last executing test programs: 6m54.887136672s ago: executing program 0 (id=1479): setresuid(0xee01, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) (async) r0 = syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x1a) (async) setreuid(0xee01, 0xee01) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000019100), 0x0, 0x0) fsetxattr$security_ima(r1, &(0x7f0000019140), 0x0, 0x0, 0x1) (async) lsetxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x90) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r4, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8, 0x3) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x7, 0x0, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000041000701feffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a100002800c0011"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) (async) mlockall(0x2) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m54.039941179s ago: executing program 0 (id=1481): socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000480)={0x20071026}, &(0x7f00000004c0)={0x0, 0x3, 0xfffffffb, 0x800, 0x4, 0x8}) fsopen(0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/177, 0xb1}], 0x1, 0x47, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000300)={0x4, 0x0, [{0x0, 0x0, 0x7}, {0xc0010063, 0x0, 0x6}, {0x33, 0x0, 0x800}, {0x20b, 0x0, 0x40000000007}]}) 6m52.458620191s ago: executing program 0 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m52.275844318s ago: executing program 0 (id=1489): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x6851, 0xe3, 0x7f}) socket(0x10, 0x1, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x1, &(0x7f0000000440)={0x0, 0xcb28, 0x81008, 0x0, 0x2b2}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000980)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 6m51.751218411s ago: executing program 0 (id=1493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6m51.461756127s ago: executing program 0 (id=1496): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) (async, rerun: 32) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) (rerun: 32) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081"], 0x10) (async, rerun: 32) r1 = userfaultfd(0x801) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r2, 0x100000000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000280)='0\x00', 0x2) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"13d770612d8e66f7be3f2442a7c4a0b38bd40f8c2cb86b70fd4df0a4cf44223f"}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(0xffffffffffffffff, 0x1000000080800000) (async) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='file0', 0x5) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) syz_usb_ep_write(r7, 0x8d, 0x5, &(0x7f00000006c0)="fec0d853c3") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c1d000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000029c000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000139000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffff81}, 0x68) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6m36.253463528s ago: executing program 32 (id=1496): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) (async, rerun: 32) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) (rerun: 32) write$sequencer(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="810100000000000081"], 0x10) (async, rerun: 32) r1 = userfaultfd(0x801) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r2, 0x100000000) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000280)='0\x00', 0x2) (async, rerun: 32) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000100)={"13d770612d8e66f7be3f2442a7c4a0b38bd40f8c2cb86b70fd4df0a4cf44223f"}) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(0xffffffffffffffff, 0x1000000080800000) (async) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='file0', 0x5) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6ead"], 0x0) syz_usb_ep_write(r7, 0x8d, 0x5, &(0x7f00000006c0)="fec0d853c3") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c1d000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000029c000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000139000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffff81}, 0x68) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5m13.23433092s ago: executing program 3 (id=1947): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r2, 0x3ffffe}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec5880514"], 0xa) 5m12.732833414s ago: executing program 3 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002bbd7002fbd2df2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x44010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x45, 0x1, 0x80002, 0x25dfdbf9, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40040d9}, 0x4008094) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b9a122a6755676af3677141c151ad87b9d347b6b5d2a97c58c21d44e6e0aa71eeb5fc6c42343356dadcf30bf8e2fa1cb07ac17dd1881e08a810789e6b6cd8bd8ae51c0fd396c5cf1812562d61e7562a49bc44147839221f9da794a5b3a4bdb06930d8d750d603a592188e76d4cf401a317bdbf40829bbe8d1a393dc2b8c111510d95e5", @ANYRES32=0x0, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x240408c0}, 0x2010) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88c0}, 0x8000) 5m12.502525138s ago: executing program 3 (id=1952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8e) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x40, 0x10) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000040)=0x6) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000100)={0x4, 0x0, [{0x0, 0x0, 0x7}, {0xc0010063, 0x0, 0x6}, {0x33, 0x0, 0x800}, {0x20b, 0x0, 0x7}]}) 5m11.387357906s ago: executing program 3 (id=1954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(0x0, 0x7ff, 0x400000) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000050) 5m11.146895766s ago: executing program 3 (id=1958): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unshare(0x20000400) r0 = socket$inet6(0xa, 0x3, 0x38) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x40804, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r3, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x4}}, 0x9) 5m11.008863537s ago: executing program 3 (id=1960): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x2c, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='g'}]}]}, 0x2c}], 0x1}, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e0f4ff020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 4m55.739566335s ago: executing program 33 (id=1960): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x2c, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='g'}]}]}, 0x2c}], 0x1}, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e0f4ff020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m56.706922836s ago: executing program 5 (id=2476): r0 = socket$inet(0x2, 0x2, 0x1) fstat(0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x38}, 0xdd86) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfffff558, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)={0x0, 0x0, 0xffffffa9, 0x0}) fanotify_mark(0xffffffffffffffff, 0x6b8, 0x4000302b, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310304000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="080006"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="98000000", @ANYRES8=0x0, @ANYBLOB="000126bd7000ffdbdf25270000000855fa00", @ANYRES8=r2, @ANYBLOB="0c00990006000000310000000a000600ffffffffffff00000a003400020202020202000004002a000a003400020202020202000004005f000a000600a69710d3e38d0000110034001487f9693dd0c851a55422ea7c0000000a00340002020202020200000a0006005050505050"], 0x98}}, 0x80) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fcdbdf251300000008000300", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231baaebf187"], 0x0}, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f00000002c0)) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x38) ioctl$KVM_XEN_HVM_CONFIG(r11, 0x4038ae7a, &(0x7f0000000600)={0xfffffff9, 0xb1c, &(0x7f0000000540)="dfee9be3370d1d6c61a5309c6f59a83714f28ffa4e1e8b82002293303e1074d8df2779cf06932a55c88e39c61a1d9c338ab25377aa00a0daecdc28aad71208d1d5775ba51a9d79cc7ea028f6552b", &(0x7f00000005c0)="92709cf6bfb53663c8c2c9c4fd3d1fcd65424b", 0x4e, 0x13}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 2m53.544267991s ago: executing program 5 (id=2480): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000100)=0x44, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$l2tp(0x2, 0x2, 0x73) shutdown(r5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x40, 0x3, 0x6, 0x4a7c}]}) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000100)=0x44, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) shutdown(r5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2m52.72986358s ago: executing program 5 (id=2482): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000001880)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f00000018c0)=0x1c) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001900)="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") setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x101, @private2, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) socket$kcm(0x23, 0x5, 0x0) (async) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001bc0)=@acquire={0x134, 0x17, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@private0, 0x4d8, 0x33}, @in6=@mcast2, {@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x9b4e, 0x4e20, 0x0, 0x2, 0xa0, 0xa0, 0x1d}, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e25, 0x10, 0x4e24, 0x818, 0xa, 0xa0, 0x20, 0x2c}, {0x7ff, 0xfffffffffffffffe, 0x3, 0x1c0000000000, 0x5, 0x8, 0xd0d6, 0x6}, {0x9, 0x7, 0xfffffffffffff1ba, 0x7ff}, 0x8, 0x6e6bb8, 0x1, 0x0, 0x3, 0x3}, 0x40028000, 0x9, 0xbc, 0x70bd2c}, [@mark={0xc, 0x15, {0x35075c, 0x7}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20008011}, 0x24040000) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) accept4(r2, 0x0, 0x0, 0x80000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x1, 0x0, 0x0, 0x10}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth1_virt_wifi\x00', @random="70ab25ecd3ee"}) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x220200, 0x0) (async) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0x220200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000001a40)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r9 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff0000010000000000", @ANYRES32, @ANYBLOB="0000000000100000000000000000000100000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff0070fffefeffffff", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000001000000000100000000", @ANYRES32=r7, @ANYBLOB="00000000000001000000000000b0ffff00000000", @ANYRES32, @ANYBLOB="00000000000001000000000000100000f8ffffff", @ANYRES32, @ANYBLOB="0000000000f0ffff000000000000000100000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000f0ffffffff"]) writev(r9, &(0x7f0000000000), 0x0) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) (async) ioctl$MEMERASE(r10, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000001800)={{r9, &(0x7f0000000140)='.,\'%\x00', 0x2200, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x1000]}, {0x1295, 0x4, 0x10000, 0x2}}, 0x3, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xffff}, 0x8, &(0x7f0000001700)=[{0x3, 0x800, &(0x7f0000000240)='):*+D[/\x00', &(0x7f0000000280)="4cb977a7f4073fc31f533bd0fb21cf00a1c417b11af27581ff0d0b17a3fc5ce0f1aa65fa9b973dfb9af664a33022e8", 0x2f, 0x20}, {0x1, 0x1000, &(0x7f00000002c0)='wlan1\x00', &(0x7f0000000300)="53002110d1e3f956db411191c4b381b978a688efcb087d66799f4a3e362ea0e8d166e331642510cd8033baa800e3a2801bdaef2c54a0642bb4e98f5d619129a14112dbdaf72058383ef665eb1b6ad4bb4c1398a22e05ababaa33529941a10d4427903c586cb2a05bcd8d79e4f426f2662210164968253e320b241b06ec5371e8", 0x80, 0x20}, {0x2, 0x9, &(0x7f0000000380)=']\xc4@)\x00', &(0x7f00000003c0)="14f1881f4587a1956d9ceac9cb91d94067e2071e4815dfb72cbfbf4fb37f6f2013e7dde8", 0x24, 0x22}, {0x1, 0xe3, &(0x7f0000000400)='$!\a@\x00', &(0x7f0000000440)="edf1286c65fd501002b7c378e24e32ab9ef9f2609c0c380d4e80f983aa68e400dbfdcffc594d5e06a8bd4375ed6488ba71c443781b5c085b1422e3c896bb5677f683ad7acedd42f99f859e7f9d1ae255e44296cc2e0c01314a2997335796155cea113d424b5904992528e805869aa9558220004a78d1d170d09722c40e02d0c0caa2", 0x82, 0x2}, {0x1, 0x200, &(0x7f0000000500)='wlan1\x00', &(0x7f0000000540)="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", 0x1000}, {0x3, 0x2, &(0x7f0000001540)='-\x00', &(0x7f0000001580)="8476d03060bed07ef958f512", 0xc, 0x2}, {0x2, 0x80000001, &(0x7f0000001a80)='\x00\x9ct\x84#(\n\xeaJ$\xab\b\x82\xba\x17\'\xac\xb7\x05\x91\x1e\xa7\xb60\'$\xe9\xd9a5\xbe\xb9\x9a%\x88\x83\x80\xfc\x88o\xb0A7\x13U\xce\xa5\x88\x06E\xd9\xa3\xe2\xb6y\xca\xdaq!M\x9e\x80:#\xac\xbd\xd8\x17\xe0[me!pm\x0f\xb8\xf6\xb0\xdb\xe9\xc2&\x18\"\xcc\x19\x0f\x96\xb2v%\x12\xc8\x0f\x87\xc6\x9b\xa1\xec\xac*L\xfb\xe2\xe8\x94\xe8vy\x02\\\xe0*\')\x93gg?\xb2\x95\xaf\f2\x12dU$D\x167}\xe3\x83\x8b\xac\x95z\x180x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x44, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6a72bc8a2edae896cd99bfd338"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3c, 0xbe, "d7f4f64460df3eab094054c07d980adbf5b4d4720c543766185808a6df23635d61ade69aab6488956e7180f510f10901ea829118faf95c6e"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 2m48.640309221s ago: executing program 5 (id=2490): r0 = fsopen(&(0x7f0000000040)='omfs\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000027c0088dd76e2800c00018006", @ANYRES32, @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0xc020) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x38}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x1000, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x1, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x22000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x7, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socket(0x2b, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000209904091540000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f00a00904f200000102200009040101010102200008240201e60304061024010505000210000005050000004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e045208250186"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m32.881600772s ago: executing program 34 (id=2490): r0 = fsopen(&(0x7f0000000040)='omfs\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000027c0088dd76e2800c00018006", @ANYRES32, @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0xc020) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x38}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x1000, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x1, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x22000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x7, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socket(0x2b, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000209904091540000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f00a00904f200000102200009040101010102200008240201e60304061024010505000210000005050000004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e045208250186"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 37.754972734s ago: executing program 2 (id=2923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e0f4ff020c00028008000140"], 0x44}, 0x1, 0x0, 0x3000000, 0x10000047}, 0x4000050) 37.262232938s ago: executing program 2 (id=2925): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="fb06010060"], 0x9) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60000801}, 0x4008090) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x200000) 37.087414419s ago: executing program 2 (id=2927): r0 = socket(0x1d, 0x2, 0x6) accept4$inet6(r0, 0x0, 0x0, 0x80800) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="0d5656679bbebd9b738d3b270c97c20f0318b258f75ba11748945a5b4efb8d187be73fc6ce204952f68a7c98f3e6d9d86fbf632ce34f7208af7d2af9497ec55ee7be39b7c083433b40178db3197e5a4d3f1f589ba461b39c6d38073496cafff668025951e4bcc585526780dbe077d4d43c920028207e0b081b9580f976a19aaa79e9841cbe8bb306f25d0d44629de2ea96db7f8ffd37e746dcd6fa1091472a3b9a9202a4e106f33dd8c51973", 0xac}], 0x1}, 0x4000080) recvmsg$unix(r0, &(0x7f0000002ac0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/72, 0x48}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x7, &(0x7f0000002a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x20) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000310000000400000014000100071414"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 35.732162058s ago: executing program 2 (id=2936): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000004e00)=[{{&(0x7f0000003540)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f0000003780)=[{&(0x7f0000003580)="96", 0x1}], 0x1}}], 0x1, 0x48045) sendmsg$inet_sctp(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000001140)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41, 0xc0, 0x2}}], 0x20, 0x4048800}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000000), 0xf4240, 0x6ca01) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x76, 0x3004, 0x1000000}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="00000e0068080000f156bd3d4d34283cf81c308c58c3cddc010fb752511cd53a5bd94a36add90a635da1afbbdd1c6d03d5bea7ea5c847c146fdd507e16948e1dfeae0e"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x100, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x1, 0xb0e36a09cdf17256, 0x20, 0x80, 0x62}, {@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x1c) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x183201, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) 33.170366723s ago: executing program 1 (id=2941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@my=0x0, 0x10001}, @my=0x0, 0x0, 0x0, 0x6, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000003fa446af1081bb79715578f222ab5199eb818f0ecb5515d3fdf1b0c0e40ac0ec2851033a206afd99f062bb7433bfad6765cb27c1d725f8bfce544964b93b25650df99f8b40a3c9ed6108dce0def6df0ff7df20f8cdba07db8d89e0c4823933851d485b5c675f1902f4f76416f9af36d9c419464fb6f3061819e6b371fd0436136205e3eca72e130498131a67362e6eaef688f4e4daa31aabf864ad5bcc6b4c78ec0bc78c2d3102a97dad03097e07a534dcfe95e4", @ANYRES16=r2, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="34005080050002000600000009000a"], 0x5c}}, 0x40) 32.860359758s ago: executing program 1 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r3, r3, 0x0) r4 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r6) sendmsg$netlink(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001080)={0x11f4, 0x2a, 0x200, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @nested={0xa1, 0x161, 0x0, 0x1, [@typed={0x52, 0x115, 0x0, 0x0, @binary="6cb91b1ede2c5fba9b6bdbb8645dc84a9ad15433124c0c6af80efc20c66307723c478a6b5ba0251cfd222dd9469d74326808f17e9cdcfde511553b9cb1e83ab7d87afcb54979a65a668c228cd20a"}, @generic="64b5d4a48d1e77e67342bd773c3bbf89c34f9855d9c45059ef35661adaa388e1ee54c718fa29dd21852212e4a21d41cb6fbd12e2578c3b32e4df7a7ce23188ed7b", @typed={0x8, 0xb0, 0x0, 0x0, @uid=r3}]}, @nested={0x14, 0x49, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @u32=0xebc}, @typed={0x7, 0xc5, 0x0, 0x0, @str='^.