last executing test programs: 8m55.523550615s ago: executing program 1 (id=412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 8m54.31816592s ago: executing program 1 (id=415): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444dccf75d3550a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dba919d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000018000000000000001701000000000000000018000000000000001701000004000000fc45ffff00000000780000000000000017010000020000005d00000066c8bb80cf4b49a5a0b9c1354aad6e5700c003933fb006799f9210fc058a159a7ad3d4ed8ecfdee24cd296c34224a6d27d41cb1312d32c33ec9df34a46aabb3f1b533b4646812d7fb21d038ff7bca0e3781e5ade024794c228a0d4d46a00"/192], 0xc0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) socket(0x10, 0x3, 0x0) 8m53.074365094s ago: executing program 1 (id=419): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001000)={0x0, 0xfffffffffffffd70, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x8}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) 8m51.965310874s ago: executing program 1 (id=423): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff, 0xc}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x4, 0x2, 0x2}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r6, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) semget(0x1, 0x1, 0x39c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0xc, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) 8m50.778119739s ago: executing program 1 (id=426): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd5bb64847", 0x6}], 0x1, 0x0, 0xf) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000010101020000000000000000020000003800028006000340000200000c000280050001003a0000000c000281050001000100a1b61400018008000100ac1414aa08000200ac1414bb0c001980080002009908"], 0x58}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r6 = dup(r5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x80, @local, 0x3}, {0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0xffffffffffffffff, 0x9}}, 0x48) sendto$inet6(r6, &(0x7f00000012c0)="a289445583de1175787b9850b1f9e2e911bc8f7ee22a8951b8750513fc6d2f22493c5d747cad28e9412432c95c71361edee4c673b35638b9424a89e42cfb355662f2dcb9d88ff1951a3701902a7112a1a5a5f813215bf59cf09e2522eed74908280ad417b53448645286187518d372f7bceefe9292738161c103deaf442dcacd0c273ab67297d8b5c23c003b2ebac3815c246d9bf63a8e73a178624b618b010112a20b88060ec49330002d5f535b2bfce8a3c4197b26ded292cd8d5b2e9d34a2bd5c4298fe46f4e8b8559b234ab643a7a46548b7f562e5c0d242b45a6e860902118fb014aa6d55b6476db80c0c09c77c91285314a533012225", 0xf9, 0x14285f56aac09c48, &(0x7f00000013c0)={0xa, 0x4e21, 0x401, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xf7}, 0x1c) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000280)={0xfffffffffffffde7, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000002840)={0x14, &(0x7f0000002700)={0x20, 0x11, 0xb8, {0xb8, 0xe, "3b9053b1a91e9f09a273f213a3f803ebbcdd98d3e53a468dc9fe14e3d98b8335f628f583bd4996be627b42cefd09235b3609762e992d0bc94ff96cfa7e29d37137e0dbbcfb2417758ecb6b63fb94a413ba4db9e6a07776098f06d5db379a0b4ec5f84b260b7bc18918dad996c52873e76e68b8e9cd2f00180b182608e9521ce548f6d9d37e33f5c19da87368fdd38e180335fa6a0449a056c39f715992a9736d155f5df4c89b400572b46f6f95403e87c40ca102a235"}}, &(0x7f0000002800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000002d40)={0x1c, &(0x7f0000002880)={0x40, 0x16, 0x2a, "aed4341f0be8faf249facb4c7c619569556ded448d8014eb3c917453448216cd337cf391804c01e3910e"}, &(0x7f00000028c0)={0xa1, 0x1, 0x400, "0659c4a68ccf2cebaf508720a62cd5fe01cb9d42ac7daba8e3da568de1bcef38737e68e945cc14c56d1f88d59815f0504177bec49e1d6bf59e650e9f84c80d277f01deeafb607eb7d5407bb1c9ec770cd4d25cb84ae9004cf5d36dca0d8daf87fb29d550a98c572501144c38c04c9c30a4b824fbe9c39a673c94a4e08cab58ea6e3c1ee0bff6c3b04b7ff003e252ac343527ca58a4cc53ac4335720dcf523fa72deb4ff63875a83010b107948632707d623d25edeb97c7a50f5e45bab2e7db233b486362ceabdae1efa83da7b7a1602334fe0a25fe265c766db697b51078a5a2540405b8acd01593b63a3d4f5ca6f3bc8a4c782dae57932365f8b5589df824a660573ed2881b3d135ee49d68a3bd61cec06a761bd9d2f48bf5a30366737c319be0da7353ff275ed97afa67676d090ecd5b6d14c4058e7f61e53d86f977edccd5f420ff28dc71f2ea4422cf4585c05960d8281f7df49dd371ca79397e9d86c910e0ba0da24514e7142fcf5ff1ff04b6a50ab9736c0e0c079af3fe1d7094f655135f3ee630c539bd0662babd7851c48b34a6696035554ec22f13471394179c9f661ad59f406134d228887bd07e5c954a8bce39661080514f81c6d6da7b7cf49b28662f6c2505f7afedaef9b162a0fbddb5f6ba7c58236b534d4aed7ccbbfbbd65a8e3947ab7bc1c6cecfff600a2325d803961c9f46be1f8584034c7a7bd721b395be2d81cb4dae01aab12a49b773eef2b8b0539fe0a9587b353d5a2ee9127f85a6cdd95fd5fcbe17570e05807ae9f0fddf6f14f97f3bf919a8d44546e3c80272633a48b1a244197abcf25990cb7b8dbbff51e8b18074dd5584f811876405bbb45fb99dcfac4c208982c15299dfaa7284cbdb7dfcb91ff1bdcaee865c40aeef3c292373a3b83922d175ba7cd4b5858547968a1d03854e312e5c6b705941415eeb0a3584545b95d406986f8ef8dd818ea97438768eea296180c8fcf645de0b0b1c46b5a389109cd7765095130e9ac7182540e18b2b56e9a05eeb8152d93e0df9e54bf1149a3b4fe71c9fcc3af15e1d6cf00b825891ec77ce6e0903420d305d62cd05eee613d8bb664f96350ae101ae489e15d2e41b6d6214541109f7e5fb9e4f112d0013b56d8b833a6bde7a01e68a73a2baa4d8fe5dfb5934850da5bb90f38f9251e475cda650508dd0e21195a38abcbffdafb2755ff9d83cdfb4a8b12ec4a0341c5690ba3a9bb2f1b369967a2a22668a74ca30b9a97e41ab7f26c4b80c5cdc0d64a54fd0fbe17eca37c455edca49bcbc98963837a847b883b6b340764ba3515a3bb78a46dff7411b727e3bb6de019abfc433550248f96945d011a90d96634b9f892e4619d4ff1175af975be745e2c2b127002810971ca4726a4fb383a2911d2b847ec8bcf18fa7a6c1a63eca2a02982e8bb5514af08a121630e6e0cf08fbbdd20a"}, &(0x7f0000002d00)={0x21, 