last executing test programs: 12m49.053209586s ago: executing program 4 (id=4183): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) 12m43.653162784s ago: executing program 4 (id=4190): syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4262e24c1fed8c0f65b528f05ad"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 12m37.711728142s ago: executing program 4 (id=4199): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r3 = io_uring_setup(0x350, &(0x7f0000000580)={0x0, 0x826f, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x48}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) 12m35.504913455s ago: executing program 4 (id=4203): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r5 = io_uring_setup(0x1004dfb, &(0x7f0000000300)={0x0, 0x800039f7, 0x801, 0x2, 0x258}) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) keyctl$setperm(0x5, r6, 0x30925) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, r7) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000380)=[r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], 0x6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) process_vm_writev(r2, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f00000004c0)=""/145, 0x91}, {0x0}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/148, 0x94}], 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8004b707, 0x0) 12m34.018162418s ago: executing program 4 (id=4207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xd3b}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000001180)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000140)="480998b9d0e5d0ac42bcfabb57989b03d2d4249075ce3b19d414626408c4c6500ea08976d68840579843e015272a7ce160ba68a4e37889a7770fda12d9ccd5bbde7eba20642f715f2e9018c56bf4a7e6a8a6dff9ffa77886394c920a75c236595cec54febfbe3081491f28064bb65e7ac4458fd393575b5402b0f76b30353251c036166e86fd58") r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1a, 0x1, @tid=r8}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @broadcast}, 0x10) sendmsg$key(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x2, 0xb, 0x6, 0x7, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0xed17, 0x0, 0x628}, @sadb_sa={0x2, 0x1, 0x4d5, 0x62, 0x6, 0x74, 0x4, 0x1}, @sadb_x_sec_ctx={0x17, 0x18, 0xb, 0x20, 0xaf, "373e20d80cf0ac8333916e2ac1e0c23637223f325fa5768daab5ef22e2c4f10b9368af1a2a175db48a54cb92e77ade9d389318f91dc2425fe5dfdacdf2505d7b983d17643261c923dc11da73464690c752ce77cb458cfad8a00c9f5a96cf3109c1a2acc3c1f4627190110eb5e6524ba253ecc54bfec68cd081e8903aa0235fdad8a10f2550488e234e9966dbf280fefb272e0640542a9758ae140f96cac39c37cbd34ac1379a8ca97f84244eb3ca3a"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_lifetime={0x4, 0x4, 0x7, 0x5, 0x3, 0x9}, @sadb_address={0x3, 0x5, 0xeb, 0x80, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x2}, @sadb_ident={0x2, 0xb, 0x7e02, 0x0, 0x10000}]}, 0x150}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r9, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 12m31.590594057s ago: executing program 4 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 12m16.359743068s ago: executing program 32 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 8m52.546224993s ago: executing program 2 (id=4581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x9, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) socket(0x10, 0x2, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20}}]}, 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) 8m45.30361668s ago: executing program 2 (id=4592): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) shmget(0x0, 0x1000, 0x40, &(0x7f000086b000/0x1000)=nil) readv(r3, &(0x7f0000001680)=[{&(0x7f0000000580)=""/201, 0xc9}, {0x0}], 0x2) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x800, 0x80, &(0x7f0000000340)) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x3) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=@v3={0x3000000, [{0x2, 0x9158}, {0x2a99, 0x101}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) 8m43.962797291s ago: executing program 2 (id=4595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 8m40.709967749s ago: executing program 2 (id=4602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) 8m36.809834952s ago: executing program 2 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r1, 0x1) 8m35.523353517s ago: executing program 2 (id=4610): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) keyctl$clear(0x4, 0xfffffffffffffffc) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 8m20.231205545s ago: executing program 33 (id=4610): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) keyctl$clear(0x4, 0xfffffffffffffffc) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 35.361687254s ago: executing program 1 (id=5603): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 34.177236638s ago: executing program 6 (id=5605): syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000003a935c5ae399bdc73afffe880000000000000000000000000201ff02000000000000000000000000000186009078ff02020001000000f6ffffff0501c89600000500b6da89dfeee5b5a4ff729cd8a09075d8f46096cf5a7c5bcba72b180d7ec95b661aa7c845a1b8230641277349e7f8add15af861c5e8cca4262e24c1fed8c0f65b528f05ad"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 33.944334499s ago: executing program 3 (id=5606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe2d, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe1f, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe0b, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='batadv_slave_1\x00') 33.94260281s ago: executing program 0 (id=5607): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000e0000001000000000000000000000000ac"], 0x184}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r3, 0x0, 0x9) 33.031935793s ago: executing program 1 (id=5609): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 32.869593684s ago: executing program 3 (id=5610): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x2, 0x8, 0x7}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xd3b}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}]}}]}, 0x48}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000001180)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000140)="480998b9d0e5d0ac42bcfabb57989b03d2d4249075ce3b19d414626408c4c6500ea08976d68840579843e015272a7ce160ba68a4e37889a7770fda12d9ccd5bbde7eba20642f715f2e9018c56bf4a7e6a8a6dff9ffa77886394c920a75c236595cec54febfbe3081491f28064bb65e7ac4458fd393575b5402b0f76b30353251c036166e86fd58") r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r8, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1a, 0x1, @tid=r8}, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @broadcast}, 0x10) sendmsg$key(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x2, 0xb, 0x6, 0x7, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0xed17, 0x0, 0x628}, @sadb_sa={0x2, 0x1, 0x4d5, 0x62, 0x6, 0x74, 0x4, 0x1}, @sadb_x_sec_ctx={0x17, 0x18, 0xb, 0x20, 0xae, "373e20d80cf0ac8333916e2ac1e0c23637223f325fa5768daab5ef22e2c4f10b9368af1a2a175db48a54cb92e77ade9d389318f91dc2425fe5dfdacdf2505d7b983d17643261c923dc11da73464690c752ce77cb458cfad8a00c9f5a96cf3109c1a2acc3c1f4627190110eb5e6524ba253ecc54bfec68cd081e8903aa0235fdad8a10f2550488e234e9966dbf280fefb272e0640542a9758ae140f96cac39c37cbd34ac1379a8ca97f84244eb3ca"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_lifetime={0x4, 0x4, 0x7, 0x5, 0x3, 0x9}, @sadb_address={0x3, 0x5, 0xeb, 0x80, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x2}, @sadb_ident={0x2, 0xb, 0x7e02, 0x0, 0x10000}]}, 0x150}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) 30.058574546s ago: executing program 6 (id=5611): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x0, 0x101000) fanotify_mark(r3, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r3, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r4, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 28.857026501s ago: executing program 5 (id=5612): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r4 = io_uring_setup(0x1004dfb, &(0x7f0000000300)={0x0, 0x800039f7, 0x801, 0x2, 0x258}) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x30925) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="080026009409"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) process_vm_writev(r1, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f00000004c0)=""/145, 0x91}, {0x0}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000700)=""/148, 0x94}], 0x6, 0x0, 0x0, 0x0) 28.563390621s ago: executing program 0 (id=5613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}}, 0x0) 28.056976709s ago: executing program 3 (id=5614): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x0, 0x101000) fanotify_mark(r4, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r6, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 27.573844047s ago: executing program 1 (id=5615): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000100013070000000000000000e0000001000000000000000000000000ac"], 0x184}}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r3, 0x0, 0x9) 26.469184752s ago: executing program 6 (id=5616): ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d00000500380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7000000000000008500000086000000850000001100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="549208cb20b45c9e9edd2e7431e1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48884) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xd8, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5, 0xe0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x8, 0x23, 0x5}, [@sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x2, [0x2, 0x2, 0x2, 0x1]}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x4, "9bfc092e4fb7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4a, 0x0, 0x0, 0x7, 0x2, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x40, 0x2, 0x1, "1949414c77b43408"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x1, 0x28, "1e60"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x7, 0xf, 0x81, 0xf1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x1d3d, 0x9, "0920fc7681"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x5, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x2, 0x0, 0x6, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0xed, 0xf4, 0xe, 0x8, 0x3}, 0x134, &(0x7f0000000f40)={0x5, 0xf, 0x134, 0x5, [@generic={0xc0, 0x10, 0xb, "ffe284a11b388c2a78f8833d651549247dd5c807a2d8321313b5626ab6cbf7b50a4b27c0deadae99ad3c95080ef3779efcb7880b603c254825689c8718ec7d7ac1e677c0e5123ab1cffa409695d2f708dd26af013798828b81119b8409e5cd849323749dbe01f2141764f2e57f799f9da8944ce377cdc58a018ee84986d25369ecae4b0c5e64a2c17e9b8d7dead7f4b12bf25e48e3d810f39858ed3e599d23e71dba3dfb3b5cecde029487c6d52ed280c67cbdbc84667bda809279b063"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fff64a, 0xf000, 0x7d, [0xc00f, 0x187, 0x0, 0xffff00, 0xc0, 0xffc00f]}, @generic={0x45, 0x10, 0x4, "3e63de26ce13bdace45009c81bf2fe3570cb68c56d27d17b1d0edc585aa129d5599cffe9ca717f27649fe33252afb1584d0a87ac4137b501123e285ae0d71e6fbd12"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xa5, &(0x7f0000001080)=@string={0xa5, 0x3, "2c6663a37a4ef8c7764ff0ce1f52edd42b4d001d25c2a138a6fead5e2494f95b2c7b9bfa2839b45f00ece98e8763512ac2f0d55cc628c4dff14a38bdd5eafdb85563bf02d1e1247691b68cc0f332a4c5bf2be3319c77800bf8fde83d867784ed3a07dc634a59198c48f1659aafde0e7541b62ad2f2cd1c5d020762560da7cb3c3471c9f6c1cfc5d03885dad0a332fc5a011d67106a37176948337f2c5d141f022ab84f"}}, {0x2, &(0x7f0000001140)=@string={0x2}}, {0x102, &(0x7f0000001540)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) syz_usb_connect(0x0, 0x26f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x8f, 0xbe, 0x5d, 0x87, 0x839, 0xa, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25d, 0x1, 0x9, 0x40, 0x60, 0x0, "", [{{0x9, 0x4, 0x1e, 0x69, 0x4, 0x17, 0xc9, 0x1b, 0x40, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x585}}], [{{0x9, 0x5, 0x80, 0x8, 0x10, 0x4, 0x80, 0x4, [@generic={0xc5, 0x23, "f1bc19245bfa77e54b4f5a12436b4639dd19e37b2343fe278a505d2672f4912f183a6ab570222da0dcd954c5ff56d6e5b6fdfb6ec64bd0c0eea443e3d2886c2809facaabec82693e618f05d6cf89207ec2c28cfd5c093c3374e29a8397341112edea99d937d5d33ab89722fad2d2e9761fd293e00c06661fdb279f213ff614cbbb89ed91f715d6e83ee2ecd7c122ebffd0f1b86366abb1f3eecb98b712a17e761a8e7c5a257e8722b7eae88a22504cb5cacc362f64db91dce9b71b9f20f7cf86ebe51d"}, @generic={0x7a, 0x2, "8101ff9165215ae513c271cf329ab918577638f5c97b4fcb0a382de252036c1367411578386ba6da38ea300b20733ac384426c1bae5fa07d24332d197c783c571bcada40f8a19b29d676110c2476f80cfc7e6b817cea6e559f56a4519775638e0e3886cb9ab1ad90e1b78c361c6c0fa7d1f0c49757071377"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x4, 0x2, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x2, 0x11, 0x450, 0x9, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x279f}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x0, 0x5, 0x1, [@generic={0xd1, 0xb, "f1e3b95ff5219676e7c9077ff1f76d7819b68bbddee2b3e65cc9281c813e28677e7357d5e32b24685c89420a3770956fcf32e40860f7efd51f60571e860b11952244e160842a71acf0ef517f5452033d79c18ede006fa38fdcf35cd4bcfdf51addc8c01f467a2088a3561f0d25dbee25b50ae40e919beb723b9b48d0ffcb53891f843c2aaf7c53329c7672d4450667973013d38a7b80fd00c29f2ffb4c8c551c006214fe1f6a2267369309a1e913695c8ffd7a3bf537408278da5da45774925a4ce476b35246be5dcca5c8b7eddb54"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x7, 0x0, 0x7f, 0x40, 0x7}, 0x104, &(0x7f0000000500)={0x5, 0xf, 0x104, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bbf59eccd76b8f4dd30ccaf92dad4fc8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x29, 0x1, 0x5, 0x9, 0x1a}, @generic={0xaf, 0x10, 0x2, "be76b86f5b2f126ba49eac707431be9b02b1a4ba9ef4bcf77ce7e0e6f7bd3714b49e9143b43ed22c6bf11894a0d48a8fa1c65d7b5461886028114e014ad3cf9c9a7c001a003bc861cce862da6e67376b9d0d7a0f614f1e3e877d5294b5053effaa50f9822531a9d358b46643d872acb2f5e5f81e5b8fee9c1815b5595347f9dfa629602654665229ab8f6fd04a14e8678710f9bccf691d26259adbe693f3ac339b02d3bf181f94927546a77f"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x5a, 0xf, 0x8, [0xf0, 0xff0000, 0xc0, 0x3f00, 0xc0, 0xff0000]}]}, 0x8, [{0x6a, &(0x7f0000000640)=@string={0x6a, 0x3, "7fff3d5cfd4f09275524faf81d8860447cbebb8c689c29ba2433021a857577f322b6097bcb5b455bd29eab6344a90f133f763c1c1d059b8a22fd51d44da2d6aa0bfb2411968f5f5dc18050fe30af59685adbad2f9f44fc61c0f2d378d8522beebb896fda873c9e3f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "89c23bf5c42ec143457823f3e058bc63e69788a11b9a03026a208a888b5151a22347c4322f48e4627f15ce7cdd2be5421e5aefce1f400c9059e59d23265d7b168e403889b80335d4173efeb5dc7d3a8979d3becf58e67ed9fad81ba3c5410b4092a00e5485f58c83683de311f7821bb7c99d8f51951bb89f2c4d60f7dd73119f6964b67bf4c3252d25307503638fb37005b4735a404950dacf271891137b153a1bac759d0a3469df57fb61eef425cad8284e0cdaab908ae4beabf63e50ac"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x807}}, {0x5c, &(0x7f0000000880)=ANY=[@ANYBLOB="5c03c126d6be6ab03b642f38c32f5602a251aa0ce70a4b71fb7148747bace7b852c7ff1851669ffa740ecc65907fe84c83ea89be3b139425305a37cc75c2fd5103299e76da02000000000000000c75f891ed753948fe96ef658bca49"]}, {0x66, &(0x7f0000000900)=@string={0x66, 0x3, "2571bfe141334a491f2ae1e1b6dfb79a4c798af8fd492ea15cae986c1a75ba1380548eea89833b29677deb96b31b2056ac352cc8a3c876410dc897f030581e95533a714637b4ab4af2d592e87280c7cc30a030259f4a52ea21bc5272fad2c406044b9d00"}}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}], 0x10) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xe) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x400) 26.02876129s ago: executing program 0 (id=5617): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x2}, 0xc3}) shutdown(r0, 0x1) 25.180149053s ago: executing program 5 (id=5618): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) 23.958470733s ago: executing program 3 (id=5619): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) 22.734222846s ago: executing program 5 (id=5620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 22.033558785s ago: executing program 6 (id=5621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 21.959040565s ago: executing program 1 (id=5622): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 21.902413975s ago: executing program 0 (id=5623): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4c", 0xe}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x180, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c46"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c00)={0xda8, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xcfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "e65b2b3874c99dae5fbf7f1a78107d79eb257097a737aa188cc93677819bc5623094508d775facb21e871b0dd48492f8a53f9ff30dd14816753068e89adac759029d9930f8a937829ad5d6ed871ca18f71b486c802ce2dc833bdb108710d9a4fad1007361c1539c5b88021ff57582a09f725de284e3fb65e2c3c904250de303c37391783361996a95a467e2100d0a1b93d00644407cce1752baeead525489e62d580d2c70ffef19e42d4d641c371bcf5bdb1712df210729e5a20c0f7b54b7c0088c3fdcba283acc96fdb185b128b40582a0dfdbdeb0629d8b696fdd9c468dfb4fc4929fb688ea9"}, @ETHTOOL_A_BITSET_VALUE={0xc04, 