\x00'}]}, @generic="b3f63ae433fde35ff503e9407ca255f0f783cfbb97cabb62a86acb57d9115ebd87602421478c6f2f1b63292d1d3373dcc4db08338d719316bb0807247fa16756f7322fd11bf2edd2936c7cc626942bb5139a430bb1a3ea7cc790cd8738002581b1a28662f5c362c23be4f7b0733a09d658ea3d0a73e11dcb0e9f4e1890b21768e37395f5eb9463de79bb3a584de7e87f2f68e67e2b633addd472f3b44af150118262fa0f0160e13eccdfb4308501d5e9be39eb95a08d496958396ebf4e8bd12691dc398c819e18899331bd72c3f8b71a22", @typed={0x4, 0x129}, @generic, @nested={0x4, 0x61}, @nested={0x1037, 0x164, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r4}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@mcast1}, @generic="61515b99b3342fb4", @generic="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", @generic="5f9f779e8c37587618379e70db0cd0"]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid=r6}, @nested={0x8, 0x9b, 0x0, 0x1, [@nested={0x4, 0x136}]}]}, 0x11f4}, {&(0x7f0000002280)={0x1c0, 0x26, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@generic="5b15e26aaa0b134c57c6e51b579e15d9fff0dd509607bb74801744498f2e7df460d6dca537b7e36b7e468af330947aac42ad07b7da645f6e726623b58c01ce59aea88a25a89d72293a56975c7f26f0b947d219f27fff868f71810cac6af3b7076568c36c91931bb12c9cbfe13af56d9dc92c8ebe3ad051ce7c9d70e51354883c0bc7ba9594b2a5ca53bc754ad3c64c1505489d3b93f5bc49dd521786cddd3f7c91c923e1c1fbc1e15d6eeebbfb07bab8f50f7d61d92bfdfb74ca30a0d7c8a3643e", @generic="b66b2a8e8b66dc4bf7720fb7d9ac319a96e7fcd3aa7802f6da43d3abd002c141bb8f15b73989711dead272ef9a2d06ab52c67b5678907c5b7615410b4b0a1976af5d677ee7ed3d760a419425cd6d661a9d227f977c57d00e0cc428c6889d51212ef878ce40f750b6e4e21005037a543e389ec153d54c90d5ac554c2d34ead93930250fc3c7afffdbb18f115a0c2ced93ed1205bfddefdc3571cd466ea35fb32fd272db66383f7c74ee9b6f360ed1b29eae3cd8483f3540d2701c771a0f68d5dfb5aadcc851b63354553f0691fce5aba97cff7659e0cf5c828c071f7a00ec8915b37ee8b53ff735cc6e929d163e837b"]}, 0x1c0}], 0x2, &(0x7f0000002480)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}], 0x20, 0x1}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x48, r1, 0xb97534d5fe970ccf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfa}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2b7}]}, 0x48}}, 0x4800) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xa06}}, 0x5, 0xa, 0x1, 0x8, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r8, 0xe55d}, &(0x7f0000000240)=0x8) 32.641675068s ago: executing program 1 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x4e, &(0x7f0000002380)=0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r3, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) r4 = socket(0x2d, 0x80002, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0xfc, 0x3, 0xf0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x10, 0x8, 0x0, 0x7}}) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00001700", @ANYRES16=r5, @ANYBLOB="000229bd7000fddbdf250300000008000100", @ANYRES32=r6, @ANYBLOB="14000c00ff0100000000000000000000000000010800080001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) io_pgetevents(r1, 0x4, 0x4, &(0x7f00000023c0)=[{}, {}, {}, {}], &(0x7f0000002500), &(0x7f0000002580)={&(0x7f0000002540)={[0x4]}, 0x8}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000001080102", @ANYRES16=r1, @ANYRES32=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4c040}, 0x40000040) 32.242898553s ago: executing program 2 (id=2947): r0 = userfaultfd(0x80801) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 32.156474034s ago: executing program 1 (id=2948): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r1, 0x0, 0x0, 0x4000090, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000000)=0x2) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 31.981625671s ago: executing program 2 (id=2950): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000140)=""/240, 0x1037000, 0x800, 0xd, 0x3}, 0x20) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 30.083359902s ago: executing program 1 (id=2954): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x35314142, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0xfffffffe}, {0x1002}, {0x8}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0xfffff, 0x13ff}], 0x0, 0x0, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d000b0000000000000000790004000e0000004808a8af42bbc78c89f537800400818000"], 0x1c}}, 0x8000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x49000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000009000/0x1000)=nil}) poll(&(0x7f0000000100)=[{r2, 0x86}], 0x1, 0x2) (async) poll(&(0x7f0000000100)=[{r2, 0x86}], 0x1, 0x2) open(&(0x7f0000000280)='.\x00', 0x80, 0x28) (async) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r6, 0x8927, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') 29.406373416s ago: executing program 1 (id=2958): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a0001010000000904000017020200000524060000052400c4000d240f01000000000600009e2006240704070009058102400000000009059b8310000000000905030240"], 0x0) (async) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000040)=0x312) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa0000000060a010400000000000000000a0004050900010073797a310000000074000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c6f6164000c0002800800024000000002080003400000000208000240000000b3080001400000000010000180090001006861736800000000100001800a00010072616e67650000000900020073797a32"], 0x324}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) (async) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 27.004024427s ago: executing program 4 (id=2963): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$uac2(0x2, 0x98, 0x0, 0x0) 26.343400894s ago: executing program 4 (id=2965): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async, rerun: 64) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, r2}) (rerun: 64) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000d40)={r4, 0xffff, 0x0, 0x0, r2}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace(0x8, r6) syz_pidfd_open(r6, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000240)=r5, 0xfee6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r7, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x0, 0x6b, @scatter={0x0, 0xf7ff, 0x0}, 0x0, 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000580)=0xc) (async) ptrace$getenv(0x4201, r5, 0x9, &(0x7f0000000000)) (async) syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb3, &(0x7f00000000c0)=@string={0xfffffffffffffff4, 0x3, "1f0adbd28573b7a24bd648f7d7626d9cfe8ba1b1f0f0319cf3787b2662df4c47e7263b92420234b3f32c32312e4a92aa6991911552d929940c43c9b0d695ea3f43f90406f2dbe29bfff700846e9c1d0773589c8482c99f6b336718b5dcce0e76c286994d892718f8fa0c2c8c8539a27ac449be4543e1827c7634183b80499bb0d53d3b89173fd322599d3347580173094c42a84b27afda7c93b12c024feabff1a8658c00"/177}}]}) 26.042460149s ago: executing program 4 (id=2967): mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800049, &(0x7f00000001c0)='discard') r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 24.887332136s ago: executing program 4 (id=2968): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000004500)=""/4093, 0xffd}], 0x4}, 0xd}], 0x1, 0x40000100, 0x0) mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x2200892, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESDEC], 0xc4}, 0x1, 0x0, 0x0, 0x24000017}, 0x200000d1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)={0x284, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b5fabdbb8c209f758c4e2413cf5c0e0b8b9b187278ffcea34dac71773f8b1239"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x583}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8f2411bab502f5715f860d9d70f1f23691a6691977d4ea79f3e70c26c441be9e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6c47dea3d5c2934dedf36298a8ddf83b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="71f3e47147189b190d0c87c934c6d130a9b50e850735e154ef7491c07ee689ae"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ab5172328a055deef5abd6f31c9bd47a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c980884e15aaa40"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4ef5df2860db3ad1eb1d7b3fe6481a2a8ca8d7c0be99568b1bb572a265f828b1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eaca6d1d63f607d2e33249ad252e4229"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c658f0314386fd4"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe41788f42b87fd5af487ae66faffa30f03e18b5039c9b5b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="abea536944e717ba0b89cbb3403a9fb75356b2e2fffd9163"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b153a66083e423305370f4bf7656245e9724d720b9482344"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6bbd1874054ff4b451a95d4b4e050264"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bcd169ab7e56736010fca4a9c6394d5f9e0e798e0e830745"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6b621a3f59092dff2fa97ef9210a52a350e629a3031b64481f533d3f3f5d9a3e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b92a0f95a87ba351"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="62133b91c03f9897232e22fadc1f2dd8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d3ac88a1569352"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0b6be17093721f646e5e7806113ecee5"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a6a13d2b3f08430500c72a218b0fca4e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a04db3e0c3004247"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f7b4e8b5ab6c3595c912efdac9aef5102b7a376d761367ce313cb79d4491f028"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24c795b243e6294e"}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x24004004) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000001ffffffffffffe500"/108], 0xb8}, 0x1, 0x0, 0x0, 0x28000}, 0x2c000010) 24.677660036s ago: executing program 4 (id=2969): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7ffffffe, 0xffffffff, 0x3, 0xfffffffc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="c249271b", @ANYRES16=r5, @ANYBLOB="170928bd7000000000000100ffff0500070002000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x7e) 24.554821247s ago: executing program 6 (id=2970): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x7d4, 0x4, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x401, 0x0, 0x3, 0x0, 0x86e, 0xfe09, 0xd2, 0x80008002], 0x1, 0x4000003}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x8008af26, &(0x7f0000000100)) 24.334165007s ago: executing program 6 (id=2971): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x1, @local}, 0x6c, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'syz_tun\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x44, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) ioctl$FITHAW(r2, 0xc0045878) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$inet(0x2, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x1, @local}, 0x6c, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'syz_tun\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x44, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) (async) ioctl$FITHAW(r2, 0xc0045878) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) 24.129687757s ago: executing program 4 (id=2972): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r5, 0x4, 0x10}, &(0x7f0000000140)=0xc) read(r3, &(0x7f0000000380), 0x64) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000c001c00", @ANYRES32, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0xd82, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000000c0)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x4, 0x80000, r6}) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f0000000700)={0x3, 0x0, 0x1d, 0xf, 0x1e3, &(0x7f0000000300)}) setpriority(0x0, 0x0, 0xfff) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = timerfd_create(0x9, 0x0) timerfd_settime(r10, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 23.862415327s ago: executing program 6 (id=2973): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$uac2(0x2, 0x98, 0x0, 0x0) 23.203748998s ago: executing program 6 (id=2974): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x61, [{{0x9, 0x2, 0xfffffdb3}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) 18.592694976s ago: executing program 6 (id=2975): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x890d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x6, 0x7fc, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x5, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x6, 0x7fc, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000040c0)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x60, 0x0, 0x3, {{0x6, 0x40000c, 0xffffffffffffffff, 0x714, 0x2, 0x2084, 0xacb8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', 0x0) (async) statfs(&(0x7f0000000680)='./file0\x00', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000029c0)=ANY=[@ANYRES16], 0x0) 16.540503035s ago: executing program 35 (id=2950): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000140)=""/240, 0x1037000, 0x800, 0xd, 0x3}, 0x20) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 15.345386169s ago: executing program 6 (id=2977): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={@rand_addr=0x64010101, 0x0, 0x0, 0x60, 0x0, [{@loopback}, {@multicast2}, {@empty}, {@multicast1}, {@empty}, {@remote}]}}) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), 0x0, 0x0, 0x1) flistxattr(r4, &(0x7f0000000100)=""/11, 0xb) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dbb7c5e4b5f5fa1cbb4e1f16c4dcd2ed8e1ebf332c2d01864511c288176aabe3c3bc1b902e954cdb82763b3128312bc60a58dd0832f0d6d7f94c15f85e1aab450bf2a54f6a11a79c22929fc29fe9ca20"}, 0xd8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2, 0x3}}, 0x50) read$FUSE(r6, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = epoll_create1(0x0) r11 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x30000008}) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r12 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) write$P9_RSTAT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="520000007d020000004b0d0000000000000002000000060000000000000000002020ffffffff0000000001000000000000000a002f6465762f766373610004002f5e5d5d06006c626c637200040073656400"], 0x52) 14.267329014s ago: executing program 36 (id=2958): syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a0001010000000904000017020200000524060000052400c4000d240f01000000000600009e2006240704070009058102400000000009059b8310000000000905030240"], 0x0) (async) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) (async) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000040)=0x312) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa0000000060a010400000000000000000a0004050900010073797a310000000074000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c6f6164000c0002800800024000000002080003400000000208000240000000b3080001400000000010000180090001006861736800000000100001800a00010072616e67650000000900020073797a32"], 0x324}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) (async) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) 8.092401167s ago: executing program 37 (id=2972): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r5, 0x4, 0x10}, &(0x7f0000000140)=0xc) read(r3, &(0x7f0000000380), 0x64) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000340)) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000c001c00", @ANYRES32, @ANYBLOB="04"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x100000c, 0xd82, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000000c0)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x4, 0x80000, r6}) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f0000000700)={0x3, 0x0, 0x1d, 0xf, 0x1e3, &(0x7f0000000300)}) setpriority(0x0, 0x0, 0xfff) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r10 = timerfd_create(0x9, 0x0) timerfd_settime(r10, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 38 (id=2977): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={@rand_addr=0x64010101, 0x0, 0x0, 0x60, 0x0, [{@loopback}, {@multicast2}, {@empty}, {@multicast1}, {@empty}, {@remote}]}}) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), 0x0, 0x0, 0x1) flistxattr(r4, &(0x7f0000000100)=""/11, 0xb) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffb, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dbb7c5e4b5f5fa1cbb4e1f16c4dcd2ed8e1ebf332c2d01864511c288176aabe3c3bc1b902e954cdb82763b3128312bc60a58dd0832f0d6d7f94c15f85e1aab450bf2a54f6a11a79c22929fc29fe9ca20"}, 0xd8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2, 0x3}}, 0x50) read$FUSE(r6, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = epoll_create1(0x0) r11 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x30000008}) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r12 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) write$P9_RSTAT(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="520000007d020000004b0d0000000000000002000000060000000000000000002020ffffffff0000000001000000000000000a002f6465762f766373610004002f5e5d5d06006c626c637200040073656400"], 0x52) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 589.366793][T18977] sg_write: data in/out 819164/136 bytes for SCSI command 0x0-- guessing data in; [ 589.366793][T18977] program syz.6.2708 not setting count and/or reply_len properly [ 589.612394][ T5681] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 589.761110][ T5681] usb 5-1: Using ep0 maxpacket: 16 [ 589.766853][ T5681] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.766886][ T5681] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 0 [ 589.766914][ T5681] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 589.766950][ T5681] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.766980][ T5681] usb 5-1: config 1 interface 0 has no altsetting 0 [ 589.770504][ T5681] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.770536][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.770558][ T5681] usb 5-1: Product: ᠊ [ 589.770574][ T5681] usb 5-1: Manufacturer: ࠔ [ 589.770591][ T5681] usb 5-1: SerialNumber: Т [ 589.889214][T18970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 590.258654][ T5681] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 590.362788][ T5681] usb 5-1: USB disconnect, device number 54 [ 591.341248][ T5681] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 591.653305][ T5681] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 591.653343][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.653368][ T5681] usb 5-1: Product: syz [ 591.653387][ T5681] usb 5-1: Manufacturer: syz [ 591.653405][ T5681] usb 5-1: SerialNumber: syz [ 592.598727][ T5765] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 593.382865][T10722] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 593.584043][T10722] usb 3-1: Using