0x0, 0x2, ' J'}}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getdents64(r7, &(0x7f0000000240)=""/4096, 0x1000) add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x10, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @cipso={0x86, 0x1f, 0x3, [{0x1, 0x2}, {0x6, 0x8, "dd02af50d2db"}, {0x7, 0x2}, {0x7, 0xb, "2ef6475700047e9983"}, {0x7, 0x2}]}, @lsrr={0x83, 0xb, 0x38, [@local, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x8, [{@rand_addr=0x64010102, 0x1000}]}, @rr={0x7, 0x7, 0x7b, [@remote]}, @cipso={0x86, 0x13, 0x2, [{0x7, 0xd, "675da162a72a7462a42fb7"}]}, @timestamp_prespec={0x44, 0x3c, 0xe6, 0x3, 0x4, [{@local, 0x7b02b67}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x1}, {@loopback, 0x2f34}, {@multicast2, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}, {@empty}]}, @lsrr={0x83, 0x13, 0xa, [@loopback, @multicast2, @rand_addr=0x64010101, @private=0xa010101]}]}}}], 0x108}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020ff4d41030088000a85c010203121a21a2ae010902120001030780d00904580d009e1f5b07"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 8m45.759416602s ago: executing program 1 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000c094}, 0x4000c00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 8m29.621776696s ago: executing program 32 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000c094}, 0x4000c00) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 8.177141464s ago: executing program 2 (id=3122): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001000)={0x0, 0xfffffffffffffd70, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x8}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000040)={r6, 0x4, 0x3, 0x2, 0x1, [], [0x100, 0x6, 0xc, 0x9], [0x7fffffff, 0x80, 0xfffff7d8, 0x7], [0x10000, 0x6, 0x8000, 0xfffffffffffffffe]}) 8.172634322s ago: executing program 5 (id=3123): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff, 0xc}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x4, 0x2, 0x2}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r6, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) semget(0x1, 0x1, 0x39c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0xc, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 6.992594139s ago: executing program 0 (id=3125): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 6.832953513s ago: executing program 2 (id=3127): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 6.727038292s ago: executing program 5 (id=3128): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000000)="01e640d451342b9cf3516bf70fc00d91fc7dab2abf47c7b7d480c87717", 0x1d) 6.658365297s ago: executing program 0 (id=3129): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444dccf75d3550a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dba919d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000018000000000000001701000000000000000018000000000000001701000004000000fc45ffff00000000780000000000000017010000020000005d00000066c8bb80cf4b49a5a0b9c1354aad6e5700c003933fb006799f9210fc058a159a7ad3d4ed8ecfdee24cd296c34224a6d27d41cb1312d32c33ec9df34a46aabb3f1b533b4646812d7fb21d038ff7bca0e3781e5ade024794c228a0d4d46a00"/192], 0xc0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) socket(0x10, 0x3, 0x0) 6.573278504s ago: executing program 2 (id=3130): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x48800) 5.832360276s ago: executing program 5 (id=3131): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 5.645178696s ago: executing program 0 (id=3133): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.601426207s ago: executing program 5 (id=3134): syz_io_uring_setup(0x43c3, &(0x7f0000000400)={0x0, 0x1a55, 0x20000, 0x0, 0x309}, &(0x7f0000000480), &(0x7f00000003c0), &(0x7f00000004c0)) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r1, 0x5) r2 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x810]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0xfffffffd, 0x8000, 0x0, 0xfffffffc, 0x0, 0x2, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r4 = accept(r1, 0x0, 0x0) write(r4, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1dd", 0x70, 0xc020, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffd, 0x440741) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f00000000c0)=""/84) 5.238706431s ago: executing program 0 (id=3135): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 4.159632808s ago: executing program 0 (id=3138): syz_io_uring_setup(0x43c3, &(0x7f0000000400)={0x0, 0x1a55, 0x20000, 0x0, 0x309}, &(0x7f0000000480), &(0x7f00000003c0), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r2, 0x5) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x810]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0xfffffffd, 0x8000, 0x0, 0xfffffffc, 0x0, 0x2, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r5 = accept(r2, 0x0, 0x0) write(r5, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1dd", 0x70, 0xc020, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffd, 