last executing test programs: 20m16.258053821s ago: executing program 32 (id=119): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x20000008}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x40, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x1000a, 0x3, 0x1cdc, 0x2]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 19m5.146960682s ago: executing program 33 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff004) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, 0x0, 0x258) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4) 18m59.202352363s ago: executing program 34 (id=242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r3, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd7, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r2, 0x0, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000140)=""/145, 0x91}], 0x1, 0xfffffffa, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13m52.679758374s ago: executing program 35 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x22, 0x9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) dup(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 11m19.077886286s ago: executing program 36 (id=881): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) io_setup(0x6, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x13, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x18c) r6 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r6, 0x0, 0x14, &(0x7f0000000740)) socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000200000000002000000000000000456deb880f"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="c2c2ced1806347", 0x7}], 0x1) prlimit64(0x0, 0x5, &(0x7f0000000000)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 6m46.666950557s ago: executing program 37 (id=1332): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x10000, 0x4}, 0x1c) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x2) 5m47.140374823s ago: executing program 0 (id=1487): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000070601031a000022601eb1000a00000a0f1b19e531daf0aaf7591c8f1f6a8439270c9dba69466a263c0ce5ff2fc5e6990ddc0bf5742eb8f53986126841acd6bebfec48db4db2fde17a8ddb27e3ef6dac31d7e2c9cb"], 0x14}, 0x1, 0x0, 0x0, 0xc44d1c01000bc49}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff"], 0x40) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r2}) 5m42.949089573s ago: executing program 0 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = fsopen(&(0x7f0000000300)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x5f, 0x69, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="99d3a24738682d0c1c1cd66fd35b568856fc3a45500836a494b5fd5fc07adfed31556cc6a593978da7f96e3891556ee93d06070912cf42085046e03a2e546dd83779aad39639307fb9b955470e5febf3b8588357c48644e2ce292d12dcee0f", &(0x7f0000000340)=""/166, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)}) syz_mount_image$fuse(0x0, 0x0, 0x208402, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000200007100000100000000", @ANYRES32=0x0, @ANYBLOB="7b15000000000000300012800b00010067656e657665000020000280060005004e200000140007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 5m34.306430546s ago: executing program 0 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 5m33.98406062s ago: executing program 0 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000002680)=""/4105, 0x1009}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x20122) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 5m33.665375077s ago: executing program 0 (id=1513): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="184291bfafa262b5ffb2fd51c3e0bcffffffffffef00000000580000ff7f00000020000000135000000000000000"], 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x200002f, 0x18, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd0000", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, 0x0, 0x0) 5m25.634993684s ago: executing program 0 (id=1527): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xfffffeff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000002000000000400000000000000000000000000079818b289fd49f71c5e1a1450d17f0376999266c5f4d90943623749fb6941643c2be5db06bc61ec3cbde40b1a276b32803ae453e13cb364348c23859bce0bee9c5effa8344c796364b5328b1760cd52e9f4b5665c2fa7deeaafb3e09c55bbc7a95059f701503d83da0ab428ee2aecbd0442c7728aee2efbc7de676027fff249ca32ed58b4e9f9d470a2668c7a156786594ff8a8bfe1368738f"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="00000000cc39fe892c86dd3d8f611877456f6e64042e38d6245b000000010000000000002100000000ccddb42b7824014e3cda7442a05bf440c6ab23199a51867f0d000000000000"], 0x4c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r8 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) r10 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r8) keyctl$KEYCTL_MOVE(0x1e, r10, r8, 0xfffffffffffffffb, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) 5m10.025781174s ago: executing program 38 (id=1527): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xfffffeff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000002000000000400000000000000000000000000079818b289fd49f71c5e1a1450d17f0376999266c5f4d90943623749fb6941643c2be5db06bc61ec3cbde40b1a276b32803ae453e13cb364348c23859bce0bee9c5effa8344c796364b5328b1760cd52e9f4b5665c2fa7deeaafb3e09c55bbc7a95059f701503d83da0ab428ee2aecbd0442c7728aee2efbc7de676027fff249ca32ed58b4e9f9d470a2668c7a156786594ff8a8bfe1368738f"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="00000000cc39fe892c86dd3d8f611877456f6e64042e38d6245b000000010000000000002100000000ccddb42b7824014e3cda7442a05bf440c6ab23199a51867f0d000000000000"], 0x4c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) r8 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) r10 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r8) keyctl$KEYCTL_MOVE(0x1e, r10, r8, 0xfffffffffffffffb, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) 3m38.324421186s ago: executing program 2 (id=1725): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYRES16=r1], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done], 0x0, 0x0, 0x0}) read$hidraw(r4, &(0x7f0000019340)=""/177, 0xb1) setuid(0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000194c0)={&(0x7f0000019400)=""/181, 0xb5, 0x4f, 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x15, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x9, "167d4f7865000000000000dfff00", 0xfe, 0xfe, 0x6, 0x4b, 0xb, 0x9, 0x84}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000019640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c080005000028000000000006907864010101ac1414aa00004e229871dde99624b67c26b5252e0a045b208136eaa8251a99073e4135ee25b5aaa3b7b4c9ae045368e58ac44e987dd1165afcd2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c"], 0x50}}, 0x0) 3m37.054305705s ago: executing program 2 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m32.716140171s ago: executing program 2 (id=1731): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000003c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f0000000400)={0x0, 0x6, 0x40081, 0x0, 0x5}) 3m32.23481598s ago: executing program 2 (id=1734): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc44d1c01000bc49}, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff"], 0x40) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r2}) 3m29.109388249s ago: executing program 2 (id=1742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x230) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x24) r5 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x1000000d}) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.106772567s ago: executing program 2 (id=1758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x800, 0x121040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 3m13.785380548s ago: executing program 3 (id=1776): syz_open_dev$video4linux(&(0x7f0000000100), 0xb, 0xc02) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x60000090) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3m11.620701163s ago: executing program 3 (id=1782): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m10.806414918s ago: executing program 3 (id=1784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x40000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m6.819204393s ago: executing program 39 (id=1758): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x800, 0x121040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 3m1.390111843s ago: executing program 3 (id=1801): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYRES16=r1], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done], 0x0, 0x0, 0x0}) read$hidraw(r3, &(0x7f0000019340)=""/177, 0xb1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000194c0)={&(0x7f0000019400)=""/181, 0xb5, 0x4f, 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x15, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x9, "167d4f7865000000000000dfff00", 0xfe, 0xfe, 0x6, 0x4b, 0xb, 0x9, 0x84}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000019640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c080005000028000000000006907864010101ac1414aa00004e229871dde99624b67c26b5252e0a045b208136eaa8251a99073e4135ee25b5aaa3b7b4c9ae045368e58ac44e987dd1165afcd2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c"], 0x50}}, 0x0) 2m59.260308463s ago: executing program 3 (id=1806): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m56.010480977s ago: executing program 3 (id=1810): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000001200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, 0x0, 0x0) 2m40.847173902s ago: executing program 40 (id=1810): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000011c0), 0x402, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000001200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, 0x0, 0x0) 1m42.616092383s ago: executing program 9 (id=1948): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000a40)=0x10001, 0x4) 1m38.902744822s ago: executing program 9 (id=1959): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009210600060122"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x4044800) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000070601031a000022601eb1000a00000a0f1b19e531daf0aaf7591c8f1f6a8439270c9dba69466a263c0ce5ff2fc5e6990ddc0bf5742eb8f539861268"], 0x14}, 0x1, 0x0, 0x0, 0xc44d1c01000bc49}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff"], 0x40) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) 1m34.647921563s ago: executing program 9 (id=1966): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1m34.190187694s ago: executing program 9 (id=1967): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xcc7159d0d2eb8b2d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x94) r2 = socket(0x10, 0x803, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)={0x244, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) 1m32.030886374s ago: executing program 9 (id=1971): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m29.763797302s ago: executing program 9 (id=1972): r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'wg2\x00', {}, 0xff7c}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'bond0\x00', {0x3}, 0x368d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x1}]}, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) 1m14.406323209s ago: executing program 41 (id=1972): r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) unshare(0x2000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'wg2\x00', {}, 0xff7c}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'bond0\x00', {0x3}, 0x368d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x1}]}, 0x8) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a0000000500010006000000110003"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) 26.869073997s ago: executing program 6 (id=2096): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 21.855376237s ago: executing program 6 (id=2101): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000406010800000000000000000300000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a31000000000500010007000000ac3edfd541dac23a99712b903c945c0f1a8d5e98adcb0b86d80a358beec76e052ae9f0a69c640435114712164f3e5494aa01e0be4809a7df805e1b88079d8523194f7feef34f9509dbe19f8468089ef73b5f5def4f1411fc30471b2443f4eccabe8787c51bc56689d568c299f0f076e23e88a4bdc2f6b0cb3cf37a17e434f7612793cec92a2643bed9c11cc153d23c19726ffec1ab5972cc0e5015b97511e66054cd0d4779599b04ecc77a3469af428a832afe3cd9f38ba368b25342d01b935bafda45621897bfbfca70fc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) unshare(0x28040600) syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x264, 0x20a, 0x278, 0x264, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x20}, 0x7a, 0x110, 0x178, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}, @common=@dst={{0x48}, {0x8, 0x8, 0x0, [0x9, 0x3, 0xb1a, 0x8, 0xd, 0x69, 0x3, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x6, 0x1, 0x3, 0x1000], 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x40, 0x7, '\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xff000000, 0xff000000], [], 'veth1_to_hsr\x00', 'veth0\x00', {}, {}, 0x4}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x81, {0xff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 21.190715581s ago: executing program 4 (id=2106): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r0, r0) 20.153591144s ago: executing program 7 (id=2107): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x11, 0xa, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r4 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'netdevsim0\x00', 0x3}, 0x18) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@local, 0x0, r3}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r7, 0x8937, &(0x7f00000005c0)={'dummy0\x00', @ifru_settings={0x1, 0x2, @fr_pvc_info=0x0}}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) syz_usb_connect(0x0, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010020000009040000020764c2000905a17f00000000000705"], 0x0) sendmsg$can_bcm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0xfce) 19.801815648s ago: executing program 4 (id=2110): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x0) 15.418416842s ago: executing program 4 (id=2116): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/41, 0x29}, {0x0}], 0x2, 0x5, 0x4) syz_usb_disconnect(r0) 14.420107887s ago: executing program 7 (id=2118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13.605590239s ago: executing program 6 (id=2119): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x18, 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)='./cgroup\x00', 0x0, 0x800040, &(0x7f0000000300)=ANY=[]) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)) 13.47945701s ago: executing program 7 (id=2120): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) 13.4223903s ago: executing program 8 (id=2121): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYRES8], 0x0) 12.306565s ago: executing program 6 (id=2122): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r0, r0) 12.202036916s ago: executing program 5 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x804) 12.014303842s ago: executing program 8 (id=2124): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005480)=[{{&(0x7f0000003e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x20044005}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x40}}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x15, r4}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.697936124s ago: executing program 5 (id=2125): syz_open_dev$sndctrl(0x0, 0x8, 0x191000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.647642999s ago: executing program 6 (id=2126): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup2(r0, r0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r2, 0x0, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11.395249053s ago: executing program 5 (id=2127): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 11.121073449s ago: executing program 4 (id=2128): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYRES16=r1], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done], 0x0, 0x0, 0x0}) read$hidraw(r3, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000194c0)={&(0x7f0000019400)=""/181, 0xb5, 0x4f, 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x15, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x9, "167d4f7865000000000000dfff00", 0xfe, 0xfe, 0x6, 0x4b, 0xb, 0x9, 0x84}) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000019640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2c080005000028000000000006907864010101ac1414aa00004e229871dde99624b67c26b5252e0a045b208136eaa8251a99073e4135ee25b5aaa3b7b4c9ae045368e58ac44e987dd1165afcd2", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c"], 0x50}}, 0x0) 9.713937864s ago: executing program 8 (id=2129): r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x0) 9.682825375s ago: executing program 4 (id=2130): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 9.544034236s ago: executing program 7 (id=2131): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000378f8668755269ed", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.26199074s ago: executing program 1 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.380564557s ago: executing program 4 (id=2133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88182500}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000000406010800000000000000000300000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a31000000000500010007000000ac3edfd541dac23a99712b903c945c0f1a8d5e98adcb0b86d80a358beec76e052ae9f0a69c640435114712164f3e5494aa01e0be4809a7df805e1b88079d8523194f7feef34f9509dbe19f8468089ef73b5f5def4f1411fc30471b2443f4eccabe8787c51bc56689d568c299f0f076e23e88a4bdc2f6b0cb3cf37a17e434f7612793cec92a2643bed9c11cc153d23c19726ffec1ab5972cc0e5015b97511e66054cd0d4779599b04ecc77a3469af428a832afe3cd9f38ba368b25342d01b935bafda45621897bfbfca70fc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) unshare(0x28040600) syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x264, 0x20a, 0x278, 0x264, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x20}, 0x7a, 0x110, 0x178, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}, @common=@dst={{0x48}, {0x8, 0x8, 0x0, [0x9, 0x3, 0xb1a, 0x8, 0xd, 0x69, 