ep0 maxpacket: 16 [ 593.609241][T10722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.609278][T10722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.609304][T10722] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.609351][T10722] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 593.609377][T10722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.707193][T10722] usb 3-1: config 0 descriptor?? [ 595.695836][T19068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.882086][T19068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.814537][T10722] usbhid 3-1:0.0: can't add hid device: -71 [ 596.814666][T10722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 596.944241][T10722] usb 3-1: USB disconnect, device number 104 [ 597.438557][ T9] usb 5-1: USB disconnect, device number 55 [ 597.450563][ T5765] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 597.870890][ T5765] ath9k_htc: Failed to initialize the device [ 598.131173][T16803] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 598.177525][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 598.301081][ T5696] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 598.309584][T16803] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 598.309778][T16803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.313183][T16803] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 598.313507][T16803] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 598.313570][T16803] usb 7-1: Manufacturer: syz [ 598.368518][T16803] usb 7-1: config 0 descriptor?? [ 598.454749][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 598.455990][ T5696] usb 3-1: not running at top speed; connect to a high speed hub [ 598.457797][ T5696] usb 3-1: config 160 has an invalid interface number: 187 but max is 0 [ 598.457824][ T5696] usb 3-1: config 160 has no interface number 0 [ 598.457873][ T5696] usb 3-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 598.457901][ T5696] usb 3-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 598.457930][ T5696] usb 3-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 598.457953][ T5696] usb 3-1: config 160 interface 187 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.457982][ T5696] usb 3-1: config 160 interface 187 has no altsetting 0 [ 598.462855][T16803] rc_core: IR keymap rc-hauppauge not found [ 598.462892][T16803] Registered IR keymap rc-empty [ 598.482835][T16803] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 598.520614][T16803] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29 [ 598.537896][ T5696] usb 3-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 598.537924][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.537943][ T5696] usb 3-1: Product: syz [ 598.537957][ T5696] usb 3-1: Manufacturer: syz [ 598.537971][ T5696] usb 3-1: SerialNumber: syz [ 598.640083][T19102] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 598.640293][T19102] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 598.670772][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.701413][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.893560][ T5696] pl2303 3-1:160.187: required interrupt-in endpoint missing [ 598.930944][ T5696] usb 3-1: USB disconnect, device number 105 [ 598.931404][ C1] igorplugusb 7-1:0.0: receive overflow invalid: 106 [ 599.053714][T16803] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 599.100549][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 599.177264][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.179508][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.235968][T16803] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 599.236000][T16803] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 599.236022][T16803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.236138][T16803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 599.291957][T16803] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.292054][T16803] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.292078][T16803] usb 2-1: Product: syz [ 599.292094][T16803] usb 2-1: Manufacturer: syz [ 599.355908][T16803] cdc_wdm 2-1:1.0: skipping garbage [ 599.355924][T16803] cdc_wdm 2-1:1.0: skipping garbage [ 599.421139][ T199] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 599.532936][T16803] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 599.532961][T16803] cdc_wdm 2-1:1.0: Unknown control protocol [ 599.555852][ T199] usb 5-1: device descriptor read/64, error -71 [ 599.634491][T16803] usb 7-1: USB disconnect, device number 13 [ 599.794244][ T199] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 599.852913][ T5696] usb 2-1: USB disconnect, device number 56 [ 599.921101][ T199] usb 5-1: device descriptor read/64, error -71 [ 600.040506][ T199] usb usb5-port1: attempt power cycle [ 600.221514][T19193] ieee802154 phy0 wpan0: encryption failed: -22 [ 600.381088][ T199] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 600.402473][ T199] usb 5-1: device descriptor read/8, error -71 [ 600.467985][T19198] nfs: Unknown parameter 'lock/net/tun' [ 600.683177][ T199] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 600.701682][ T199] usb 5-1: device descriptor read/8, error -71 [ 600.811496][ T199] usb usb5-port1: unable to enumerate USB device [ 601.241116][ T199] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 601.263698][ T5696] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 601.391153][ T199] usb 3-1: Using ep0 maxpacket: 8 [ 601.395562][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 601.396916][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 601.396950][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.396977][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 601.397005][ T199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 601.397031][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 601.397055][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 601.397079][ T199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 601.399540][ T199] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 601.399574][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.399596][ T199] usb 3-1: Product: syz [ 601.399613][ T199] usb 3-1: Manufacturer: syz [ 601.399638][ T199] usb 3-1: SerialNumber: syz [ 601.411041][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 601.515297][ T5696] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 601.515332][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.515355][ T5696] usb 2-1: Product: syz [ 601.515371][ T5696] usb 2-1: Manufacturer: syz [ 601.515388][ T5696] usb 2-1: SerialNumber: syz [ 601.584505][ T199] usb 3-1: config 0 descriptor?? [ 601.586838][T19218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 601.633563][ T5696] r8152-cfgselector 2-1: Unknown version 0x0000 [ 601.633592][ T5696] r8152-cfgselector 2-1: config 0 descriptor?? [ 601.638812][ T199] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.843032][T19238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.901422][ T199] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 601.922460][ T199] usb 3-1: USB disconnect, device number 106 [ 602.047979][T16803] r8152-cfgselector 2-1: USB disconnect, device number 57 [ 602.224506][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2746'. [ 602.642670][T19290] dvmrp0: entered allmulticast mode [ 602.762354][T16803] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 603.023743][T16803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.023801][T16803] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 603.023847][T16803] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 603.023873][T16803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.051511][T16803] usb 3-1: config 0 descriptor?? [ 603.102097][T16803] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 603.211104][ T5688] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 603.363777][ T5688] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 603.363808][ T5688] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 603.363829][ T5688] usb 7-1: config 8 has no interface number 0 [ 603.363877][ T5688] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.363908][ T5688] usb 7-1: config 8 interface 177 has no altsetting 0 [ 603.363965][ T5688] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 603.363991][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.538930][ T5688] ir_toy 7-1:8.177: required endpoints not found [ 603.565138][T16803] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 603.750872][T19289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2748'. [ 605.393284][T19320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.393310][T19320] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 605.574308][T16803] usb 3-1: USB disconnect, device number 107 [ 605.781437][ T5688] usb 7-1: USB disconnect, device number 14 [ 605.804930][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 606.055926][T19320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.055952][T19320] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 606.191782][T16803] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 606.323330][T16803] usb 3-1: device descriptor read/64, error -71 [ 606.371153][ T5696] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 606.384681][ T5688] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 606.484318][T19320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 606.484344][T19320] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 606.531661][ T5696] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 606.531695][ T5696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.553675][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 606.574865][T16803] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 606.604487][ T5688] usb 5-1: unable to get BOS descriptor or descriptor too short [ 606.612979][ T5688] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.613007][ T5688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.613030][ T5688] usb 5-1: config 1 has no interface number 0 [ 606.613064][ T5688] usb 5-1: too many endpoints for config 1 interface 1 altsetting 235: 111, using maximum allowed: 30 [ 606.613111][ T5688] usb 5-1: config 1 interface 1 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 606.613156][ T5688] usb 5-1: config 1 interface 1 has no altsetting 0 [ 606.616801][ T5688] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 606.616830][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.616851][ T5688] usb 5-1: Product: syz [ 606.616867][ T5688] usb 5-1: Manufacturer: syz [ 606.616884][ T5688] usb 5-1: SerialNumber: syz [ 606.746090][T16803] usb 3-1: device descriptor read/64, error -71 [ 606.852142][T16803] usb usb3-port1: attempt power cycle [ 607.116770][ T5688] usb 5-1: unknown sample rate [ 607.363992][T16803] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 607.387023][T16803] usb 3-1: device descriptor read/8, error -71 [ 607.519036][ T5696] msi2500 7-1:1.0: Registered as swradio24 [ 607.519061][ T5696] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 607.572742][ T5688] usb 5-1: USB disconnect, device number 61 [ 607.633900][T16803] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 607.657978][T16803] usb 3-1: device descriptor read/8, error -71 [ 607.761848][T16803] usb usb3-port1: unable to enumerate USB device [ 607.825574][T16803] usb 7-1: USB disconnect, device number 15 [ 608.469494][T19320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.469520][T19320] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 609.106509][T19496] NILFS (nullb0): couldn't find nilfs on the device [ 609.211107][ T5696] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 609.366390][ T5696] usb 5-1: Using ep0 maxpacket: 8 [ 609.369389][ T5696] usb 5-1: config 1 interface 0 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 32 [ 609.369421][ T5696] usb 5-1: config 1 interface 0 altsetting 250 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.369452][ T5696] usb 5-1: config 1 interface 0 has no altsetting 0 [ 609.420258][ T5696] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 609.420292][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.420315][ T5696] usb 5-1: Product: ခ [ 609.420330][ T5696] usb 5-1: Manufacturer: Ё [ 609.420347][ T5696] usb 5-1: SerialNumber: 蜺穵慚콿व喈 [ 609.436147][T19522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.440811][T19515] IPVS: Scheduler module ip_vs_ not found [ 609.488896][T19497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 609.489016][T19497] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 609.748392][ T5696] usb 5-1: USB disconnect, device number 62 [ 609.875610][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2765'. [ 610.120148][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2765'. [ 610.201178][ T5688] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 610.343021][ T5688] usb 7-1: device descriptor read/64, error -71 [ 610.591276][ T5688] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 610.723648][ T5688] usb 7-1: device descriptor read/64, error -71 [ 610.841578][ T5688] usb usb7-port1: attempt power cycle [ 611.211961][ T5688] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 611.232156][ T5688] usb 7-1: device descriptor read/8, error -71 [ 611.485813][ T5688] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 611.504760][ T5688] usb 7-1: device descriptor read/8, error -71 [ 611.612211][ T5688] usb usb7-port1: unable to enumerate USB device [ 611.721430][ T199] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 611.876676][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 611.900548][ T199] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 611.900589][ T199] usb 3-1: can't read configurations, error -61 [ 612.031104][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 612.041898][ T199] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 612.257481][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.259839][ T199] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 612.259878][ T199] usb 3-1: can't read configurations, error -61 [ 612.260515][ T199] usb usb3-port1: attempt power cycle [ 612.602954][ T199] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 612.625397][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.627576][ T199] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 612.627612][ T199] usb 3-1: can't read configurations, error -61 [ 612.728513][T19625] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003 [ 612.771240][ T199] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 612.796463][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.798377][ T199] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 612.798414][ T199] usb 3-1: can't read configurations, error -61 [ 612.798841][ T199] usb usb3-port1: unable to enumerate USB device [ 612.961102][ T5696] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 613.013176][ T32] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 613.119319][ T5696] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 613.119357][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 613.119384][ T5696] usb 2-1: Product: syz [ 613.119403][ T5696] usb 2-1: Manufacturer: syz [ 613.119422][ T5696] usb 2-1: SerialNumber: syz [ 613.162907][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 613.165233][ T32] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 613.165265][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.219162][ T5696] usb 2-1: config 0 descriptor?? [ 613.243345][ T32] usb 5-1: config 0 descriptor?? [ 613.327258][ T32] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 613.435597][T19627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.437497][T19627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.534848][ T5696] usb 2-1: USB disconnect, device number 58 [ 613.842645][ T32] gspca_vc032x: reg_r err -110 [ 613.842753][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842762][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842769][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842776][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842782][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842789][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842796][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842803][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842809][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842816][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842822][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842829][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842836][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842843][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842849][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842856][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842863][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842869][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 613.842892][ T32] gspca_vc032x: Unknown sensor... [ 613.842951][ T32] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 613.867464][T16803] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 614.027081][T16803] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 614.027119][T16803] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 614.027157][T16803] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 614.029341][T16803] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.029372][T16803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 614.029394][T16803] usb 7-1: SerialNumber: syz [ 614.097325][T16803] hub 7-1:1.0: bad descriptor, ignoring hub [ 614.097366][T16803] hub 7-1:1.0: probe with driver hub failed with error -5 [ 614.098469][T16803] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 614.344445][T19659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.352617][T19659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.393351][T16803] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 614.495320][T16803] usb 7-1: USB disconnect, device number 20 [ 614.571159][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2781'. [ 615.226235][T19710] Attempt to restore checkpoint with obsolete wellknown handles [ 615.720566][T19722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2788'. [ 615.720594][T19722] tipc: Invalid UDP bearer configuration [ 615.720645][T19722] tipc: Enabling of bearer rejected, failed to enable media [ 615.850030][T16803] usb 5-1: USB disconnect, device number 63 [ 616.281334][ T5765] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 616.367559][T19722] smpboot: CPU 1 is now offline [ 616.522060][T16803] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 616.593481][ T5765] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 616.593503][ T5765] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 616.593517][ T5765] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 616.593532][ T5765] usb 3-1: config 1 has no interface number 0 [ 616.593554][ T5765] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 616.593589][ T5765] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 616.598989][ T5765] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.599011][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.599027][ T5765] usb 3-1: Product: syz [ 616.599038][ T5765] usb 3-1: Manufacturer: syz [ 616.599049][ T5765] usb 3-1: SerialNumber: syz [ 616.700748][T16803] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 616.700767][T16803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.700781][T16803] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.778748][T16803] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 616.778772][T16803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.778787][T16803] usb 5-1: Product: syz [ 616.778798][T16803] usb 5-1: Manufacturer: syz [ 616.778809][T16803] usb 5-1: SerialNumber: syz [ 616.931654][ T5765] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 616.931689][ T5765] cdc_ncm 3-1:1.1: bind() failure [ 617.219482][T19776] netlink: 'syz.1.2795': attribute type 10 has an invalid length. [ 617.251840][ T5696] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 617.403516][ T5696] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.403558][ T5696] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 617.403589][ T5696] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 617.403650][ T5696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.797266][ T5696] dvbdev: DVB: registering new adapter (DEC2000-t) [ 618.544586][ T5696] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 618.775841][T16803] usb 5-1: unit 4 not found! [ 618.845115][ T5696] ttusb_dec_send_command: command bulk message failed: error -71 [ 618.908914][T10722] usb 3-1: USB disconnect, device number 116 [ 618.973472][ T5696] usb 7-1: USB disconnect, device number 21 [ 619.096257][T16803] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 619.171452][T16803] usb 5-1: USB disconnect, device number 64 [ 619.411498][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 619.585824][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 619.602226][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.602266][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.602287][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.602303][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 619.602320][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.603281][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.603302][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.603317][ T10] usb 2-1: Manufacturer: syz [ 619.661033][ T199] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 619.706449][ T7873] Bluetooth: hci5: Frame reassembly failed (-84) [ 619.709813][ T10] usb 2-1: config 0 descriptor?? [ 619.831272][ T199] usb 3-1: Using ep0 maxpacket: 16 [ 619.833687][ T199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.833768][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.833791][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.833814][ T199] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 619.833832][ T199] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.835239][ T199] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.835300][ T199] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.835316][ T199] usb 3-1: Manufacturer: syz [ 619.932323][T16803] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 619.956388][ T199] usb 3-1: config 0 descriptor?? [ 620.370501][T16803] usb 5-1: Using ep0 maxpacket: 16 [ 620.385436][T16803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.385457][T16803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.390743][T16803] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 620.390771][T16803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.390787][T16803] usb 5-1: Product: syz [ 620.390798][T16803] usb 5-1: Manufacturer: syz [ 620.396607][T16803] usb 5-1: SerialNumber: syz [ 620.537302][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.539500][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.731168][ T199] rc_core: IR keymap rc-hauppauge not found [ 620.731184][ T199] Registered IR keymap rc-empty [ 620.731369][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.768138][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 620.882892][T19868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.883563][T19868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.919179][ T199] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 620.923865][T19869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.959641][T19869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.985923][ T199] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 621.012966][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.105034][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.122232][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.143081][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.162715][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.181600][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.207817][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.221291][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.241082][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.252685][ T10] rc_core: IR keymap rc-hauppauge not found [ 621.252698][ T10] Registered IR keymap rc-empty [ 621.253069][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.261535][ T199] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.271114][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.338936][ T199] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.338956][ T199] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 621.339877][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 621.404778][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input31 [ 621.440718][ T199] usb 3-1: USB disconnect, device number 117 [ 621.506800][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.525206][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.547084][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.551395][ T60] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 621.561725][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.589675][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.617613][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.637533][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.651057][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.672028][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.693356][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 621.821557][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.821576][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 622.163089][T16803] usb 5-1: USB disconnect, device number 65 [ 622.481030][ T5696] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 622.495889][ T10] usb 2-1: USB disconnect, device number 59 [ 622.611522][ T5696] usb 7-1: device descriptor read/64, error -71 [ 622.861222][ T5696] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 623.002083][ T5696] usb 7-1: device descriptor read/64, error -71 [ 623.112253][ T5696] usb usb7-port1: attempt power cycle [ 623.435397][T19962] netlink: 4608 bytes leftover after parsing attributes in process `syz.2.2805'. [ 623.435420][T19962] netlink: 4608 bytes leftover after parsing attributes in process `syz.2.2805'. [ 623.460158][ T5696] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 623.471885][ T5696] usb 7-1: device descriptor read/8, error -71 [ 623.721906][ T5696] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 623.744054][ T5696] usb 7-1: device descriptor read/8, error -71 [ 623.796802][T19974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2809'. [ 623.851969][ T5696] usb usb7-port1: unable to enumerate USB device [ 623.912187][ T199] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 624.063551][ T199] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 624.063573][ T199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.063587][ T199] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 624.065524][ T199] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 624.065545][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.065560][ T199] usb 2-1: Product: syz [ 624.065571][ T199] usb 2-1: Manufacturer: syz [ 624.065582][ T199] usb 2-1: SerialNumber: syz [ 624.435760][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.435842][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.484928][ T199] usb 2-1: unit 4 not found! [ 624.708845][T19999] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2811'. [ 624.777347][ T199] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 624.797325][ T199] usb 2-1: USB disconnect, device number 60 [ 625.584113][T20036] netlink: 'syz.6.2818': attribute type 10 has an invalid length. [ 625.756860][T20039] netlink: 'syz.4.2819': attribute type 11 has an invalid length. [ 625.816642][T20036] team0 (unregistering): Port device team_slave_0 removed [ 625.905181][T20036] team0 (unregistering): Port device team_slave_1 removed [ 626.072728][ T199] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 626.221030][ T199] usb 3-1: Using ep0 maxpacket: 8 [ 626.222887][ T199] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 626.222908][ T199] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 626.222923][ T199] usb 3-1: config 0 has no interface number 0 [ 626.222954][ T199] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.222973][ T199] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.222993][ T199] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 626.226072][ T199] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 626.226092][ T199] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 626.226107][ T199] usb 3-1: Product: syz [ 626.379098][ T199] usb 3-1: config 0 descriptor?? [ 626.681088][T10722] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 626.846561][T10722] usb 2-1: Using ep0 maxpacket: 16 [ 626.859951][T10722] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 626.859991][T10722] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 626.860012][T10722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 626.860079][T10722] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 626.860105][T10722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.942206][T10722] usb 2-1: config 0 descriptor?? [ 627.452167][T10722] lg-g15 0003:046D:C227.000F: ignoring exceeding usage max [ 627.453166][ T199] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input32 [ 627.508921][ T199] input: failed to attach handler kbd to device input32, error: -5 [ 627.683128][T10722] lg-g15 0003:046D:C227.000F: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.1-1/input0 [ 627.707307][T10722] usb 2-1: USB disconnect, device number 61 [ 627.912100][ T5695] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 627.943540][ T199] usb 3-1: USB disconnect, device number 118 [ 628.070123][ T5695] usb 7-1: config 1 has an invalid interface descriptor of length 8, skipping [ 628.070144][ T5695] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.070159][ T5695] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 628.167821][ T5695] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 628.167846][ T5695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.167862][ T5695] usb 7-1: Product: syz [ 628.167873][ T5695] usb 7-1: Manufacturer: syz [ 628.167884][ T5695] usb 7-1: SerialNumber: syz [ 628.449791][ T5695] usb 7-1: unit 4 not found! [ 628.488341][ T5695] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 628.505895][ T5695] usb 7-1: USB disconnect, device number 26 [ 628.601114][T10722] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 628.634376][ T199] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 628.751436][T10722] usb 5-1: Using ep0 maxpacket: 8 [ 628.753076][T10722] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.753113][T10722] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.753130][T10722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.753147][T10722] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 628.755075][T10722] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 628.755096][T10722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.755111][T10722] usb 5-1: Product: syz [ 628.755122][T10722] usb 5-1: Manufacturer: syz [ 628.755133][T10722] usb 5-1: SerialNumber: syz [ 628.781165][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 628.897470][ T199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.897490][ T199] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.923497][ T199] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.923521][ T199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.923535][ T199] usb 2-1: Product: syz [ 628.923546][ T199] usb 2-1: Manufacturer: syz [ 628.923557][ T199] usb 2-1: SerialNumber: syz [ 628.996793][T10722] cdc_ether 5-1:1.0: Descriptor too short [ 629.094182][ T199] usb 2-1: 0:2 : does not exist [ 629.133501][T10722] usb 5-1: USB disconnect, device number 66 [ 629.247381][ T199] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 629.382262][ T199] usb 2-1: USB disconnect, device number 62 [ 629.771815][ T5695] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 629.772033][T10722] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 629.901070][T10722] usb 7-1: device descriptor read/64, error -71 [ 629.926514][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 629.926540][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 629.926572][ T5695] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 629.926589][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.986039][ T5695] usb 3-1: config 0 descriptor?? [ 630.244970][T20181] jfs: Unknown parameter 'discardput/event#' [ 630.348765][ T5695] ath6kl: Failed to submit usb control message: -71 [ 630.348801][ T5695] ath6kl: unable to send the bmi data to the device: -71 [ 630.348813][ T5695] ath6kl: Unable to send get target info: -71 [ 630.349587][ T5695] ath6kl: Failed to init ath6kl core: -71 [ 630.391536][ T5695] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 630.408544][T10722] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 630.409075][ T5695] usb 3-1: USB disconnect, device number 119 [ 630.433599][ T10] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 630.601938][ T199] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 630.602785][T10722] usb 7-1: device descriptor read/64, error -71 [ 630.622608][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 630.712443][T10722] usb usb7-port1: attempt power cycle [ 630.752863][ T10] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 630.754827][ T199] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 630.754864][ T199] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 630.754882][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.810014][ T199] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 630.902158][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 630.902529][ T10] usb usb5-port1: attempt power cycle [ 631.051577][T10722] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 631.076175][T10722] usb 7-1: device descriptor read/8, error -71 [ 631.267264][ T10] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 631.286593][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 631.321574][T10722] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 631.342526][T10722] usb 7-1: device descriptor read/8, error -71 [ 631.411499][ T10] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 631.433896][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 631.434146][ T10] usb usb5-port1: unable to enumerate USB device [ 631.451275][T10722] usb usb7-port1: unable to enumerate USB device [ 631.873076][ T199] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 631.873093][ T199] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 631.873949][ T199] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 632.579793][T20238] input: syz0 as /devices/virtual/input/input33 [ 632.896336][T10722] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 633.038531][T20264] Set syz1 is full, maxelem 65536 reached [ 633.049653][T10722] usb 3-1: Using ep0 maxpacket: 8 [ 633.062936][T10722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.066523][T10722] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 633.066609][T10722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.066624][T10722] usb 3-1: Product: syz [ 633.066635][T10722] usb 3-1: Manufacturer: syz [ 633.066646][T10722] usb 3-1: SerialNumber: syz [ 633.111534][ T199] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 633.261083][ T199] usb 7-1: Using ep0 maxpacket: 32 [ 633.264884][ T199] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 633.264908][ T199] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 633.298986][ T199] usb 7-1: New USB device found, idVendor=534d, idProduct=2109, bcdDevice= 0.40 [ 633.299009][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.299024][ T199] usb 7-1: Product: ࡠ [ 633.299035][ T199] usb 7-1: Manufacturer: 忁뼿络셒땣䇵Ꜵ埮很ꉭ菼攡誠켃璘휾틋ꋶ㥊ᴍ឴푖蛆㍹퐔㈑홰ѩ狯炅담☆뤀皡䂴翔潮碈馽䀚㋙왈駺䲺ਿ껛내轊勼샯⻔䩶湱칲ᢐ牲ᥫ쮏ࠇ쫗⻌㙟᪊젙悦袘Ⱋ硺ಶ듀뗔੐뼫服╸潜㈷藇Ё뒱辜შ뚗ꭉ跺ⴇﻈ꟒拑ҕꖭ [ 633.299880][ T199] usb 7-1: SerialNumber: syz [ 633.416547][T20253] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 633.513413][ T10] usb 2-1: USB disconnect, device number 63 [ 633.749150][ T199] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.102424][T20243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.103352][T20243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.060242][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 635.060311][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 635.463919][ T199] usb 7-1: USB disconnect, device number 31 [ 635.876502][T20293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.930947][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 636.280593][T10722] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.288253][T10722] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 636.354414][T10722] usb 3-1: USB disconnect, device number 120 [ 636.632492][ T199] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 636.794426][ T199] usb 7-1: Using ep0 maxpacket: 8 [ 636.796106][ T199] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.796130][ T199] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.796298][ T199] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 636.796317][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.918814][ T199] usb 7-1: config 0 descriptor?? [ 