0x440741) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/84) 3.074237695s ago: executing program 2 (id=3141): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 2.999250129s ago: executing program 4 (id=3143): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 2.925233929s ago: executing program 4 (id=3144): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 2.923967889s ago: executing program 2 (id=3154): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000080)={0x0, 0x0, 0x7fffffff, 0xc}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x4, 0x2, 0x2}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r6, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) semget(0x1, 0x1, 0x39c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.85370496s ago: executing program 4 (id=3145): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444dccf75d3550a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dba919d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000018000000000000001701000000000000000018000000000000001701000004000000fc45ffff00000000780000000000000017010000020000005d00000066c8bb80cf4b49a5a0b9c1354aad6e5700c003933fb006799f9210fc058a159a7ad3d4ed8ecfdee24cd296c34224a6d27d41cb1312d32c33ec9df34a46aabb3f1b533b4646812d7fb21d038ff7bca0e3781e5ade024794c228a0d4d46a00"/192], 0xc0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x8044000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}}) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x3b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x4000000, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) socket(0x10, 0x3, 0x0) 1.446466009s ago: executing program 4 (id=3146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x672}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x7, 0x3, 0x2, 0xfffffffc, 0xff, 0x2}}, {0x8, 0x2, [0x9, 0x9]}}, {{0x1c, 0x1, {0xfd, 0xff, 0x0, 0x9, 0x1, 0x7, 0x99, 0x6}}, {0x10, 0x2, [0x5, 0x0, 0x6, 0x6000, 0x6, 0xf2d8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.391705101s ago: executing program 5 (id=3147): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 1.128334655s ago: executing program 2 (id=3148): syz_io_uring_setup(0x43c3, &(0x7f0000000400)={0x0, 0x1a55, 0x20000, 0x0, 0x309}, &(0x7f0000000480), &(0x7f00000003c0), &(0x7f00000004c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r2, 0x5) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x810]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0xfffffffd, 0x8000, 0x0, 0xfffffffc, 0x0, 0x2, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = accept(r2, 0x0, 0x0) write(r5, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1dd", 0x70, 0xc020, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffd, 0x440741) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/84) 699.515262ms ago: executing program 0 (id=3149): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000000), 0x0) 379.367785ms ago: executing program 5 (id=3151): r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) write(r2, &(0x7f0000000000)="01e640d451342b9cf3516bf70fc00d91fc7dab2abf47c7b7d480c87717", 0x1d) 379.06382ms ago: executing program 3 (id=3152): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 279.016323ms ago: executing program 3 (id=3153): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 251.832648ms ago: executing program 4 (id=3155): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) dup3(r2, r4, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 188.821252ms ago: executing program 3 (id=3156): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 157.044078ms ago: executing program 4 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r2, 0x5) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x0, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x810]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0xfffffffd, 0x8000, 0x0, 0xfffffffc, 0x0, 0x2, 0x800000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x1, {[0x3, 0x0, 0xe, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000220)='vers\x00', &(0x7f0000000230)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r5 = accept(r2, 0x0, 0x0) write(r5, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1dd", 0x70, 0xc020, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xfffd, 0x440741) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/84) 144.630844ms ago: executing program 3 (id=3158): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 68.635923ms ago: executing program 3 (id=3159): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=3160): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001000)={0x0, 0xfffffffffffffd70, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x8}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0x1, 0xc}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000040)={r6, 0x4, 0x3, 0x2, 0x1, [], [0x100, 0x6, 0xc, 0x9], [0x7fffffff, 0x80, 0xfffff7d8, 0x7], [0x10000, 0x6, 0x8000, 0xfffffffffffffffe]}) kernel console output (not intermixed with test programs): 15][ T5724] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.127304][ T5724] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 563.137066][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.145825][ T5724] usb 6-1: Product: syz [ 563.155507][ T5724] usb 6-1: Manufacturer: syz [ 563.160159][ T5724] usb 6-1: SerialNumber: syz [ 563.187675][ T5724] usb 6-1: config 0 descriptor?? [ 563.306631][ T5724] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input43 [ 563.722714][ T5703] usb 6-1: USB disconnect, device number 30 [ 564.041153][ T5618] block nbd59: Receive control failed (result -32) [ 564.873230][ T9] usb 1-1: string descriptor 0 read error: -71 [ 564.895342][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 564.902969][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 564.913078][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 564.925051][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 564.932319][ T9] usb 1-1: media controller created [ 564.943613][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.536745][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 565.662870][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 565.728733][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input44 [ 565.751170][T14160] syzkaller0: entered promiscuous mode [ 565.871936][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 565.887628][T14160] syzkaller0: entered allmulticast mode [ 565.896921][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 565.924793][ T9] usb 1-1: USB disconnect, device number 28 [ 566.032499][T14160] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 566.388941][T12803] dvb-usb: bulk message failed: -22 (1/0) [ 566.394832][T12803] dvb-usb: error while querying for an remote control event. [ 566.422428][T14161] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2510'. [ 566.436108][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.787107][T14180] nbd: must specify a size in bytes for the device [ 567.832526][ T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 568.542359][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 568.566414][ T29] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 568.575097][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.596354][ T29] usb 5-1: config 0 has no interface number 0 [ 568.621592][ T29] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.740733][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 568.770705][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.809056][ T29] usb 5-1: Product: syz [ 568.856189][ T29] usb 5-1: Manufacturer: syz [ 568.896748][ T29] usb 5-1: SerialNumber: syz [ 568.943227][ T29] usb 5-1: config 0 descriptor?? [ 568.998429][ T29] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input45 [ 569.159492][ T29] usb 5-1: USB disconnect, device number 27 [ 570.758754][T14209] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 570.966530][T14214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2525'. [ 571.638552][T14215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2526'. [ 572.509558][T14227] nbd: must specify a size in bytes for the device [ 573.040758][ T5618] block nbd60: Receive control failed (result -32) [ 573.040758][ T5621] block nbd60: Receive control failed (result -32) [ 574.222365][ T5618] block nbd61: Receive control failed (result -32) [ 574.222365][ T5621] block nbd61: Receive control failed (result -32) [ 574.666695][T14262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2538'. [ 575.472604][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 575.644083][T14273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2542'. [ 576.155254][ T9] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 576.187053][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 576.226364][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 576.244371][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.321428][ T9] usb 6-1: config 0 descriptor?? [ 576.602803][T12803] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 576.742565][ T5703] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 576.763960][T12803] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 576.780582][T12803] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 576.817257][T12803] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 576.840195][T12803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.858935][T12803] usb 5-1: config 0 descriptor?? [ 576.906929][ T5703] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 576.932587][ T5703] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 576.945717][ T5703] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 576.977153][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.004218][ T5703] usb 3-1: config 0 descriptor?? [ 578.231576][ T9] usb 6-1: string descriptor 0 read error: -71 [ 578.243156][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 578.250255][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 578.260189][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 578.288419][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 578.295772][ T9] usb 6-1: media controller created [ 578.303294][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.316931][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 578.324290][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 578.334418][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 578.346703][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 578.353717][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 