0x4, "e4989ff47a3eaabab18b41a8baf5f91019f873dd0587195ec709cb5fedcabe494e29d2afcedb528e03f06127b6348d4101c7bbe320ec982582ffcd1d4bbf72a4264e4c77698b5f4e382d1df59ef3416c301722e90cf5a56f54009b220752d1f3164332ac5b9aadbee4e8b363e9c6305cb84b336454f4bdeabac6203c967fb529e46054e5452f3b12c46f666b06ae39b43ffaaf56033602bf5746adf779c770e0f1987c3f389f097eca469b400987c05a5677a517c1c98fcd483ac77e038c627751473fdb345e9da2a0be3c9406385d92195022f4d1b7d3efd737b233aa8538793f335ae19d341804f5ac0250704656f4d25197ddad815f4a0a2329f8c77323f2ecf3608d82779a4715a52402de8590f00b392634f4bdd3df03aa029a74285b94b54429883b68e4d70e67cf087e36d0131f64d0b6e67e547a0cacdb1f570df59b2451f15d16766ca684ba75ea857f75f48093834d4b0558cb00653e48a01d075a83ec1aab44b44b05759cc65941198192a4fd2a8ed7940e775c924773e3043f41da323759d5ec9bf494d352ea730d0150ee4690e836d2a69bbe768ded871482bd46389feef6f643d3076dbbde5f62624aa84a9b19d86998b2b64ce07017f70fddfce5e8599d89cb5dfa116e842f0bfe7011a0f54fe26a7bb2db6676bdb60590b6bd234747d3fa0513a63564eec4edd517aa7b6b94f8216b329a9e0648cf924726958c8f9842f2892b2b804fd8e29d986b914fc9e05f49879839b4e8f9d9204901ad00f6d8a622b0e352a104235b6cdea710b6cded85060b6783d7d6aa21d9485c53788fddb4a3695ba3e563721d31d15e7bd94d3a8612defb507fa7d78959c35a8c1f87fd8cf5c00956420df93d992e2053f6ca1f335d13130f41fbb4240063cfbb76adf86929221267bdbafea870454008951557456e121ef462f19ea9e6b2279f3abefa749520dfc9dc6c2ce1c880b2d56921ace49c6698d4a290c2303155788edaf7f6b485277c9a6aafca364853c7282f4a3d4e5b7386241b4e0403e535e2d166863a7e1e7d3f2142d27d6befbacfb16c7a4a7dd5b95c59542cdeb634cec7af26baa333019f357836de0fd08fed9d9e3aa35161d1bfd266f3fe52654514eab2d02bfd3efdec27577549ef3236b36251cff4c88f7a12871b05d4afa894e51dda6b976a229d0a0013852847f178ce1badea563c5f14ed747ecddd2be54024be52db67d0b1215af4a17582855d1a49ce93b3547cba5fd4c3b458dd8222992de3657d7e05881734227adf4a79ebf41382348c2d9376bea32fbf43dd110b9e0c6a92f9f22ccdb21496d8694c771d1fda33bb22880900cc60214508240c4ae923049fef1466602fa2dc349afcd1dcb2c3f976b868ce8bc2fc830fe2dd92ce76892df95f891f29ea4f085a7605c11205362429624ebc0d25ba3bb6af2f5991eead0008505b7041c1a9c1ca15338c40187f76114b40930dcbb4568159a6f507df6de983869441db2d2fb9e3d5772e5e64b5268aa8200e68b9b0c78ecd33fff5c2ed70869816c7c3958db9bd80f3989c7dab909845ff8f8b8dd0a59e1acef7da399e64a73d83992ee84019f5cda5bfc87eabb50e1bbbc71938ba93a8896f5ba5a61bf7cf8a8cfa9e6b432765b87c39ee00413e99326b030b947fb8f9518a6b53345066fbc36ae237e019471422b6fa43ddfc8843df33793eacad65167f40d6d0e0796753431f14fec0d5b763530162a6780977fa690f47c37442b21d304f21d13f817f7023b1d2f8add56441c9e0860314b691c30fb7cf8d3b08436a4b14aea7c42cd55fe85cc2522e05831822dc112212a1826a2afd3f0da85a7d645bd864bd95900d510841f41934484ec03124dd3d5ba79518cdc3e39c4fb353d431d97b139447868d11e39f2ce5f9d209604a9eefaf929edd00e3949d7df2e70dea5ea9cd6b445bb653e933912bc249db7d2a9e87c7d73c9f4b8fe46aedbaa70cf3200b05dd685e863919fac406601109f178a19259096cc6c3531b74b1f25f2c396824cdd41d1ba9319d8da11694933e22987be3214ffe515200c9f624559814f14d9b3a679b4f63abafe59a98a04edb98059ef01aae0d1aa7bfda74d384891040d523fcd45b6ff4786e985ff896bd9167aa3a15e4c2b60b9eb628919cdc94a71edbec24107e488bb53b8581a2d2e0acb7c232ce82f8e7f7e7f15c8eb34f4a8b3d2f26fa461640727e905e6eb0848e18612cb416818f06c6bad7cdb716b857319ec3f253c788a1f5a2ededcdeb570dc9d9f3eb8049b870e8dbcef1c5e721af8139badc8d9daf9aef38712555463ebdfc40769ec24ce156a6f7e7f6ff458243a28273317ef4b05ac3338c6a1199a79e7c83227f6fba04f306a64782b474cdefdf3df16d637fc98f05dd8b17b1026aafdf20d205a27864b661a8c0291a71bb33ad0c1973b48285f73cd4eb2eb2373e4a66bab1151ae51da96a1f72c91d552c49d84af4ab440b117d98a6a25e45b7fbe9428c79c3233d12f5a2607c7a2cdeb1900e1bd3fd6f664bbd7a7680ed09aae3f1b65d181fc92098c228bf2e7a312f08e860ed8d931248e94b2a16fbf01c646ab29e8d9fd59e04bd10a981c654d2b162a1bf6782fef39700ff2a778ccf7a8c7af9211224c7070a584cb0ac717b29d52ec259de889ab0ad1e1759459e201fca6a3ad15e4bdcef2e1f19c5ec787fcdafc3a318d5a43434535a335fe8eb002b47944275c660b18c258ac928871628b9c5ed7cd055ff3513b6419105ea467468ad47d74f2adce11cf61ea690e9712994a3ea779a3dca9f70e7d31b0a4bdb5154ddba97b1d7aaa03a8cbf2542cbb8551c6dde4b3e86c5b6f38343a3e2841a36d07e66363a51ec86044e78d841ebc2170f38162823aab047984159bb263fed1d90c171efb2a797b71fbf649d0f7a4077125e42f7e203f952866570fc6dd8a4c913d17ee380658c7eaec15503f3eaf170c4a1ee7af373b09ca9fa73b2891819254d686ef40969a297e3b54e0c9ee09f1d6c57202217fdff49d78553e401ec31f31efbb5db791c10571da99415fe4ba22dd46e15f67701844522056e9298554ae72f523edb044489bab5c35a20ed36b5a216e39fc5e138b9b47915c67f6b1675e41311d3b756c3417f7ecc272a6dd3db0b5b8a5dc8110906697ecc910edf010ec76fd360e7b810dc8cec523d7912f141db96d6215d1a25082995eae68358cf35caefc30c5ace60063571f7774a4a2a06ceab9d6d45742cbf5006cedd7db6cd02731979e8f648f5b052bffcf8ba64e768088f4cf51ffccb1a4c3aa5b6a071faa9f2ae50a9a8b194191438a30edb1cdfa2c21e401a572e7511d18ac03feeaa95493728c08a30076d37d4d9bbf0151205924604fff87c0fdd6611fd2e73c9821ecea8c84f48d780301cc86a6f477ba33066632326e316c907af239f06f4bf2cfa3cbe913e21b38317d62249df1618135faa1d9891f3fd4387437d52b6c384987a062f2e90dcc0d806ffc0bfd161772cdc919eb942d32c95df5ef22c9de380700cf4fad6c6c42f265ce6f5979ee656fb5880dc77337678bc5d4510df46859d61fef16d222a1996247bd7954e1fb30f0a6ff7ef8fdc3fdcb0ce961aebb3897c35909e6e7cf275bd70500ddc4625756d6728f6971603f182331295203a931802064039bce54ae4a6f6a76c54d8f9caf96c2a50c5608c9be72f774a0c977c47f15f36167240857755a81afb151f029981da6cac586f3ee8addbb7b4cf1532771754ff23230776eeab23a79586d162cc8344c395e0070b472bda7982a22dda6cb55448fa7a34a10a647c55855ee4f50ae7aa1e6a006080b9152733b37f1dbd91a0302d85f8860785fd66e51e2633a1c26164379873874fb3f4bdd74fd74612b663635ed0af996f1e4d48a6367b9bc1b2e2cc1239c869ecbc3b30aba208fb06307eac463faf2eb50e7bbd4618fbd4396672d316a00750c1f0fbcedd3050aa149f1f257f540a006294969ff14d15e613def650109cf9f8d9bb87c676b98ca9d733546f76ef666a77ebaa93109e8172770d2af4481bcf9306a8ffccffd0013ebe7c23c8a2f440886ce66a4836acbc040ec7921b6604c210aecbeb82686a02e3fc804f4edcdfc6d2583530a38b0a74cc0eeddbfebd08b270fd95eb763df3cf2b87033d7dedb64431b0b4f8bff48ebb463cb58894f60a19ba4ff938d98d27101e23e3b47cf35592c0eab0c0835e088c3b0dd2a4a5c37389f77f8495dbcdf71c55a76b458033e060c2cf263324d9a0ba478e8e5a93cac1f3d57d85e755f8c9d6829081dfdd08d1cb078aa03f5206ceece8121e43dd5663d84122b3520200c36bb198bdfe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}]}, 0xda8}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 21.767398809s ago: executing program 5 (id=5624): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x248c4}, 0x800) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 21.385730169s ago: executing program 6 (id=5625): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfb, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x488c, 0x80, 0x5, 0x7}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0xc9a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x830}, 0xfffffffe}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x80000018}) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='\a'], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x9, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0) close(0x4) 20.753464678s ago: executing program 3 (id=5626): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x0, 0x101000) fanotify_mark(r3, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r3, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r4, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 20.547914755s ago: executing program 1 (id=5627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}}, 0x0) 20.246633729s ago: executing program 6 (id=5628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000110a010227bd7001f6dbdf2505000007"], 0x14}}, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 20.229691972s ago: executing program 0 (id=5629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) 18.86470927s ago: executing program 5 (id=5630): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 17.067500683s ago: executing program 3 (id=5631): ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d00000500380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7000000000000008500000086000000850000001100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="549208cb20b45c9e9edd2e7431e1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48884) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xd8, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5, 0xe0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x8, 0x23, 0x5}, [@sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x2, [0x2, 0x2, 0x2, 0x1]}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x4, "9bfc092e4fb7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4a, 0x0, 0x0, 0x7, 0x2, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x40, 0x2, 0x1, "1949414c77b43408"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x1, 0x28, "1e60"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x7, 0xf, 0x81, 0xf1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x1d3d, 0x9, "0920fc7681"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x5, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x2, 0x0, 0x6, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0xed, 0xf4, 0xe, 0x8, 0x3}, 0x134, &(0x7f0000000f40)={0x5, 0xf, 0x134, 0x5, [@generic={0xc0, 0x10, 0xb, "ffe284a11b388c2a78f8833d651549247dd5c807a2d8321313b5626ab6cbf7b50a4b27c0deadae99ad3c95080ef3779efcb7880b603c254825689c8718ec7d7ac1e677c0e5123ab1cffa409695d2f708dd26af013798828b81119b8409e5cd849323749dbe01f2141764f2e57f799f9da8944ce377cdc58a018ee84986d25369ecae4b0c5e64a2c17e9b8d7dead7f4b12bf25e48e3d810f39858ed3e599d23e71dba3dfb3b5cecde029487c6d52ed280c67cbdbc84667bda809279b063"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fff64a, 0xf000, 0x7d, [0xc00f, 0x187, 0x0, 0xffff00, 0xc0, 0xffc00f]}, @generic={0x45, 0x10, 0x4, "3e63de26ce13bdace45009c81bf2fe3570cb68c56d27d17b1d0edc585aa129d5599cffe9ca717f27649fe33252afb1584d0a87ac4137b501123e285ae0d71e6fbd12"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xa5, &(0x7f0000001080)=@string={0xa5, 0x3, "2c6663a37a4ef8c7764ff0ce1f52edd42b4d001d25c2a138a6fead5e2494f95b2c7b9bfa2839b45f00ece98e8763512ac2f0d55cc628c4dff14a38bdd5eafdb85563bf02d1e1247691b68cc0f332a4c5bf2be3319c77800bf8fde83d867784ed3a07dc634a59198c48f1659aafde0e7541b62ad2f2cd1c5d020762560da7cb3c3471c9f6c1cfc5d03885dad0a332fc5a011d67106a37176948337f2c5d141f022ab84f"}}, {0x2, &(0x7f0000001140)=@string={0x2}}, {0x102, &(0x7f0000001540)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) syz_usb_connect(0x0, 0x26f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x8f, 0xbe, 0x5d, 0x87, 0x839, 0xa, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25d, 0x1, 0x9, 0x40, 0x60, 0x0, "", [{{0x9, 0x4, 0x1e, 0x69, 0x4, 0x17, 0xc9, 0x1b, 0x40, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x585}}], [{{0x9, 0x5, 0x80, 0x8, 0x10, 0x4, 0x80, 0x4, [@generic={0xc5, 0x23, "f1bc19245bfa77e54b4f5a12436b4639dd19e37b2343fe278a505d2672f4912f183a6ab570222da0dcd954c5ff56d6e5b6fdfb6ec64bd0c0eea443e3d2886c2809facaabec82693e618f05d6cf89207ec2c28cfd5c093c3374e29a8397341112edea99d937d5d33ab89722fad2d2e9761fd293e00c06661fdb279f213ff614cbbb89ed91f715d6e83ee2ecd7c122ebffd0f1b86366abb1f3eecb98b712a17e761a8e7c5a257e8722b7eae88a22504cb5cacc362f64db91dce9b71b9f20f7cf86ebe51d"}, @generic={0x7a, 0x2, "8101ff9165215ae513c271cf329ab918577638f5c97b4fcb0a382de252036c1367411578386ba6da38ea300b20733ac384426c1bae5fa07d24332d197c783c571bcada40f8a19b29d676110c2476f80cfc7e6b817cea6e559f56a4519775638e0e3886cb9ab1ad90e1b78c361c6c0fa7d1f0c49757071377"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x4, 0x2, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x2, 0x11, 0x450, 0x9, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x279f}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x0, 0x5, 0x1, [@generic={0xd1, 0xb, "f1e3b95ff5219676e7c9077ff1f76d7819b68bbddee2b3e65cc9281c813e28677e7357d5e32b24685c89420a3770956fcf32e40860f7efd51f60571e860b11952244e160842a71acf0ef517f5452033d79c18ede006fa38fdcf35cd4bcfdf51addc8c01f467a2088a3561f0d25dbee25b50ae40e919beb723b9b48d0ffcb53891f843c2aaf7c53329c7672d4450667973013d38a7b80fd00c29f2ffb4c8c551c006214fe1f6a2267369309a1e913695c8ffd7a3bf537408278da5da45774925a4ce476b35246be5dcca5c8b7eddb54"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x7, 0x0, 0x7f, 0x40, 0x7}, 0x104, &(0x7f0000000500)={0x5, 0xf, 0x104, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bbf59eccd76b8f4dd30ccaf92dad4fc8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x29, 0x1, 0x5, 0x9, 0x1a}, @generic={0xaf, 0x10, 0x2, "be76b86f5b2f126ba49eac707431be9b02b1a4ba9ef4bcf77ce7e0e6f7bd3714b49e9143b43ed22c6bf11894a0d48a8fa1c65d7b5461886028114e014ad3cf9c9a7c001a003bc861cce862da6e67376b9d0d7a0f614f1e3e877d5294b5053effaa50f9822531a9d358b46643d872acb2f5e5f81e5b8fee9c1815b5595347f9dfa629602654665229ab8f6fd04a14e8678710f9bccf691d26259adbe693f3ac339b02d3bf181f94927546a77f"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x5a, 0xf, 0x8, [0xf0, 0xff0000, 0xc0, 0x3f00, 0xc0, 0xff0000]}]}, 0x8, [{0x6a, &(0x7f0000000640)=@string={0x6a, 0x3, "7fff3d5cfd4f09275524faf81d8860447cbebb8c689c29ba2433021a857577f322b6097bcb5b455bd29eab6344a90f133f763c1c1d059b8a22fd51d44da2d6aa0bfb2411968f5f5dc18050fe30af59685adbad2f9f44fc61c0f2d378d8522beebb896fda873c9e3f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "89c23bf5c42ec143457823f3e058bc63e69788a11b9a03026a208a888b5151a22347c4322f48e4627f15ce7cdd2be5421e5aefce1f400c9059e59d23265d7b168e403889b80335d4173efeb5dc7d3a8979d3becf58e67ed9fad81ba3c5410b4092a00e5485f58c83683de311f7821bb7c99d8f51951bb89f2c4d60f7dd73119f6964b67bf4c3252d25307503638fb37005b4735a404950dacf271891137b153a1bac759d0a3469df57fb61eef425cad8284e0cdaab908ae4beabf63e50ac"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x807}}, {0x5c, &(0x7f0000000880)=ANY=[@ANYBLOB="5c03c126d6be6ab03b642f38c32f5602a251aa0ce70a4b71fb7148747bace7b852c7ff1851669ffa740ecc65907fe84c83ea89be3b139425305a37cc75c2fd5103299e76da02000000000000000c75f891ed753948fe96ef658bca49"]}, {0x66, &(0x7f0000000900)=@string={0x66, 0x3, "2571bfe141334a491f2ae1e1b6dfb79a4c798af8fd492ea15cae986c1a75ba1380548eea89833b29677deb96b31b2056ac352cc8a3c876410dc897f030581e95533a714637b4ab4af2d592e87280c7cc30a030259f4a52ea21bc5272fad2c406044b9d00"}}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}], 0x10) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xe) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x400) 16.85531934s ago: executing program 1 (id=5632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x0, 0x101000) fanotify_mark(r4, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r6, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 15.27658143s ago: executing program 5 (id=5633): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) 15.270892105s ago: executing program 0 (id=5634): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x2}, 0xc3}) shutdown(r0, 0x1) 4.571963035s ago: executing program 34 (id=5628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000110a010227bd7001f6dbdf2505000007"], 0x14}}, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 1.620854764s ago: executing program 35 (id=5632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x0, 0x101000) fanotify_mark(r4, 0x455, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r6, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208", 0x29) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 1.548577972s ago: executing program 36 (id=5631): ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d00000500380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fbffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7000000000000008500000086000000850000001100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="549208cb20b45c9e9edd2e7431e1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48884) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xd8, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5, 0xe0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x8, 0x23, 0x5}, [@sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x2, [0x2, 0x2, 0x2, 0x1]}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x4, "9bfc092e4fb7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4a, 0x0, 0x0, 0x7, 0x2, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x40, 0x2, 0x1, "1949414c77b43408"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x1, 0x28, "1e60"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x7, 0xf, 0x81, 0xf1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x1d3d, 0x9, "0920fc7681"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x5, 0x2, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x2, 0x0, 0x6, {0x8, 0x25, 0x1, 0x0, 0x33, 0x8, 0x40}}}}}}}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0xed, 0xf4, 0xe, 0x8, 0x3}, 0x134, &(0x7f0000000f40)={0x5, 0xf, 0x134, 0x5, [@generic={0xc0, 0x10, 0xb, "ffe284a11b388c2a78f8833d651549247dd5c807a2d8321313b5626ab6cbf7b50a4b27c0deadae99ad3c95080ef3779efcb7880b603c254825689c8718ec7d7ac1e677c0e5123ab1cffa409695d2f708dd26af013798828b81119b8409e5cd849323749dbe01f2141764f2e57f799f9da8944ce377cdc58a018ee84986d25369ecae4b0c5e64a2c17e9b8d7dead7f4b12bf25e48e3d810f39858ed3e599d23e71dba3dfb3b5cecde029487c6d52ed280c67cbdbc84667bda809279b063"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7fff64a, 0xf000, 0x7d, [0xc00f, 0x187, 0x0, 0xffff00, 0xc0, 0xffc00f]}, @generic={0x45, 0x10, 0x4, "3e63de26ce13bdace45009c81bf2fe3570cb68c56d27d17b1d0edc585aa129d5599cffe9ca717f27649fe33252afb1584d0a87ac4137b501123e285ae0d71e6fbd12"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xa5, &(0x7f0000001080)=@string={0xa5, 0x3, "2c6663a37a4ef8c7764ff0ce1f52edd42b4d001d25c2a138a6fead5e2494f95b2c7b9bfa2839b45f00ece98e8763512ac2f0d55cc628c4dff14a38bdd5eafdb85563bf02d1e1247691b68cc0f332a4c5bf2be3319c77800bf8fde83d867784ed3a07dc634a59198c48f1659aafde0e7541b62ad2f2cd1c5d020762560da7cb3c3471c9f6c1cfc5d03885dad0a332fc5a011d67106a37176948337f2c5d141f022ab84f"}}, {0x2, &(0x7f0000001140)=@string={0x2}}, {0x102, &(0x7f0000001540)=@string={0x102, 0x3, "c8e76191a7d058189ef38f01bf7f58ab1c47944dd9e1f54e9c27b0eb53f3671a59be2fb80be366a822ca6be1f9be56aff1ba87ecd0c0d03e0d422eabbafecaa98e20b13ad2aba2e4ce612ef9967c8e6f29fb9b44861ad10ed6ff0260b6d5e3325a588599208755fd9e68cc8e83dd394077bc217a2943063ad3a649fc96e345681974ea202c20e6fe2340575e91c158c2cd64a44e73e128e2bb4857fb993d5f488d87640498134fb77fd50b9697ab3ea582cf44669cc228ffa002c3db802b7ae8041ed7d1c3dfc2e4ab5bca45707cb2ca9dcdef42c2e332e8d2ba0369829708518236dd6bae583c8cc888554848fcb0c4dea4b55e485e551b3a91dfce02541cb9"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9585dde83000000000b09007a15b3"], 0x0}, 0x0) syz_usb_connect(0x0, 0x26f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x8f, 0xbe, 0x5d, 0x87, 0x839, 0xa, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x25d, 0x1, 0x9, 0x40, 0x60, 0x0, "", [{{0x9, 0x4, 0x1e, 0x69, 0x4, 0x17, 0xc9, 0x1b, 0x40, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x585}}], [{{0x9, 0x5, 0x80, 0x8, 0x10, 0x4, 0x80, 0x4, [@generic={0xc5, 0x23, "f1bc19245bfa77e54b4f5a12436b4639dd19e37b2343fe278a505d2672f4912f183a6ab570222da0dcd954c5ff56d6e5b6fdfb6ec64bd0c0eea443e3d2886c2809facaabec82693e618f05d6cf89207ec2c28cfd5c093c3374e29a8397341112edea99d937d5d33ab89722fad2d2e9761fd293e00c06661fdb279f213ff614cbbb89ed91f715d6e83ee2ecd7c122ebffd0f1b86366abb1f3eecb98b712a17e761a8e7c5a257e8722b7eae88a22504cb5cacc362f64db91dce9b71b9f20f7cf86ebe51d"}, @generic={0x7a, 0x2, "8101ff9165215ae513c271cf329ab918577638f5c97b4fcb0a382de252036c1367411578386ba6da38ea300b20733ac384426c1bae5fa07d24332d197c783c571bcada40f8a19b29d676110c2476f80cfc7e6b817cea6e559f56a4519775638e0e3886cb9ab1ad90e1b78c361c6c0fa7d1f0c49757071377"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x4, 0x2, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}, {{0x9, 0x5, 0x2, 0x11, 0x450, 0x9, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x279f}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x0, 0x5, 0x1, [@generic={0xd1, 0xb, "f1e3b95ff5219676e7c9077ff1f76d7819b68bbddee2b3e65cc9281c813e28677e7357d5e32b24685c89420a3770956fcf32e40860f7efd51f60571e860b11952244e160842a71acf0ef517f5452033d79c18ede006fa38fdcf35cd4bcfdf51addc8c01f467a2088a3561f0d25dbee25b50ae40e919beb723b9b48d0ffcb53891f843c2aaf7c53329c7672d4450667973013d38a7b80fd00c29f2ffb4c8c551c006214fe1f6a2267369309a1e913695c8ffd7a3bf537408278da5da45774925a4ce476b35246be5dcca5c8b7eddb54"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x7, 0x0, 0x7f, 0x40, 0x7}, 0x104, &(0x7f0000000500)={0x5, 0xf, 0x104, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bbf59eccd76b8f4dd30ccaf92dad4fc8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0x4, 0x29, 0x1, 0x5, 0x9, 0x1a}, @generic={0xaf, 0x10, 0x2, "be76b86f5b2f126ba49eac707431be9b02b1a4ba9ef4bcf77ce7e0e6f7bd3714b49e9143b43ed22c6bf11894a0d48a8fa1c65d7b5461886028114e014ad3cf9c9a7c001a003bc861cce862da6e67376b9d0d7a0f614f1e3e877d5294b5053effaa50f9822531a9d358b46643d872acb2f5e5f81e5b8fee9c1815b5595347f9dfa629602654665229ab8f6fd04a14e8678710f9bccf691d26259adbe693f3ac339b02d3bf181f94927546a77f"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x5a, 