637.374974][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375001][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375021][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375040][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375059][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375078][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375097][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.375116][ T199] logitech 0003:046D:C50C.0011: unknown main item tag 0x0 [ 637.669985][ T199] logitech 0003:046D:C50C.0011: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.6-1/input0 [ 637.715688][ T199] usb 7-1: USB disconnect, device number 32 [ 638.545769][ T199] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 638.682253][T10722] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 638.705007][ T199] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.705067][ T199] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.707780][ T199] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 638.707802][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.707817][ T199] usb 7-1: Product: syz [ 638.707828][ T199] usb 7-1: Manufacturer: syz [ 638.707839][ T199] usb 7-1: SerialNumber: syz [ 638.833925][T10722] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 967, setting to 0 [ 638.833962][T10722] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 105, changing to 4 [ 638.833981][T10722] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 638.970357][T20406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 639.072144][ T10] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 639.193068][T20386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.224029][T20386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.247504][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 639.247527][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 639.247547][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 639.247654][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 639.273742][ T10] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 639.273772][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.273788][ T10] usb 3-1: Product: syz [ 639.273850][ T10] usb 3-1: Manufacturer: syz [ 639.273862][ T10] usb 3-1: SerialNumber: syz [ 639.359618][ T10] usb 3-1: config 0 descriptor?? [ 639.409796][ T199] cdc_ncm 7-1:1.0: bind() failure [ 639.439912][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 639.480765][ T199] usbtest 7-1:1.0: Linux gadget zero [ 639.480782][ T199] usbtest 7-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 639.540252][ T199] usbtest 7-1:1.1: couldn't get endpoints, -22 [ 639.540314][ T199] usbtest 7-1:1.1: probe with driver usbtest failed with error -22 [ 639.563921][ T199] usbhid 7-1:1.1: couldn't find an input interrupt endpoint [ 639.596872][ T199] usb 7-1: USB disconnect, device number 33 [ 639.772134][ T10] usb 3-1: USB disconnect, device number 121 [ 641.106403][ T199] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 641.261368][ T199] usb 3-1: Using ep0 maxpacket: 32 [ 641.265534][ T199] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 110, changing to 7 [ 641.269812][ T199] usb 3-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 641.269833][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.269848][ T199] usb 3-1: Product: syz [ 641.269860][ T199] usb 3-1: Manufacturer: syz [ 641.269871][ T199] usb 3-1: SerialNumber: syz [ 641.464847][T10722] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 641.464871][T10722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.575714][T10722] usb 2-1: can't set config #1, error -71 [ 641.592151][T10722] usb 2-1: USB disconnect, device number 64 [ 641.623434][ T199] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 641.625693][ T199] usb 3-1: 2:1 : no cluster descriptor [ 641.925436][ T199] usb 3-1: USB disconnect, device number 122 [ 642.334177][T20506] binder: 20495:20506 ioctl c0306201 200000004a40 returned -22 [ 642.412486][T20513] netlink: 'syz.6.2864': attribute type 7 has an invalid length. [ 642.438583][T20513] netlink: 'syz.6.2864': attribute type 2 has an invalid length. [ 642.780487][T20522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.393791][ T199] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 643.541743][ T199] usb 7-1: Using ep0 maxpacket: 32 [ 643.543618][ T199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 643.544594][ T199] usb 7-1: config 5 has an invalid interface number: 59 but max is 0 [ 643.544612][ T199] usb 7-1: config 5 has no interface number 0 [ 643.544634][ T199] usb 7-1: config 5 interface 59 has no altsetting 0 [ 643.549554][ T199] usb 7-1: New USB device found, idVendor=0856, idProduct=ac19, bcdDevice=59.ca [ 643.549575][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.549590][ T199] usb 7-1: Product: syz [ 643.549601][ T199] usb 7-1: Manufacturer: syz [ 643.549613][ T199] usb 7-1: SerialNumber: syz [ 643.873414][ T9] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 643.913550][ T199] ftdi_sio 7-1:5.59: FTDI USB Serial Device converter detected [ 643.939310][ T199] ftdi_sio ttyUSB0: unknown device type: 0x59ca [ 643.988509][ T199] usb 7-1: USB disconnect, device number 34 [ 643.990702][ T199] ftdi_sio 7-1:5.59: device disconnected [ 644.035925][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 644.036402][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 644.053546][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.053565][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 644.112724][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 644.112748][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.112763][ T9] usb 2-1: Product: syz [ 644.112774][ T9] usb 2-1: Manufacturer: syz [ 644.112785][ T9] usb 2-1: SerialNumber: syz [ 644.398780][ T9] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 644.417703][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 644.440518][ T9] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 644.465419][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 644.469099][ T9] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 644.614021][ T199] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 644.629523][T20579] trusted_key: encrypted_key: master key parameter is missing [ 644.736581][ T9] usb 2-1: USB disconnect, device number 65 [ 644.765919][ T199] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.786384][ T199] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 644.786407][ T199] usb 5-1: config 4 has no interface number 0 [ 644.786481][ T199] usb 5-1: config 4 interface 138 has no altsetting 0 [ 644.827992][ T199] usb 5-1: string descriptor 0 read error: -22 [ 644.828089][ T199] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 644.828126][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.150052][ T199] catc 5-1:4.138: Can't set altsetting 1. [ 645.150114][ T199] catc 5-1:4.138: probe with driver catc failed with error -5 [ 645.238947][ T199] usb 5-1: USB disconnect, device number 71 [ 645.529514][T20584] Process accounting resumed [ 645.551698][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 645.681479][ T10] usb 7-1: device descriptor read/64, error -71 [ 645.921692][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 646.051434][ T10] usb 7-1: device descriptor read/64, error -71 [ 646.162876][ T10] usb usb7-port1: attempt power cycle [ 646.176605][ T199] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 646.373680][ T199] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 646.373702][ T199] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 646.373718][ T199] usb 5-1: config 0 has no interface number 1 [ 646.373757][ T199] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.373786][ T199] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 646.378838][ T199] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 646.378859][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.378874][ T199] usb 5-1: Product: syz [ 646.378886][ T199] usb 5-1: Manufacturer: syz [ 646.378897][ T199] usb 5-1: SerialNumber: syz [ 646.501585][ T199] usb 5-1: config 0 descriptor?? [ 646.532565][ T199] usb-storage 5-1:0.127: USB Mass Storage device detected [ 646.556186][ T199] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 646.561082][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 646.587067][ T10] usb 7-1: device descriptor read/8, error -71 [ 646.740632][ T199] usb-storage 5-1:0.0: USB Mass Storage device detected [ 646.813686][ T199] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 646.821636][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 646.844839][ T10] usb 7-1: device descriptor read/8, error -71 [ 646.898889][ T199] usb 5-1: USB disconnect, device number 72 [ 646.966684][ T5773] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 646.970828][ T10] usb usb7-port1: unable to enumerate USB device [ 647.134759][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 647.135759][ T5773] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 647.135778][ T5773] usb 3-1: config 64 has no interface number 0 [ 647.135810][ T5773] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 647.135831][ T5773] usb 3-1: config 64 interface 44 has no altsetting 0 [ 647.137747][ T5773] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 647.137767][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.137782][ T5773] usb 3-1: Product: syz [ 647.137793][ T5773] usb 3-1: Manufacturer: syz [ 647.137804][ T5773] usb 3-1: SerialNumber: syz [ 647.266463][ T37] audit: type=1326 audit(1785699451.744:25): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20668 comm="syz.1.2885" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdeacce019 code=0x0 [ 648.644305][ T199] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 648.813461][ T199] usb 2-1: Using ep0 maxpacket: 8 [ 648.814395][ T199] usb 2-1: no configurations [ 648.814406][ T199] usb 2-1: can't read configurations, error -22 [ 648.991507][ T199] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 649.152873][ T199] usb 2-1: Using ep0 maxpacket: 8 [ 649.159235][ T199] usb 2-1: no configurations [ 649.159249][ T199] usb 2-1: can't read configurations, error -22 [ 649.159728][ T199] usb usb2-port1: attempt power cycle [ 649.465698][T20706] random: crng reseeded on system resumption [ 649.523887][ T199] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 649.550523][ T199] usb 2-1: Using ep0 maxpacket: 8 [ 649.559201][ T199] usb 2-1: no configurations [ 649.559216][ T199] usb 2-1: can't read configurations, error -22 [ 649.606869][ T5773] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 649.651730][ T5773] usb 3-1: USB disconnect, device number 123 [ 649.711972][ T199] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 649.737453][ T199] usb 2-1: Using ep0 maxpacket: 8 [ 649.738151][ T199] usb 2-1: no configurations [ 649.738163][ T199] usb 2-1: can't read configurations, error -22 [ 649.740348][ T199] usb usb2-port1: unable to enumerate USB device [ 650.235246][ T5773] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 650.443685][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 650.443713][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 650.443732][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.443762][ T5773] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 650.443779][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.509212][ T5773] usb 3-1: config 0 descriptor?? [ 650.545793][ T5773] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 650.545835][ T5773] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 650.663785][ T199] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 650.791763][ T199] usb 7-1: device descriptor read/64, error -71 [ 650.801680][ T5773] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 650.802154][ T5773] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 650.822713][ T5773] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 650.822729][ T5773] em28xx 3-1:0.0: No AC97 audio processor [ 650.874094][ T5773] usb 3-1: USB disconnect, device number 124 [ 650.893913][ T5773] em28xx 3-1:0.0: Disconnecting em28xx [ 651.041089][ T199] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 651.175025][ T199] usb 7-1: device descriptor read/64, error -71 [ 651.222535][ T5773] em28xx: Freeing device [ 651.283493][ T199] usb usb7-port1: attempt power cycle [ 651.496989][T20768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.559360][T20774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.711600][ T199] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 651.731863][ T5773] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 651.732688][ T199] usb 7-1: device descriptor read/8, error -71 [ 651.884371][ T5773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 651.890027][ T5773] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 651.890050][ T5773] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 651.927724][ T5773] usb 5-1: string descriptor 0 read error: -22 [ 651.927831][ T5773] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 651.927849][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.975271][T20755] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 651.975422][T20755] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 651.999495][ T199] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 652.011915][ T199] usb 7-1: device descriptor read/8, error -71 [ 652.036377][ T5773] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.124494][ T199] usb usb7-port1: unable to enumerate USB device [ 652.278696][T20755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.280196][T20755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.449648][T20803] netlink: 'syz.2.2905': attribute type 21 has an invalid length. [ 652.569900][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 653.094175][ T5773] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 653.241554][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 653.260840][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 653.270100][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.270119][ T5773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.275403][ T5773] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 653.275424][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.276487][ T5773] usb 2-1: Product: х [ 653.276500][ T5773] usb 2-1: Manufacturer: ఄ [ 653.276511][ T5773] usb 2-1: SerialNumber: 缣主ㆴᮊꪘ䰽岶鄎㨜츅玣䙕䕅彠ထ찂烸ㅌ㊚冦Ắ꼊秎騯톗⇠궰⺂풋⾁醏㜘ꎝꀮ襽㱜岄ಘ隶燁끆量鳢퐺뇗꥾᷆龙딤놧ʂ䅎⛁족宔⚈禊⍪辤䯟ꀾ燫뛸럤遑朹௩㎢뿍૗勺滯 [ 653.623209][ T5773] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 653.623261][ T5773] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 653.883528][ T5773] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 653.957271][ T5773] usb 2-1: USB disconnect, device number 70 [ 653.997172][ T199] usb 5-1: USB disconnect, device number 73 [ 654.315296][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 654.315315][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 654.462634][ T5773] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 654.463822][T20879] netlink: 'syz.1.2912': attribute type 18 has an invalid length. [ 654.499485][T20879] netlink: 'syz.1.2912': attribute type 8 has an invalid length. [ 654.621910][ T5773] usb 7-1: Using ep0 maxpacket: 32 [ 654.634950][ T5773] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 654.634971][ T5773] usb 7-1: config 0 has no interface number 0 [ 654.639301][ T5773] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 654.639322][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.639338][ T5773] usb 7-1: Product: syz [ 654.639349][ T5773] usb 7-1: Manufacturer: syz [ 654.639360][ T5773] usb 7-1: SerialNumber: syz [ 654.654470][ T199] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 654.707061][ T5773] usb 7-1: config 0 descriptor?? [ 654.728735][ T5773] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 654.781702][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 654.841625][ T199] usb 5-1: Using ep0 maxpacket: 32 [ 654.844652][ T199] usb 5-1: unable to get BOS descriptor or descriptor too short [ 654.847420][ T199] usb 5-1: config 8 has an invalid interface number: 114 but max is 0 [ 654.847439][ T199] usb 5-1: config 8 has an invalid descriptor of length 69, skipping remainder of the config [ 654.847453][ T199] usb 5-1: config 8 has no interface number 0 [ 654.847475][ T199] usb 5-1: config 8 interface 114 has no altsetting 0 [ 654.872296][ T199] usb 5-1: New USB device found, idVendor=106c, idProduct=1a45, bcdDevice=56.66 [ 654.872317][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.872332][ T199] usb 5-1: Product: syz [ 654.872342][ T199] usb 5-1: Manufacturer: syz [ 654.880272][ T199] usb 5-1: SerialNumber: syz [ 654.956635][T20862] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2910'. [ 655.012513][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 655.015276][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 655.015295][ T9] usb 2-1: config 0 has no interface number 0 [ 655.019315][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 655.019336][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.019351][ T9] usb 2-1: Product: syz [ 655.019423][ T9] usb 2-1: Manufacturer: syz [ 655.019435][ T9] usb 2-1: SerialNumber: syz [ 655.126391][ T9] usb 2-1: config 0 descriptor?? [ 655.233725][ T5773] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 655.276997][ T199] qmi_wwan 5-1:8.114: probe with driver qmi_wwan failed with error -22 [ 655.307566][ T199] usb 5-1: USB disconnect, device number 74 [ 655.364677][ T5773] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 655.409209][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 655.595207][T20879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.632285][T20879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.675522][ T5773] usb 7-1: USB disconnect, device number 43 [ 655.865478][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 656.195614][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 656.282258][T20922] netlink: 'syz.4.2914': attribute type 4 has an invalid length. [ 656.300474][ T5773] quatech2 7-1:0.51: device disconnected [ 656.582687][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 656.582712][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 656.583102][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 656.583314][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 656.668589][ T9] usb 2-1: USB disconnect, device number 71 [ 657.303750][ T5696] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 657.452589][ T5696] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.452614][ T5696] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.458953][ T5696] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 657.458977][ T5696] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 657.458992][ T5696] usb 7-1: Product: syz [ 657.459014][ T5696] usb 7-1: Manufacturer: syz [ 657.539057][ T5696] hub 7-1:4.0: USB hub found [ 657.678832][ T5773] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 