0x3, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x6, 0x1, 0x3, 0x1000], 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x8, 0x40, 0x7, '\x00', 'syz0\x00', {0x3}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xff000000, 0xff000000], [], 'veth1_to_hsr\x00', 'veth0\x00', {}, {}, 0x4}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x81, {0xff}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6.354808686s ago: executing program 5 (id=2134): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket(0x18, 0x1, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)='./cgroup\x00', 0x0, 0x800040, &(0x7f0000000300)=ANY=[]) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r5, 0x0, 0x3, 0x1}}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)) 6.255297661s ago: executing program 7 (id=2135): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 6.12776899s ago: executing program 1 (id=2136): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) 5.328017164s ago: executing program 8 (id=2137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x804) 4.87612061s ago: executing program 5 (id=2138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r0, r0) 4.608166074s ago: executing program 8 (id=2139): syz_open_dev$sndctrl(0x0, 0x8, 0x191000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.25255372s ago: executing program 1 (id=2140): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002a00)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07630936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 3.512744108s ago: executing program 6 (id=2141): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005480)=[{{&(0x7f0000003e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x20044005}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x40}}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x15, r4}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.324081291s ago: executing program 8 (id=2142): r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.928085254s ago: executing program 1 (id=2143): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x388a0400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @loopback}, 0xc0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x3ff}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000004600)=""/102400, 0x19000) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) 2.366935311s ago: executing program 1 (id=2144): creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x180000000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x186, &(0x7f0000000580)={0x0, 0xbc0d, 0x40}, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 1.736229095s ago: executing program 1 (id=2145): r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 115.468396ms ago: executing program 7 (id=2146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x40000014, 0x151}, &(0x7f0000000140), 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffcc2, 0x240548c7, 0x0, 0x0) 0s ago: executing program 5 (id=2147): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000378f8668755269ed", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): T13110] team0: Port device team_slave_1 added [ 1088.423002][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.452641][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.582449][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.786703][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.860263][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.109709][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.884671][T13200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.962644][ T5827] Bluetooth: hci6: command tx timeout [ 1090.142946][T11452] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1090.596562][T13200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.726519][T13110] hsr_slave_0: entered promiscuous mode [ 1090.956666][T13110] hsr_slave_1: entered promiscuous mode [ 1090.970467][T13110] debugfs: 'hsr0' already exists in 'hsr' [ 1090.977347][T13110] Cannot create hsr debugfs directory [ 1091.157767][T13210] binder: 13209:13210 ioctl 4018620d 0 returned -22 [ 1092.120958][T13226] binder: 13222:13226 ioctl 80286722 2000000194c0 returned -22 [ 1093.033118][T11452] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1093.141678][T13237] input: syz0 as /devices/virtual/input/input45 [ 1093.216135][T11452] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.238977][T11452] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1093.351913][T11452] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1093.464791][T11452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.588783][T11452] usb 8-1: config 0 descriptor?? [ 1093.702343][T11452] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1094.638536][ T882] usb 8-1: USB disconnect, device number 15 [ 1096.762491][T11452] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1096.927114][T11452] usb 5-1: Using ep0 maxpacket: 16 [ 1097.148863][T11452] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1097.177171][T11452] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1097.199353][T11452] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1097.967156][T11452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.007264][T11452] usb 5-1: Product: syz [ 1098.011529][T11452] usb 5-1: Manufacturer: syz [ 1098.056674][T11452] usb 5-1: SerialNumber: syz [ 1098.371287][T11452] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1098.602957][T11452] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1098.858467][T11452] usb 5-1: 2:1 : invalid Cluster Descriptor size [ 1099.078521][ T6000] usb 5-1: USB disconnect, device number 21 [ 1099.621554][T13305] syzkaller1: entered promiscuous mode [ 1099.995549][T13305] syzkaller1: entered allmulticast mode [ 1100.222013][T13315] binder: 13311:13315 ioctl 80286722 2000000194c0 returned -22 [ 1100.826447][T13324] input: syz0 as /devices/virtual/input/input46 [ 1102.622241][T13332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1102.638287][T13332] block device autoloading is deprecated and will be removed. [ 1102.847102][ T6000] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1103.086009][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.362548][ T6000] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1103.398193][ T6000] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1103.432629][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.478442][ T6000] usb 3-1: config 0 descriptor?? [ 1103.559567][ T6000] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1104.280993][ T5918] usb 3-1: USB disconnect, device number 10 [ 1105.834649][ T6000] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1105.997918][ T6000] usb 8-1: config 4 has an invalid interface number: 88 but max is 0 [ 1106.006319][ T6000] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.024965][ T6000] usb 8-1: config 4 has no interface number 0 [ 1106.031220][ T6000] usb 8-1: config 4 interface 88 altsetting 119 endpoint 0xB has invalid wMaxPacketSize 0 [ 1106.048084][ T6000] usb 8-1: config 4 interface 88 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.073763][ T6000] usb 8-1: config 4 interface 88 has no altsetting 0 [ 1106.090092][ T6000] usb 8-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1106.102958][ T6000] usb 8-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1106.122540][ T6000] usb 8-1: Manufacturer: syz [ 1106.127214][ T6000] usb 8-1: SerialNumber: syz [ 1106.790403][T13357] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 1106.881603][T13358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1108.526861][T13377] syz.4.1616 (13377): drop_caches: 2 [ 1109.866810][T13385] input: syz0 as /devices/virtual/input/input47 [ 1111.218250][T13110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1111.832527][ T6000] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1112.016012][ T6000] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.035403][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1112.068160][ T6000] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1112.097486][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.130020][ T6000] usb 4-1: config 0 descriptor?? [ 1112.172771][ T6000] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1112.712520][T13110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1113.781816][T13424] binder: 13420:13424 ioctl 80286722 2000000194c0 returned -22 [ 1114.158626][T13425] trusted_key: encrypted_key: key user:syz not found [ 1114.191046][T13110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1114.213413][ T5977] usb 4-1: USB disconnect, device number 27 [ 1114.372127][T13110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1115.257468][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.263941][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.939273][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.117599][ T882] usb 8-1: USB disconnect, device number 16 [ 1118.404900][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.413449][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.511164][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.584928][T13453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.719156][T13496] binder: 13492:13496 ioctl 80286722 2000000194c0 returned -22 [ 1123.242137][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1630'. [ 1123.264453][ T999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.299211][ T999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.353910][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.406063][ T999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.456142][ T999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.473017][ T6000] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1123.553347][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.560556][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.684456][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.699718][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.706950][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.765855][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1123.802506][ T6000] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1123.855114][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.943067][ T6000] usb 8-1: config 0 descriptor?? [ 1124.008556][ T6000] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1125.751678][T13556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.995271][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.105060][ T5929] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1126.282878][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 1126.291048][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1126.302638][ T5929] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1126.399436][T13576] binder: 13572:13576 ioctl 80286722 2000000194c0 returned -22 [ 1126.437524][ T5929] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1126.860583][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.870920][ T5929] usb 4-1: Product: syz [ 1126.875478][ T5929] usb 4-1: Manufacturer: syz [ 1126.881030][ T5929] usb 4-1: SerialNumber: syz [ 1127.192647][ T5929] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1127.226544][ T5929] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1127.307071][ T5977] usb 8-1: USB disconnect, device number 17 [ 1127.371223][T13586] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1651'. [ 1127.570813][ T5929] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 1127.872571][ T5929] usb 4-1: USB disconnect, device number 28 [ 1128.069420][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1128.519504][T13110] veth0_vlan: entered promiscuous mode [ 1128.843383][T13609] overlayfs: missing 'lowerdir' [ 1130.244469][T13110] veth1_vlan: entered promiscuous mode [ 1130.709074][T13110] veth0_macvtap: entered promiscuous mode [ 1130.761692][T13110] veth1_macvtap: entered promiscuous mode [ 1130.901939][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.080213][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.342443][T13629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1131.582476][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1131.652575][ T5929] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1131.688455][ T149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.702678][ T149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.763089][ T149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.789448][ T149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.814326][ T24] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1131.840022][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.890671][ T24] usb 4-1: Product: syz [ 1131.908112][ T24] usb 4-1: Manufacturer: syz [ 1131.922454][ T24] usb 4-1: SerialNumber: syz [ 1131.954092][ T24] usb 4-1: config 0 descriptor?? [ 1131.977055][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1132.021387][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1132.073169][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1132.132616][ T24] usb 4-1: media controller created [ 1132.204717][T13623] dvb-usb: bulk message failed: -22 (7/0) [ 1132.313124][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1132.405509][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1132.466608][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1132.592787][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1132.998423][ T5929] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1133.477398][T13646] binder: 13641:13646 ioctl 80286722 2000000194c0 returned -22 [ 1133.592647][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.630802][T13645] binder: 13641:13645 unknown command 0 [ 1133.662557][T13645] binder: 13641:13645 ioctl c0306201 200000000080 returned -22 [ 1133.682493][ T5929] usb 2-1: Product: syz [ 1133.700673][ T5929] usb 2-1: Manufacturer: syz [ 1133.711140][ T5929] usb 2-1: SerialNumber: syz [ 1133.736007][ T5929] usb 2-1: config 0 descriptor?? [ 1133.777626][ T24] DVB: Unable to find symbol mt352_attach() [ 1134.866034][ T24] DVB: Unable to find symbol nxt6000_attach() [ 1134.902221][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1134.970917][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 1135.025174][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 1135.100364][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1135.192539][ T5977] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1135.242635][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1135.248495][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1135.333574][ T24] usb 4-1: USB disconnect, device number 29 [ 1135.374463][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.442320][ T5977] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1135.522570][ T5977] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1135.542645][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.637923][ T5977] usb 3-1: config 0 descriptor?? [ 1135.691498][ T5977] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1137.108255][ T5929] usb 2-1: can't set config #0, error -71 [ 1137.148184][ T5929] usb 2-1: USB disconnect, device number 10 [ 1137.346407][T13679] overlayfs: missing 'lowerdir' [ 1137.458086][ T5977] usb 3-1: USB disconnect, device number 11 [ 1137.500791][ T6282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.542579][ T6282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.766305][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.810792][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.234803][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1141.172567][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1141.366155][T13716] binder: 13714:13716 ioctl 80286722 2000000194c0 returned -22 [ 1141.860392][ T5929] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1141.904126][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.939336][ T5929] usb 3-1: Product: syz [ 1141.962472][ T5929] usb 3-1: Manufacturer: syz [ 1141.995602][ T5929] usb 3-1: SerialNumber: syz [ 1142.054735][ T5929] usb 3-1: config 0 descriptor?? [ 1142.107467][ T5929] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1142.683869][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1142.822514][ T5977] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1142.860685][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1142.992515][ T5977] usb 4-1: device descriptor read/64, error -32 [ 1142.999338][ T5929] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1143.213178][ T5929] usb 3-1: media controller created [ 1143.242693][ T5977] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1143.277911][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.498338][ T5977] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1143.559112][ T5977] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1143.640842][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1143.675771][ T5977] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1143.725722][ T5929] DVB: Unable to find symbol mt352_attach() [ 1143.752631][ T5977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1144.029760][ T5977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1144.138036][ T5977] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1144.423090][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1144.442951][ T5977] usb 4-1: Product: syz [ 1144.447205][ T5977] usb 4-1: Manufacturer: syz [ 1144.463953][ T5929] DVB: Unable to find symbol nxt6000_attach() [ 1144.512442][ T5929] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1144.548483][T13726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1144.574656][ T5977] cdc_wdm 4-1:1.0: skipping garbage [ 1144.630186][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 1144.632112][ T5977] cdc_wdm 4-1:1.0: skipping garbage [ 1144.739640][ T5929] dvb-usb: schedule remote query interval to 1000 msecs. [ 1144.792647][ T5977] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1144.814166][ T5929] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1144.824076][ T5977] cdc_wdm 4-1:1.0: Unknown control protocol [ 1144.892828][ T5977] usb 4-1: USB disconnect, device number 31 [ 1144.909079][ T5929] dvb-usb: bulk message failed: -22 (7/0) [ 1144.936108][ T5929] dvb-usb: bulk message failed: -22 (7/0) [ 1144.987119][ T5929] usb 3-1: USB disconnect, device number 12 [ 1145.141098][T13751] overlayfs: missing 'lowerdir' [ 1145.856704][ T5929] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1149.464050][T13790] trusted_key: encrypted_key: key user:syz not found [ 1152.041295][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1152.387333][ T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1152.402513][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.412674][ T24] usb 6-1: Product: syz [ 1152.416865][ T24] usb 6-1: Manufacturer: syz [ 1152.421627][ T24] usb 6-1: SerialNumber: syz [ 1152.444633][ T24] usb 6-1: config 0 descriptor?? [ 1152.493988][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1152.606179][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1152.653086][ T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1152.706497][ T24] usb 6-1: media controller created [ 1152.770922][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1152.908225][T13812] team_slave_0: entered promiscuous mode [ 1152.914207][T13812] team_slave_1: entered promiscuous mode [ 1152.972528][T13812] vlan2: entered promiscuous mode [ 1152.999836][T13812] team0: entered promiscuous mode [ 1153.099475][ T24] DVB: Unable to find symbol mt352_attach() [ 1153.681891][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.708054][ T24] DVB: Unable to find symbol nxt6000_attach() [ 1153.745215][ T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1153.842717][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50 [ 1153.897018][ T24] dvb-usb: schedule remote query interval to 1000 msecs. [ 1153.942588][ T5977] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1153.946256][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1154.065625][T13832] binder: 13828:13832 ioctl c0306201 0 returned -14 [ 1154.103127][T13832] binder: 13828:13832 ioctl 80286722 2000000194c0 returned -22 [ 1154.553310][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 1154.561473][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.574500][ T5977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.594510][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1154.597841][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1154.666836][ T24] dvb-usb: bulk message failed: -22 (7/0) [ 1154.715892][ T5977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1154.737330][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.803653][ T5977] usb 4-1: Product: syz [ 1154.814690][ T24] usb 6-1: USB disconnect, device number 5 [ 1154.832594][ T5977] usb 4-1: Manufacturer: syz [ 1154.837250][ T5977] usb 4-1: SerialNumber: syz [ 1156.776660][ T5929] dvb-usb: bulk message failed: -22 (7/0) [ 1156.810020][ T5929] dvb-usb: error while querying for an remote control event. [ 1156.996810][ T5977] usb 4-1: can't set config #1, error -71 [ 1157.072762][ T5977] usb 4-1: USB disconnect, device number 32 [ 1157.195637][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1157.215761][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.464566][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.552484][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1157.825273][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.870341][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1157.970070][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1158.035874][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.128759][ T24] usb 6-1: config 0 descriptor?? [ 1158.182733][ T24] usb 6-1: can't set config #0, error -71 [ 1158.232833][ T24] usb 6-1: USB disconnect, device number 6 [ 1158.868391][ T49] bridge_slave_1: left allmulticast mode [ 1159.157132][T13874] trusted_key: encrypted_key: key user:syz not found [ 1159.204596][ T49] bridge_slave_1: left promiscuous mode [ 1159.302691][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.931988][ T49] bridge_slave_0: left allmulticast mode [ 1160.992695][ T49] bridge_slave_0: left promiscuous mode [ 1161.024964][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.442745][T13903] binder: 13901:13903 ioctl 80286722 2000000194c0 returned -22 [ 1166.429479][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.512831][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.662253][ T49] bond0 (unregistering): Released all slaves [ 1166.742553][ T882] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1166.943657][ T49] : left promiscuous mode [ 1166.950646][ T882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.969779][ T882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1167.061394][ T882] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1167.134500][ T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.219457][ T882] usb 6-1: config 0 descriptor?? [ 1167.247494][ T882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1168.293541][ T882] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1168.377760][ T49] hsr_slave_0: left promiscuous mode [ 1168.471675][ T49] hsr_slave_1: left promiscuous mode [ 1168.498876][ T882] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1168.517594][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.564533][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.586700][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.594517][ T882] usb 4-1: Product: syz [ 1168.618225][ T882] usb 4-1: Manufacturer: syz [ 1168.629645][T13936] tipc: Failed to remove unknown binding: 66,1,1/0:544722730/544722732 [ 1168.648491][ T882] usb 4-1: SerialNumber: syz [ 1168.675623][ T882] usb 4-1: config 0 descriptor?? [ 1168.713569][ T5977] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1168.737121][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.751617][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.777355][ T882] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1168.819863][ T49] veth1_macvtap: left promiscuous mode [ 1168.850453][ T882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1168.900436][ T882] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1168.926194][ T5977] usb 3-1: Using ep0 maxpacket: 16 [ 1168.943057][ T49] veth0_macvtap: left promiscuous mode [ 1168.957973][ T49] veth1_vlan: left promiscuous mode [ 1168.960709][ T5977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1168.981291][ T49] veth0_vlan: left promiscuous mode [ 1168.981333][ T882] usb 4-1: media controller created [ 1169.013921][ T5977] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1169.069621][ T5977] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1169.118647][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.139077][ T882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.166629][ T5977] usb 3-1: Product: syz [ 1169.192514][ T5977] usb 3-1: Manufacturer: syz [ 1169.216798][ T5977] usb 3-1: SerialNumber: syz [ 1169.577108][ T5977] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1169.603671][ T5918] usb 6-1: USB disconnect, device number 7 [ 1169.652772][ T882] DVB: Unable to find symbol mt352_attach() [ 1169.695211][ T5977] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1169.986327][ T5977] usb 3-1: 2:1 : invalid Cluster Descriptor size [ 1170.009208][ T882] DVB: Unable to find symbol nxt6000_attach() [ 1170.036341][ T882] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1170.153865][ T882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 1170.301031][ T882] dvb-usb: schedule remote query interval to 1000 msecs. [ 1170.367445][ T882] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1170.414112][ T5977] usb 3-1: USB disconnect, device number 13 [ 1170.471524][ T882] dvb-usb: bulk message failed: -22 (7/0) [ 1170.529206][ T882] dvb-usb: bulk message failed: -22 (7/0) [ 1170.596278][T13971] syz.1.1714 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1170.616121][ T882] usb 4-1: USB disconnect, device number 33 [ 1170.831190][T10505] udevd[10505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1172.052693][ T882] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1172.852988][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1172.953510][T13981] binder: 13980:13981 ioctl 80286722 2000000194c0 returned -22 [ 1173.062812][T13979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.218155][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1176.693944][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.703722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.282899][ T5929] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1178.406480][ T882] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1178.464258][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.496049][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1178.588404][ T5929] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1178.640754][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.701749][ T5929] usb 6-1: config 0 descriptor?? [ 1178.759911][ T882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.359219][ T5929] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1179.564929][ T882] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1179.578284][ T882] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1179.587525][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.618028][ T882] usb 3-1: config 0 descriptor?? [ 1179.802827][T14021] trusted_key: encrypted_key: key user:syz not found [ 1180.126664][ T882] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1180.598767][ T10] usb 3-1: USB disconnect, device number 14 [ 1180.695448][ T49] IPVS: stop unused estimator thread 0... [ 1181.085100][T14042] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 1181.377051][ T6000] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1181.564684][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.641755][ T6000] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1181.748139][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.834977][ T882] usb 6-1: USB disconnect, device number 8 [ 1181.907533][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.027661][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1182.201461][ T6000] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1182.248363][ T6000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.291533][ T6000] usb 2-1: Product: syz [ 1182.306633][ T6000] usb 2-1: Manufacturer: syz [ 1182.415510][ T6000] usb 2-1: SerialNumber: syz [ 1182.853417][ T6000] usb 2-1: config 0 descriptor?? [ 1184.459372][ T6000] usb 2-1: ucan: probing device on interface #0 [ 1184.520571][ T6000] usb 2-1: ucan: invalid endpoint configuration [ 1184.559031][ T6000] usb 2-1: ucan: probe failed; try to update the device firmware [ 1184.660645][ T6000] usb 2-1: USB disconnect, device number 11 [ 1187.160915][T14100] bridge0: port 3(syz_tun) entered blocking state [ 1187.229306][T14100] bridge0: port 3(syz_tun) entered disabled state [ 1187.253002][T14100] syz_tun: entered allmulticast mode [ 1187.309400][T14100] syz_tun: entered promiscuous mode [ 1187.357077][T14108] trusted_key: encrypted_key: key user:syz not found [ 1187.762545][ T882] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 1188.002653][ T882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.075585][ T882] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1188.160788][ T882] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1188.346535][ T882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.399043][ T882] usb 8-1: config 0 descriptor?? [ 1188.765964][ T882] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1189.331860][ T882] usb 8-1: USB disconnect, device number 18 [ 1194.620452][T14184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1194.642846][T14184] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1194.660494][T14184] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1195.472434][T14203] binder: 14201:14203 ioctl 80286722 2000000194c0 returned -22 [ 1196.316194][T14184] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1196.329130][T14184] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1196.445208][T14184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1196.451399][T14184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1196.502635][T14184] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1196.589086][T14184] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1196.649345][T14184] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1196.658730][T14184] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1196.682640][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1196.682655][T10084] Bluetooth: hci3: command 0x0406 tx timeout [ 1196.742630][T14184] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1197.022564][ T882] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1197.984000][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.085813][ T882] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1198.113073][ T882] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1198.122301][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.143212][ T882] usb 5-1: config 0 descriptor?? [ 1198.168942][ T882] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1198.362522][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1198.430757][ T6000] usb 5-1: USB disconnect, device number 22 [ 1198.522824][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1198.522928][T10084] Bluetooth: hci0: command 0x0c1a tx timeout [ 1198.682738][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1198.762569][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1200.442559][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1200.604599][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1200.611574][T14275] binder: 14271:14275 ioctl 80286722 2000000194c0 returned -22 [ 1200.982467][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1202.682481][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1203.003075][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1203.997543][T14302] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1204.098451][T14302] block nbd0: shutting down sockets [ 1204.340894][T10084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1204.351206][T10084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1204.366635][T10084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1204.375539][T10084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1204.385006][T10084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1205.608405][T14310] chnl_net:caif_netlink_parms(): no params data found [ 1206.149991][T14310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.186061][T14310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.222801][T14310] bridge_slave_0: entered allmulticast mode [ 1206.252632][T14310] bridge_slave_0: entered promiscuous mode [ 1206.453228][ T5827] Bluetooth: hci2: command tx timeout [ 1206.460736][T14310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.472560][T14310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.479809][T14310] bridge_slave_1: entered allmulticast mode [ 1206.495337][T14310] bridge_slave_1: entered promiscuous mode [ 1206.502561][ T6000] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1206.763316][ T6000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.781692][T14310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.800307][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1206.813443][ T5929] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1206.832517][ T6000] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1206.837591][T14310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.841588][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.891365][ T6000] usb 8-1: config 0 descriptor?? [ 1206.916515][ T6000] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1206.974400][ T5929] usb 5-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1206.985805][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1207.028901][ T5929] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1207.042639][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1207.050844][ T5929] usb 5-1: Product: syz [ 1207.102678][ T5929] usb 5-1: Manufacturer: syz [ 1207.123126][ T5929] usb 5-1: SerialNumber: syz [ 1207.144844][T14310] team0: Port device team_slave_0 added [ 1207.163426][ T5929] usb 5-1: config 0 descriptor?? [ 1207.221480][T14310] team0: Port device team_slave_1 added [ 1207.415285][ T5929] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1207.465902][ T5929] usb 5-1: USB disconnect, device number 23 [ 1207.474509][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.481112][T14310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.521862][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.630556][T14310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.396096][ T5929] usb 8-1: USB disconnect, device number 19 [ 1208.523766][ T5827] Bluetooth: hci2: command tx timeout [ 1210.475425][T14382] binder: 14377:14382 ioctl 80286722 2000000194c0 returned -22 [ 1210.734104][ T5827] Bluetooth: hci2: command tx timeout [ 1210.735699][T14310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.012473][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.099605][T14310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.294923][T14386] syzkaller1: entered promiscuous mode [ 1211.312208][T14386] syzkaller1: entered allmulticast mode [ 1211.322376][T14391] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 1211.361499][T14310] hsr_slave_0: entered promiscuous mode [ 1211.399174][T14310] hsr_slave_1: entered promiscuous mode [ 1211.430447][T14310] debugfs: 'hsr0' already exists in 'hsr' [ 1211.500382][T14310] Cannot create hsr debugfs directory [ 1211.506835][T14390] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1806'. [ 1213.652481][ T5827] Bluetooth: hci2: command tx timeout [ 1216.731105][T11452] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1216.935947][T11452] usb 2-1: Using ep0 maxpacket: 32 [ 1216.992966][T11452] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 1217.033405][T11452] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 1217.051504][T11452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.142613][T11452] usb 2-1: Product: syz [ 1217.155551][T11452] usb 2-1: Manufacturer: syz [ 1217.162547][T11452] usb 2-1: SerialNumber: syz [ 