0xf, 0x8, [0xf0, 0xff0000, 0xc0, 0x3f00, 0xc0, 0xff0000]}]}, 0x8, [{0x6a, &(0x7f0000000640)=@string={0x6a, 0x3, "7fff3d5cfd4f09275524faf81d8860447cbebb8c689c29ba2433021a857577f322b6097bcb5b455bd29eab6344a90f133f763c1c1d059b8a22fd51d44da2d6aa0bfb2411968f5f5dc18050fe30af59685adbad2f9f44fc61c0f2d378d8522beebb896fda873c9e3f"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0xc0, &(0x7f0000000700)=@string={0xc0, 0x3, "89c23bf5c42ec143457823f3e058bc63e69788a11b9a03026a208a888b5151a22347c4322f48e4627f15ce7cdd2be5421e5aefce1f400c9059e59d23265d7b168e403889b80335d4173efeb5dc7d3a8979d3becf58e67ed9fad81ba3c5410b4092a00e5485f58c83683de311f7821bb7c99d8f51951bb89f2c4d60f7dd73119f6964b67bf4c3252d25307503638fb37005b4735a404950dacf271891137b153a1bac759d0a3469df57fb61eef425cad8284e0cdaab908ae4beabf63e50ac"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x807}}, {0x5c, &(0x7f0000000880)=ANY=[@ANYBLOB="5c03c126d6be6ab03b642f38c32f5602a251aa0ce70a4b71fb7148747bace7b852c7ff1851669ffa740ecc65907fe84c83ea89be3b139425305a37cc75c2fd5103299e76da02000000000000000c75f891ed753948fe96ef658bca49"]}, {0x66, &(0x7f0000000900)=@string={0x66, 0x3, "2571bfe141334a491f2ae1e1b6dfb79a4c798af8fd492ea15cae986c1a75ba1380548eea89833b29677deb96b31b2056ac352cc8a3c876410dc897f030581e95533a714637b4ab4af2d592e87280c7cc30a030259f4a52ea21bc5272fad2c406044b9d00"}}]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010103}], 0x10) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xe) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x400) 110.320208ms ago: executing program 37 (id=5634): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r6, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x2}, 0xc3}) shutdown(r0, 0x1) 0s ago: executing program 38 (id=5633): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) kernel console output (not intermixed with test programs): ndor=12ab, idProduct=0004, bcdDevice= 0.00 [ 854.731606][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.766356][ T5821] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 854.776505][T13944] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 854.956015][ T5732] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input37 [ 854.964115][T13944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 854.964168][T13944] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 854.964188][T13944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.990612][ T5821] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 854.990635][ T5821] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 854.995795][T13944] usb 4-1: config 0 descriptor?? [ 855.000772][T15103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.006392][ T5821] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 855.006417][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.006436][ T5821] usb 2-1: Product: syz [ 855.006448][ T5821] usb 2-1: Manufacturer: syz [ 855.006461][ T5821] usb 2-1: SerialNumber: syz [ 855.126476][ T4945] input input37: unable to receive magic message: -110 [ 855.198326][ T4945] input input37: unable to receive magic message: -32 [ 855.252040][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.253328][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.295644][ T4945] input input37: unable to receive magic message: -32 [ 855.323022][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.328308][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.346555][T15104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.351575][T15104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.396353][ T5609] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 855.396353][ T4945] input input37: unable to receive magic message: -32 [ 855.407840][ T5609] Bluetooth: hci0: Injecting HCI hardware error event [ 855.415048][ T5605] Bluetooth: hci0: hardware error 0x00 [ 855.503990][T13944] hid (null): unknown global tag 0xc [ 855.508352][T13944] hid (null): unknown global tag 0xc [ 855.508370][T13944] hid (null): report_id 4114886305 is invalid [ 855.613773][ T4945] input input37: unable to receive magic message: -32 [ 855.615183][ T5821] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 855.618135][ T5821] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 855.621016][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621049][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621075][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621107][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621132][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621157][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621430][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621456][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621481][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621506][T13944] asus 0003:0B05:1ABE.002C: unknown main item tag 0x0 [ 855.621765][ T5821] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 855.621854][ T5821] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 855.632541][T13944] asus 0003:0B05:1ABE.002C: unknown global tag 0xc [ 855.632560][T13944] asus 0003:0B05:1ABE.002C: item 0 4 1 12 parsing failed [ 855.633251][ T5821] usb 2-1: USB disconnect, device number 114 [ 855.635536][T13944] asus 0003:0B05:1ABE.002C: Asus hid parse failed: -22 [ 855.635657][T13944] asus 0003:0B05:1ABE.002C: probe with driver asus failed with error -22 [ 855.686440][T13944] usb 4-1: USB disconnect, device number 100 [ 855.878385][ T4945] input input37: unable to receive magic message: -32 [ 856.084476][T13944] usb 5-1: USB disconnect, device number 85 [ 856.084651][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.653299][ T5605] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 860.234576][T15125] batadv_slave_0: entered promiscuous mode [ 860.436985][ T5821] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 860.471268][T15129] batadv_slave_0: left promiscuous mode [ 860.588853][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.588882][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.588916][ T5821] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 860.588936][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.637024][ T5821] usb 3-1: config 0 descriptor?? [ 862.390980][ T5821] hid_parser_main: 366 callbacks suppressed [ 862.391002][ T5821] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 862.391030][ T5821] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 862.391055][ T5821] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 862.391080][ T5821] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 862.391105][ T5821] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 862.462797][ T5821] playstation 0003:054C:0DF2.002D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 862.781469][ T5821] playstation 0003:054C:0DF2.002D: Invalid byte count transferred, expected 64 got 63 [ 862.781508][ T5821] playstation 0003:054C:0DF2.002D: Failed to retrieve DualSense firmware info: -22 [ 862.781554][ T5821] playstation 0003:054C:0DF2.002D: Failed to get firmware info from DualSense [ 862.781572][ T5821] playstation 0003:054C:0DF2.002D: Failed to create dualsense. [ 862.849568][ T5821] playstation 0003:054C:0DF2.002D: probe with driver playstation failed with error -22 [ 863.191207][ T5821] usb 3-1: USB disconnect, device number 91 [ 863.290089][T15110] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 867.136357][ T36] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 867.290824][ T36] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 867.290849][ T36] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 867.295351][ T36] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 867.295376][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.295394][ T36] usb 4-1: Product: syz [ 867.295407][ T36] usb 4-1: Manufacturer: syz [ 867.295420][ T36] usb 4-1: SerialNumber: syz [ 867.316410][T15110] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 867.316692][T15110] Bluetooth: hci1: Injecting HCI hardware error event [ 867.326508][ T5605] Bluetooth: hci1: hardware error 0x00 [ 868.310013][ T5732] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 868.592384][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.599558][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.604206][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.615990][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.737826][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 868.743450][ T5732] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 868.743473][ T5732] usb 5-1: config 179 has no interface number 0 [ 868.743516][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 868.743539][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 868.743564][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 868.743588][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 868.743613][ T5732] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 868.743637][ T5732] usb 5-1: config 179 interface 65 has no altsetting 0 [ 868.743667][ T5732] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 868.743688][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.852857][ T36] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 868.877751][ T36] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 868.879063][ T36] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 868.879150][ T36] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 868.912094][ T5732] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 868.924300][ T36] usb 4-1: USB disconnect, device number 101 [ 868.956586][ T4945] input input38: unable to receive magic message: -110 [ 869.037574][ T4945] input input38: unable to receive magic message: -32 [ 869.119543][ T4945] input input38: unable to receive magic message: -32 [ 869.208999][ T4945] input input38: unable to receive magic message: -32 [ 869.326002][T15038] input input38: unable to receive magic message: -32 [ 870.227747][ T36] usb 5-1: USB disconnect, device number 86 [ 870.351652][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.351726][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.642781][T15178] batadv_slave_0: entered promiscuous mode [ 870.679345][ T5605] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 872.030092][T15183] batadv_slave_0: left promiscuous mode [ 873.376323][ T5602] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 873.889130][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.889149][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.889170][ T5602] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 873.889182][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.898940][ T5602] usb 5-1: config 0 descriptor?? [ 873.956449][ T36] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 874.106320][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 874.109531][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.109553][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.109586][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 874.109608][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.163808][ T36] usb 2-1: config 0 descriptor?? [ 875.594610][ T5602] usbhid 5-1:0.0: can't add hid device: -71 [ 875.594730][ T5602] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 875.623837][ T5602] usb 5-1: USB disconnect, device number 87 [ 876.741931][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.744479][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.765871][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.778354][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.783358][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.783944][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.947683][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.970458][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.486995][ T5821] usb 2-1: USB disconnect, device number 115 [ 881.976103][T15249] Invalid argument reading file caps for ./file0 [ 881.989483][T15251] netlink: 'syz.0.3481': attribute type 12 has an invalid length. [ 882.256406][ T36] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 883.628541][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 883.628573][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.628593][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.628632][ T36] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 883.628653][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.716416][ T36] usb 4-1: config 0 descriptor?? [ 884.877962][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.891590][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.931993][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 884.932097][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 885.991008][ T36] usb 4-1: USB disconnect, device number 102 [ 890.806316][ T5718] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 890.896476][ T36] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 890.957717][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 890.959301][ T5718] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 890.959317][ T5718] usb 4-1: config 179 has no interface number 0 [ 890.959342][ T5718] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 890.959355][ T5718] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 890.959369][ T5718] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 890.959383][ T5718] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 890.959396][ T5718] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 890.959409][ T5718] usb 4-1: config 179 interface 65 has no altsetting 0 [ 890.959427][ T5718] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 890.959439][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.129339][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.129357][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.129377][ T36] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 891.129389][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.200938][ T36] usb 3-1: config 0 descriptor?? [ 891.295595][ T5718] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input39 [ 891.369300][ T4945] input input39: unable to receive magic message: -110 [ 891.448262][ T4945] input input39: unable to receive magic message: -32 [ 891.527043][ T4945] input input39: unable to receive magic message: -32 [ 891.678470][ T4945] input input39: unable to receive magic message: -32 [ 891.684939][ T36] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0 [ 891.684974][ T36] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0 [ 891.685001][ T36] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0 [ 891.685026][ T36] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0 [ 891.685102][ T36] playstation 0003:054C:0DF2.002E: unknown main item tag 0x0 [ 891.799906][ T36] playstation 0003:054C:0DF2.002E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 891.821595][ T4945] input input39: unable to receive magic message: -32 [ 892.058486][ T36] playstation 0003:054C:0DF2.002E: Invalid byte count transferred, expected 64 got 63 [ 892.058512][ T36] playstation 0003:054C:0DF2.002E: Failed to retrieve DualSense firmware info: -22 [ 892.058561][ T36] playstation 0003:054C:0DF2.002E: Failed to get firmware info from DualSense [ 892.058956][ T36] playstation 0003:054C:0DF2.002E: Failed to create dualsense. [ 892.152182][ T36] playstation 0003:054C:0DF2.002E: probe with driver playstation failed with error -22 [ 893.128489][ T5732] usb 3-1: USB disconnect, device number 92 [ 893.623262][ T36] usb 4-1: USB disconnect, device number 103 [ 893.623383][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 904.335986][T15364] Invalid argument reading file caps for ./file0 [ 904.606415][ T5718] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 904.758827][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 904.758859][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.758880][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 904.758918][ T5718] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 904.758939][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.770185][ T5718] usb 2-1: config 0 descriptor?? [ 905.449488][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.465548][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.396950][T15358] fuse: Bad value for 'fd' [ 906.483716][T15350] batadv_slave_0: entered promiscuous mode [ 906.603018][T15349] batadv_slave_0: left promiscuous mode [ 906.684696][ T5718] usbhid 2-1:0.0: can't add hid device: -71 [ 906.698288][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 906.725536][ T5718] usb 2-1: USB disconnect, device number 116 [ 912.196510][ T5718] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 912.346507][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 912.349418][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.349438][ T5718] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 912.349472][ T5718] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 912.349493][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.427382][ T5718] usb 5-1: config 0 descriptor?? [ 913.551033][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.555864][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.579508][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.582215][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.787806][T15401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.788433][T15401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.835857][T13944] usb 5-1: USB disconnect, device number 88 [ 926.925679][T15448] Bluetooth: MGMT ver 1.23 [ 930.673708][ T5792] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 930.998522][T15480] bridge_slave_0: invalid flags given to default FDB implementation [ 931.739403][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.739526][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.825940][ T5792] usb 4-1: Using ep0 maxpacket: 32 [ 931.827952][ T5792] usb 4-1: device descriptor read/all, error -71 [ 943.219755][ T6782] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 944.451752][T15549] bridge_slave_0: invalid flags given to default FDB implementation [ 944.856299][ T6782] usb 3-1: Using ep0 maxpacket: 32 [ 944.990494][ T6782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.990520][ T6782] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 944.990555][ T6782] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 944.990576][ T6782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.003452][ T6782] usb 3-1: config 0 descriptor?? [ 947.221611][ T5792] usb 3-1: USB disconnect, device number 93 [ 948.447308][T15565] fuse: Bad value for 'fd' [ 963.346354][ T5732] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 963.496477][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 