657.753365][ T5696] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 657.811937][ T5696] usb 7-1: USB disconnect, device number 44 [ 657.822928][ T5773] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 657.822947][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.822962][ T5773] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 657.859424][ T5773] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 657.859447][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.859461][ T5773] usb 2-1: Product: syz [ 657.859472][ T5773] usb 2-1: Manufacturer: syz [ 657.859483][ T5773] usb 2-1: SerialNumber: syz [ 658.417331][ T5773] usb 2-1: unit 4 not found! [ 658.472718][ T5773] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 658.516129][ T5773] usb 2-1: USB disconnect, device number 72 [ 659.130319][T21030] virtio-fs: tag not found [ 659.591721][ T5773] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 659.622448][ T5696] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 659.750293][ T5773] usb 7-1: unable to get BOS descriptor or descriptor too short [ 659.759568][ T5773] usb 7-1: config 7 has an invalid interface number: 136 but max is 0 [ 659.759589][ T5773] usb 7-1: config 7 has no interface number 0 [ 659.759629][ T5773] usb 7-1: config 7 interface 136 altsetting 5 bulk endpoint 0xC has invalid maxpacket 8 [ 659.759648][ T5773] usb 7-1: config 7 interface 136 has no altsetting 0 [ 659.794445][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 659.806993][ T5696] usb 5-1: too many endpoints for config 0 interface 0 altsetting 253: 254, using maximum allowed: 30 [ 659.807032][ T5696] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.807049][ T5696] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 659.807767][ T5773] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=4a.96 [ 659.807787][ T5773] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.807801][ T5773] usb 7-1: Product: syz [ 659.807812][ T5773] usb 7-1: Manufacturer: syz [ 659.807823][ T5773] usb 7-1: SerialNumber: syz [ 659.810147][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 659.810174][ T5696] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 659.810191][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.931599][T21042] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 659.939979][ T5696] usb 5-1: config 0 descriptor?? [ 660.169626][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.189126][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.211019][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.211665][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.238687][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.254426][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.314580][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.339733][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.372283][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.452821][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.584694][ T5773] ti_usb_3410_5052 7-1:7.136: TI USB 5052 2 port adapter converter detected [ 660.584995][ T5773] ti_usb_3410_5052 7-1:7.136: missing endpoints [ 660.677906][ T5773] usb 7-1: USB disconnect, device number 45 [ 661.044643][ T5696] usbhid 5-1:0.0: can't add hid device: -71 [ 661.044887][ T5696] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 661.154982][ T5696] usb 5-1: USB disconnect, device number 75 [ 661.183552][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 661.187144][T21092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.324222][ T9] usb 3-1: device descriptor read/64, error -71 [ 661.572825][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 661.721917][ T9] usb 3-1: device descriptor read/64, error -71 [ 661.826252][T21118] usb usb9: usbfs: process 21118 (syz.4.2940) did not claim interface 47 before use [ 661.833776][ T9] usb usb3-port1: attempt power cycle [ 662.102026][ T5773] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 662.211402][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 662.233888][ T9] usb 3-1: device descriptor read/8, error -71 [ 662.254390][ T5773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 662.254415][ T5773] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 662.254434][ T5773] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 662.256330][ T5773] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 662.256350][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.256366][ T5773] usb 5-1: Product: syz [ 662.256377][ T5773] usb 5-1: Manufacturer: syz [ 662.256388][ T5773] usb 5-1: SerialNumber: syz [ 662.338324][ T5773] usb 5-1: config 0 descriptor?? [ 662.361680][T21118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 662.361825][T21118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 662.373131][ T5773] usb 5-1: ucan: probing device on interface #0 [ 662.491021][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 662.518478][ T9] usb 3-1: device descriptor read/8, error -71 [ 662.621482][ T9] usb usb3-port1: unable to enumerate USB device [ 662.938070][ T5773] usb 5-1: ucan: device reported invalid device info [ 662.938087][ T5773] usb 5-1: ucan: probe failed; try to update the device firmware [ 663.145905][ T5773] usb 5-1: USB disconnect, device number 76 [ 664.122704][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 664.281939][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 664.285233][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 664.285258][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 664.285271][ T9] usb 2-1: config 0 has no interface number 0 [ 664.285299][ T9] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.285317][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.285334][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 664.286317][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 664.286337][ T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 664.286350][ T9] usb 2-1: Product: syz [ 664.384961][ T9] usb 2-1: config 0 descriptor?? [ 664.518723][ T5773] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 664.661053][ T5773] usb 5-1: device descriptor read/64, error -71 [ 664.901058][ T5773] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 665.037681][ T5773] usb 5-1: device descriptor read/64, error -71 [ 665.039331][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input35 [ 665.069003][ T9] input: failed to attach handler kbd to device input35, error: -5 [ 665.142580][ T5773] usb usb5-port1: attempt power cycle [ 665.310069][ T9] usb 2-1: USB disconnect, device number 73 [ 665.521605][ T5773] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 665.567259][ T5773] usb 5-1: device descriptor read/8, error -71 [ 665.801439][ T5773] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 665.822176][ T5773] usb 5-1: device descriptor read/8, error -71 [ 665.932063][ T5773] usb usb5-port1: unable to enumerate USB device [ 666.316360][T21218] netlink: 'syz.6.2956': attribute type 83 has an invalid length. [ 666.683352][ T5696] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 666.831917][ T5696] usb 7-1: Using ep0 maxpacket: 16 [ 666.833650][ T5696] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.833669][ T5696] usb 7-1: config 0 has no interface number 0 [ 666.835702][ T5696] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 666.835722][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.835737][ T5696] usb 7-1: Product: syz [ 666.835748][ T5696] usb 7-1: Manufacturer: syz [ 666.835759][ T5696] usb 7-1: SerialNumber: syz [ 666.900752][ T5696] usb 7-1: config 0 descriptor?? [ 666.924437][ T5696] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 668.414077][ T5696] gspca_spca1528: reg_w err -110 [ 668.414209][ T5696] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 668.650020][ T5773] usb 7-1: USB disconnect, device number 46 [ 668.842766][T21263] netlink: 916 bytes leftover after parsing attributes in process `syz.4.2962'. [ 669.356384][T21270] i2c i2c-0: delete_device: Can't find device in list [ 670.021319][T21291] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 670.021531][T21291] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 670.161038][ T5773] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 670.315042][ T5773] usb 7-1: not running at top speed; connect to a high speed hub [ 670.316097][ T5773] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.316124][ T5773] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 670.316153][ T5773] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 670.316183][ T5773] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 670.316263][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.423641][ T5773] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 670.423856][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 670.423908][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 670.430168][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 670.430231][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 670.560211][ T5773] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 670.605192][T21290] XFS (nbd4): SB validate failed with error -5. [ 670.680531][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 670.680596][ T5773] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 670.711115][ T5773] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 670.752929][ T5773] usb 7-1: USB disconnect, device number 47 [ 670.795089][ T5773] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 670.826663][ T5773] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 670.842920][ T5773] keyspan 7-1:1.0: device disconnected [ 672.333472][ T5773] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 672.483504][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 672.486051][ T5773] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 672.507613][ T5773] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 672.507643][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.507658][ T5773] usb 5-1: Product: syz [ 672.507669][ T5773] usb 5-1: Manufacturer: syz [ 672.507681][ T5773] usb 5-1: SerialNumber: syz [ 672.563307][ T5773] r8152-cfgselector 5-1: Unknown version 0x0000 [ 672.563327][ T5773] r8152-cfgselector 5-1: config 0 descriptor?? [ 673.044984][ T199] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 673.202240][ T199] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 673.203657][ T199] usb 7-1: config index 0 descriptor too short (expected 64947, got 72) [ 673.205621][ T199] usb 7-1: config index 1 descriptor too short (expected 64947, got 72) [ 673.208060][ T199] usb 7-1: config index 2 descriptor too short (expected 64947, got 72) [ 673.265248][ T199] usb 7-1: config index 3 descriptor too short (expected 64947, got 72) [ 673.266711][ T199] usb 7-1: config index 4 descriptor too short (expected 64947, got 72) [ 673.289858][ T199] usb 7-1: config index 5 descriptor too short (expected 64947, got 72) [ 673.300679][ T199] usb 7-1: config index 6 descriptor too short (expected 64947, got 72) [ 673.317713][ T199] usb 7-1: config index 7 descriptor too short (expected 64947, got 72) [ 673.339150][ T199] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 673.339173][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.339188][ T199] usb 7-1: Product: syz [ 673.339199][ T199] usb 7-1: Manufacturer: syz [ 673.339210][ T199] usb 7-1: SerialNumber: syz [ 673.470698][ T5696] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 673.764467][T21361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.765309][T21361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.721050][ T5696] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 676.746353][ T10] usb 7-1: USB disconnect, device number 48 [ 676.839467][ T5696] ath9k_htc: Failed to initialize the device [ 676.982004][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 677.799330][ T5773] r8152-cfgselector 5-1: Unknown version 0x0000 [ 677.799703][ T5773] r8152-cfgselector 5-1: No union descriptors [ 677.801684][T10722] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 677.931528][T10722] usb 7-1: device descriptor read/64, error -71 [ 678.171679][T10722] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 678.301640][T10722] usb 7-1: device descriptor read/64, error -71 [ 678.414092][T10722] usb usb7-port1: attempt power cycle [ 678.753847][T10722] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 678.785089][T10722] usb 7-1: device descriptor read/8, error -71 [ 679.021422][T10722] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 679.041528][T10722] usb 7-1: device descriptor read/8, error -71 [ 679.152730][T10722] usb usb7-port1: unable to enumerate USB device [ 679.880426][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.948354][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.967311][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.968296][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.969707][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 680.308250][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 680.310490][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 680.310854][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 680.335120][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 680.335644][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.643281][ T37] audit: type=1800 audit(1785699486.124:26): pid=21435 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.6.2977" name="/" dev="fuse" ino=1 res=0 errno=0 [ 681.701596][T21435] loop4: detected capacity change from 0 to 524287964 [ 682.511762][ T60] Bluetooth: hci5: command tx timeout [ 682.835976][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 682.922557][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 682.926466][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 682.964086][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 682.967926][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 684.621972][ T5601] Bluetooth: hci5: command tx timeout [ 684.635000][T21432] Flush: task=syz.6.2977[21432] dev=loop4 state=2 [ 684.875437][T21432] Teardown: task=syz.6.2977[21432] dev=loop4 state=2 [ 685.231299][ T5601] Bluetooth: hci6: command tx timeout [ 685.906879][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.906961][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.276381][ T7873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.679630][ T60] Bluetooth: hci5: command tx timeout [ 687.311550][ T60] Bluetooth: hci6: command tx timeout [ 687.748496][ T7873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.847195][T21389] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.847449][T21389] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.847690][T21389] bridge_slave_0: entered allmulticast mode [ 687.881489][T21389] bridge_slave_0: entered promiscuous mode [ 688.014949][T21389] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.015204][T21389] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.015426][T21389] bridge_slave_1: entered allmulticast mode [ 688.063338][T21389] bridge_slave_1: entered promiscuous mode [ 688.639972][T21389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.752679][ T60] Bluetooth: hci5: command tx timeout [ 688.795304][T21389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.953720][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.036824][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.040057][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.056117][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.056724][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 689.391436][ T5601] Bluetooth: hci6: command tx timeout [ 690.142256][ T7873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.751580][T21389] team0: Port device team_slave_0 added [ 691.029374][ T7873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.257930][T21389] team0: Port device team_slave_1 added [ 691.311870][ T5601] Bluetooth: hci0: command tx timeout [ 691.474037][ T5601] Bluetooth: hci6: command tx timeout [ 691.986404][T21389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.986418][T21389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.986439][T21389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.137229][T21389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.137244][T21389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.137267][T21389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.398305][ T5601] Bluetooth: hci0: command tx timeout [ 693.487377][T21389] hsr_slave_0: entered promiscuous mode [ 693.499765][T21389] hsr_slave_1: entered promiscuous mode [ 693.511554][T21389] debugfs: 'hsr0' already exists in 'hsr' [ 693.511575][T21389] Cannot create hsr debugfs directory [ 695.154173][ T7873] bridge_slave_1: left allmulticast mode [ 695.154200][ T7873] bridge_slave_1: left promiscuous mode [ 695.154402][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.275864][ T7873] bridge_slave_0: left allmulticast mode [ 695.275891][ T7873] bridge_slave_0: left promiscuous mode [ 695.276070][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.471971][ T5601] Bluetooth: hci0: command tx timeout [ 696.560347][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 696.621243][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 696.626243][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 696.652993][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 696.656964][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 697.564790][ T5601] Bluetooth: hci0: command tx timeout [ 697.900847][ T7873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.993437][ T7873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.008537][ T7873] bond0 (unregistering): Released all slaves [ 698.837666][ T5601] Bluetooth: hci7: command tx timeout [ 699.350683][T21449] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.351107][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.351349][T21449] bridge_slave_0: entered allmulticast mode [ 699.363567][T21449] bridge_slave_0: entered promiscuous mode [ 699.735746][T21449] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.736002][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.736224][T21449] bridge_slave_1: entered allmulticast mode [ 699.740304][T21449] bridge_slave_1: entered promiscuous mode [ 700.529305][T21449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.916015][ T5601] Bluetooth: hci7: command tx timeout [ 700.939199][T21449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.674133][T21449] team0: Port device team_slave_0 added [ 702.868326][T21449] team0: Port device team_slave_1 added [ 703.003004][ T5601] Bluetooth: hci7: command tx timeout [ 703.579572][ T7873] hsr_slave_0: left promiscuous mode [ 703.591664][ T7873] hsr_slave_1: left promiscuous mode [ 