1217.632213][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.663185][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.902272][ T882] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1219.086699][ T882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.452712][ T882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1219.531346][T11452] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1219.548684][ T882] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1220.108669][ T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.135573][ T882] usb 6-1: config 0 descriptor?? [ 1220.147223][ T882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1220.274027][T14310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1220.337665][T14310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1220.599644][T11452] usb 2-1: USB disconnect, device number 12 [ 1221.022850][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.143730][T14310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1222.387141][ T882] usb 6-1: USB disconnect, device number 9 [ 1222.489612][T14310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1223.106714][T14479] trusted_key: encrypted_key: key user:syz not found [ 1225.280642][T14310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.436220][T14310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.497759][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.504976][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.008039][T14519] random: crng reseeded on system resumption [ 1226.514656][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.521957][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.182676][ T6000] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1229.413752][ T6000] usb 5-1: Using ep0 maxpacket: 16 [ 1229.451629][ T6000] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1229.503523][ T6000] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1229.558260][ T6000] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1229.582448][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.634572][ T6000] usb 5-1: Product: syz [ 1229.639461][ T6000] usb 5-1: Manufacturer: syz [ 1229.664535][ T6000] usb 5-1: SerialNumber: syz [ 1229.772631][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1229.773504][T14310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.966907][ T6000] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1229.992566][ T29] usb 6-1: device descriptor read/64, error -71 [ 1230.019598][ T6000] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1230.255808][T10084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1230.285061][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1230.301563][T10084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1230.318362][T10084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1230.337366][T10084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1230.347042][T10084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1230.448044][ T6000] usb 5-1: USB disconnect, device number 24 [ 1230.518797][ T29] usb 6-1: device descriptor read/64, error -71 [ 1230.593778][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.676944][ T29] usb usb6-port1: attempt power cycle [ 1231.046305][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1231.083713][ T29] usb 6-1: device descriptor read/8, error -71 [ 1231.160717][T14570] kAFS: unable to lookup cell 'ÿ' [ 1231.192879][T14570] kAFS: unable to lookup cell '(,c¾Ì' [ 1231.322497][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1231.332497][T14550] chnl_net:caif_netlink_parms(): no params data found [ 1231.363291][ T29] usb 6-1: device descriptor read/8, error -71 [ 1231.484472][ T29] usb usb6-port1: unable to enumerate USB device [ 1231.672386][T14580] binder: 14577:14580 ioctl 80286722 2000000194c0 returned -22 [ 1232.327642][T14310] veth0_vlan: entered promiscuous mode [ 1232.444508][ T5827] Bluetooth: hci7: command tx timeout [ 1233.900432][T14599] kAFS: unable to lookup cell 'ÿ' [ 1233.939256][T14599] kAFS: unable to lookup cell '(,c¾Ì' [ 1234.330129][T14606] trusted_key: encrypted_key: key user:syz not found [ 1234.598675][ T5827] Bluetooth: hci7: command tx timeout [ 1234.855533][T14310] veth1_vlan: entered promiscuous mode [ 1235.106018][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.165497][T14550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.192786][T14550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.226244][T14550] bridge_slave_0: entered allmulticast mode [ 1235.283036][T14550] bridge_slave_0: entered promiscuous mode [ 1235.504227][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.598178][T14550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.633407][T14550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.667721][T14550] bridge_slave_1: entered allmulticast mode [ 1235.712689][T14550] bridge_slave_1: entered promiscuous mode [ 1235.854350][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.003966][ T5827] Bluetooth: hci7: command tx timeout [ 1237.784482][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.974278][T14550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.036406][T14310] veth0_macvtap: entered promiscuous mode [ 1238.111393][T14310] veth1_macvtap: entered promiscuous mode [ 1238.133238][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.147674][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.187006][T14550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.463008][T14550] team0: Port device team_slave_0 added [ 1238.532127][T14550] team0: Port device team_slave_1 added [ 1238.767710][T14550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.805260][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.899522][T14550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.969076][T14310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.063929][T14550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.083279][ T5827] Bluetooth: hci7: command tx timeout [ 1239.132482][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1239.371668][T14642] binder: 14640:14642 ioctl 80286722 2000000194c0 returned -22 [ 1239.442123][T14550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.787391][T14310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.115279][ T6284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.147048][ T6284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.251254][T14550] hsr_slave_0: entered promiscuous mode [ 1240.295162][T14550] hsr_slave_1: entered promiscuous mode [ 1240.312025][T14550] debugfs: 'hsr0' already exists in 'hsr' [ 1240.389148][T14652] binder: 14648:14652 ioctl 4018620d 0 returned -22 [ 1240.396408][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1240.406856][T14550] Cannot create hsr debugfs directory [ 1240.543932][ T9] usb 8-1: device descriptor read/64, error -71 [ 1241.121737][ T6284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.161328][ T6284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.182507][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1241.402758][ T9] usb 8-1: device descriptor read/64, error -71 [ 1241.533194][ T9] usb usb8-port1: attempt power cycle [ 1241.767504][ T49] bridge_slave_1: left allmulticast mode [ 1241.795442][ T49] bridge_slave_1: left promiscuous mode [ 1241.803461][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.630507][ T49] bridge_slave_0: left allmulticast mode [ 1242.651519][ T49] bridge_slave_0: left promiscuous mode [ 1242.684257][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.812530][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1242.893173][ T9] usb 8-1: device descriptor read/8, error -71 [ 1243.142539][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1243.283471][ T9] usb 8-1: device descriptor read/8, error -71 [ 1243.462239][ T9] usb usb8-port1: unable to enumerate USB device [ 1245.364993][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.382618][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.396589][ T49] bond0 (unregistering): Released all slaves [ 1245.572339][T14691] netlink: 'syz.7.1855': attribute type 10 has an invalid length. [ 1245.616988][ T49] tipc: Disabling bearer [ 1245.646915][ T49] tipc: Left network mode [ 1245.842513][T10663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.878239][T10663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.906108][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.935346][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.952512][ T5929] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1248.552486][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 1248.569015][ T5929] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1248.581810][ T5929] usb 5-1: config 0 has no interface number 0 [ 1248.588403][ T5929] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1248.598485][ T5929] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1249.580922][ T49] hsr_slave_0: left promiscuous mode [ 1249.612604][ T49] hsr_slave_1: left promiscuous mode [ 1249.672145][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.705867][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.796083][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.824520][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.922978][ T49] veth1_macvtap: left promiscuous mode [ 1249.935675][ T49] veth0_macvtap: left promiscuous mode [ 1249.942584][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1249.989359][ T49] veth1_vlan: left promiscuous mode [ 1250.038686][ T49] veth0_vlan: left promiscuous mode [ 1250.096353][ T9] usb 6-1: device descriptor read/64, error -71 [ 1250.362644][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1250.524378][ T9] usb 6-1: device descriptor read/64, error -71 [ 1250.643034][ T9] usb usb6-port1: attempt power cycle [ 1250.994288][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1251.104434][ T9] usb 6-1: device descriptor read/8, error -71 [ 1251.403867][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1251.425582][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1251.467320][ T9] usb 6-1: device descriptor read/8, error -71 [ 1251.487841][ T5929] usb 5-1: string descriptor 0 read error: -71 [ 1251.527346][ T5929] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1251.577851][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.635645][ T5929] usb 5-1: config 0 descriptor?? [ 1251.649223][ T9] usb usb6-port1: unable to enumerate USB device [ 1251.679546][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1251.698287][ T5929] usb 5-1: can't set config #0, error -71 [ 1251.741784][ T5929] usb 5-1: USB disconnect, device number 25 [ 1251.764249][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1251.764276][ T30] audit: type=1326 audit(2000000077.830:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1251.882575][ T30] audit: type=1326 audit(2000000077.830:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1251.970824][ T30] audit: type=1326 audit(2000000077.880:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1252.054549][ T30] audit: type=1326 audit(2000000077.880:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1252.135176][ T30] audit: type=1326 audit(2000000077.880:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1252.215154][ T30] audit: type=1326 audit(2000000077.880:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1252.260200][ T30] audit: type=1326 audit(2000000077.880:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1252.356996][ T30] audit: type=1326 audit(2000000077.880:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f343df5cfce code=0x7ffc0000 [ 1252.951351][T14777] loop5: detected capacity change from 0 to 7 [ 1252.983649][T14777] Dev loop5: unable to read RDB block 7 [ 1253.019872][T14777] loop5: AHDI p1 p2 [ 1253.024496][T14759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1253.024716][T14759] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1253.024907][T14759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1253.025091][T14759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1253.025268][T14759] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1253.056257][T14759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1253.067841][T14777] loop5: partition table partially beyond EOD, truncated [ 1253.090649][T14759] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1253.105619][T14777] loop5: p1 start 50331648 is beyond EOD, truncated [ 1253.208516][T14784] trusted_key: encrypted_key: key user:syz not found [ 1253.283330][T14786] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1253.429541][T14759] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1253.507984][T14759] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1253.523127][T14759] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1253.575148][T14759] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1253.628727][ T30] audit: type=1326 audit(2000000079.690:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f343df9c42b code=0x7ffc0000 [ 1253.712688][ T30] audit: type=1326 audit(2000000079.690:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343df9c799 code=0x7ffc0000 [ 1254.693998][ T49] IPVS: stop unused estimator thread 0... [ 1255.131278][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 1255.137756][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1255.144098][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1255.150124][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.156439][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1255.162775][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1255.440994][T14807] binder: 14804:14807 ioctl 80286722 2000000194c0 returned -22 [ 1256.199728][T14800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.242056][ T5834] Bluetooth: hci7: command 0x0c1a tx timeout [ 1256.890239][T14550] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1256.975004][T14550] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1257.059597][T14550] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1257.120511][T14550] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1257.243202][T10084] Bluetooth: hci2: command 0x0c1a tx timeout [ 1257.283536][ T6000] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1257.382613][T14277] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1257.523931][T14277] usb 6-1: device descriptor read/64, error -71 [ 1257.541179][ T6000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.566782][ T6000] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1257.601901][ T6000] usb 7-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1257.630895][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.636185][T14847] loop2: detected capacity change from 0 to 7 [ 1257.640792][T14550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.667377][ T6000] usb 7-1: config 0 descriptor?? [ 1257.682667][T14847] Dev loop2: unable to read RDB block 7 [ 1257.705452][T14847] loop2: unable to read partition table [ 1257.718457][ T6000] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1257.730210][T14847] loop2: partition table beyond EOD, truncated [ 1257.755939][T14550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.766723][T14847] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1257.792786][T14277] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1257.858339][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.865545][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.945385][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.952577][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.974962][T14277] usb 6-1: device descriptor read/64, error -71 [ 1258.163369][T14277] usb usb6-port1: attempt power cycle [ 1258.472797][T10084] Bluetooth: hci7: command 0x0c1a tx timeout [ 1258.610002][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1258.647113][T14550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1258.692758][T14550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1258.814703][T14277] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1258.853155][T14277] usb 6-1: device descriptor read/8, error -71 [ 1259.102502][T14277] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1259.134972][T14277] usb 6-1: device descriptor read/8, error -71 [ 1259.271734][T14550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.279114][T14277] usb usb6-port1: unable to enumerate USB device [ 1259.322673][T10084] Bluetooth: hci2: command 0x0c1a tx timeout [ 1260.250830][T11452] usb 7-1: USB disconnect, device number 2 [ 1260.523740][T10084] Bluetooth: hci7: command 0x0c1a tx timeout [ 1260.615130][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1260.615157][ T30] audit: type=1326 audit(2000000086.670:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1260.746546][ T30] audit: type=1326 audit(2000000086.670:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1260.799415][ T30] audit: type=1326 audit(2000000086.680:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1260.852526][T11452] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1260.854209][ T30] audit: type=1326 audit(2000000086.680:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1260.913634][ T30] audit: type=1326 audit(2000000086.680:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1260.970118][ T30] audit: type=1326 audit(2000000086.680:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1261.034434][ T30] audit: type=1326 audit(2000000086.680:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1261.059315][T11452] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.090315][T14550] veth0_vlan: entered promiscuous mode [ 1261.100259][T11452] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1261.100262][ T30] audit: type=1326 audit(2000000086.680:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9359c799 code=0x7ffc0000 [ 1261.100344][ T30] audit: type=1326 audit(2000000086.680:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b9355cfce code=0x7ffc0000 [ 1261.232709][T11452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.257877][T14550] veth1_vlan: entered promiscuous mode [ 1261.293640][T11452] usb 7-1: config 0 descriptor?? [ 1261.322607][ T30] audit: type=1326 audit(2000000086.680:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14879 