963.514441][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.514465][ T5732] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 963.514497][ T5732] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 963.514509][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.555675][ T5732] usb 3-1: config 0 descriptor?? [ 963.689913][T15644] netlink: 'syz.0.3582': attribute type 12 has an invalid length. [ 963.692184][T15644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 963.996519][ T1725] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 964.148215][ T1725] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 964.148231][ T1725] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 964.158491][ T1725] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 964.158519][ T1725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.158536][ T1725] usb 4-1: Product: syz [ 964.158550][ T1725] usb 4-1: Manufacturer: syz [ 964.158563][ T1725] usb 4-1: SerialNumber: syz [ 964.373634][T15655] fuse: Bad value for 'fd' [ 964.381852][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.384564][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.396128][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.399471][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.502328][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.503969][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.509129][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.511420][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.614081][ T1725] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 964.614683][ T1725] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 964.626531][ T1725] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 964.626680][ T1725] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 964.660939][ T1725] usb 4-1: USB disconnect, device number 106 [ 964.822428][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.833085][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.544181][ T6782] usb 3-1: USB disconnect, device number 94 [ 971.537148][T15685] Invalid argument reading file caps for ./file0 [ 971.776339][ T5602] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 971.966049][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 971.966080][ T5602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.966100][ T5602] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.966139][ T5602] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 971.966161][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.779602][ T5602] usb 4-1: config 0 descriptor?? [ 976.227401][T15685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.228025][T15685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.323909][ T36] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 976.357040][ T5602] usbhid 4-1:0.0: can't add hid device: -71 [ 976.373873][ T5602] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 976.419556][ T5602] usb 4-1: USB disconnect, device number 107 [ 976.476669][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 976.478786][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.478807][ T36] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 976.478841][ T36] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 976.478861][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.488369][ T36] usb 5-1: config 0 descriptor?? [ 977.956402][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 978.108603][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 978.108628][ T9] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 978.137816][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 978.137843][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.137862][ T9] usb 4-1: Product: syz [ 978.137876][ T9] usb 4-1: Manufacturer: syz [ 978.137890][ T9] usb 4-1: SerialNumber: syz [ 978.372594][T15731] fuse: fd is not a fuse device [ 978.390954][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.393561][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.427680][T15722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.428317][T15722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.897356][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 978.915755][ T9] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 978.935654][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 978.935745][ T9] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 978.963040][ T9] usb 4-1: USB disconnect, device number 108 [ 979.040362][ T1725] usb 5-1: USB disconnect, device number 89 [ 979.626455][T15740] syzkaller0: entered promiscuous mode [ 979.626479][T15740] syzkaller0: entered allmulticast mode [ 984.496680][T15766] Invalid argument reading file caps for ./file0 [ 986.116385][ T9] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 986.282385][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 986.282405][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.282417][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.282438][ T9] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 986.282449][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.374293][ T9] usb 5-1: config 0 descriptor?? [ 987.212435][T15766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.226303][T15766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.266197][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 987.274312][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 987.331909][ T9] usb 5-1: USB disconnect, device number 90 [ 993.125725][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.125790][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.324591][T15811] fuse: fd is not a fuse device [ 998.675367][T15820] syzkaller0: entered promiscuous mode [ 998.675391][T15820] syzkaller0: entered allmulticast mode [ 998.870425][T14097] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 1007.595453][T15855] batadv_slave_0: entered promiscuous mode [ 1008.966888][T15857] batadv_slave_0: left promiscuous mode [ 1018.703373][T15924] netlink: 'syz.4.3650': attribute type 12 has an invalid length. [ 1018.705026][T15924] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1020.011192][T15929] netlink: 'syz.2.3647': attribute type 12 has an invalid length. [ 1020.019004][T15932] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1020.285028][T15939] syzkaller0: entered promiscuous mode [ 1020.285052][T15939] syzkaller0: entered allmulticast mode [ 1028.823443][T15978] batadv_slave_0: entered promiscuous mode [ 1029.069474][T15981] batadv_slave_0: left promiscuous mode [ 1031.682502][T15996] syzkaller0: entered promiscuous mode [ 1031.682526][T15996] syzkaller0: entered allmulticast mode [ 1038.169865][T16030] batadv_slave_0: entered promiscuous mode [ 1038.406924][T16034] batadv_slave_0: left promiscuous mode [ 1041.029007][T16061] syzkaller0: entered promiscuous mode [ 1041.029035][T16061] syzkaller0: entered allmulticast mode [ 1041.391703][T16068] Invalid argument reading file caps for ./file0 [ 1041.646441][ T1725] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1042.051289][ T1725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.051321][ T1725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.051342][ T1725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1042.051381][ T1725] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1042.051402][ T1725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.084107][ T1725] usb 4-1: config 0 descriptor?? [ 1043.882109][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.883883][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.936409][ T1725] usbhid 4-1:0.0: can't add hid device: -71 [ 1043.936481][ T1725] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1043.970047][ T1725] usb 4-1: USB disconnect, device number 109 [ 1045.336764][T16115] syzkaller0: entered promiscuous mode [ 1045.336789][T16115] syzkaller0: entered allmulticast mode [ 1049.304813][T16139] batadv_slave_0: entered promiscuous mode [ 1049.746816][T16137] batadv_slave_0: left promiscuous mode [ 1050.122446][ T5792] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1050.318629][ T5792] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.318654][ T5792] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1050.320759][ T5792] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1050.320775][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.320785][ T5792] usb 2-1: Product: syz [ 1050.320792][ T5792] usb 2-1: Manufacturer: syz [ 1050.320799][ T5792] usb 2-1: SerialNumber: syz [ 1050.389269][T16157] netlink: 'syz.3.3713': attribute type 12 has an invalid length. [ 1050.407466][T16157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1050.621928][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.625394][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.653918][T16148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.666843][T16148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.817215][ T5605] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1050.877079][ T5792] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1050.884901][ T5792] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1050.933945][ T5792] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1050.934036][ T5792] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1050.963288][ T5792] usb 2-1: USB disconnect, device number 117 [ 1054.841672][ T5605] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1054.841835][ T5605] Bluetooth: hci4: Injecting HCI hardware error event [ 1054.844000][T15110] Bluetooth: hci4: hardware error 0x00 [ 1054.862829][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.862893][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.053615][T16185] fuse: fd is not a fuse device [ 1055.266397][ T5792] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1055.606426][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 1055.609743][ T5792] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1055.609768][ T5792] usb 3-1: config 179 has no interface number 0 [ 1055.609811][ T5792] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1055.609836][ T5792] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1055.609862][ T5792] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1055.609886][ T5792] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1055.609910][ T5792] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1055.609935][ T5792] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1055.609966][ T5792] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1055.609987][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.403732][ T5792] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input40 [ 1056.456587][ T4945] input input40: unable to receive magic message: -110 [ 1056.529234][ T4945] input input40: unable to receive magic message: -32 [ 1056.612336][ T4945] input input40: unable to receive magic message: -32 [ 1056.712142][ T4945] input input40: unable to receive magic message: -32 [ 1056.838402][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.838977][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839007][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839031][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839055][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839459][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839486][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839510][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.839533][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.840108][ T9] hid-generic 0006:0004:0009.002F: unknown main item tag 0x0 [ 1056.844056][T16058] input input40: unable to receive magic message: -32 [ 1057.610149][T15110] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1057.640700][ T4945] input input40: unable to receive magic message: -32 [ 1057.706143][ T9] hid-generic 0006:0004:0009.002F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1057.745370][ T4945] input input40: unable to receive magic message: -32 [ 1057.830663][ T4945] input input40: unable to receive magic message: -32 [ 1057.846837][ T6782] usb 3-1: USB disconnect, device number 95 [ 1057.846857][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1057.846916][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1058.001427][T16198] fido_id[16198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1058.193848][T16202] batadv_slave_0: entered promiscuous mode [ 1058.510047][T16205] batadv_slave_0: left promiscuous mode [ 1059.004905][ T6782] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1061.885955][ T6782] usb 4-1: device descriptor read/all, error -71 [ 1063.285604][T16232] fuse: fd is not a fuse device [ 1064.747028][T16248] batadv_slave_0: entered promiscuous mode [ 1064.916677][ T5610] kworker/0:4 (5610) used greatest stack depth: 14720 bytes left [ 1064.950957][T16251] batadv_slave_0: left promiscuous mode [ 1066.056772][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1066.436374][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1066.438177][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1066.438200][ T9] usb 4-1: config 179 has no interface number 0 [ 1066.438243][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1066.438267][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1066.438292][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1066.438316][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1066.438339][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1066.438364][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1066.438393][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1066.438414][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.574714][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input41 [ 1068.594635][ T4945] input input41: unable to receive magic message: -71 [ 1068.722805][ T4945] input input41: unable to receive magic message: -71 [ 1068.873950][ T4945] input input41: unable to receive magic message: -71 [ 1068.942989][ T9] usb 4-1: USB disconnect, device number 112 [ 1068.943106][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1070.724585][T16286] netlink: 'syz.1.3746': attribute type 12 has an invalid length. [ 1070.781382][T16286] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1074.331621][T16313] batadv_slave_0: entered promiscuous mode [ 1075.286410][ T5732] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1075.503250][T16316] batadv_slave_0: left promiscuous mode [ 1076.476340][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 1076.595586][ T5732] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1076.595611][ T5732] usb 5-1: config 179 has no interface number 0 [ 1076.595654][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1076.595678][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1076.595704][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1076.595725][ T5732] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1076.595749][ T5732] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1076.595773][ T5732] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1076.595804][ T5732] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1076.595824][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.794436][ T5732] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input42 [ 1076.906576][ T4945] input input42: unable to receive magic message: -110 [ 1076.987798][ T4945] input input42: unable to receive magic message: -32 [ 1077.743083][ T1725] hid_parser_main: 7 callbacks suppressed [ 1077.743103][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743139][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743165][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743190][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743215][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743240][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743265][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743289][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743314][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.743339][ T1725] hid-generic 0006:0004:0009.0030: unknown main item tag 0x0 [ 1077.752825][ T1725] hid-generic 0006:0004:0009.0030: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1078.358130][T16336] fido_id[16336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1078.550796][ T5732] usb 5-1: USB disconnect, device number 91 [ 1078.550921][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1087.293533][T16390] batadv_slave_0: entered promiscuous mode [ 1088.940038][T16394] batadv_slave_0: left promiscuous mode [ 1091.762573][T16416] fuse: Unknown parameter 'grou00000000000000000000' [ 1100.806240][T16465] fuse: Unknown parameter 'group_i00000000000000000000' [ 1101.723860][T16462] batadv_slave_0: entered promiscuous mode [ 1101.802270][T16474] netlink: 'syz.4.3793': attribute type 12 has an invalid length. [ 1101.818649][T16474] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1103.406028][T16470] batadv_slave_0: left promiscuous mode [ 1109.244926][T16511] fuse: Unknown parameter 'group_i00000000000000000000' [ 1110.236426][ T5792] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1110.753874][ T5792] usb 3-1: device not accepting address 96, error -71 [ 1115.728655][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.728722][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.197544][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 1120.281731][T16560] fuse: fd is not a fuse device [ 1134.640636][T16628] batadv_slave_0: entered promiscuous mode [ 1134.825981][T16626] batadv_slave_0: left promiscuous mode [ 1147.166389][ T5602] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1148.156377][ T5602] usb 4-1: Using ep0 maxpacket: 32 [ 1148.159007][ T5602] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.159030][ T5602] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1148.159068][ T5602] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1148.159089][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.218955][ T5602] usb 4-1: config 0 descriptor?? [ 1149.875543][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.885499][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.891859][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.902391][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.906393][ T5718] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1149.990465][T16719] batadv_slave_0: entered promiscuous mode [ 1150.082663][ T5718] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1150.082691][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.082708][ T5718] usb 2-1: Product: syz [ 1150.082718][ T5718] usb 2-1: Manufacturer: syz [ 1150.082725][ T5718] usb 2-1: SerialNumber: syz [ 1150.238058][T16723] batadv_slave_0: left promiscuous mode [ 1150.416921][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.421827][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.544098][ T5718] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1150.546166][ T5718] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1150.580533][ T5718] uvcvideo 2-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1150.580613][ T5718] uvcvideo 2-1:13.0: No valid video chain found. [ 1150.603249][ T5718] usb 2-1: USB disconnect, device number 118 [ 1151.179748][ T5718] usb 4-1: USB disconnect, device number 113 [ 1160.188216][T16777] batadv_slave_0: entered promiscuous mode [ 1167.973672][T16820] batadv_slave_0: entered promiscuous mode [ 1168.142259][T16829] batadv_slave_0: left promiscuous mode [ 1172.562064][T16856] netlink: 'syz.0.3882': attribute type 12 has an invalid length. [ 1172.570139][T16856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1176.336728][T16878] netlink: 'syz.4.3892': attribute type 12 has an invalid length. [ 1176.343997][T16878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1177.677798][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.677865][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.655838][T16951] batadv_slave_0: entered promiscuous mode [ 1189.819998][T16953] batadv_slave_0: left promiscuous mode [ 1197.700221][T17003] batadv_slave_0: entered promiscuous mode [ 1197.920499][T17006] batadv_slave_0: left promiscuous mode [ 1200.821968][T17026] netlink: 'syz.1.3932': attribute type 12 has an invalid length. [ 1206.844506][T17060] batadv_slave_0: entered promiscuous mode [ 1207.119406][T17057] batadv_slave_0: left promiscuous mode [ 1222.410503][T17155] fuse: Bad value for 'fd' [ 1226.469787][T17167] batadv_slave_0: entered promiscuous mode [ 1226.678106][T17181] batadv_slave_0: left promiscuous mode [ 1229.342123][ T1725] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1229.543658][ T1725] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.543673][ T1725] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1229.547848][ T1725] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1229.547878][ T1725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.547896][ T1725] usb 3-1: Product: syz [ 1229.547909][ T1725] usb 3-1: Manufacturer: syz [ 1229.547922][ T1725] usb 3-1: SerialNumber: syz [ 1229.975154][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.993882][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.017788][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.021722][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.233623][ T1725] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1230.245612][ T1725] dvb_usb_af9015 3-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1230.259820][ T1725] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1230.259913][ T1725] dvb_usb_af9035 3-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1230.290292][ T1725] usb 3-1: USB disconnect, device number 98 [ 1235.670522][T17236] kvm: kvm [17235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffed0000df00 [ 1235.675439][T17236] kvm: kvm [17235]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffe200000500 [ 1238.642527][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.642594][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.348629][T17275] fuse: fd is not a fuse device [ 1241.500666][ T1725] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1241.648594][ T1725] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.648650][ T1725] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 1241.653082][ T1725] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 1241.653108][ T1725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.653126][ T1725] usb 5-1: Product: syz [ 1241.653139][ T1725] usb 5-1: Manufacturer: syz [ 1241.653152][ T1725] usb 5-1: SerialNumber: syz [ 1242.070418][ T1725] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1242.085668][ T1725] dvb_usb_af9015 5-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1242.098188][ T1725] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1242.098277][ T1725] dvb_usb_af9035 5-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1242.130225][ T1725] usb 5-1: USB disconnect, device number 92 [ 1251.058754][T17318] fuse: Bad value for 'fd' [ 1270.372680][T17443] fuse: Bad value for 'fd' [ 1272.859383][T17457] fuse: fd is not a fuse device [ 1275.904965][T17478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1275.904997][T17478] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1299.208503][T17574] fuse: Bad value for 'fd' [ 1300.048970][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.049034][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.283170][T17581] fuse: fd is not a fuse device [ 1302.915105][T17598] Invalid argument reading file caps for ./file0 [ 1303.403258][ T1725] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1303.559503][ T1725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1303.559537][ T1725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.559558][ T1725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1303.559596][ T1725] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1303.559617][ T1725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.587685][ T1725] usb 3-1: config 0 descriptor?? [ 1305.125725][T17598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.132013][T17598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.285029][ T1725] usbhid 3-1:0.0: can't add hid device: -71 [ 1305.285149][ T1725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1305.293634][ T1725] usb 3-1: USB disconnect, device number 99 [ 1308.224991][T17641] fuse: fd is not a fuse device [ 1318.531188][ T1725] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1318.687990][ T1725] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1318.688018][ T1725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.688035][ T1725] usb 4-1: Product: syz [ 1318.688048][ T1725] usb 4-1: Manufacturer: syz [ 1318.688060][ T1725] usb 4-1: SerialNumber: syz [ 1320.081515][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.082112][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.244699][ T1725] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1320.246169][ T1725] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1320.247318][ T1725] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1320.247346][ T1725] uvcvideo 4-1:13.0: No valid video chain found. [ 1320.277893][ T1725] usb 4-1: USB disconnect, device number 114 [ 1332.433982][T17762] fuse: Bad value for 'fd' [ 1339.776193][T17803] fuse: Bad value for 'fd' [ 1352.214728][T17871] fuse: Unknown parameter '0x0000000000000005' [ 1357.955675][T17901] bridge_slave_0: invalid flags given to default FDB implementation [ 1358.056348][ T1725] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1358.217280][ T1725] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1358.217309][ T1725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.217327][ T1725] usb 5-1: Product: syz [ 1358.217341][ T1725] usb 5-1: Manufacturer: syz [ 1358.217354][ T1725] usb 5-1: SerialNumber: syz [ 1359.350805][T17910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.353447][T17910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.471054][ T1725] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1359.473432][ T1725] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1359.474234][ T1725] uvcvideo 5-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1359.474261][ T1725] uvcvideo 5-1:13.0: No valid video chain found. [ 1359.516379][ T1725] usb 5-1: USB disconnect, device number 93 [ 1361.855434][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.855500][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.551105][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1376.498398][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4197'. [ 1382.636353][ T1725] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1382.786371][ T1725] usb 3-1: Using ep0 maxpacket: 8 [ 1382.788915][ T1725] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1382.788940][ T1725] usb 3-1: config 179 has no interface number 0 [ 1382.788984][ T1725] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1382.789009][ T1725] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1382.789047][ T1725] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1382.789071][ T1725] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1382.789095][ T1725] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1382.789119][ T1725] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1382.789151][ T1725] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1382.789171][ T1725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.869473][ T1725] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input43 [ 1383.917101][ T4945] input input43: unable to receive magic message: -110 [ 1383.999704][ T4945] input input43: unable to receive magic message: -32 [ 1384.081051][ T4945] input input43: unable to receive magic message: -32 [ 1384.157787][ T5602] hid_parser_main: 7 callbacks suppressed [ 1384.162707][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162744][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162771][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162796][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162820][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162845][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162870][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162894][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162918][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.162943][ T5602] hid-generic 0006:0004:0009.0031: unknown main item tag 0x0 [ 1384.180807][ T5602] hid-generic 0006:0004:0009.0031: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1385.335536][ T4945] input input43: unable to receive magic message: -32 [ 1385.419690][ T5602] usb 3-1: USB disconnect, device number 100 [ 1385.419756][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1385.591487][T18079] fido_id[18079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1392.800005][T18125] batadv_slave_0: entered promiscuous mode [ 1393.024881][T18123] batadv_slave_0: left promiscuous mode [ 1394.866383][ T5602] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1395.017118][ T5602] usb 3-1: Using ep0 maxpacket: 8 [ 1395.019574][ T5602] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1395.019597][ T5602] usb 3-1: config 179 has no interface number 0 [ 1395.019639][ T5602] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1395.019664][ T5602] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1395.019689][ T5602] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1395.019713][ T5602] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1395.019737][ T5602] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1395.019761][ T5602] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1395.019792][ T5602] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1395.019813][ T5602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.102869][ T5602] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input44 [ 1395.166678][ T4945] input input44: unable to receive magic message: -110 [ 1395.247393][ T4945] input input44: unable to receive magic message: -32 [ 1395.327297][ T4945] input input44: unable to receive magic message: -32 [ 1395.411253][ T4945] input input44: unable to receive magic message: -32 [ 1395.628000][ T1725] hid_parser_main: 7 callbacks suppressed [ 1395.628021][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628050][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628090][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628114][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628139][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628169][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628326][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628351][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628376][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.628401][ T1725] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 1395.743581][T18137] input input44: unable to receive magic message: -32 [ 1395.744920][ T1725] hid-generic 0006:0004:0009.0032: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1395.873424][ T4945] input input44: unable to receive magic message: -32 [ 1395.950574][ T4945] input input44: unable to receive magic message: -32 [ 1395.982938][T18142] fido_id[18142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1397.403823][ T4945] input input44: unable to receive magic message: -32 [ 1397.496436][ T1725] usb 3-1: USB disconnect, device number 101 [ 1397.496488][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1398.134903][T16622] batadv_slave_0: left promiscuous mode [ 1398.432912][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1398.485095][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1398.515034][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1398.527324][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1398.531195][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1401.265329][T18157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.265538][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.265703][T18157] bridge_slave_0: entered allmulticast mode [ 1401.290602][T18157] bridge_slave_0: entered promiscuous mode [ 1401.294320][T18157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.294542][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.295026][T18157] bridge_slave_1: entered allmulticast mode [ 1401.329465][T18157] bridge_slave_1: entered promiscuous mode [ 1401.398679][T18157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.402743][T18157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.465551][T18157] team0: Port device team_slave_0 added [ 1401.479293][T18157] team0: Port device team_slave_1 added [ 1401.544838][T18157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.544853][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.544877][T18157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.590942][T18157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.590956][T18157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.590982][T18157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.709337][T18157] hsr_slave_0: entered promiscuous mode [ 1401.710632][T18157] hsr_slave_1: entered promiscuous mode [ 1401.711546][T18157] debugfs: 'hsr0' already exists in 'hsr' [ 1401.711569][T18157] Cannot create hsr debugfs directory [ 1401.980406][ T5605] Bluetooth: hci3: command tx timeout [ 1403.202339][T18214] batadv_slave_0: entered promiscuous mode [ 1404.686775][ T5605] Bluetooth: hci3: command tx timeout [ 1406.188284][T18157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1406.351592][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.360889][ T5605] Bluetooth: hci3: command tx timeout [ 1407.420187][T18157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1407.501809][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1408.278315][T18157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1408.313887][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1408.315579][T18157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1408.363918][T18157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.467781][T18157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.483961][T18157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.545146][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.545346][T16513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.564008][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.564137][T16513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.481414][ T5605] Bluetooth: hci3: command tx timeout [ 1410.985653][T18157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.130831][T18157] veth0_vlan: entered promiscuous mode [ 1412.158140][T18157] veth1_vlan: entered promiscuous mode [ 1412.210697][T18308] fuse: Bad value for 'fd' [ 1412.307068][T18157] veth0_macvtap: entered promiscuous mode [ 1412.325666][T18157] veth1_macvtap: entered promiscuous mode [ 1413.410993][T18157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.449501][T18157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.552904][ T141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.555782][ T141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.555822][ T141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.555855][ T141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.589504][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.589523][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.713743][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.713763][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.489056][T18344] batadv_slave_0: entered promiscuous mode [ 1423.742273][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.742342][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.309825][T18438] block nbd2: NBD_DISCONNECT [ 1429.310219][T18438] block nbd2: Send disconnect failed -32 [ 1429.337836][T15110] block nbd2: Disconnected due to user request. [ 1434.219454][ T5718] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1434.412500][ T5718] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1434.412530][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.412548][ T5718] usb 4-1: Product: syz [ 1434.412562][ T5718] usb 4-1: Manufacturer: syz [ 1434.412575][ T5718] usb 4-1: SerialNumber: syz [ 1435.794136][T18486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.802108][T18486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.920931][ T5718] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1435.922829][ T5718] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1435.923441][ T5718] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1435.923457][ T5718] uvcvideo 4-1:13.0: No valid video chain found. [ 1435.962398][ T5718] usb 4-1: USB disconnect, device number 115 [ 1439.610815][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4312'. [ 1439.675303][T18526] veth1_to_team: entered promiscuous mode [ 1439.690383][T18526] gretap0: entered promiscuous mode [ 1439.695226][T18526] hsr1: entered promiscuous mode [ 1442.359460][T18537] fuse: fd is not a fuse device [ 1446.848156][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1451.421185][T18590] fuse: Bad value for 'fd' [ 1459.213365][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1459.862916][T18648] fuse: Invalid rootmode [ 1466.994688][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1473.010226][T18718] fuse: Bad value for 'fd' [ 1474.878161][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1477.355012][T18763] fuse: Bad value for 'fd' [ 1482.955035][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1482.961606][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.692706][T18801] Driver unsupported XDP return value 0 on prog (id 105) dev N/A, expect