703.592822][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.592841][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.593700][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.593716][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.796668][ T7873] veth1_macvtap: left promiscuous mode [ 703.796743][ T7873] veth0_macvtap: left promiscuous mode [ 703.799962][ T7873] veth1_vlan: left promiscuous mode [ 703.800108][ T7873] veth0_vlan: left promiscuous mode [ 705.074879][ T5601] Bluetooth: hci7: command tx timeout [ 705.367286][ T7873] team0 (unregistering): Port device team_slave_1 removed [ 705.424245][ T7873] team0 (unregistering): Port device team_slave_0 removed [ 706.724438][T21449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.724453][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.724475][T21449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.914694][T21449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.914708][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.914730][T21449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.751416][T21389] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 707.908594][T21389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.106127][T21389] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 708.298244][T21389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.344056][T21608] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.344311][T21608] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.344541][T21608] bridge_slave_0: entered allmulticast mode [ 708.388589][T21608] bridge_slave_0: entered promiscuous mode [ 708.513788][T21389] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 708.541673][T21389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.563153][T21608] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.563425][T21608] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.563653][T21608] bridge_slave_1: entered allmulticast mode [ 708.579947][T21608] bridge_slave_1: entered promiscuous mode [ 708.730816][T21389] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 708.861636][T21389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.968765][T21449] hsr_slave_0: entered promiscuous mode [ 708.982453][T21449] hsr_slave_1: entered promiscuous mode [ 709.298479][T21608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.819910][T21608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.419805][T21608] team0: Port device team_slave_0 added [ 710.829954][T21608] team0: Port device team_slave_1 added [ 711.325641][T21608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.325656][T21608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.325685][T21608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.494688][T21608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.494703][T21608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.494725][T21608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.401656][T21608] hsr_slave_0: entered promiscuous mode [ 712.431092][T21608] hsr_slave_1: entered promiscuous mode [ 712.435580][T21608] debugfs: 'hsr0' already exists in 'hsr' [ 712.435600][T21608] Cannot create hsr debugfs directory [ 713.188695][T21804] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.188965][T21804] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.189185][T21804] bridge_slave_0: entered allmulticast mode [ 713.221356][T21804] bridge_slave_0: entered promiscuous mode [ 713.943125][T21804] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.943397][T21804] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.943624][T21804] bridge_slave_1: entered allmulticast mode [ 713.986642][T21804] bridge_slave_1: entered promiscuous mode [ 714.619399][T21804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.890441][T21804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.675085][T21804] team0: Port device team_slave_0 added [ 715.676159][T21449] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 715.987646][T21449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.054954][T21804] team0: Port device team_slave_1 added [ 716.055078][T21449] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 716.174270][T21449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.355417][T21449] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 716.409470][T21449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.614367][T21449] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 716.762198][T21449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.836516][T21804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.836530][T21804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.836552][T21804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.932702][T21804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.932716][T21804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.932738][T21804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.379358][T21389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.562119][T21804] hsr_slave_0: entered promiscuous mode [ 717.568111][T21804] hsr_slave_1: entered promiscuous mode [ 717.584198][T21804] debugfs: 'hsr0' already exists in 'hsr' [ 717.584218][T21804] Cannot create hsr debugfs directory [ 719.005109][T21389] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.818663][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.818782][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.099169][T21608] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 720.157450][T21608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.434547][T21608] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 720.536560][T21608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.540712][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.540825][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.633584][T21608] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 720.854947][T21608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.928159][T21608] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 720.972193][T21608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.008238][T21449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.207827][T21449] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.325772][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.332503][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.435750][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.435866][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.779222][T21608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.689505][T21608] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.716997][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.717124][ T7878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.858672][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.858797][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.435394][T21389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.320271][T21389] veth0_vlan: entered promiscuous mode [ 732.489348][T21389] veth1_vlan: entered promiscuous mode [ 732.749814][T21449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.856545][T21389] veth0_macvtap: entered promiscuous mode [ 735.085181][T21608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.150547][T21389] veth1_macvtap: entered promiscuous mode [ 735.544355][T21804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.775755][T21804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.829259][T21804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.250823][T21804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.297469][T21804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.338258][T21804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.370533][T21804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 736.469571][T21804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.500580][T21389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.706297][T21389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.916913][ T7886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.934534][ T7886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.955904][ T7886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.012484][ T7886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.126663][T21449] veth0_vlan: entered promiscuous mode [ 737.999518][T21449] veth1_vlan: entered promiscuous mode [ 740.009853][T21608] veth0_vlan: entered promiscuous mode [ 740.381216][T21608] veth1_vlan: entered promiscuous mode [ 740.708688][T21449] veth0_macvtap: entered promiscuous mode [ 740.810365][T22721] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 740.856560][T22721] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 740.875353][T22721] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 740.877760][T22721] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 740.939856][T22721] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 741.274399][T21449] veth1_macvtap: entered promiscuous mode [ 741.457109][T21804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.867833][T21804] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.912424][T21449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.645652][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.646439][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.648935][T21608] veth0_macvtap: entered promiscuous mode [ 742.769187][T21449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.879552][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.879665][ T7901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.897990][T21608] veth1_macvtap: entered promiscuous mode [ 743.071033][ T5601] Bluetooth: hci8: command tx timeout [ 743.206692][T21608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.375180][T21608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.823767][ T7878] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.849801][ T7878] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.875308][ T7878] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.924900][ T7901] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.166046][T22721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 744.249945][T22721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 744.270583][T22721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 744.292000][T22721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 744.294886][T22721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.152461][T22721] Bluetooth: hci8: command tx timeout [ 746.366911][ T7875] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.431009][T22721] Bluetooth: hci5: command tx timeout [ 747.232560][T22721] Bluetooth: hci8: command tx timeout [ 747.316668][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.316748][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.512860][T22721] Bluetooth: hci5: command tx timeout [ 749.209625][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 749.262597][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 749.268203][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 749.285362][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 749.288160][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 749.313028][ T5601] Bluetooth: hci8: command tx timeout [ 749.488691][ T7875] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.601778][T22721] Bluetooth: hci5: command tx timeout [ 751.239034][ T7875] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.392195][T22721] Bluetooth: hci6: command tx timeout [ 752.690125][T22721] Bluetooth: hci5: command tx timeout [ 752.891679][ T7875] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.471815][T22721] Bluetooth: hci6: command tx timeout [ 755.344366][T21804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.553854][T22721] Bluetooth: hci6: command tx timeout [ 757.166617][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.217192][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.241919][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.289691][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.298869][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.630952][T22721] Bluetooth: hci6: command tx timeout [ 759.503732][T22721] Bluetooth: hci0: command tx timeout [ 760.664447][T22719] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.664705][T22719] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.688683][T22719] bridge_slave_0: entered allmulticast mode [ 760.714145][T22719] bridge_slave_0: entered promiscuous mode [ 761.528915][ T7875] bridge_slave_1: left allmulticast mode [ 761.528945][ T7875] bridge_slave_1: left promiscuous mode [ 761.529158][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.553784][T22721] Bluetooth: hci0: command tx timeout [ 762.735158][ T7875] bridge_slave_0: left allmulticast mode [ 762.735188][ T7875] bridge_slave_0: left promiscuous mode [ 762.735382][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.680974][T22721] Bluetooth: hci0: command tx timeout [ 764.774827][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.808221][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.829550][ T7875] bond0 (unregistering): Released all slaves [ 764.870536][T22719] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.870823][T22719] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.886322][T22719] bridge_slave_1: entered allmulticast mode [ 764.903470][T22719] bridge_slave_1: entered promiscuous mode [ 765.712623][T22721] Bluetooth: hci0: command tx timeout [ 766.206028][T22719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.455550][T22719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.829722][T22752] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.829978][T22752] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.830221][T22752] bridge_slave_0: entered allmulticast mode [ 766.864652][T22752] bridge_slave_0: entered promiscuous mode [ 766.982650][T22719] team0: Port device team_slave_0 added [ 767.002956][T22752] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.003213][T22752] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.003460][T22752] bridge_slave_1: entered allmulticast mode [ 767.009023][T22752] bridge_slave_1: entered promiscuous mode [ 767.205510][ T7875] hsr_slave_0: left promiscuous mode [ 767.218917][ T7875] hsr_slave_1: left promiscuous mode [ 767.220092][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.220111][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.244239][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.244260][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.349763][ T7875] veth1_macvtap: left promiscuous mode [ 767.349839][ T7875] veth0_macvtap: left promiscuous mode [ 767.350046][ T7875] veth1_vlan: left promiscuous mode [ 767.431037][ T7875] veth0_vlan: left promiscuous mode [ 769.766809][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 769.844985][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 770.682252][T22719] team0: Port device team_slave_1 added [ 779.104764][T21346] syz_tun (unregistering): left allmulticast mode [ 781.096155][ T5773] r8152-cfgselector 5-1: USB disconnect, device number 81 [ 781.365633][T22752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.417865][T22719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.417879][T22719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.417900][T22719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.565331][T22752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.624639][T22719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.624653][T22719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.624675][T22719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.311943][T22752] team0: Port device team_slave_0 added [ 782.312945][T22782] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.313198][T22782] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.313419][T22782] bridge_slave_0: entered allmulticast mode [ 782.319152][T22782] bridge_slave_0: entered promiscuous mode [ 782.379861][T22752] team0: Port device team_slave_1 added [ 782.387883][T22782] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.389679][T22782] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.389914][T22782] bridge_slave_1: entered allmulticast mode [ 782.419851][T22782] bridge_slave_1: entered promiscuous mode [ 783.252789][T22719] hsr_slave_0: entered promiscuous mode [ 783.341202][T22719] hsr_slave_1: entered promiscuous mode [ 783.342748][T22719] debugfs: 'hsr0' already exists in 'hsr' [ 783.342767][T22719] Cannot create hsr debugfs directory [ 783.460503][T22752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.460517][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.460538][T22752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.554079][T22782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.633485][T22752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.633499][T22752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.633522][T22752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.700647][T22782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.843757][ T7875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.354915][T22782] team0: Port device team_slave_0 added [ 785.734773][T22782] team0: Port device team_slave_1 added [ 786.329227][ T7875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.559887][T22752] hsr_slave_0: entered promiscuous mode [ 786.585044][T22752] hsr_slave_1: entered promiscuous mode [ 786.611805][T22752] debugfs: 'hsr0' already exists in 'hsr' [ 786.611826][T22752] Cannot create hsr debugfs directory [ 786.843617][T22782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.843631][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.843651][T22782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.244909][ T7875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.348075][T22782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.348089][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.348114][T22782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.296405][ T7875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.077272][T22782] hsr_slave_0: entered promiscuous mode [ 789.094582][T22782] hsr_slave_1: entered promiscuous mode [ 789.102410][T22782] debugfs: 'hsr0' already exists in 'hsr' [ 789.102430][T22782] Cannot create hsr debugfs directory [ 789.298373][T22976] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.298665][T22976] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.298884][T22976] bridge_slave_0: entered allmulticast mode [ 789.355927][T22976] bridge_slave_0: entered promiscuous mode [ 789.532675][T22976] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.532968][T22976] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.533211][T22976] bridge_slave_1: entered allmulticast mode [ 789.579836][T22976] bridge_slave_1: entered promiscuous mode [ 