftover after parsing attributes in process `syz.2.239'. [ 205.143846][ T6570] loop1: detected capacity change from 0 to 128 [ 205.483055][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.515216][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.522909][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.930173][ T5629] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 208.984502][ T5862] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 208.984635][ T5862] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 209.140768][ T5625] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 209.140883][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.219817][ T5862] usb 1-1: USB disconnect, device number 13 [ 209.494523][ T5877] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 209.494628][ T5877] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 209.689192][ T5877] usb 2-1: USB disconnect, device number 9 [ 210.431751][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 210.625848][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 210.631930][ T5862] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.663103][ T5862] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.663123][ T5862] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 210.663137][ T5862] usb 1-1: Product: syz [ 210.663146][ T5862] usb 1-1: Manufacturer: syz [ 210.760856][ T5862] hub 1-1:4.0: bad descriptor, ignoring hub [ 210.760884][ T5862] hub 1-1:4.0: probe with driver hub failed with error -5 [ 210.788237][ T5862] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 211.316465][ T6564] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 212.939829][ T5824] usb 1-1: USB disconnect, device number 14 [ 213.151882][ T6606] loop1: detected capacity change from 0 to 128 [ 218.613559][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 218.613596][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 219.364275][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.395368][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.402414][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.430927][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.432997][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.235354][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 221.235393][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 221.235494][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 221.554369][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.607270][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.608660][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.637726][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.640483][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.763029][ T5620] Bluetooth: hci5: command tx timeout [ 223.897101][ T6649] veth0_to_team: entered promiscuous mode [ 223.993176][ T5620] Bluetooth: hci5: command tx timeout [ 224.070703][ T5620] Bluetooth: hci4: command tx timeout [ 224.175107][ T5824] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.344877][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 224.347260][ T5824] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.349099][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.349124][ T5824] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 224.349145][ T5824] usb 3-1: Product: syz [ 224.349154][ T5824] usb 3-1: Manufacturer: syz [ 224.425658][ T5824] hub 3-1:4.0: bad descriptor, ignoring hub [ 224.425685][ T5824] hub 3-1:4.0: probe with driver hub failed with error -5 [ 224.446192][ T5824] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 224.702893][ T1350] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.234491][ T60] Bluetooth: hci5: command tx timeout [ 226.325001][ T60] Bluetooth: hci4: command tx timeout [ 226.675406][ T1350] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.145667][ T1350] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.188697][ T5824] usb 3-1: USB disconnect, device number 23 [ 227.427492][ T6674] loop0: detected capacity change from 0 to 128 [ 228.523417][ T60] Bluetooth: hci5: command tx timeout [ 228.528024][ T5620] Bluetooth: hci4: command tx timeout [ 231.242831][ T5620] Bluetooth: hci4: command tx timeout [ 234.130819][ T1350] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.108641][ T6724] loop0: detected capacity change from 0 to 128 [ 242.500809][ T1350] bridge_slave_1: left allmulticast mode [ 242.500971][ T1350] bridge_slave_1: left promiscuous mode [ 242.520753][ T1350] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.738089][ T1350] bridge_slave_0: left allmulticast mode [ 242.738126][ T1350] bridge_slave_0: left promiscuous mode [ 242.738459][ T1350] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.585494][ T6763] loop0: detected capacity change from 0 to 128 [ 250.689075][ T1350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.795482][ T1350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.023315][ T1350] bond0 (unregistering): Released all slaves [ 257.431214][ T6834] netlink: 264 bytes leftover after parsing attributes in process `syz.2.309'. [ 257.431237][ T6834] netlink: 264 bytes leftover after parsing attributes in process `syz.2.309'. [ 258.008437][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.009769][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 263.864497][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.864578][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.376446][ T1350] hsr_slave_0: left promiscuous mode [ 264.430233][ T1350] hsr_slave_1: left promiscuous mode [ 264.442939][ T1350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.443006][ T1350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.615658][ T1350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.615686][ T1350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.973988][ T1350] veth1_macvtap: left promiscuous mode [ 264.974248][ T1350] veth0_macvtap: left promiscuous mode [ 264.974584][ T1350] veth1_vlan: left promiscuous mode [ 265.035270][ T1350] veth0_vlan: left promiscuous mode [ 265.872570][ T5860] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 266.043870][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 266.046506][ T5860] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 266.046525][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.046542][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.049549][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.049578][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.049599][ T5860] usb 1-1: Product: syz [ 266.049615][ T5860] usb 1-1: Manufacturer: syz [ 266.049630][ T5860] usb 1-1: SerialNumber: syz [ 266.139533][ T5860] usb 1-1: 0:2 : does not exist [ 266.266925][ T1350] team0 (unregistering): Port device team_slave_1 removed [ 266.332387][ T1350] team0 (unregistering): Port device team_slave_0 removed [ 266.697845][ T6883] veth0_to_team: entered promiscuous mode [ 266.728908][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 266.847445][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.853713][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.855697][ T6614] bridge_slave_0: entered allmulticast mode [ 266.891636][ T6614] bridge_slave_0: entered promiscuous mode [ 266.927222][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.943783][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.964754][ T6627] bridge_slave_0: entered allmulticast mode [ 266.987436][ T6627] bridge_slave_0: entered promiscuous mode [ 267.034739][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.035123][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.035463][ T6614] bridge_slave_1: entered allmulticast mode [ 267.062312][ T6614] bridge_slave_1: entered promiscuous mode [ 267.091029][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.091381][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.091803][ T6627] bridge_slave_1: entered allmulticast mode [ 267.122789][ T6627] bridge_slave_1: entered promiscuous mode [ 267.404326][ T5860] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 267.406276][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.041290][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.070004][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.032992][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.463823][ T5860] usb 1-1: USB disconnect, device number 15 [ 271.671069][ T6614] team0: Port device team_slave_0 added [ 271.715422][ T6627] team0: Port device team_slave_0 added [ 271.775386][ T6614] team0: Port device team_slave_1 added [ 271.803842][ T6627] team0: Port device team_slave_1 added [ 272.252592][ T6933] netlink: 164 bytes leftover after parsing attributes in process `syz.2.335'. [ 272.706099][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.706116][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.706143][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.755807][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.755820][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.755840][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.858633][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 273.047174][ T5860] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.063418][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.063431][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.063450][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.231655][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 274.234209][ T5860] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 274.234229][ T5860] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.234248][ T5860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.237188][ T5860] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.237259][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.237311][ T5860] usb 3-1: Product: syz [ 274.237347][ T5860] usb 3-1: Manufacturer: syz [ 274.237387][ T5860] usb 3-1: SerialNumber: syz [ 274.296779][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.296819][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.296912][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.420947][ T5860] usb 3-1: 0:2 : does not exist [ 275.129907][ T6922] [ 275.129918][ T6922] ====================================================== [ 275.129926][ T6922] WARNING: possible circular locking dependency detected [ 275.129943][ T6922] syzkaller #0 Not tainted [ 275.129953][ T6922] ------------------------------------------------------ [ 275.129979][ T6922] syz.0.332/6922 is trying to acquire lock: [ 275.129991][ T6922] ffff888029d2ab70 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 275.130051][ T6922] [ 275.130051][ T6922] but task is already holding lock: [ 275.130058][ T6922] ffff88804f894f98 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 275.130105][ T6922] [ 275.130105][ T6922] which lock already depends on the new lock. [ 275.130105][ T6922] [ 275.130113][ T6922] [ 275.130113][ T6922] the existing dependency chain (in reverse order) is: [ 275.130121][ T6922] [ 275.130121][ T6922] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 275.130153][ T6922] lock_sock_nested+0x41/0x130 [ 275.130179][ T6922] smc_listen_out+0x109/0x3e0 [ 275.130199][ T6922] smc_listen_work+0x813/0x13f0 [ 275.130221][ T6922] process_one_work+0x9a3/0x1710 [ 275.130244][ T6922] worker_thread+0xba8/0x11e0 [ 275.130267][ T6922] kthread+0x388/0x470 [ 275.130296][ T6922] ret_from_fork+0x514/0xb70 [ 275.130319][ T6922] ret_from_fork_asm+0x1a/0x30 [ 275.130346][ T6922] [ 275.130346][ T6922] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 275.130376][ T6922] __lock_acquire+0x15a5/0x2d10 [ 275.130405][ T6922] lock_acquire+0x106/0x350 [ 275.130441][ T6922] __flush_work+0x6df/0xda0 [ 275.130468][ T6922] __cancel_work_sync+0xbe/0x110 [ 275.130494][ T6922] smc_clcsock_release+0x60/0xf0 [ 275.130518][ T6922] __smc_release+0x6a0/0x810 [ 275.130534][ T6922] smc_close_non_accepted+0xd5/0x1f0 [ 275.130553][ T6922] smc_close_active+0xb9b/0xf40 [ 275.130577][ T6922] __smc_release+0xa0/0x810 [ 275.130594][ T6922] smc_release+0x2eb/0x5a0 [ 275.130611][ T6922] __sock_release+0xb9/0x250 [ 275.130634][ T6922] sock_close+0x1c/0x30 [ 275.130657][ T6922] __fput+0x461/0xa70 [ 275.130676][ T6922] task_work_run+0x1d9/0x270 [ 275.130693][ T6922] exit_to_user_mode_loop+0xed/0x480 [ 275.130721][ T6922] do_syscall_64+0x33e/0xf80 [ 275.130743][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.130763][ T6922] [ 275.130763][ T6922] other info that might help us debug this: [ 275.130763][ T6922] [ 275.130770][ T6922] Possible unsafe locking scenario: [ 275.130770][ T6922] [ 275.130776][ T6922] CPU0 CPU1 [ 275.130783][ T6922] ---- ---- [ 275.130789][ T6922] lock(sk_lock-AF_SMC/1); [ 275.130809][ T6922] lock((work_completion)(&new_smc->smc_listen_work)); [ 275.130825][ T6922] lock(sk_lock-AF_SMC/1); [ 275.130845][ T6922] lock((work_completion)(&new_smc->smc_listen_work)); [ 275.130859][ T6922] [ 275.130859][ T6922] *** DEADLOCK *** [ 275.130859][ T6922] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.130863][ T6922] 3 locks held by syz.0.332/6922: [ 275.130874][ T6922] #0: ffff88806343ab38 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 275.130934][ T6922] #1: ffff88804f894f98 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 275.130982][ T6922] #2: ffffffff8dfc8200 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 275.131029][ T6922] [ 275.131029][ T6922] stack backtrace: [ 275.131070][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.131098][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.131118][ T6922] Call Trace: [ 275.131126][ T6922] [ 275.131134][ T6922] dump_stack_lvl+0xe8/0x150 [ 275.131162][ T6922] print_circular_bug+0x2e1/0x300 [ 275.131186][ T6922] check_noncircular+0x12e/0x150 [ 275.131212][ T6922] __lock_acquire+0x15a5/0x2d10 [ 275.131256][ T6922] ? do_raw_spin_lock+0x12b/0x2f0 [ 275.131285][ T6922] ? do_raw_spin_unlock+0xf5/0x210 [ 275.131330][ T6922] ? __flush_work+0x104/0xda0 [ 275.131358][ T6922] lock_acquire+0x106/0x350 [ 275.131386][ T6922] ? __flush_work+0x104/0xda0 [ 275.131417][ T6922] ? __flush_work+0x104/0xda0 [ 275.131453][ T6922] __flush_work+0x6df/0xda0 [ 275.131481][ T6922] ? __flush_work+0x104/0xda0 [ 275.131508][ T6922] ? __flush_work+0x104/0xda0 [ 275.131542][ T6922] ? __pfx___flush_work+0x10/0x10 [ 275.131570][ T6922] ? __pfx_wq_barrier_func+0x10/0x10 [ 275.131606][ T6922] ? __cancel_work_sync+0x5c/0x110 [ 275.131634][ T6922] __cancel_work_sync+0xbe/0x110 [ 275.131682][ T6922] smc_clcsock_release+0x60/0xf0 [ 275.131710][ T6922] __smc_release+0x6a0/0x810 [ 275.131729][ T6922] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.131756][ T6922] smc_close_non_accepted+0xd5/0x1f0 [ 275.131779][ T6922] smc_close_active+0xb9b/0xf40 [ 275.131806][ T6922] ? smc_close_active+0x420/0xf40 [ 275.131831][ T6922] ? __pfx_sock_def_readable+0x10/0x10 [ 275.131859][ T6922] __smc_release+0xa0/0x810 [ 275.131878][ T6922] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 275.131907][ T6922] smc_release+0x2eb/0x5a0 [ 275.131929][ T6922] __sock_release+0xb9/0x250 [ 275.131956][ T6922] ? __pfx_sock_close+0x10/0x10 [ 275.131982][ T6922] sock_close+0x1c/0x30 [ 275.132006][ T6922] __fput+0x461/0xa70 [ 275.132034][ T6922] task_work_run+0x1d9/0x270 [ 275.132057][ T6922] ? __pfx_task_work_run+0x10/0x10 [ 275.132081][ T6922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.132103][ T6922] exit_to_user_mode_loop+0xed/0x480 [ 275.132131][ T6922] ? rcu_is_watching+0x15/0xb0 [ 275.132152][ T6922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.132175][ T6922] do_syscall_64+0x33e/0xf80 [ 275.132199][ T6922] ? trace_irq_disable+0x3b/0x140 [ 275.132227][ T6922] ? clear_bhb_loop+0x40/0x90 [ 275.132252][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.132274][ T6922] RIP: 0033:0x7f1c5654cdd9 [ 275.132304][ T6922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.132322][ T6922] RSP: 002b:00007ffceb2a9d18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 275.132344][ T6922] RAX: 0000000000000000 RBX: 00007f1c567c7da0 RCX: 00007f1c5654cdd9 [ 275.132359][ T6922] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 275.132373][ T6922] RBP: 00007f1c567c7da0 R08: 0000000000000006 R09: 0000000000000000 [ 275.132387][ T6922] R10: 00007f1c567c7cb0 R11: 0000000000000246 R12: 0000000000040f9f [ 275.132402][ T6922] R13: 00007f1c567c618c R14: 0000000000040f52 R15: 00007f1c567c6180 [ 275.132430][ T6922] [ 275.764910][ T5860] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 275.954352][ T6614] hsr_slave_0: entered promiscuous mode [ 275.958135][ T6614] hsr_slave_1: entered promiscuous mode [ 276.011387][ T5860] usb 3-1: USB disconnect, device number 24 [ 276.092328][ T6769] udevd[6769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.255431][ T1350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.507190][ T1350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.295821][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 277.680604][ T1350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.128982][ T1350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.705125][ T1350] bridge_slave_1: left allmulticast mode [ 278.705147][ T1350] bridge_slave_1: left promiscuous mode [ 278.705292][ T1350] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.769654][ T1350] bridge_slave_0: left allmulticast mode [ 278.769681][ T1350] bridge_slave_0: left promiscuous mode [ 278.769818][ T1350] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.410599][ T1350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.475457][ T1350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.518711][ T1350] bond0 (unregistering): Released all slaves [ 279.540767][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.064691][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 280.491895][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 280.724503][ T1350] hsr_slave_0: left promiscuous mode [ 280.767254][ T1350] hsr_slave_1: left promiscuous mode [ 280.767807][ T1350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.767820][ T1350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.821335][ T1350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.821356][ T1350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.885193][ T1350] veth1_macvtap: left promiscuous mode [ 280.885236][ T1350] veth0_macvtap: left promiscuous mode [ 280.885349][ T1350] veth1_vlan: left promiscuous mode [ 280.885420][ T1350] veth0_vlan: left promiscuous mode [ 281.440839][ T1350] team0 (unregistering): Port device team_slave_1 removed [ 281.483545][ T1350] team0 (unregistering): Port device team_slave_0 removed [ 281.593336][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 281.963245][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 282.702831][ T1350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.906177][ T1350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.130338][ T1350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.354373][ T1350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.653690][ T1350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.899913][ T1350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.977115][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 284.156139][ T1350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.391737][ T1350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.446547][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 284.967057][ T1350] bridge_slave_1: left allmulticast mode [ 284.967078][ T1350] bridge_slave_1: left promiscuous mode [ 284.967212][ T1350] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.053411][ T1350] bridge_slave_0: left allmulticast mode [ 285.053432][ T1350] bridge_slave_0: left promiscuous mode [ 285.053550][ T1350] bridge0: port 1(bridge_slave_0) entered disabled state