packet loss! [ 1487.986528][T18818] block nbd5: NBD_DISCONNECT [ 1487.986559][T18818] block nbd5: Send disconnect failed -32 [ 1487.986806][T18818] block nbd5: Disconnected due to user request. [ 1487.986844][T18818] block nbd5: shutting down sockets [ 1490.423871][T15110] block nbd3: Receive control failed (result -32) [ 1491.513764][T18833] block nbd3: NBD_DISCONNECT [ 1491.513790][T18833] block nbd3: Send disconnect failed -32 [ 1491.516700][T18833] block nbd3: shutting down sockets [ 1500.516339][T18878] fuse: fd is not a fuse device [ 1507.680198][T18323] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1510.776132][T18323] usb 4-1: Using ep0 maxpacket: 8 [ 1510.777095][T18323] usb 4-1: device descriptor read/all, error -71 [ 1513.956671][T18969] fuse: Bad value for 'fd' [ 1516.539930][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1520.753833][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 1534.034076][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1534.089538][T19082] veth1_to_team: entered promiscuous mode [ 1534.099040][T19082] gretap0: entered promiscuous mode [ 1534.108400][T19082] debugfs: 'hsr1' already exists in 'hsr' [ 1534.108425][T19082] Cannot create hsr debugfs directory [ 1534.108446][T19082] hsr1: entered promiscuous mode [ 1534.722640][T19086] fuse: Bad value for 'fd' [ 1536.137972][ T1725] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1537.045579][ T1725] usb 6-1: Using ep0 maxpacket: 8 [ 1537.048813][ T1725] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1537.048836][ T1725] usb 6-1: config 179 has no interface number 0 [ 1537.048878][ T1725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1537.048903][ T1725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1537.048928][ T1725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1537.048951][ T1725] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1537.049680][ T1725] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1537.051211][ T1725] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1537.051248][ T1725] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1537.051271][ T1725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.917303][ T1725] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input45 [ 1538.002968][ T4945] input input45: unable to receive magic message: -110 [ 1538.218946][ T4945] input input45: unable to receive magic message: -32 [ 1538.300369][ T4945] input input45: unable to receive magic message: -32 [ 1538.643311][ T5602] hid_parser_main: 7 callbacks suppressed [ 1538.643331][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643360][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643384][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643408][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643433][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643457][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643480][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643502][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643526][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1538.643549][ T5602] hid-generic 0006:0004:0009.0033: unknown main item tag 0x0 [ 1539.496545][T19083] input input45: unable to receive magic message: -32 [ 1539.503969][ T5602] hid-generic 0006:0004:0009.0033: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1539.868230][ T4945] input input45: unable to receive magic message: -32 [ 1540.040477][T18265] usb 6-1: USB disconnect, device number 2 [ 1540.040577][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1541.101827][T19116] fido_id[19116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1544.694928][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1544.695962][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1567.354152][T15110] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1568.373159][T15110] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1568.490095][T19256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1571.310397][T15110] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1571.310700][T15110] Bluetooth: hci3: Injecting HCI hardware error event [ 1571.315576][ T5605] Bluetooth: hci3: hardware error 0x00 [ 1572.406314][T19283] block nbd3: NBD_DISCONNECT [ 1572.406340][T19283] block nbd3: Send disconnect failed -32 [ 1572.406400][T19283] block nbd3: Disconnected due to user request. [ 1572.406415][T19283] block nbd3: shutting down sockets [ 1574.372292][ T5605] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1575.454396][T19298] fuse: Bad value for 'fd' [ 1592.271855][T19407] fuse: Bad value for 'fd' [ 1595.026760][T19444] block nbd5: NBD_DISCONNECT [ 1596.015193][T19445] fuse: Bad value for 'fd' [ 1598.446664][T19468] batadv_slave_0: entered promiscuous mode [ 1599.421561][T19476] fuse: fd is not a fuse device [ 1599.774836][T19472] batadv_slave_0: left promiscuous mode [ 1602.179855][T19489] fuse: Unknown parameter 'group_id00000000000000000000' [ 1604.392705][T19501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4581'. [ 1604.831038][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1604.831106][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.200467][T19512] Unknown status report in ack skb [ 1608.121111][T19527] batadv_slave_0: entered promiscuous mode [ 1608.186800][T19519] batadv_slave_0: left promiscuous mode [ 1610.167909][T19536] fuse: Bad value for 'fd' [ 1620.279808][ C1] Unknown status report in ack skb [ 1622.352453][T19608] fuse: Bad value for 'user_id' [ 1622.352472][T19608] fuse: Bad value for 'user_id' [ 1629.497594][T19644] block nbd3: NBD_DISCONNECT [ 1630.880266][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1633.087907][T19668] fuse: Bad value for 'user_id' [ 1633.087946][T19668] fuse: Bad value for 'user_id' [ 1634.703107][T15110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1634.783488][T15110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1634.801332][T15110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1634.816614][T15110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1634.820462][T15110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1635.585507][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1636.947485][ T5605] Bluetooth: hci0: command tx timeout [ 1637.474692][T19671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.474824][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.475417][T19671] bridge_slave_0: entered allmulticast mode [ 1637.498193][T19671] bridge_slave_0: entered promiscuous mode [ 1637.500342][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.500460][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.500564][T19671] bridge_slave_1: entered allmulticast mode [ 1637.504699][T19671] bridge_slave_1: entered promiscuous mode [ 1637.579430][T19671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.583185][T19671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.708620][T19671] team0: Port device team_slave_0 added [ 1637.713514][T19671] team0: Port device team_slave_1 added [ 1637.894937][T19671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.894952][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.894977][T19671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.553779][T19671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.553795][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.553820][T19671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.845975][T19671] hsr_slave_0: entered promiscuous mode [ 1638.847311][T19671] hsr_slave_1: entered promiscuous mode [ 1638.848233][T19671] debugfs: 'hsr0' already exists in 'hsr' [ 1638.848256][T19671] Cannot create hsr debugfs directory [ 1639.029627][ T5605] Bluetooth: hci0: command tx timeout [ 1641.104232][ T5605] Bluetooth: hci0: command tx timeout [ 1641.532140][T19719] fuse: Bad value for 'user_id' [ 1641.532180][T19719] fuse: Bad value for 'user_id' [ 1643.189282][ T5605] Bluetooth: hci0: command tx timeout [ 1643.937555][T19671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1644.026020][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1644.029847][T19671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1644.188121][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1644.192701][T19671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1644.395048][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1644.398230][T19671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1645.152220][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1645.724972][T19671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.750183][T19671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.760575][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.760772][T17282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.779208][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.779402][T17282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.490824][T19760] block nbd3: NBD_DISCONNECT [ 1649.306057][T19671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.477810][T13944] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1651.630653][T13944] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.633093][T13944] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1651.633118][T13944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.633138][T13944] usb 4-1: Product: syz [ 1651.633151][T13944] usb 4-1: Manufacturer: syz [ 1651.633165][T13944] usb 4-1: SerialNumber: syz [ 1651.681448][T19671] veth0_vlan: entered promiscuous mode [ 1652.353596][T19671] veth1_vlan: entered promiscuous mode [ 1652.524268][T19783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.526028][T19783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.642856][T13944] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1652.646489][T13944] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1652.689664][T13944] usb 4-1: USB disconnect, device number 118 [ 1652.722356][T19671] veth0_macvtap: entered promiscuous mode [ 1652.731798][T19671] veth1_macvtap: entered promiscuous mode [ 1652.754291][T19671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.829922][T19671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.878646][T14022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.878890][T14022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.878926][T14022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.921482][T14022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.472507][T16513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.472524][T16513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.581209][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.581229][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.201377][T19868] binder: 19865:19868 ioctl c0306201 0 returned -14 [ 1665.938186][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1665.938253][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.724743][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 1669.957980][T19897] batadv_slave_0: entered promiscuous mode [ 1683.007957][T19991] block nbd5: NBD_DISCONNECT [ 1683.008001][T19991] block nbd5: Send disconnect failed -32 [ 1683.011975][ T5605] block nbd5: Disconnected due to user request. [ 1683.061153][T19986] fuse: fd is not a fuse device [ 1697.985503][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4717'. [ 1702.301509][T20097] Invalid argument reading file caps for ./file0 [ 1703.462387][T18265] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1703.691338][T18265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1703.691368][T18265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.691389][T18265] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1703.691425][T18265] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1703.691447][T18265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.723893][T18265] usb 7-1: config 0 descriptor?? [ 1705.145870][T20097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1705.148527][T20097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.170642][T18265] usbhid 7-1:0.0: can't add hid device: -71 [ 1705.170751][T18265] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1705.218796][T18265] usb 7-1: USB disconnect, device number 2 [ 1713.977909][T20185] Invalid argument reading file caps for ./file0 [ 1714.593812][T18319] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1715.508767][T18319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1715.508800][T18319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.508820][T18319] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1715.508858][T18319] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1715.508881][T18319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.514334][T18319] usb 7-1: config 0 descriptor?? [ 1718.608719][T20199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.611987][T20199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.797267][T18319] usbhid 7-1:0.0: can't add hid device: -71 [ 1718.797383][T18319] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1718.952911][T18319] usb 7-1: USB disconnect, device number 3 [ 1726.514043][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1726.514110][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1727.246614][T20271] fuse: Bad value for 'fd' [ 1730.799206][T18059] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1730.948915][T18059] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1730.948944][T18059] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.948960][T18059] usb 7-1: Product: syz [ 1730.948967][T18059] usb 7-1: Manufacturer: syz [ 1730.948975][T18059] usb 7-1: SerialNumber: syz [ 1732.057413][T20316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.081109][T20316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.201039][T18059] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1732.201902][T18059] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1732.202572][T18059] uvcvideo 7-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1732.202600][T18059] uvcvideo 7-1:13.0: No valid video chain found. [ 1732.207654][T18059] usb 7-1: USB disconnect, device number 4 [ 1736.830797][T20350] block nbd5: NBD_DISCONNECT [ 1736.830823][T20350] block nbd5: Send disconnect failed -32 [ 1736.834112][ T5605] block nbd5: Disconnected due to user request. [ 1749.510517][T20420] fuse: fd is not a fuse device [ 1749.528654][T20406] fuse: Bad value for 'fd' [ 1749.961369][T18265] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1751.317368][T18265] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1751.317386][T18265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.317396][T18265] usb 4-1: Product: syz [ 1751.317403][T18265] usb 4-1: Manufacturer: syz [ 1751.317410][T18265] usb 4-1: SerialNumber: syz [ 1751.651900][T20426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.655264][T20426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.717725][T18265] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1751.723057][T18265] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1751.723849][T18265] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1751.723876][T18265] uvcvideo 4-1:13.0: No valid video chain found. [ 1751.737640][T18265] usb 4-1: USB disconnect, device number 119 [ 1758.593044][T20487] Unknown status report in ack skb [ 1759.651603][T20468] Bluetooth: hci0: command 0x0406 tx timeout [ 1760.348454][T20496] fuse: Unknown parameter 'group_i00000000000000000000' [ 1762.348093][T20500] fuse: Bad value for 'fd' [ 1762.723694][T20503] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1763.090064][T20503] bond1 (unregistering): Released all slaves [ 1764.568946][T20518] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1764.634067][T20518] bond1 (unregistering): Released all slaves [ 1768.289829][T20551] fuse: Bad value for 'fd' [ 1780.246937][T20616] Unknown status report in ack skb [ 1781.239763][T20622] syz_tun: entered allmulticast mode [ 1781.285115][T20622] bond0: entered promiscuous mode [ 1781.285135][T20622] bond_slave_0: entered promiscuous mode [ 1781.285358][T20622] bond_slave_1: entered promiscuous mode [ 1781.995649][T20628] fuse: Unknown parameter 'user_i00000000000000000000' [ 1787.743915][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1787.743983][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1789.810635][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1794.467096][T20715] block nbd6: NBD_DISCONNECT [ 1794.467121][T20715] block nbd6: Send disconnect failed -32 [ 1794.477630][ T5605] block nbd6: Disconnected due to user request. [ 1800.490639][T20751] syz_tun: entered allmulticast mode [ 1800.633450][T20751] bond0: entered promiscuous mode [ 1800.633471][T20751] bond_slave_0: entered promiscuous mode [ 1800.633678][T20751] bond_slave_1: entered promiscuous mode [ 1800.921344][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1802.916025][T20766] fuse: Bad value for 'fd' [ 1811.989679][T20806] fuse: Bad value for 'fd' [ 1813.685165][T20826] batadv_slave_0: entered promiscuous mode [ 1813.937166][T20821] batadv_slave_0: left promiscuous mode [ 1826.047489][T20911] fuse: Bad value for 'fd' [ 1826.851936][T20918] syzkaller1: entered promiscuous mode [ 1826.851961][T20918] syzkaller1: entered allmulticast mode [ 1837.459229][T20980] syz_tun: entered allmulticast mode [ 1837.682030][T20980] bond0: entered promiscuous mode [ 1837.682051][T20980] bond_slave_0: entered promiscuous mode [ 1837.682255][T20980] bond_slave_1: entered promiscuous mode [ 1841.122186][T21003] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1841.206991][T21003] bond1 (unregistering): Released all slaves [ 1842.415015][T21017] syz_tun: entered allmulticast mode [ 1842.458687][T21017] bond0: entered promiscuous mode [ 1842.458720][T21017] bond_slave_0: entered promiscuous mode [ 1842.458926][T21017] bond_slave_1: entered promiscuous mode [ 1843.616739][T20125] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1843.766619][T20125] usb 4-1: Using ep0 maxpacket: 8 [ 1843.769056][T20125] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1843.769079][T20125] usb 4-1: config 179 has no interface number 0 [ 1843.769123][T20125] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1843.769147][T20125] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1843.769173][T20125] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1843.769197][T20125] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1843.769222][T20125] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1843.769248][T20125] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1843.769279][T20125] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1843.769300][T20125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.833444][T20125] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input46 [ 1843.886862][ T4945] input input46: unable to receive magic message: -110 [ 1843.958380][ T4945] input input46: unable to receive magic message: -32 [ 1844.042727][ T4945] input input46: unable to receive magic message: -32 [ 1844.117347][ T4945] input input46: unable to receive magic message: -32 [ 1844.249485][ T4945] input input46: unable to receive magic message: -32 [ 1844.341125][T20427] input input46: unable to receive magic message: -32 [ 1844.511489][T20125] hid_parser_main: 7 callbacks suppressed [ 1844.511561][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511590][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511609][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511629][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511648][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511716][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511736][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511756][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511776][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.511797][T20125] hid-generic 0006:0004:0009.0034: unknown main item tag 0x0 [ 1844.528438][T20125] hid-generic 0006:0004:0009.0034: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1844.681857][ T4945] input input46: unable to receive magic message: -32 [ 1844.731467][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1844.731546][T20125] usb 4-1: USB disconnect, device number 120 [ 1844.843469][T21040] netlink: 'syz.6.4974': attribute type 4 has an invalid length. [ 1844.963370][T21033] fido_id[21033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1845.042781][T21042] trusted_key: syz.0.4979 sent an empty control message without MSG_MORE. [ 1848.244304][ T5718] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1848.409013][ T5718] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 1848.409042][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.409061][ T5718] usb 4-1: Product: syz [ 1848.409074][ T5718] usb 4-1: Manufacturer: syz [ 1848.409087][ T5718] usb 4-1: SerialNumber: syz [ 1848.833990][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1848.834059][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1849.013069][T21077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.038921][T21077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.135872][ T5718] gspca_main: pac207-2.14.0 probing 093a:2476 [ 1849.137869][ T5718] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1849.158436][ T5718] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 1849.158466][ T5718] uvcvideo 4-1:13.0: No valid video chain found. [ 1849.186322][ T5718] usb 4-1: USB disconnect, device number 121 [ 1849.732801][T18265] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1849.878482][T18265] usb 6-1: Using ep0 maxpacket: 8 [ 1849.880910][T18265] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1849.880933][T18265] usb 6-1: config 179 has no interface number 0 [ 1849.880976][T18265] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1849.881002][T18265] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1849.881027][T18265] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1849.881052][T18265] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1849.881076][T18265] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1849.881101][T18265] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1849.881133][T18265] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1849.881154][T18265] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.039741][T18265] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input47 [ 1850.602980][ T4945] input input47: unable to receive magic message: -110 [ 1850.929778][ T4945] input input47: unable to receive magic message: -32 [ 1851.074756][ T5718] hid_parser_main: 7 callbacks suppressed [ 1851.074776][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075097][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075125][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075371][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075399][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075424][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075449][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075688][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075716][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.075741][ T5718] hid-generic 0006:0004:0009.0035: unknown main item tag 0x0 [ 1851.167664][ T5718] hid-generic 0006:0004:0009.0035: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1851.236514][ T4945] input input47: unable to receive magic message: -32 [ 1852.316327][ T4945] input input47: unable to receive magic message: -32 [ 1852.396217][ T5718] usb 6-1: USB disconnect, device number 3 [ 1852.396323][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1852.453470][T21102] fido_id[21102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1854.156184][T21127] netlink: 'syz.5.5002': attribute type 4 has an invalid length. [ 1854.174076][T21128] block nbd6: NBD_DISCONNECT [ 1854.187092][ T5605] block nbd6: Disconnected due to user request. [ 1857.061218][T21172] netlink: 'syz.5.5006': attribute type 39 has an invalid length. [ 1860.130727][T21199] syzkaller0: entered promiscuous mode [ 1860.130752][T21199] syzkaller0: entered allmulticast mode [ 1863.817127][T21217] Invalid argument reading file caps for ./file0 [ 1864.085568][T18319] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1864.102428][T21224] syz_tun: entered allmulticast mode [ 1864.296368][T21224] bond0: entered promiscuous mode [ 1864.296389][T21224] bond_slave_0: entered promiscuous mode [ 1864.296597][T21224] bond_slave_1: entered promiscuous mode [ 1865.214132][T18319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1865.214164][T18319] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1865.214179][T18319] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1865.214201][T18319] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1865.214212][T18319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.219177][T18319] usb 7-1: config 0 descriptor?? [ 1866.127433][T21217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.143771][T21217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.521095][T18319] usbhid 7-1:0.0: can't add hid device: -71 [ 1866.522260][T18319] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1866.529519][T18319] usb 7-1: USB disconnect, device number 5 [ 1868.350722][ T5605] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1870.155506][T21264] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1870.409784][T21264] bond1 (unregistering): Released all slaves [ 1873.326055][T21287] Invalid argument reading file caps for ./file0 [ 1874.510886][T21285] tipc: Started in network mode [ 1874.510915][T21285] tipc: Node identity 9a6fbf4bc836, cluster identity 4711 [ 1874.511859][T21285] tipc: Enabled bearer , priority 0 [ 1874.512766][T21290] syzkaller0: entered promiscuous mode [ 1874.512804][T21290] syzkaller0: entered allmulticast mode [ 1874.570889][ T5732] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1874.578193][T21284] tipc: Resetting bearer [ 1874.631052][T21283] tipc: Resetting bearer [ 1874.762109][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1874.762140][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1874.762160][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1874.762198][ T5732] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1874.762219][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.767768][ T5732] usb 4-1: config 0 descriptor?? [ 1874.831949][T21283] tipc: Disabling bearer [ 1875.306954][T21287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.312787][T21287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.335796][ T5732] usbhid 4-1:0.0: can't add hid device: -71 [ 1875.336092][ T5732] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1875.369666][ T5732] usb 4-1: USB disconnect, device number 122 [ 1880.849771][T21341] tipc: Enabled bearer , priority 0 [ 1880.861822][T21340] syzkaller0: entered promiscuous mode [ 1880.861845][T21340] syzkaller0: entered allmulticast mode [ 1881.076366][T21339] tipc: Resetting bearer [ 1881.259533][T21339] tipc: Disabling bearer [ 1892.909790][T21403] block nbd5: NBD_DISCONNECT [ 1892.909858][T21403] block nbd5: Send disconnect failed -32 [ 1892.913206][ T5605] block nbd5: Disconnected due to user request. [ 1900.290520][T21448] fuse: Unknown parameter 'fd0x0000000000000004' [ 1904.735823][T21496] fuse: Bad value for 'fd' [ 1907.929880][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5087'. [ 1907.943935][T21514] netlink: 'syz.3.5085': attribute type 39 has an invalid length. [ 1908.374446][T21516] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1908.422085][T21516] bond1 (unregistering): Released all slaves [ 1909.876581][T21539] fuse: Bad value for 'fd' [ 1909.892370][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.892420][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1912.953381][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5102'. [ 1916.701617][T21596] fuse: Bad value for 'fd' [ 1917.694074][T21595] fuse: fd is not a fuse device [ 1920.669388][T21624] loop8: detected capacity change from 0 to 7 [ 1920.753333][T21624] Dev loop8: unable to read RDB block 7 [ 1920.753383][T21624] loop8: unable to read partition table [ 1920.753665][T21624] loop8: partition table beyond EOD, truncated [ 1920.753683][T21624] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1921.385397][T21627] fuse: fd is not a fuse device [ 1925.702474][T21665] fuse: fd is not a fuse device [ 1926.084884][T21670] loop8: detected capacity change from 0 to 7 [ 1926.123057][T21670] Dev loop8: unable to read RDB block 7 [ 1926.123098][T21670] loop8: unable to read partition table [ 1926.123317][T21670] loop8: partition table beyond EOD, truncated [ 1926.123335][T21670] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1928.936702][T21683] fuse: Bad value for 'fd' [ 1934.521476][T21726] fuse: Bad value for 'fd' [ 1936.439998][T21748] fuse: Bad value for 'fd' [ 1939.846812][T21772] netlink: 'syz.3.5160': attribute type 4 has an invalid length. [ 1939.850498][T21770] fuse: Bad value for 'fd' [ 1950.838095][T21872] fuse: Bad value for 'fd' [ 1952.464409][T21904] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1953.114303][T21904] bond1 (unregistering): Released all slaves [ 1953.125320][T21908] fuse: fd is not a fuse device [ 1956.277230][T21940] fuse: Bad value for 'fd' [ 1957.481970][T21949] fuse: Unknown parameter 'grou00000000000000000000' [ 1964.616409][T22007] fuse: Bad value for 'fd' [ 1965.572452][T22019] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1965.763658][T22019] bond1 (unregistering): Released all slaves [ 1969.634163][T22074] fuse: Bad value for 'fd' [ 1971.800006][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1974.661646][T22125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1974.989944][T22127] fuse: Bad value for 'fd' [ 1975.052551][T22123] fuse: Bad value for 'fd' [ 1976.869653][T22151] Invalid argument reading file caps for ./file0 [ 1977.108272][T20125] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1977.261529][T20125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1977.261556][T20125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.261567][T20125] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1977.261589][T20125] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1977.261602][T20125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.342353][T20125] usb 6-1: config 0 descriptor?? [ 1978.099235][T22151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.101404][T22151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.109517][T20125] usbhid 6-1:0.0: can't add hid device: -71 [ 1978.109631][T20125] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1978.153588][T20125] usb 6-1: USB disconnect, device number 4 [ 1980.442011][T22187] fuse: fd is not a fuse device [ 1983.387713][T22200] fuse: Bad value for 'fd' [ 1986.178495][T22228] fuse: Bad value for 'fd' [ 1987.961738][T22239] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1988.126566][T22239] bond1 (unregistering): Released all slaves [ 1989.245226][T22247] fuse: Bad value for 'fd' [ 1990.717732][T22266] fuse: Bad value for 'fd' [ 1990.780277][T22263] batadv_slave_0: entered promiscuous mode [ 1991.612647][T22258] batadv_slave_0: left promiscuous mode [ 1991.646097][T22275] fuse: Bad value for 'fd' [ 1994.528376][T22301] loop8: detected capacity change from 0 to 7 [ 1994.538705][T22301] Dev loop8: unable to read RDB block 7 [ 1994.538754][T22301] loop8: unable to read partition table [ 1994.538967][T22301] loop8: partition table beyond EOD, truncated [ 1994.538984][T22301] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1995.199457][T22313] Invalid argument reading file caps for ./file0 [ 1995.708653][ T5718] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1995.861574][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1995.861604][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1995.861625][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1995.861662][ T5718] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1995.861683][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.869179][ T5718] usb 6-1: config 0 descriptor?? [ 1997.432411][T22313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.435306][T22313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.473033][ T5718] usbhid 6-1:0.0: can't add hid device: -71 [ 1997.473146][ T5718] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1997.506877][ T5718] usb 6-1: USB disconnect, device number 5 [ 1997.563920][T22342] netlink: 'syz.6.5326': attribute type 4 has an invalid length. [ 1997.842578][T22349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5330'. [ 1998.351824][T22358] Invalid argument reading file caps for ./file0 [ 1998.772305][T18327] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1999.729067][T18327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1999.729098][T18327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.729119][T18327] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1999.729157][T18327] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1999.729179][T18327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.735319][T18327] usb 6-1: config 0 descriptor?? [ 2001.101514][T22358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.118308][T22358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.212940][T18327] usbhid 6-1:0.0: can't add hid device: -71 [ 2001.213066][T18327] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2001.269011][T18327] usb 6-1: USB disconnect, device number 6 [ 2001.529577][T22394] netlink: 'syz.3.5345': attribute type 4 has an invalid length. [ 2011.467206][T22526] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2011.640914][T22526] bond1 (unregistering): Released all slaves [ 2012.204834][T22538] batadv_slave_0: entered promiscuous mode [ 2014.008973][T22548] fuse: Bad value for 'fd' [ 2017.673560][T22578] fuse: Bad value for 'fd' [ 2018.227362][T18265] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2018.388083][T18265] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 2018.388101][T18265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.388111][T18265] usb 6-1: Product: syz [ 2018.388118][T18265] usb 6-1: Manufacturer: syz [ 2018.388125][T18265] usb 6-1: SerialNumber: syz [ 2018.702174][T18265] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2018.703334][T18265] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2018.706096][T18265] uvcvideo 6-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 2018.706125][T18265] uvcvideo 6-1:13.0: No valid video chain found. [ 2018.772348][T18265] usb 6-1: USB disconnect, device number 7 [ 2020.377021][T22598] fuse: Bad value for 'fd' [ 2029.761643][ T5602] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2030.142342][ T5602] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 2030.142370][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.142388][ T5602] usb 6-1: Product: syz [ 2030.142397][ T5602] usb 6-1: Manufacturer: syz [ 2030.142404][ T5602] usb 6-1: SerialNumber: syz [ 2030.365878][T22688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.367879][T22688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.415978][ T5602] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2030.417769][ T5602] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2030.418268][ T5602] uvcvideo 6-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 2030.418284][ T5602] uvcvideo 6-1:13.0: No valid video chain found. [ 2030.430345][ T5602] usb 6-1: USB disconnect, device number 8 [ 2030.698924][T22706] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 2031.442908][T22711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5439'. [ 2032.158061][ T5605] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 2032.640732][T22726] fuse: Bad value for 'fd' [ 2033.569685][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 2034.455835][T22738] syzkaller0: entered promiscuous mode [ 2034.455850][T22738] syzkaller0: entered allmulticast mode [ 2038.076641][T22771] fuse: Bad value for 'fd' [ 2039.959328][T20468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2040.009383][T20468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2040.033377][T20468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2040.070198][T20468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2040.071226][T20468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2041.540446][T21929] syz_tun (unregistering): left allmulticast mode [ 2041.710059][T21929] batadv_slave_0: left promiscuous mode [ 2042.683437][T22829] fuse: Bad value for 'fd' [ 2042.747165][T20468] Bluetooth: hci4: command tx timeout [ 2044.762690][T16513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2044.793999][T20468] Bluetooth: hci4: command tx timeout [ 2046.883322][T20468] Bluetooth: hci4: command tx timeout [ 2047.053362][T16513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.482138][T16513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.160590][T22863] netlink: 'syz.3.5478': attribute type 39 has an invalid length. [ 2048.503994][T16513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.952365][T20468] Bluetooth: hci4: command tx timeout [ 2049.034380][T22799] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.035223][T22799] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.035402][T22799] bridge_slave_0: entered allmulticast mode [ 2049.048688][T22799] bridge_slave_0: entered promiscuous mode [ 2049.958037][T22799] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.958152][T22799] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.958336][T22799] bridge_slave_1: entered allmulticast mode [ 2049.971629][T22799] bridge_slave_1: entered promiscuous mode [ 2050.330757][T22799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.358670][T22799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.769001][T22799] team0: Port device team_slave_0 added [ 2050.791504][T22799] team0: Port device team_slave_1 added [ 2050.929700][T22799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.929716][T22799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.929740][T22799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.938565][T22799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2050.938579][T22799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.938603][T22799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.001493][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'. [ 2051.967583][T22898] fuse: Bad value for 'fd' [ 2053.220099][T16513] bridge_slave_1: left allmulticast mode [ 2053.220134][T16513] bridge_slave_1: left promiscuous mode [ 2053.220378][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.500927][T16513] bridge_slave_0: left allmulticast mode [ 2053.500951][T16513] bridge_slave_0: left promiscuous mode [ 2053.501106][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.047317][T22933] fuse: Bad value for 'fd' [ 2056.768144][T16513] gretap0 (unregistering): left promiscuous mode [ 2057.089552][T16513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2057.128246][T16513] bond_slave_0: left promiscuous mode [ 2057.168765][T16513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2057.189964][T16513] bond_slave_1: left promiscuous mode [ 2057.193030][T16513] bond0 (unregistering): Released all slaves [ 2057.249492][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2058.091191][T16513] IPVS: stopping backup sync thread 22706 ... [ 2058.678986][T22799] hsr_slave_0: entered promiscuous mode [ 2058.683905][T22799] hsr_slave_1: entered promiscuous mode [ 2058.686491][T22799] debugfs: 'hsr0' already exists in 'hsr' [ 2058.705297][T22799] Cannot create hsr debugfs directory [ 2063.729120][T22990] fuse: Bad value for 'fd' [ 2063.766547][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2064.910035][T22998] fuse: Bad value for 'fd' [ 2069.115987][T16513] veth1_to_team: left promiscuous mode [ 2069.334607][T16513] hsr_slave_0: left promiscuous mode [ 2069.378681][T16513] hsr_slave_1: left promiscuous mode [ 2069.379320][T16513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2069.379337][T16513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2069.434341][T16513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2069.434368][T16513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2069.642252][T16513] veth1_macvtap: left promiscuous mode [ 2069.642347][T16513] veth0_macvtap: left promiscuous mode [ 2069.642583][T16513] veth1_vlan: left promiscuous mode [ 2069.642738][T16513] veth0_vlan: left promiscuous mode [ 2070.141480][ T5718] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2070.297257][ T5718] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 2070.297287][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.297305][ T5718] usb 6-1: Product: syz [ 2070.297318][ T5718] usb 6-1: Manufacturer: syz [ 2070.297331][ T5718] usb 6-1: SerialNumber: syz [ 2071.271414][ T5718] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2071.271747][ T5718] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2071.272179][ T5718] uvcvideo 6-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 2071.272194][ T5718] uvcvideo 6-1:13.0: No valid video chain found. [ 2071.275729][ T5718] usb 6-1: USB disconnect, device number 9 [ 2071.741270][T16513] team0 (unregistering): Port device team_slave_1 removed [ 2071.781048][T16513] team0 (unregistering): Port device team_slave_0 removed [ 2076.856959][T22799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2076.910720][T22799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2076.914556][T22799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2076.958554][T22799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2076.963315][T22799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2077.080382][T22799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2077.084489][T22799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2077.126940][T22799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2078.669651][T22799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.716773][T22799] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.744368][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.744557][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.806345][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.806420][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.269802][T23154] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5540'. [ 2080.881536][T22799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2081.022619][T22799] veth0_vlan: entered promiscuous mode [ 2081.044043][T22799] veth1_vlan: entered promiscuous mode [ 2081.142629][T22799] veth0_macvtap: entered promiscuous mode [ 2081.163891][T22799] veth1_macvtap: entered promiscuous mode [ 2081.232595][T22799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2081.248076][T23183] block nbd5: NBD_DISCONNECT [ 2081.253363][T22799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2081.273928][T20468] block nbd5: Disconnected due to user request. [ 2081.344527][T14259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.363168][T14259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.375816][T14259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.377061][T14259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.187521][T17250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.187541][T17250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.370165][T14259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.370185][T14259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2083.503351][T23217] tipc: Started in network mode [ 2083.503377][T23217] tipc: Node identity 6ee3b80dd6d6, cluster identity 4711 [ 2083.503552][T23217] tipc: Enabled bearer , priority 0 [ 2083.529261][T23217] tipc: Resetting bearer [ 2083.796162][T23216] tipc: Disabling bearer [ 2089.082115][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5581'. [ 2089.082146][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5581'. [ 2089.371411][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5582'. [ 2089.371432][T23351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5582'. [ 2090.627312][T23367] Invalid argument reading file caps for ./file0 [ 2091.799820][T18319] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 2091.948719][T18319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2091.948750][T18319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2091.948769][T18319] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2091.948805][T18319] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2091.948823][T18319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.018026][T18319] usb 6-1: config 0 descriptor?? [ 2092.694060][T23375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.697439][T23375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.862942][T23383] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2094.906915][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 2096.285210][T18319] usbhid 6-1:0.0: can't add hid device: -71 [ 2096.285327][T18319] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2096.330816][T18319] usb 6-1: USB disconnect, device number 10 [ 2099.299903][T23420] netlink: 'syz.1.5603': attribute type 39 has an invalid length. [ 2108.212317][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5612'. [ 2112.374585][T23514] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 2112.703912][T23527] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 2129.851701][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2129.900950][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2129.903530][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2129.906694][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2129.907763][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2131.246272][T23590] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.246474][T23590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.246643][T23590] bridge_slave_0: entered allmulticast mode [ 2131.274220][T23590] bridge_slave_0: entered promiscuous mode [ 2131.306617][T23590] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.306835][T23590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.307350][T23590] bridge_slave_1: entered allmulticast mode [ 2131.332673][T23590] bridge_slave_1: entered promiscuous mode [ 2131.403714][T23590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.422648][T23590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.476984][T23590] team0: Port device team_slave_0 added [ 2131.480506][T23590] team0: Port device team_slave_1 added [ 2131.582964][T23590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2131.582980][T23590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.583004][T23590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.651195][T23590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.651210][T23590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2131.651235][T23590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.797457][T23590] hsr_slave_0: entered promiscuous mode [ 2131.798776][T23590] hsr_slave_1: entered promiscuous mode [ 2131.799699][T23590] debugfs: 'hsr0' already exists in 'hsr' [ 2131.799721][T23590] Cannot create hsr debugfs directory [ 2132.067860][ T5605] Bluetooth: hci5: command tx timeout [ 2132.983387][T20468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2133.029299][T20468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2133.030697][T20468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2133.076318][T20468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2133.077428][T20468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2133.253023][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2133.313744][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2133.316697][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2133.347531][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2133.349763][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2134.130789][ T5605] Bluetooth: hci5: command tx timeout [ 2134.544420][T20468] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2134.589872][T20468] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2134.591317][T20468] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2134.627034][T20468] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2134.629018][T20468] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2134.867086][ T5605] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2134.915618][ T5605] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2134.917018][ T5605] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2134.950191][ T5605] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2134.963685][ T5605] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2135.148930][T20468] Bluetooth: hci6: command tx timeout [ 2135.386340][T20468] Bluetooth: hci7: command tx timeout [ 2136.177640][T20468] Bluetooth: hci5: command tx timeout [ 2136.721901][T20468] Bluetooth: hci8: command tx timeout [ 2137.048477][T20468] Bluetooth: hci9: command tx timeout [ 2137.196907][T20468] Bluetooth: hci6: command tx timeout [ 2137.444484][T20468] Bluetooth: hci7: command tx timeout [ 2138.226759][T20468] Bluetooth: hci5: command tx timeout [ 2138.781710][T20468] Bluetooth: hci8: command tx timeout [ 2139.098990][T20468] Bluetooth: hci9: command tx timeout [ 2139.269255][T20468] Bluetooth: hci6: command tx timeout [ 2139.495375][T20468] Bluetooth: hci7: command tx timeout [ 2140.843970][T20468] Bluetooth: hci8: command tx timeout [ 2141.162306][T20468] Bluetooth: hci9: command tx timeout [ 2141.330231][T20468] Bluetooth: hci6: command tx timeout [ 2141.558401][T20468] Bluetooth: hci7: command tx timeout [ 2142.918400][T20468] Bluetooth: hci8: command tx timeout [ 2143.235963][T20468] Bluetooth: hci9: command tx timeout [ 2154.546352][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 2180.134793][ T4960] udevd[4960]: worker [23585] /devices/virtual/block/loop5 is taking a long time [ 2189.841145][ T5605] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2189.899359][ T5605] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2189.903086][ T5605] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2189.904566][ T5605] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2189.905602][ T5605] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2192.067540][ T5605] Bluetooth: hci10: command tx timeout [ 2193.049628][T20468] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2193.107894][T20468] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2193.123651][T20468] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2193.174281][T20468] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2193.184246][T20468] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2193.404520][T20468] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2193.458765][T20468] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2193.474639][T20468] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2193.534417][T20468] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2193.542978][T23649] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2194.144536][T23649] Bluetooth: hci10: command tx timeout [ 2195.099523][ T5605] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2195.159423][ T5605] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2195.200532][ T5605] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2195.202961][ T5605] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2195.233762][ T5605] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2195.356221][ T5605] Bluetooth: hci11: command tx timeout [ 2195.463304][T23649] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2195.520131][T23649] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2195.537847][T23649] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2195.564605][T23649] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2195.567242][T23649] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2195.673366][T23649] Bluetooth: hci12: command tx timeout [ 2196.223044][T23649] Bluetooth: hci10: command tx timeout [ 2197.342382][T23649] Bluetooth: hci13: command tx timeout [ 2197.422319][T23649] Bluetooth: hci11: command tx timeout [ 2197.662068][T23649] Bluetooth: hci14: command tx timeout [ 2197.742029][T23649] Bluetooth: hci12: command tx timeout [ 2198.301612][T23649] Bluetooth: hci10: command tx timeout [ 2199.420853][T23649] Bluetooth: hci13: command tx timeout [ 2199.500947][T23649] Bluetooth: hci11: command tx timeout [ 2199.742010][T23649] Bluetooth: hci14: command tx timeout [ 2199.820471][T23649] Bluetooth: hci12: command tx timeout [ 2201.499457][T23649] Bluetooth: hci13: command tx timeout [ 2201.579827][T23649] Bluetooth: hci11: command tx timeout [ 2201.819283][T23649] Bluetooth: hci14: command tx timeout [ 2201.899288][T23649] Bluetooth: hci12: command tx timeout [ 2203.578209][T23649] Bluetooth: hci13: command tx timeout [ 2203.897809][T23649] Bluetooth: hci14: command tx timeout [ 2215.894540][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.127268][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2222.127285][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 2222.127314][ C1] rcu: (detected by 1, t=10502 jiffies, g=147909, q=6352 ncpus=2) [ 2222.127334][ C1] task:ktimers/1 state:R running task stack:20600 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 2222.127386][ C1] Call Trace: [ 2222.127415][ C1] [ 2222.127476][ C1] sched_show_task+0x4aa/0x5f0 [ 2222.127738][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 2222.127789][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 2222.127873][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 2222.127916][ C1] print_other_cpu_stall+0xfca/0x1380 [ 2222.127952][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 2222.127993][ C1] rcu_sched_clock_irq+0x939/0x1050 [ 2222.128051][ C1] update_process_times+0x234/0x2d0 [ 2222.128110][ C1] tick_nohz_handler+0x42b/0x770 [ 2222.128199][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2222.128228][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2222.128252][ C1] __hrtimer_run_queues+0x3bc/0xb10 [ 2222.128313][ C1] hrtimer_interrupt+0x455/0x950 [ 2222.128357][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 2222.128388][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2222.128482][ C1] [ 2222.128516][ C1] [ 2222.128554][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2222.128601][ C1] RIP: 0010:rt_spin_lock+0x127/0x400 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2222.128650][ C1] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 c1 ee 0b f7 49 83 3c 24 00 0f 85 01 02 00 00 48 89 5c 24 18 66 42 c7 44 2b 04 00 00 <48> c7 44 24 40 01 00 00 00 49 8d 5f 08 49 89 dc 49 c1 ec 03 43 80 [ 2222.128695][ C1] RSP: 0018:ffffc90000a3fa20 EFLAGS: 00000246 [ 2222.128738][ C1] RAX: 1ffff11003b54917 RBX: 1ffff92000147f48 RCX: 0000000000000046 [ 2222.128751][ C1] RDX: 0000000000000200 RSI: ffffffff8d865a8e RDI: ffffffff8ba75860 [ 2222.128764][ C1] RBP: ffffc90000a3fae0 R08: ffffffff89309d5a R09: ffff88805790f400 [ 2222.128776][ C1] R10: dffffc0000000000 R11: ffffffff89309ca0 R12: ffff88801daa48b8 [ 2222.128789][ C1] R13: dffffc0000000000 R14: ffff88805790f3a8 R15: ffffc90000a3fa60 [ 2222.128808][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2222.128916][ C1] ? advance_sched+0xba/0xc20 [ 2222.128950][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 2222.128970][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2222.129026][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2222.129045][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2222.129069][ C1] advance_sched+0xba/0xc20 [ 2222.129108][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2222.129156][ C1] ? __pfx_advance_sched+0x10/0x10 [ 2222.129180][ C1] __hrtimer_run_queues+0x405/0xb10 [ 2222.129217][ C1] hrtimer_run_softirq+0x18f/0x260 [ 2222.129242][ C1] handle_softirqs+0x1de/0x6d0 [ 2222.129271][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2222.129315][ C1] run_ktimerd+0x69/0x100 [ 2222.129332][ C1] smpboot_thread_fn+0x541/0xa50 [ 2222.129348][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 2222.129363][ C1] kthread+0x388/0x470 [ 2222.129399][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2222.129410][ C1] ? __pfx_kthread+0x10/0x10 [ 2222.129423][ C1] ret_from_fork+0x514/0xb70 [ 2222.129449][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2222.129460][ C1] ? __switch_to+0xc79/0x1410 [ 2222.129475][ C1] ? __pfx_kthread+0x10/0x10 [ 2222.129488][ C1] ret_from_fork_asm+0x1a/0x30 [ 2222.129515][ C1] [ 2223.097722][T23649] Bluetooth: hci4: command 0x0406 tx timeout