791.754575][T22976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.072341][T22976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.908915][T22976] team0: Port device team_slave_0 added [ 793.069355][T22976] team0: Port device team_slave_1 added [ 793.713540][T22976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.713554][T22976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.713576][T22976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.842882][T22976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.842896][T22976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.842919][T22976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.593651][T22976] hsr_slave_0: entered promiscuous mode [ 795.608228][T22976] hsr_slave_1: entered promiscuous mode [ 795.624148][T22976] debugfs: 'hsr0' already exists in 'hsr' [ 795.624170][T22976] Cannot create hsr debugfs directory [ 801.538876][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.598402][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.615042][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.618558][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.703130][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 803.872390][ T5601] Bluetooth: hci4: command tx timeout [ 804.427952][T22721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 804.502543][T22721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 804.507636][T22721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 804.556148][T22721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 804.557117][T22721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 805.479988][ T7875] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.953127][T22721] Bluetooth: hci4: command tx timeout [ 806.697463][ T7875] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.761584][T22721] Bluetooth: hci7: command tx timeout [ 807.687766][ T7875] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.030959][T22721] Bluetooth: hci4: command tx timeout [ 808.296386][ T7875] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.775327][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.775415][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.832143][T22721] Bluetooth: hci7: command tx timeout [ 809.723315][ T5601] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 809.780426][ T5601] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 809.803078][ T5601] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 809.806650][ T5601] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 809.826073][ T5601] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 810.122783][ T5601] Bluetooth: hci4: command tx timeout [ 810.912259][ T5601] Bluetooth: hci7: command tx timeout [ 811.952348][ T5601] Bluetooth: hci8: command tx timeout [ 812.047829][ T7875] bridge0: port 3(dummy0) entered disabled state [ 812.087040][ T7875] bridge_slave_1: left allmulticast mode [ 812.087067][ T7875] bridge_slave_1: left promiscuous mode [ 812.087280][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.135334][ T7875] bridge_slave_0: left allmulticast mode [ 812.135362][ T7875] bridge_slave_0: left promiscuous mode [ 812.135553][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.251315][ T7875] bridge_slave_1: left allmulticast mode [ 812.251343][ T7875] bridge_slave_1: left promiscuous mode [ 812.251541][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.296377][ T7875] bridge_slave_0: left allmulticast mode [ 812.296404][ T7875] bridge_slave_0: left promiscuous mode [ 812.296584][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.410740][ T7875] bridge_slave_1: left allmulticast mode [ 812.410768][ T7875] bridge_slave_1: left promiscuous mode [ 812.452041][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.480027][ T7875] bridge_slave_0: left allmulticast mode [ 812.480054][ T7875] bridge_slave_0: left promiscuous mode [ 812.480236][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.538842][ T7875] bridge_slave_1: left allmulticast mode [ 812.538869][ T7875] bridge_slave_1: left promiscuous mode [ 812.539070][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.588768][ T7875] bridge_slave_0: left allmulticast mode [ 812.588794][ T7875] bridge_slave_0: left promiscuous mode [ 812.588974][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.992499][ T5601] Bluetooth: hci7: command tx timeout [ 814.052196][ T5601] Bluetooth: hci8: command tx timeout [ 814.900476][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.926728][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.943400][ T7875] bond0 (unregistering): Released all slaves [ 815.903884][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.925190][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.940457][ T7875] bond0 (unregistering): Released all slaves [ 816.114868][ T5601] Bluetooth: hci8: command tx timeout [ 816.961634][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.989881][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.017234][ T7875] bond0 (unregistering): Released all slaves [ 817.934439][T22721] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 818.012027][T22721] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 818.019904][T22721] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 818.024775][T22721] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 818.046347][T22721] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 818.191458][ T5601] Bluetooth: hci8: command tx timeout [ 818.708785][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.732653][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.750706][ T7875] bond0 (unregistering): Released all slaves [ 820.247064][ T5601] Bluetooth: hci9: command tx timeout [ 822.284339][ T5601] Bluetooth: hci9: command tx timeout [ 822.350119][T23938] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.350388][T23938] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.350609][T23938] bridge_slave_0: entered allmulticast mode [ 822.380305][T23938] bridge_slave_0: entered promiscuous mode [ 822.715071][T23938] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.715341][T23938] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.715586][T23938] bridge_slave_1: entered allmulticast mode [ 822.724658][T23938] bridge_slave_1: entered promiscuous mode [ 823.914852][T23970] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.915106][T23970] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.915325][T23970] bridge_slave_0: entered allmulticast mode [ 823.950786][T23970] bridge_slave_0: entered promiscuous mode [ 824.353100][ T5601] Bluetooth: hci9: command tx timeout [ 824.528806][T23938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.587982][T23970] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.588248][T23970] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.588468][T23970] bridge_slave_1: entered allmulticast mode [ 824.592549][T23970] bridge_slave_1: entered promiscuous mode [ 824.656802][T23938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.624989][T23970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.647324][T23938] team0: Port device team_slave_0 added [ 825.864336][T23938] team0: Port device team_slave_1 added [ 825.899964][T23970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.335582][ T7875] hsr_slave_0: left promiscuous mode [ 826.383470][ T7875] hsr_slave_1: left promiscuous mode [ 826.384588][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.388494][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.388521][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.441073][ T5601] Bluetooth: hci9: command tx timeout [ 826.557690][ T7875] hsr_slave_0: left promiscuous mode [ 826.566231][ T7875] hsr_slave_1: left promiscuous mode [ 826.567341][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.572826][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.633224][ T7875] hsr_slave_0: left promiscuous mode [ 826.638438][ T7875] hsr_slave_1: left promiscuous mode [ 826.639563][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.639581][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.676594][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.676616][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.764029][ T7875] hsr_slave_0: left promiscuous mode [ 826.764720][ T7875] hsr_slave_1: left promiscuous mode [ 826.769134][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.769154][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.788938][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.788968][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.800177][ T7875] veth1_macvtap: left promiscuous mode [ 827.800255][ T7875] veth0_macvtap: left promiscuous mode [ 827.800467][ T7875] veth1_vlan: left promiscuous mode [ 827.800634][ T7875] veth0_vlan: left promiscuous mode [ 827.832971][ T7875] veth1_macvtap: left promiscuous mode [ 827.833048][ T7875] veth0_macvtap: left promiscuous mode [ 827.833255][ T7875] veth1_vlan: left promiscuous mode [ 827.833402][ T7875] veth0_vlan: left promiscuous mode [ 827.838113][ T7875] veth1_macvtap: left promiscuous mode [ 827.838189][ T7875] veth0_macvtap: left promiscuous mode [ 827.838402][ T7875] veth1_vlan: left promiscuous mode [ 827.838548][ T7875] veth0_vlan: left promiscuous mode [ 828.592055][ T38] INFO: task syz.2.2950:21175 blocked for more than 143 seconds. [ 828.592080][ T38] Tainted: G L syzkaller #0 [ 828.592089][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 828.592097][ T38] task:syz.2.2950 state:D stack:28008 pid:21175 tgid:21173 ppid:15674 task_flags:0x400040 flags:0x00080002 [ 828.592164][ T38] Call Trace: [ 828.592170][ T38] [ 828.592180][ T38] __schedule+0x1709/0x5530 [ 828.592212][ T38] ? __lock_acquire+0x6df/0x2e40 [ 828.592246][ T38] ? __pfx___schedule+0x10/0x10 [ 828.592268][ T38] ? lock_acquire+0x115/0x350 [ 828.592299][ T38] ? schedule+0x90/0x2b0 [ 828.592325][ T38] schedule+0x164/0x2b0 [ 828.592349][ T38] cgroup_lock_and_drain_offline+0x51a/0x650 [ 828.592446][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 828.592472][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 828.592512][ T38] cgroup_kn_lock_live+0x120/0x230 [ 828.592539][ T38] cgroup_subtree_control_write+0x4b5/0x1080 [ 828.592587][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 828.592612][ T38] ? kernfs_root+0x1c/0x230 [ 828.592628][ T38] ? kernfs_root+0x1c/0x230 [ 828.592645][ T38] ? kernfs_root+0x1ea/0x230 [ 828.592663][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 828.592687][ T38] cgroup_file_write+0x331/0x8f0 [ 828.592713][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 828.592736][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 828.592752][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.592774][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 828.592794][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 828.592821][ T38] vfs_write+0x61e/0xbb0 [ 828.592865][ T38] ? __pfx_vfs_write+0x10/0x10 [ 828.592891][ T38] ? mutex_lock_nested+0x168/0x1d0 [ 828.592911][ T38] ? __fget_files+0x2a/0x420 [ 828.592935][ T38] ksys_write+0x156/0x270 [ 828.592956][ T38] ? __pfx_ksys_write+0x10/0x10 [ 828.592974][ T38] ? __pfx_kcov_ioctl+0x10/0x10 [ 828.593006][ T38] do_syscall_64+0x17b/0x530 [ 828.593023][ T38] ? irqentry_exit+0x10f/0x8f0 [ 828.593038][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.593056][ T38] ? clear_bhb_loop+0x40/0x90 [ 828.593076][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.593093][ T38] RIP: 0033:0x7ff2342ce019 [ 828.593108][ T38] RSP: 002b:00007ff232505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.593125][ T38] RAX: ffffffffffffffda RBX: 00007ff234556090 RCX: 00007ff2342ce019 [ 828.593137][ T38] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000006 [ 828.593148][ T38] RBP: 00007ff23436500c R08: 0000000000000000 R09: 0000000000000000 [ 828.593159][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.593169][ T38] R13: 00007ff234556128 R14: 00007ff234556090 R15: 00007ffd42cb9738 [ 828.593193][ T38] [ 828.593228][ T38] [ 828.593228][ T38] Showing all locks held in the system: [ 828.593238][ T38] locks held by kworker/0:1/10: 3, on CPU#0: [ 828.593360][ T38] #0: ffff88813fe63938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593453][ T38] #1: ffffc900000f7c60 (netdev_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593490][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 828.593530][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 828.593561][ T38] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 828.593631][ T38] locks held by getty/5344: 2, on CPU#1: [ 828.593642][ T38] #0: ffff888036ca60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 828.593690][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 828.593734][ T38] locks held by kworker/u8:14/7869: 3, on CPU#0: [ 828.593745][ T38] #0: ffff88801aea4138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593782][ T38] #1: ffffc90007067c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593818][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 828.593855][ T38] locks held by kworker/u8:20/7875: 5, last CPU#0: [ 828.593866][ T38] #0: ffff88801bee0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593903][ T38] #1: ffffc90007397c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.593939][ T38] #2: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 828.593980][ T38] #3: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9a0 [ 828.594022][ T38] #4: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 828.594062][ T38] locks held by kworker/u8:38/7901: 3, on CPU#0: [ 828.594073][ T38] #0: ffff888032d2b138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.594110][ T38] #1: ffffc90007ec7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 828.594147][ T38] #2: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 828.594195][ T38] locks held by syz.2.2950/21175: 3, on CPU#0: [ 828.594207][ T38] #0: ffff88802577c128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 828.594245][ T38] #1: ffff8880322c6510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 828.594286][ T38] #2: ffff88802544b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 828.594329][ T38] locks held by syz.6.2977/21441: 4, last CPU#0: [ 828.594340][ T38] #0: ffff88805cf87b28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 828.594382][ T38] #1: ffff888033628510 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 828.594424][ T38] #2: ffff88805c4f4378 (&sb->s_type->i_mutex_key#32){+.+.}-{4:4}, at: fuse_file_write_iter+0x355/0x11d0 [ 828.594488][ T38] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 828.594533][ T38] locks held by syz-executor/22752: 4, on CPU#0: [ 828.594544][ T38] #0: ffff888037180510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 828.594585][ T38] #1: ffff88805cb85878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 828.594627][ T38] #2: ffff888026e9d4b8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 828.594673][ T38] #3: ffffffff8f038998 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 828.594713][ T38] locks held by syz-executor/22782: 1, on CPU#0: [ 828.594724][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 828.594761][ T38] locks held by syz-executor/22976: 7, on CPU#0: [ 828.594773][ T38] #0: ffff888037180510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 828.594814][ T38] #1: ffff88803bed3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 828.594855][ T38] #2: ffff888026e9d3c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 828.594901][ T38] #3: ffffffff8f038998 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 828.594939][ T38] #4: ffff888057884160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 828.594981][ T38] #5: ffff88806b63a310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 828.595025][ T38] #6: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 828.595063][ T38] locks held by syz-executor/23938: 2, on CPU#0: [ 828.595075][ T38] #0: ffffffff8ef27b48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 828.595122][ T38] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 828.595164][ T38] locks held by syz-executor/23970: 2, on CPU#0: [ 828.595175][ T38] #0: ffffffff8ef27b48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 828.595222][ T38] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 828.595264][ T38] locks held by syz-executor/24057: 1, on CPU#0: [ 828.595275][ T38] #0: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 828.595317][ T38] locks held by syz-executor/24150: 2, on CPU#0: [ 828.595329][ T38] #0: ffffffff8f7b5760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 828.595368][ T38] #1: ffffffff8f7c4a78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 828.595420][ T38] [ 828.595424][ T38] ============================================= [ 828.595424][ T38] [ 828.595462][ T38] NMI backtrace for cpu 0 [ 828.595476][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 828.595498][ T38] Tainted: [L]=SOFTLOCKUP [ 828.595504][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.595514][ T38] Call Trace: [ 828.595520][ T38] [ 828.595526][ T38] dump_stack_lvl+0xe8/0x150 [ 828.595549][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 828.595593][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 828.595625][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 828.595650][ T38] sys_info+0x135/0x170 [ 828.595670][ T38] watchdog+0xfd7/0x1030 [ 828.595701][ T38] ? watchdog+0x1c7/0x1030 [ 828.595730][ T38] kthread+0x388/0x470 [ 828.595753][ T38] ? __pfx_watchdog+0x10/0x10 [ 828.595776][ T38] ? __pfx_kthread+0x10/0x10 [ 828.595799][ T38] ret_from_fork+0x514/0xb70 [ 828.595824][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 828.595846][ T38] ? __switch_to+0xc89/0x1420 [ 828.595868][ T38] ? __pfx_kthread+0x10/0x10 [ 828.595891][ T38] ret_from_fork_asm+0x1a/0x30 [ 828.595925][ T38] [ 828.595937][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 828.595950][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 828.595971][ T38] Tainted: [L]=SOFTLOCKUP [ 828.595977][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.595987][ T38] Call Trace: [ 828.595993][ T38] [ 828.595999][ T38] vpanic+0x56c/0xa60 [ 828.596018][ T38] ? __pfx_vpanic+0x10/0x10 [ 828.596041][ T38] panic+0xc5/0xd0 [ 828.596056][ T38] ? __pfx_panic+0x10/0x10 [ 828.596074][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 828.596099][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 828.596125][ T38] watchdog+0x1030/0x1030 [ 828.596156][ T38] ? watchdog+0x1c7/0x1030 [ 828.596186][ T38] kthread+0x388/0x470 [ 828.596208][ T38] ? __pfx_watchdog+0x10/0x10 [ 828.596232][ T38] ? __pfx_kthread+0x10/0x10 [ 828.596255][ T38] ret_from_fork+0x514/0xb70 [ 828.596279][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 828.596302][ T38] ? __switch_to+0xc89/0x1420 [ 828.596323][ T38] ? __pfx_kthread+0x10/0x10 [ 828.596346][ T38] ret_from_fork_asm+0x1a/0x30 [ 828.596388][ T38] [ 828.596451][ T38] Kernel Offset: disabled