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b9359c42b code=0x7ffc0000 [ 1261.346120][T11452] pwc: Askey VC010 type 2 USB webcam detected. [ 1262.602896][T10084] Bluetooth: hci7: command 0x0c1a tx timeout [ 1262.691722][T14550] veth0_macvtap: entered promiscuous mode [ 1262.785591][T14550] veth1_macvtap: entered promiscuous mode [ 1262.909099][T14885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1262.942202][T14885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1262.964880][T14885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1262.998272][T14550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.013116][T14885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1263.028353][T14885] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1263.076782][T11452] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1263.085581][T14885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1263.094598][T14550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.145727][T11452] pwc: recv_control_msg error -71 req 02 val 2700 [ 1263.152768][T14885] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1263.215050][T11452] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1263.256860][ T149] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.293634][T11452] pwc: recv_control_msg error -71 req 04 val 1000 [ 1263.312986][ T149] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.380006][T11452] pwc: recv_control_msg error -71 req 04 val 1300 [ 1263.431812][T11452] pwc: recv_control_msg error -71 req 04 val 1400 [ 1263.453664][ T149] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.462615][T11452] pwc: recv_control_msg error -71 req 02 val 2000 [ 1263.553740][T14909] binder: 14905:14909 ioctl 80286722 2000000194c0 returned -22 [ 1263.713890][T11452] pwc: recv_control_msg error -71 req 02 val 2100 [ 1263.853118][T11452] pwc: recv_control_msg error -71 req 04 val 1500 [ 1263.883060][T11452] pwc: recv_control_msg error -71 req 02 val 2500 [ 1263.901846][T11452] pwc: recv_control_msg error -71 req 02 val 2400 [ 1263.922538][T11452] pwc: recv_control_msg error -71 req 02 val 2600 [ 1263.931640][T11452] pwc: recv_control_msg error -71 req 02 val 2900 [ 1263.963739][ T149] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.983011][T11452] pwc: recv_control_msg error -71 req 02 val 2800 [ 1264.123010][T11452] pwc: recv_control_msg error -71 req 04 val 1100 [ 1264.231574][T14914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.513653][T11452] pwc: recv_control_msg error -71 req 04 val 1200 [ 1264.543069][T11452] pwc: Registered as video103. [ 1264.550099][T11452] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 1264.598237][T11452] usb 7-1: USB disconnect, device number 3 [ 1264.922962][T10084] Bluetooth: hci4: command 0x0406 tx timeout [ 1265.022523][T10084] Bluetooth: hci0: command 0x0c1a tx timeout [ 1265.028752][T14810] Bluetooth: hci5: command 0x0406 tx timeout [ 1265.092607][T10084] Bluetooth: hci6: command 0x0c1a tx timeout [ 1265.100747][T14810] Bluetooth: hci1: command 0x0c1a tx timeout [ 1265.130415][T14923] trusted_key: encrypted_key: key user:syz not found [ 1265.172697][T10084] Bluetooth: hci7: command 0x0c1a tx timeout [ 1265.185523][T14810] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.345636][ T6284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.392567][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.539322][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.579626][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.972595][T12374] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1266.042260][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1266.042281][ T30] audit: type=1326 audit(2000000092.100:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1266.219162][T11452] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1266.600788][T11452] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.649641][T11452] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1266.684566][T11452] usb 10-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1266.714229][T11452] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.756238][T11452] usb 10-1: config 0 descriptor?? [ 1266.804756][T11452] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1266.832640][ T30] audit: type=1326 audit(2000000092.100:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1266.855857][ T30] audit: type=1326 audit(2000000092.250:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1266.910740][ T30] audit: type=1326 audit(2000000092.250:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1266.944425][T12374] usb 6-1: Using ep0 maxpacket: 16 [ 1266.965573][T12374] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1266.977986][ T30] audit: type=1326 audit(2000000092.310:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1266.978216][T12374] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1267.024581][ T30] audit: type=1326 audit(2000000092.320:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1267.051239][ T30] audit: type=1326 audit(2000000092.320:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14938 comm="syz.6.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd49399c799 code=0x7ffc0000 [ 1267.154448][T12374] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1267.248369][T12374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.309398][T12374] usb 6-1: Product: syz [ 1267.347713][T12374] usb 6-1: Manufacturer: syz [ 1267.441011][T12374] usb 6-1: SerialNumber: syz [ 1267.859693][ T882] usb 10-1: USB disconnect, device number 2 [ 1267.875499][T12374] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1267.896824][T12374] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1269.720330][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1270.332479][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.363693][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1270.393015][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.441834][ T9] usb 2-1: config 0 descriptor?? [ 1270.550129][T14974] binder: 14971:14974 ioctl 80286722 2000000194c0 returned -22 [ 1270.939593][T12374] usb 6-1: USB disconnect, device number 22 [ 1271.094049][ T9] usb 2-1: can't set config #0, error -71 [ 1271.120696][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.140726][ T9] usb 2-1: USB disconnect, device number 13 [ 1272.390201][T14977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.923188][T14814] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1275.192704][ T882] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1275.355324][ T882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.427810][T14814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.444097][T15022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1275.450304][T15022] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1275.452487][T14814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1275.456532][T15022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1275.475642][T15022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.481721][T15022] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1275.487954][T15022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1275.488071][T14814] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1275.494198][T15022] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1275.563212][T14814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.633715][T14814] usb 2-1: config 0 descriptor?? [ 1275.679520][ T882] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1275.711370][T14814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1275.773711][ T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.823606][ T882] usb 6-1: config 0 descriptor?? [ 1275.851794][ T882] pwc: Askey VC010 type 2 USB webcam detected. [ 1275.999953][T15029] binder: 15026:15029 ioctl 80286722 2000000194c0 returned -22 [ 1276.750358][ T882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1276.792823][ T882] pwc: recv_control_msg error -32 req 02 val 2700 [ 1276.877491][ T882] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1276.896100][ T882] pwc: recv_control_msg error -71 req 04 val 1000 [ 1276.903781][ T882] pwc: recv_control_msg error -71 req 04 val 1300 [ 1277.490305][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 1277.491009][ T882] pwc: recv_control_msg error -71 req 04 val 1400 [ 1277.496803][T10084] Bluetooth: hci1: command 0x0c1a tx timeout [ 1277.497023][T10084] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.497191][T10084] Bluetooth: hci4: command 0x0406 tx timeout [ 1277.497677][T14810] Bluetooth: hci6: command 0x0c1a tx timeout [ 1277.562744][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 1277.575535][T14810] Bluetooth: hci7: command 0x0c1a tx timeout [ 1277.753014][ T9] usb 2-1: USB disconnect, device number 14 [ 1277.800457][ T882] pwc: recv_control_msg error -71 req 02 val 2000 [ 1277.818579][ T882] pwc: recv_control_msg error -71 req 02 val 2100 [ 1277.839463][ T882] pwc: recv_control_msg error -71 req 04 val 1500 [ 1277.851735][ T882] pwc: recv_control_msg error -71 req 02 val 2500 [ 1277.860745][ T882] pwc: recv_control_msg error -71 req 02 val 2400 [ 1278.124756][ T882] pwc: recv_control_msg error -71 req 02 val 2600 [ 1278.131753][ T882] pwc: recv_control_msg error -71 req 02 val 2900 [ 1278.164046][ T882] pwc: recv_control_msg error -71 req 02 val 2800 [ 1278.235241][ T882] pwc: recv_control_msg error -71 req 04 val 1100 [ 1278.240098][T15055] trusted_key: encrypted_key: key user:syz not found [ 1278.277895][ T882] pwc: recv_control_msg error -71 req 04 val 1200 [ 1278.504235][ T882] pwc: Registered as video103. [ 1278.511770][ T882] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54 [ 1279.359160][ T882] usb 6-1: USB disconnect, device number 23 [ 1279.932597][T11452] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1280.127263][T11452] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1280.135414][T15073] tmpfs: Unknown parameter 'fd' [ 1280.187709][T11452] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.303324][T11452] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1280.802679][T11452] usb 8-1: config 1 has no interface number 0 [ 1280.809926][T11452] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1280.862505][T11452] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1280.985895][T11452] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.117181][T11452] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.232767][T11452] usb 8-1: Product: syz [ 1281.268579][T11452] usb 8-1: Manufacturer: syz [ 1281.281927][T11452] usb 8-1: SerialNumber: syz [ 1282.784396][ T882] usb 8-1: USB disconnect, device number 24 [ 1282.802968][T15108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1282.809837][T15108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1282.816100][T15108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1282.822139][T15108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1282.828329][T15108] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1282.834416][T15108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1282.840464][T15108] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1283.428922][T15115] binder: 15110:15115 ioctl 80286722 2000000194c0 returned -22 [ 1284.042556][T14814] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1284.219298][T14814] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.272523][T14814] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1284.328164][T14814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.452647][T14814] usb 8-1: config 0 descriptor?? [ 1284.535683][T14814] pwc: Askey VC010 type 2 USB webcam detected. [ 1284.672987][ T29] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1284.873379][ T882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1284.999150][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 1285.013375][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 1285.019693][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1285.025605][T15043] Bluetooth: hci1: command 0x0c1a tx timeout [ 1285.026131][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 1285.033904][T15043] Bluetooth: hci5: command 0x0406 tx timeout [ 1285.038501][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1285.065726][T15138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.079161][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.279154][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1285.402462][ T29] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1285.474383][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.484237][ T882] usb 2-1: no configurations [ 1285.597706][T14814] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1285.653295][T14814] pwc: recv_control_msg error -32 req 02 val 2700 [ 1285.676162][ T882] usb 2-1: can't read configurations, error -22 [ 1285.702704][ T29] usb 5-1: config 0 descriptor?? [ 1285.788818][T14814] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1285.832484][ T882] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1285.844259][ T29] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1285.892750][T14814] pwc: recv_control_msg error -71 req 04 val 1000 [ 1285.935096][T14814] pwc: recv_control_msg error -71 req 04 val 1300 [ 1285.977911][T14814] pwc: recv_control_msg error -71 req 04 val 1400 [ 1286.028688][T14814] pwc: recv_control_msg error -71 req 02 val 2000 [ 1286.062688][ T882] usb 2-1: no configurations [ 1286.074222][T14814] pwc: recv_control_msg error -71 req 02 val 2100 [ 1286.154352][ T882] usb 2-1: can't read configurations, error -22 [ 1286.545098][T14814] pwc: recv_control_msg error -71 req 04 val 1500 [ 1286.589450][ T882] usb usb2-port1: attempt power cycle [ 1286.592518][T14814] pwc: recv_control_msg error -71 req 02 val 2500 [ 1286.625671][T14814] pwc: recv_control_msg error -71 req 02 val 2400 [ 1286.670525][T14814] pwc: recv_control_msg error -71 req 02 val 2600 [ 1286.693646][T14814] pwc: recv_control_msg error -71 req 02 val 2900 [ 1286.731687][T14814] pwc: recv_control_msg error -71 req 02 val 2800 [ 1286.767292][T14814] pwc: recv_control_msg error -71 req 04 val 1100 [ 1286.965707][T14814] pwc: recv_control_msg error -71 req 04 val 1200 [ 1287.330692][T14814] pwc: Registered as video103. [ 1287.339662][ T9] usb 5-1: USB disconnect, device number 26 [ 1287.348709][T14814] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input55 [ 1287.362573][ T882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1287.422353][ T882] usb 2-1: no configurations [ 1287.427108][ T882] usb 2-1: can't read configurations, error -22 [ 1287.457140][T14814] usb 8-1: USB disconnect, device number 25 [ 1287.668947][ T882] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1287.797838][ T882] usb 2-1: device descriptor read/8, error -71 [ 1287.967035][ T882] usb usb2-port1: unable to enumerate USB device [ 1289.856512][T15184] binder: 15182:15184 ioctl 80286722 2000000194c0 returned -22 [ 1290.867252][T15188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1290.876082][T15188] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1290.882213][T15188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1290.888380][T15188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1290.894685][T15188] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1290.900797][T15188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1290.906981][T15188] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1291.772543][ T882] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1292.394606][ T882] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.407442][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1958'. [ 1292.560534][ T882] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1292.752214][ T882] usb 10-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1292.923460][ T5827] Bluetooth: hci7: command 0x0c1a tx timeout [ 1292.927403][T14810] Bluetooth: hci2: command 0x0c1a tx timeout [ 1292.929774][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 1292.941812][T15043] Bluetooth: hci1: command 0x0c1a tx timeout [ 1292.943335][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 1292.947873][T15043] Bluetooth: hci5: command 0x0406 tx timeout [ 1292.954865][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 1293.003016][ T882] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.062573][T12374] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1293.071738][ T882] usb 10-1: config 0 descriptor?? [ 1293.130426][ T882] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1293.285419][T12374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.367176][T12374] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1293.419457][T12374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.466492][T14814] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1293.485073][T12374] usb 6-1: config 0 descriptor?? [ 1293.758257][T12374] pwc: Askey VC010 type 2 USB webcam detected. [ 1294.099404][T14814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.110962][T14814] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1294.279909][T12374] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1294.327043][T12374] pwc: recv_control_msg error -32 req 02 val 2700 [ 1294.338452][T14814] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1294.348285][T14814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.358093][T12374] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1294.367132][T12374] pwc: recv_control_msg error -71 req 04 val 1000 [ 1294.377178][T12374] pwc: recv_control_msg error -71 req 04 val 1300 [ 1294.384540][T12374] pwc: recv_control_msg error -71 req 04 val 1400 [ 1294.391648][T14814] usb 2-1: config 0 descriptor?? [ 1294.400994][T12374] pwc: recv_control_msg error -71 req 02 val 2000 [ 1294.413664][T14814] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1294.421578][T12374] pwc: recv_control_msg error -71 req 02 val 2100 [ 1294.429962][T12374] pwc: recv_control_msg error -71 req 04 val 1500 [ 1294.439267][T12374] pwc: recv_control_msg error -71 req 02 val 2500 [ 1294.454713][T12374] pwc: recv_control_msg error -71 req 02 val 2400 [ 1294.473526][T12374] pwc: recv_control_msg error -71 req 02 val 2600 [ 1294.517892][T12374] pwc: recv_control_msg error -71 req 02 val 2900 [ 1294.557135][T12374] pwc: recv_control_msg error -71 req 02 val 2800 [ 1294.596282][T12374] pwc: recv_control_msg error -71 req 04 val 1100 [ 1294.704378][T12374] pwc: recv_control_msg error -71 req 04 val 1200 [ 1294.877546][T12374] pwc: Registered as video103. [ 1295.239471][T12374] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56 [ 1295.448046][T12374] usb 6-1: USB disconnect, device number 24 [ 1295.500373][T11452] usb 2-1: USB disconnect, device number 19 [ 1295.603029][ T882] usb 10-1: USB disconnect, device number 3 [ 1295.982770][T14814] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1296.223245][T14814] usb 8-1: no configurations [ 1296.243013][T14814] usb 8-1: can't read configurations, error -22 [ 1296.562872][T14814] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1296.767444][T14814] usb 8-1: no configurations [ 1296.811202][T14814] usb 8-1: can't read configurations, error -22 [ 1296.849659][T14814] usb usb8-port1: attempt power cycle [ 1299.166798][T10084] Bluetooth: hci7: command 0x0c1a tx timeout [ 1299.232525][T14814] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1299.571315][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.578316][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.496395][T14814] usb 8-1: device descriptor read/8, error -71 [ 1302.205985][ T5989] wlan0: Trigger new scan to find an IBSS to join [ 1302.812560][ T882] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1303.065256][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.122901][ T882] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1303.198492][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.271159][ T882] usb 5-1: config 0 descriptor?? [ 1303.339155][ T882] pwc: Askey VC010 type 2 USB webcam detected. [ 1303.960932][ T882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1304.002364][ T882] pwc: recv_control_msg error -32 req 02 val 2700 [ 1304.062535][ T882] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1304.104110][ T882] pwc: recv_control_msg error -71 req 04 val 1000 [ 1304.142930][ T882] pwc: recv_control_msg error -71 req 04 val 1300 [ 1304.163041][ T882] pwc: recv_control_msg error -71 req 04 val 1400 [ 1304.190645][ T882] pwc: recv_control_msg error -71 req 02 val 2000 [ 1304.249872][ T882] pwc: recv_control_msg error -71 req 02 val 2100 [ 1304.332964][ T882] pwc: recv_control_msg error -71 req 04 val 1500 [ 1304.352564][ T882] pwc: recv_control_msg error -71 req 02 val 2500 [ 1304.385329][ T882] pwc: recv_control_msg error -71 req 02 val 2400 [ 1304.412918][ T882] pwc: recv_control_msg error -71 req 02 val 2600 [ 1304.432913][ T882] pwc: recv_control_msg error -71 req 02 val 2900 [ 1304.450168][ T882] pwc: recv_control_msg error -71 req 02 val 2800 [ 1304.462579][ T882] pwc: recv_control_msg error -71 req 04 val 1100 [ 1304.490209][ T882] pwc: recv_control_msg error -71 req 04 val 1200 [ 1304.523682][ T882] pwc: Registered as video103. [ 1304.577197][ T882] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 1304.628851][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1980'. [ 1304.709133][ T882] usb 5-1: USB disconnect, device number 27 [ 1305.622675][ T882] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1305.814977][ T882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.842582][ T882] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1305.874591][ T882] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1305.902676][ T882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.933470][ T882] usb 5-1: config 0 descriptor?? [ 1305.954558][ T882] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1307.869693][ T6283] wlan0: Trigger new scan to find an IBSS to join [ 1308.292887][ T29] usb 5-1: USB disconnect, device number 28 [ 1309.489023][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.124946][ T5989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.408333][T15371] fuse: Bad value for 'user_id' [ 1310.452511][T15371] fuse: Bad value for 'user_id' [ 1310.490003][ T5989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.731332][ T5989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.325392][T15381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.720492][ T5989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.370332][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1312.912606][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 1312.939905][ T29] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1312.972520][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1313.022503][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1313.061207][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1313.252466][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1313.612525][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.663018][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1313.692558][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.872591][T14814] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1313.902512][T15411] trusted_key: encrypted_key: key user:syz not found [ 1315.940550][T14814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.994423][ T29] usb 5-1: usb_control_msg returned -71 [ 1316.001645][ T29] usbtmc 5-1:16.0: can't read capabilities [ 1316.015633][T14814] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1316.093832][ T29] usb 5-1: USB disconnect, device number 29 [ 1316.100375][T14814] usb 7-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1316.155863][T14814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.223660][T14814] usb 7-1: config 0 descriptor?? [ 1316.256967][T14814] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1317.161874][T15223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.175705][T15223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.187367][T15223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.212688][T15223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.242701][T15223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1317.883976][ T882] usb 7-1: USB disconnect, device number 4 [ 1319.324137][T15223] Bluetooth: hci0: command tx timeout [ 1319.918904][T15447] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 1320.564101][ T5989] bridge_slave_1: left allmulticast mode [ 1320.630394][ T5989] bridge_slave_1: left promiscuous mode [ 1320.665623][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.773676][ T5989] bridge_slave_0: left allmulticast mode [ 1320.828781][ T5989] bridge_slave_0: left promiscuous mode [ 1320.856114][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.402504][T15223] Bluetooth: hci0: command tx timeout [ 1321.920599][T14814] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1322.225354][T14814] usb 5-1: config 4 has an invalid interface number: 88 but max is 0 [ 1322.282044][T14814] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.298524][T14814] usb 5-1: config 4 has no interface number 0 [ 1322.312884][T14814] usb 5-1: config 4 interface 88 altsetting 119 endpoint 0xB has invalid wMaxPacketSize 0 [ 1322.325433][T14814] usb 5-1: config 4 interface 88 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1322.397790][T14814] usb 5-1: config 4 interface 88 has no altsetting 0 [ 1322.489674][T14814] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1322.542660][T14814] usb 5-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1322.602268][T14814] usb 5-1: Manufacturer: syz [ 1322.690781][T14814] usb 5-1: SerialNumber: syz [ 1323.153330][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.209174][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.283955][ T5989] bond0 (unregistering): Released all slaves [ 1323.389615][T15447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1323.483713][T15223] Bluetooth: hci0: command tx timeout [ 1323.852025][T15429] chnl_net:caif_netlink_parms(): no params data found [ 1324.209759][T14814] usb 5-1: can't set config #4, error -71 [ 1324.314651][T14814] usb 5-1: USB disconnect, device number 30 [ 1325.562574][T15223] Bluetooth: hci0: command tx timeout [ 1327.168776][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.205493][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.275782][T15429] bridge_slave_0: entered allmulticast mode [ 1327.329609][T15429] bridge_slave_0: entered promiscuous mode [ 1327.410260][ T5989] hsr_slave_0: left promiscuous mode [ 1327.437045][ T5989] hsr_slave_1: left promiscuous mode [ 1327.456939][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.487943][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.526548][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.542571][ T6000] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1327.572168][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.600883][ T5989] veth1_macvtap: left promiscuous mode [ 1327.614869][ T5989] veth0_macvtap: left promiscuous mode [ 1327.627008][ T5989] veth1_vlan: left promiscuous mode [ 1327.640017][ T5989] veth0_vlan: left promiscuous mode [ 1327.739740][ T6000] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.783952][ T6000] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1327.847635][ T6000] usb 7-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1327.890766][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.990139][ T6000] usb 7-1: config 0 descriptor?? [ 1328.079319][ T6000] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1329.301177][T15541] trusted_key: encrypted_key: key user:syz not found [ 1329.476290][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 1329.675196][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 1330.492035][ T29] usb 7-1: USB disconnect, device number 5 [ 1331.883077][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.913108][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.920453][T15429] bridge_slave_1: entered allmulticast mode [ 1332.035166][T15429] bridge_slave_1: entered promiscuous mode [ 1332.257091][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.393623][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.475864][T15558] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 1333.390949][T15429] team0: Port device team_slave_0 added [ 1333.784699][T15429] team0: Port device team_slave_1 added [ 1333.797865][T15558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1334.043323][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.094622][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.205951][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.120944][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.159712][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.188636][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.599593][ T5989] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.652601][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1335.818950][ T5989] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.826905][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1335.898623][ T9] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1335.958021][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1335.970417][T15429] hsr_slave_0: entered promiscuous mode [ 1336.004436][T15429] hsr_slave_1: entered promiscuous mode [ 1336.023179][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1336.075472][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1337.107515][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1337.138174][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1337.302482][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1337.310543][ T9] usb 6-1: Product: syz [ 1337.332451][ T9] usb 6-1: Manufacturer: syz [ 1337.445914][T15592] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1337.503881][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1337.533188][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1337.540935][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1337.552150][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1337.600682][ T5989] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.046164][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.052979][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.059286][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.065887][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.073785][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.080427][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.088770][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.095480][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.102410][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.109030][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.115620][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.122220][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.128983][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.135584][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.141882][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.148500][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.154769][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.161373][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.167919][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1338.174580][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1338.812644][T10084] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1339.056384][ T5989] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.148962][ T10] usb 6-1: USB disconnect, device number 25 [ 1339.149096][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1339.504009][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1339.748784][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1339.777862][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.818738][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.852980][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1339.872278][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.890623][ T9] usb 2-1: Product: syz [ 1339.898700][ T9] usb 2-1: Manufacturer: syz [ 1339.917904][ T9] usb 2-1: SerialNumber: syz [ 1340.218507][ T9] usb 2-1: 0:2 : does not exist [ 1340.269474][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1340.511566][ T9] usb 2-1: USB disconnect, device number 20 [ 1340.682128][T12343] udevd[12343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.075303][ T5989] bridge_slave_1: left allmulticast mode [ 1341.098238][ T5989] bridge_slave_1: left promiscuous mode [ 1341.110650][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.135231][ T5989] bridge_slave_0: left allmulticast mode [ 1341.148497][ T5989] bridge_slave_0: left promiscuous mode [ 1341.163059][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1341.177710][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.395990][T15653] trusted_key: encrypted_key: key user:syz not found [ 1341.400586][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.789135][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1341.907231][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.938837][ T9] usb 7-1: config 0 descriptor?? [ 1341.973942][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1342.445195][T15509] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1342.627104][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1342.862706][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.885803][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.913114][ T5989] bond0 (unregistering): Released all slaves [ 1342.957637][T15658] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1343.140704][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1343.996958][ T5989] hsr_slave_0: left promiscuous mode [ 1344.035191][ T5989] hsr_slave_1: left promiscuous mode [ 1344.063278][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1344.104803][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.184256][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.256511][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.944956][ T5989] veth1_macvtap: left promiscuous mode [ 1346.950529][ T5989] veth0_macvtap: left promiscuous mode [ 1346.962773][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1347.050557][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 1347.092739][ T5989] veth1_vlan: left promiscuous mode [ 1347.098151][ T5989] veth0_vlan: left promiscuous mode [ 1347.252968][ T882] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1347.295598][T15691] binder: 15687:15691 ioctl 80286722 0 returned -22 [ 1347.532051][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 1347.576366][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 1347.602572][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 1347.630247][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1347.650590][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1347.666720][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1347.683927][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1347.700825][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1347.707870][T15690] binder: 15687:15690 unknown command 0 [ 1347.717598][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1347.743369][T15690] binder: 15687:15690 ioctl c0306201 200000000080 returned -22 [ 1347.757545][ T882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.776240][ T882] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1347.812602][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1347.853715][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1347.864235][ T882] usb 8-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1347.893405][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1347.914110][ T882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.937117][ T9] pwc: Registered as video103. [ 1347.978401][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input58 [ 1347.990393][ T882] usb 8-1: config 0 descriptor?? [ 1348.115702][ T9] usb 7-1: USB disconnect, device number 6 [ 1348.128185][ T882] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1350.121617][ T29] usb 8-1: USB disconnect, device number 30 [ 1351.503382][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 1351.678501][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 1351.798157][T15735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1351.932524][ T29] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1352.145382][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.190239][ T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1352.234818][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.357326][ T29] usb 6-1: config 0 descriptor?? [ 1352.424408][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 1352.747603][T15756] binder: 15753:15756 ioctl 80286722 2000000194c0 returned -22 [ 1353.357224][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1353.426400][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 1353.492641][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1353.522270][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 1353.568333][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 1353.613127][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 1353.685020][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 1353.717084][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 1353.753415][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 1353.791092][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 1353.828918][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 1353.873762][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 1353.919722][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1353.949024][T15763] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1353.976287][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1353.992153][T15763] block nbd0: shutting down sockets [ 1354.032024][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1354.099066][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1354.188149][ T29] pwc: Registered as video103. [ 1354.201150][T15429] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.267627][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input59 [ 1354.339350][T15429] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.391945][ T29] usb 6-1: USB disconnect, device number 26 [ 1354.539412][T15429] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.624580][T15429] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1355.350797][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.487653][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.623298][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.630495][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.802585][ T29] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1355.850506][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.857959][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.526430][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.552483][ T882] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1356.597447][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1356.699712][ T29] usb 7-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1356.730407][ T882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.796280][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.796296][ T882] usb 6-1: config 0 has no interfaces? [ 1356.801252][ T29] usb 7-1: config 0 descriptor?? [ 1356.858301][ T882] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1356.895691][ T29] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1356.984801][ T882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.008224][T15809] netlink: 173 bytes leftover after parsing attributes in process `syz.4.2081'. [ 1357.044382][ T882] usb 6-1: Product: syz [ 1357.048677][ T882] usb 6-1: Manufacturer: syz [ 1357.062007][ T882] usb 6-1: SerialNumber: syz [ 1357.090355][ T882] usb 6-1: config 0 descriptor?? [ 1357.630477][ T9] usb 6-1: USB disconnect, device number 27 [ 1357.819833][T15822] binder: 15815:15822 ioctl 80286722 2000000194c0 returned -22 [ 1360.997927][ T882] usb 7-1: USB disconnect, device number 7 [ 1361.012786][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.019114][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.121676][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.565679][T15845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.808661][T15871] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1362.824397][T15871] block nbd0: shutting down sockets [ 1362.972869][T15877] netlink: 173 bytes leftover after parsing attributes in process `syz.6.2095'. [ 1363.795709][T15429] veth0_vlan: entered promiscuous mode [ 1363.821384][T15429] veth1_vlan: entered promiscuous mode [ 1363.915326][T15429] veth0_macvtap: entered promiscuous mode [ 1363.952038][T15429] veth1_macvtap: entered promiscuous mode [ 1364.123786][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.153853][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.187416][T10663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.624942][T10663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.642572][T10663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.657060][T10663] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.994207][T10663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.074395][T10663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.171263][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.237023][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.142928][ T9] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1369.358761][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2101'. [ 1370.124728][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.143348][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1370.203839][ T9] usb 9-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1370.216510][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.286013][ T9] usb 9-1: config 0 descriptor?? [ 1370.409942][T15933] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 3, id = 0 [ 1370.422086][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1370.486284][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.503827][ T5977] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1370.733477][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.154298][ T5977] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1371.484499][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.519586][T14814] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1371.521099][ T5977] usb 6-1: config 0 descriptor?? [ 1371.559157][ T5977] pwc: Askey VC010 type 2 USB webcam detected. [ 1371.706296][T14814] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.773920][T14814] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1371.839545][T14814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.887698][T14814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.931793][T14814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1371.982658][T14814] usb 8-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1372.009114][T14814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.060224][T14814] usb 8-1: Product: syz [ 1372.093429][T14814] usb 8-1: Manufacturer: syz [ 1372.143090][T14814] usb 8-1: SerialNumber: syz [ 1372.242810][ T5977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1372.285681][T14814] usb 8-1: config 0 descriptor?? [ 1372.300388][ T5977] pwc: recv_control_msg error -32 req 02 val 2700 [ 1372.346881][ T5977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1372.422072][ T5977] pwc: recv_control_msg error -71 req 04 val 1000 [ 1372.469653][ T5977] pwc: recv_control_msg error -71 req 04 val 1300 [ 1372.491812][ T5977] pwc: recv_control_msg error -71 req 04 val 1400 [ 1372.534012][ T5977] pwc: recv_control_msg error -71 req 02 val 2000 [ 1372.558577][ T5977] pwc: recv_control_msg error -71 req 02 val 2100 [ 1372.848783][ T5977] pwc: recv_control_msg error -71 req 04 val 1500 [ 1373.819689][T10663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1373.840163][ T5977] pwc: recv_control_msg error -71 req 02 val 2500 [ 1374.038244][ T5977] pwc: recv_control_msg error -71 req 02 val 2400 [ 1374.046937][ T5977] pwc: recv_control_msg error -71 req 02 val 2600 [ 1374.082824][ T5977] pwc: recv_control_msg error -71 req 02 val 2900 [ 1374.125828][ T5977] pwc: recv_control_msg error -71 req 02 val 2800 [ 1374.181324][ T5977] pwc: recv_control_msg error -71 req 04 val 1100 [ 1374.245684][ T5977] pwc: recv_control_msg error -71 req 04 val 1200 [ 1374.289103][ T29] usb 9-1: USB disconnect, device number 11 [ 1374.329266][ T5977] pwc: Registered as video103. [ 1374.433348][ T5977] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 1374.559432][ T5977] usb 6-1: USB disconnect, device number 28 [ 1374.812604][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1375.015018][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.068811][ T29] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1375.133292][ T29] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1375.172286][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.200639][ T29] usb 9-1: Product: syz [ 1375.227028][ T29] usb 9-1: Manufacturer: syz [ 1375.244527][ T29] usb 9-1: SerialNumber: syz [ 1375.332356][ T29] usb 9-1: config 0 descriptor?? [ 1375.396853][T14814] usb 8-1: ucan: probing device on interface #0 [ 1375.425299][T14814] usb 8-1: ucan: invalid endpoint configuration [ 1375.455300][T14814] usb 8-1: ucan: probe failed; try to update the device firmware [ 1375.633835][ T29] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1375.699205][ T5977] usb 9-1: USB disconnect, device number 12 [ 1375.707929][T14814] usb 8-1: USB disconnect, device number 31 [ 1375.886095][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1375.920794][ T29] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1375.972071][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1376.032509][ T29] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.509374][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1376.572577][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1376.691188][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1376.774753][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1376.825532][ T29] usb 5-1: Product: syz [ 1376.829769][ T29] usb 5-1: Manufacturer: syz [ 1377.130460][T15984] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1377.170172][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 1377.207436][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 1377.298474][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1377.322560][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 1377.503146][T16008] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1377.532730][T16008] block nbd0: shutting down sockets [ 1377.565639][ C0] wdm_int_callback: 4673 callbacks suppressed [ 1377.565675][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.578419][ C0] wdm_int_callback: 4673 callbacks suppressed [ 1377.578456][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.591164][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.597865][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.604429][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.611059][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.617544][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.624322][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.630650][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.637323][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.644916][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.651519][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.658001][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.664604][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.670876][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.677646][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.684205][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.690863][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1377.697501][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1377.704123][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1378.144467][ T29] usb 5-1: USB disconnect, device number 31 [ 1378.144466][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1378.795935][T16023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.472447][T16039] binder: 16037:16039 ioctl 80286722 2000000194c0 returned -22 [ 1379.542757][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1380.167527][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.193018][ T29] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1380.271251][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.340724][ T29] usb 6-1: config 0 descriptor?? [ 1380.419319][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 1381.273733][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1382.006747][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 1382.023715][ T29] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1382.030942][ T29] pwc: recv_control_msg error -71 req 04 val 1000 [ 1382.038901][ T29] pwc: recv_control_msg error -71 req 04 val 1300 [ 1382.049950][ T29] pwc: recv_control_msg error -71 req 04 val 1400 [ 1382.254605][ T29] pwc: recv_control_msg error -71 req 02 val 2000 [ 1382.262908][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 1382.270099][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 1382.279118][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 1382.292888][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 1382.304285][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 1382.311653][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 1382.320555][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 1382.344617][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 1383.039312][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 1383.086275][ T29] pwc: Registered as video103. [ 1383.615283][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 1383.706437][ T29] usb 6-1: USB disconnect, device number 29 [ 1384.571606][ T30] audit: type=1326 audit(2000000072.100:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1384.705984][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2133'. [ 1384.750381][ T30] audit: type=1326 audit(2000000072.100:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1385.077219][ T30] audit: type=1326 audit(2000000072.170:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1385.771418][ T30] audit: type=1326 audit(2000000072.170:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1385.855411][ T30] audit: type=1326 audit(2000000072.170:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1385.949508][ T30] audit: type=1326 audit(2000000072.170:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1386.062539][ T30] audit: type=1326 audit(2000000072.170:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1386.157065][ T30] audit: type=1326 audit(2000000072.170:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1386.239547][ T30] audit: type=1326 audit(2000000072.180:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1386.368523][ T30] audit: type=1326 audit(2000000072.180:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16071 comm="syz.1.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb27f79c799 code=0x7ffc0000 [ 1387.211680][T16101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.892500][ T882] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1388.106703][ T882] usb 9-1: Using ep0 maxpacket: 16 [ 1388.130079][ T882] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1388.152661][ T882] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1388.205787][ T882] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1388.236102][ T882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.265929][ T882] usb 9-1: Product: syz [ 1388.275553][ T882] usb 9-1: Manufacturer: syz [ 1388.280239][ T882] usb 9-1: SerialNumber: syz [ 1388.535934][ T882] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1388.617837][ T882] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1388.650894][ T882] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1391.722971][ C1] ------------[ cut here ]------------ [ 1391.728845][ C1] ODEBUG: free active (active state 0) object: ffff8880540a9490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1391.741841][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.5.2147/16127 [ 1391.752095][ C1] Modules linked in: [ 1391.756366][ C1] CPU: 1 UID: 0 PID: 16127 Comm: syz.5.2147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1391.767393][ C1] Tainted: [L]=SOFTLOCKUP [ 1391.771744][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1391.781874][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1391.787749][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 51 e7 0b 41 56 48 8b 14 dd e0 15 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 0c f0 dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1391.807498][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1391.813625][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1391.821669][ C1] RDX: ffffffff8c1b1520 RSI: ffffffff8c1b1140 RDI: ffffffff90e45060 [ 1391.829789][ C1] RBP: 0000000000000001 R08: ffff8880540a9490 R09: ffffffff8bb2b900 [ 1391.837815][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1140 [ 1391.845857][ C1] R13: ffffffff8bb2b940 R14: ffffffff8a7a49f0 R15: ffffc90000a08b38 [ 1391.853887][ C1] FS: 00007f9b943df6c0(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 1391.862864][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1391.869495][ C1] CR2: 0000001b2ef1dff8 CR3: 000000002d339000 CR4: 0000000000350ef0 [ 1391.877511][ C1] Call Trace: [ 1391.880824][ C1] [ 1391.883690][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1391.889364][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1391.895218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.900902][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1391.906520][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1391.912653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.918383][ C1] ? mark_held_locks+0x40/0x70 [ 1391.923221][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1391.928611][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.934480][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1391.939714][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1391.945049][ C1] kfree+0x38f/0x6b0 [ 1391.949001][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.954687][ C1] rose_timer_expiry+0x53f/0x630 [ 1391.959650][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1391.965164][ C1] call_timer_fn+0x19a/0x670 [ 1391.969783][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1391.974947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.980662][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1391.986165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.991830][ C1] ? mark_held_locks+0x40/0x70 [ 1391.996685][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1392.002211][ C1] __run_timers+0x757/0xb30 [ 1392.006803][ C1] ? __pfx___run_timers+0x10/0x10 [ 1392.011869][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.017572][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1392.022674][ C1] run_timer_base+0x114/0x190 [ 1392.027409][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1392.032680][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.038351][ C1] run_timer_softirq+0x1a/0x50 [ 1392.043176][ C1] handle_softirqs+0x1eb/0x9e0 [ 1392.048001][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1392.053321][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.058995][ C1] __irq_exit_rcu+0xef/0x150 [ 1392.063640][ C1] irq_exit_rcu+0x9/0x30 [ 1392.067961][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1392.073645][ C1] [ 1392.076572][ C1] [ 1392.079503][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1392.085549][ C1] RIP: 0010:lock_is_held_type+0x51/0x140 [ 1392.091228][ C1] Code: 57 41 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d bc 31 7f 08 8b 95 54 0b 00 00 85 d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c <41> 5d fa 48 c7 c7 4a 21 f7 8d e8 90 16 00 00 65 ff 05 01 79 7f 08 [ 1392.110968][ C1] RSP: 0018:ffffc90005b56b90 EFLAGS: 00000246 [ 1392.117141][ C1] RAX: 00000000ffffffff RBX: ffffffff8e7e75a0 RCX: 0000000000000001 [ 1392.125153][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e7e75a0 [ 1392.133204][ C1] RBP: ffff8880314e0000 R08: 0000000000000005 R09: 0000000000000000 [ 1392.141187][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 1392.149220][ C1] R13: ffff88804b865600 R14: 0000000000000000 R15: 0000000000000001 [ 1392.157252][ C1] xas_load+0x397/0x5c0 [ 1392.161470][ C1] filemap_get_entry+0x109/0x3b0 [ 1392.166469][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1392.171980][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.177670][ C1] ? mtree_range_walk+0x6ce/0xcd0 [ 1392.182771][ C1] shmem_get_folio_gfp+0xa4c/0x1900 [ 1392.188033][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1392.193733][ C1] shmem_write_begin+0x1a4/0x420 [ 1392.198720][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 1392.204219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.209890][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.215601][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1392.222521][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.227774][ C1] generic_perform_write+0x292/0xa40 [ 1392.233139][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1392.238979][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.244653][ C1] ? file_update_time_flags+0x373/0x500 [ 1392.250285][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1392.256156][ C1] shmem_file_write_iter+0x10e/0x140 [ 1392.261488][ C1] __kernel_write_iter+0x2ac/0x920 [ 1392.266678][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 1392.272439][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.278130][ C1] ? __up_read+0x2c5/0x700 [ 1392.282643][ C1] ? dump_user_range+0x73b/0xb50 [ 1392.287605][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.293330][ C1] dump_user_range+0x3f9/0xb50 [ 1392.298194][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1392.303513][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.309177][ C1] ? __pfx_writenote+0x10/0x10 [ 1392.314025][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.319686][ C1] elf_core_dump+0x2d5f/0x3d10 [ 1392.324527][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1392.329653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.335427][ C1] ? kasan_save_stack+0x3f/0x50 [ 1392.340295][ C1] ? kasan_save_stack+0x30/0x50 [ 1392.345198][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1392.350010][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1392.355606][ C1] ? vfs_coredump+0x2105/0x5570 [ 1392.360477][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1392.365672][ C1] ? 0xffffffffff600000 [ 1392.369890][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.375589][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.381311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.387043][ C1] ? vfs_coredump+0x27bc/0x5570 [ 1392.391908][ C1] vfs_coredump+0x27bc/0x5570 [ 1392.396656][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1392.401722][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.407487][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1392.412541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.418255][ C1] ? lock_acquire+0x1cf/0x380 [ 1392.423085][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1392.428321][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.434054][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 1392.438874][ C1] ? __kernel_text_address+0xd/0x30 [ 1392.444141][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.449818][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1392.455493][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.461144][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1392.466006][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1392.470910][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.476584][ C1] ? stack_trace_save+0x8e/0xc0 [ 1392.481522][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1392.486935][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.492611][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1392.498204][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.503918][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1392.508994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.514711][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1392.520384][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1392.526443][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.532133][ C1] ? rcu_is_watching+0x12/0xc0 [ 1392.536976][ C1] get_signal+0x1f2a/0x21e0 [ 1392.541521][ C1] ? __pfx_get_signal+0x10/0x10 [ 1392.546433][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1392.552055][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1392.558257][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.563947][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 1392.569270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.574963][ C1] irqentry_exit+0x1f8/0x670 [ 1392.579598][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.585306][ C1] asm_exc_page_fault+0x26/0x30 [ 1392.590218][ C1] RIP: 0033:0x7f9b9359c7a1 [ 1392.594690][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1392.614447][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 1392.620637][ C1] RAX: 0000000000000000 RBX: 00007f9b93816090 RCX: 00007f9b9359c799 [ 1392.628649][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 1392.636666][ C1] RBP: 00007f9b93632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1392.644775][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1392.652808][ C1] R13: 00007f9b93816128 R14: 00007f9b93816090 R15: 00007fff5efd67f8 [ 1392.660836][ C1] [ 1392.663908][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1392.671195][ C1] CPU: 1 UID: 0 PID: 16127 Comm: syz.5.2147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.682333][ C1] Tainted: [L]=SOFTLOCKUP [ 1392.686682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1392.697007][ C1] Call Trace: [ 1392.700284][ C1] [ 1392.703129][ C1] dump_stack_lvl+0x100/0x190 [ 1392.707847][ C1] vpanic+0x552/0x970 [ 1392.711866][ C1] ? __pfx_vpanic+0x10/0x10 [ 1392.716395][ C1] panic+0xd1/0xe0 [ 1392.720145][ C1] ? __pfx_panic+0x10/0x10 [ 1392.724605][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1392.729751][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1392.735138][ C1] ? debug_print_object+0x18e/0x2a0 [ 1392.740388][ C1] __warn.cold+0x191/0x348 [ 1392.744823][ C1] __report_bug+0x296/0x3d0 [ 1392.749346][ C1] ? debug_print_object+0x18e/0x2a0 [ 1392.754595][ C1] ? __pfx___report_bug+0x10/0x10 [ 1392.759645][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.765310][ C1] ? lock_acquire+0x1cf/0x380 [ 1392.770020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.775670][ C1] ? mark_held_locks+0x40/0x70 [ 1392.780470][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1392.786311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.791969][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.797204][ C1] report_bug_entry+0xe1/0x290 [ 1392.801992][ C1] ? debug_print_object+0x19b/0x2a0 [ 1392.807333][ C1] handle_bug+0x1cd/0x2a0 [ 1392.811702][ C1] exc_invalid_op+0x17/0x50 [ 1392.816212][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1392.821120][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1392.826999][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 51 e7 0b 41 56 48 8b 14 dd e0 15 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 0c f0 dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1392.846633][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 1392.852751][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1392.860821][ C1] RDX: ffffffff8c1b1520 RSI: ffffffff8c1b1140 RDI: ffffffff90e45060 [ 1392.868797][ C1] RBP: 0000000000000001 R08: ffff8880540a9490 R09: ffffffff8bb2b900 [ 1392.876869][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b1140 [ 1392.885020][ C1] R13: ffffffff8bb2b940 R14: ffffffff8a7a49f0 R15: ffffc90000a08b38 [ 1392.893000][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1392.898701][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.904352][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1392.910021][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1392.915848][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.921508][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1392.927107][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1392.933217][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.938868][ C1] ? mark_held_locks+0x40/0x70 [ 1392.943703][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1392.949093][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.954744][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1392.959974][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1392.965125][ C1] kfree+0x38f/0x6b0 [ 1392.969034][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1392.974694][ C1] rose_timer_expiry+0x53f/0x630 [ 1392.979653][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1392.985127][ C1] call_timer_fn+0x19a/0x670 [ 1392.989743][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1392.994873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.000535][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1393.006007][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.011649][ C1] ? mark_held_locks+0x40/0x70 [ 1393.016452][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1393.021928][ C1] __run_timers+0x757/0xb30 [ 1393.026478][ C1] ? __pfx___run_timers+0x10/0x10 [ 1393.031547][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.037222][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1393.042306][ C1] run_timer_base+0x114/0x190 [ 1393.047013][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1393.052235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.057896][ C1] run_timer_softirq+0x1a/0x50 [ 1393.062686][ C1] handle_softirqs+0x1eb/0x9e0 [ 1393.067487][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1393.072795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.078457][ C1] __irq_exit_rcu+0xef/0x150 [ 1393.083062][ C1] irq_exit_rcu+0x9/0x30 [ 1393.087320][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1393.093015][ C1] [ 1393.095989][ C1] [ 1393.098919][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1393.104922][ C1] RIP: 0010:lock_is_held_type+0x51/0x140 [ 1393.110687][ C1] Code: 57 41 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d bc 31 7f 08 8b 95 54 0b 00 00 85 d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c <41> 5d fa 48 c7 c7 4a 21 f7 8d e8 90 16 00 00 65 ff 05 01 79 7f 08 [ 1393.130310][ C1] RSP: 0018:ffffc90005b56b90 EFLAGS: 00000246 [ 1393.136401][ C1] RAX: 00000000ffffffff RBX: ffffffff8e7e75a0 RCX: 0000000000000001 [ 1393.144473][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8e7e75a0 [ 1393.152467][ C1] RBP: ffff8880314e0000 R08: 0000000000000005 R09: 0000000000000000 [ 1393.160505][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 1393.168485][ C1] R13: ffff88804b865600 R14: 0000000000000000 R15: 0000000000000001 [ 1393.176582][ C1] xas_load+0x397/0x5c0 [ 1393.180766][ C1] filemap_get_entry+0x109/0x3b0 [ 1393.185733][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 1393.191220][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.196870][ C1] ? mtree_range_walk+0x6ce/0xcd0 [ 1393.201933][ C1] shmem_get_folio_gfp+0xa4c/0x1900 [ 1393.207181][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1393.212849][ C1] shmem_write_begin+0x1a4/0x420 [ 1393.217811][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 1393.223285][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.228944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.234594][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1393.241487][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1393.246741][ C1] generic_perform_write+0x292/0xa40 [ 1393.252104][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 1393.257961][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.263648][ C1] ? file_update_time_flags+0x373/0x500 [ 1393.269217][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1393.275054][ C1] shmem_file_write_iter+0x10e/0x140 [ 1393.280394][ C1] __kernel_write_iter+0x2ac/0x920 [ 1393.285573][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 1393.291240][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.296917][ C1] ? __up_read+0x2c5/0x700 [ 1393.301353][ C1] ? dump_user_range+0x73b/0xb50 [ 1393.306317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.312000][ C1] dump_user_range+0x3f9/0xb50 [ 1393.316798][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1393.322197][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.327866][ C1] ? __pfx_writenote+0x10/0x10 [ 1393.332703][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.338394][ C1] elf_core_dump+0x2d5f/0x3d10 [ 1393.343200][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1393.348350][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.354024][ C1] ? kasan_save_stack+0x3f/0x50 [ 1393.358908][ C1] ? kasan_save_stack+0x30/0x50 [ 1393.363890][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1393.368676][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1393.374240][ C1] ? vfs_coredump+0x2105/0x5570 [ 1393.379095][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1393.384141][ C1] ? 0xffffffffff600000 [ 1393.388348][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.394007][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.399658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.405341][ C1] ? vfs_coredump+0x27bc/0x5570 [ 1393.410196][ C1] vfs_coredump+0x27bc/0x5570 [ 1393.414905][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1393.419940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.425594][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1393.430663][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.436324][ C1] ? lock_acquire+0x1cf/0x380 [ 1393.441051][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1393.446266][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.451922][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 1393.456738][ C1] ? __kernel_text_address+0xd/0x30 [ 1393.461946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.467630][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1393.473280][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.478967][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1393.483771][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1393.488661][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.494348][ C1] ? stack_trace_save+0x8e/0xc0 [ 1393.499219][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1393.504632][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.510308][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1393.515810][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.521462][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1393.526523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.532177][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1393.537835][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1393.543852][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.549549][ C1] ? rcu_is_watching+0x12/0xc0 [ 1393.554336][ C1] get_signal+0x1f2a/0x21e0 [ 1393.558963][ C1] ? __pfx_get_signal+0x10/0x10 [ 1393.563847][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1393.569456][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1393.575841][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.581494][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 1393.586793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.592460][ C1] irqentry_exit+0x1f8/0x670 [ 1393.597107][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1393.602768][ C1] asm_exc_page_fault+0x26/0x30 [ 1393.607635][ C1] RIP: 0033:0x7f9b9359c7a1 [ 1393.612053][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1393.631685][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 1393.637779][ C1] RAX: 0000000000000000 RBX: 00007f9b93816090 RCX: 00007f9b9359c799 [ 1393.645847][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 1393.653848][ C1] RBP: 00007f9b93632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1393.661937][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1393.669914][ C1] R13: 00007f9b93816128 R14: 00007f9b93816090 R15: 00007fff5efd67f8 [ 1393.678011][ C1] [ 1393.681320][ C1] Kernel Offset: disabled [ 1393.685661][ C1] Rebooting in 86400 seconds..