578.368408][ T9] usb 6-1: USB disconnect, device number 31 [ 578.411379][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 579.366319][T12803] usb 5-1: string descriptor 0 read error: -71 [ 579.384445][T12803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 579.391896][T12803] dvb-usb: bulk message failed: -22 (3/0) [ 579.403700][T12803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 579.423402][T12803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 579.439060][T12803] usb 5-1: media controller created [ 579.471003][T12803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.656366][ T5703] usb 3-1: string descriptor 0 read error: -71 [ 579.668614][ T5703] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 579.675789][ T5703] dvb-usb: bulk message failed: -22 (3/0) [ 579.694142][T12803] dvb-usb: bulk message failed: -22 (6/0) [ 579.994131][T14314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2555'. [ 580.089369][T12803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 580.490399][ T5703] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 580.503261][T12803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 580.529887][ T5703] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 580.587451][ T5703] usb 3-1: media controller created [ 580.593660][T12803] dvb-usb: schedule remote query interval to 150 msecs. [ 580.611367][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.637011][T12803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 580.708143][ T5703] dvb-usb: bulk message failed: -22 (6/0) [ 580.722017][T12803] usb 5-1: USB disconnect, device number 28 [ 580.730578][ T5703] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 580.747828][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input48 [ 580.767480][ T5703] dvb-usb: schedule remote query interval to 150 msecs. [ 580.775806][ T5703] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 580.786234][T12803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 580.797257][ T5703] usb 3-1: USB disconnect, device number 51 [ 580.803472][T11333] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 580.893481][ T5703] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 580.964410][T11333] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 580.979651][T11333] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 580.994707][T11333] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 581.004265][T11333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.111178][T11333] usb 1-1: config 0 descriptor?? [ 582.624605][T11333] usb 1-1: string descriptor 0 read error: -71 [ 582.646176][T11333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 582.745531][T11333] dvb-usb: bulk message failed: -22 (3/0) [ 582.756320][T11333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 582.765350][T11333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 582.773091][T11333] usb 1-1: media controller created [ 582.780135][T11333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.129706][T11333] dvb-usb: bulk message failed: -22 (6/0) [ 583.456689][T11333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 583.530156][T11333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 583.681716][T11333] dvb-usb: schedule remote query interval to 150 msecs. [ 583.742830][T11333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 583.807895][T11333] usb 1-1: USB disconnect, device number 29 [ 583.864142][T11333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 584.193777][T11333] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 584.714193][T11333] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 584.734772][T11333] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 584.749933][T11333] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 584.760836][T11333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.890690][T11333] usb 1-1: config 0 descriptor?? [ 584.963533][T14384] tipc: Enabled bearer , priority 0 [ 584.986652][T14384] syzkaller0: entered promiscuous mode [ 585.002990][T14384] syzkaller0: entered allmulticast mode [ 585.019908][T14384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 585.223626][T14389] tipc: Resetting bearer [ 585.244902][T14383] tipc: Resetting bearer [ 585.271327][T14383] tipc: Disabling bearer [ 585.946043][ T5618] block nbd62: Receive control failed (result -32) [ 585.947811][ T5621] block nbd62: Receive control failed (result -32) [ 586.751647][ T5621] block nbd63: Receive control failed (result -32) [ 586.772543][ T5618] block nbd63: Receive control failed (result -32) [ 586.881198][T11333] usb 1-1: string descriptor 0 read error: -71 [ 587.294430][T11333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 587.311157][T11333] dvb-usb: bulk message failed: -22 (3/0) [ 587.320673][T11333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 587.329794][T11333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 587.337959][T11333] usb 1-1: media controller created [ 587.351777][T11333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.364593][T11333] dvb-usb: bulk message failed: -22 (6/0) [ 587.370526][T11333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 587.387748][T11333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 587.407091][T11333] dvb-usb: schedule remote query interval to 150 msecs. [ 587.414922][T11333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 587.426292][T11333] usb 1-1: USB disconnect, device number 30 [ 587.497135][T11333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 588.176201][T12803] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 588.204163][T14431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2588'. [ 588.758522][T12803] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 588.819193][ T5618] block nbd64: Receive control failed (result -32) [ 588.826509][ T5621] block nbd64: Receive control failed (result -32) [ 588.838303][T12803] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 589.379557][T12803] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 589.413500][T12803] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 589.460203][T12803] usb 3-1: Manufacturer: syz [ 589.478296][T12803] usb 3-1: config 0 descriptor?? [ 589.487225][T12803] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 590.102903][T12803] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 590.464105][T12803] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 590.481992][T12803] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 590.492587][T12803] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 590.501981][T12803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.525892][T12803] usb 4-1: config 0 descriptor?? [ 590.793068][ T5618] block nbd65: Receive control failed (result -32) [ 590.793280][ T5621] block nbd65: Receive control failed (result -32) [ 591.145024][T14470] tipc: Enabling of bearer rejected, failed to enable media [ 591.155061][T14470] syzkaller0: entered promiscuous mode [ 591.160650][T14470] syzkaller0: entered allmulticast mode [ 591.287861][T14470] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 591.331533][T14470] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2599'. [ 591.409288][ T30] audit: type=1400 audit(1785198636.875:529): avc: denied { write } for pid=14465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.537439][T11333] usb 3-1: USB disconnect, device number 52 [ 591.587264][ T30] audit: type=1400 audit(1785198637.055:530): avc: denied { write } for pid=14485 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.047472][T14507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2603'. [ 592.070784][ T29] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 592.080889][ T5618] block nbd66: Receive control failed (result -32) [ 592.121115][ T5621] block nbd66: Receive control failed (result -32) [ 592.650567][ T30] audit: type=1400 audit(1785198638.115:531): avc: denied { write } for pid=14493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.689029][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 592.701060][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.711278][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 592.727176][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 592.736940][ T29] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 592.796186][ T29] usb 6-1: Manufacturer: syz [ 592.802695][T12803] usb 4-1: string descriptor 0 read error: -71 [ 592.817190][T12803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 592.834038][T12803] dvb-usb: bulk message failed: -22 (3/0) [ 592.987647][T12803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 593.011064][ T29] usb 6-1: config 0 descriptor?? [ 593.022252][T12803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 593.073875][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 593.241785][T12803] usb 4-1: media controller created [ 593.260970][ T30] audit: type=1400 audit(1785198638.715:532): avc: denied { write } for pid=14519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.286751][T12803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.329875][T12803] dvb-usb: bulk message failed: -22 (6/0) [ 593.346940][T12803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 593.386330][T12803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 593.524791][T12803] dvb-usb: schedule remote query interval to 150 msecs. [ 593.531996][T12803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 593.556660][T12803] usb 4-1: USB disconnect, device number 39 [ 593.905310][ T5618] block nbd67: Receive control failed (result -32) [ 593.939704][ T5621] block nbd67: Receive control failed (result -32) [ 594.031176][T12803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 594.166882][T14540] CIFS: Attempting to mount //127.0.0.1/share [ 594.182638][T14540] CIFS: VFS: Error connecting to socket. Aborting operation. [ 594.208311][ T5621] block nbd68: Receive control failed (result -32) [ 594.208492][ T5618] block nbd68: Receive control failed (result -32) [ 594.278104][T14540] CIFS: VFS: cifs_mount failed w/return code = -101 [ 595.161217][ T5618] block nbd69: Receive control failed (result -32) [ 595.161975][ T5621] block nbd69: Receive control failed (result -32) [ 595.360973][T11333] usb 6-1: USB disconnect, device number 32 [ 595.437968][T14563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2616'. [ 596.373579][T11333] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 596.439488][T14576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2619'. [ 596.564206][T11333] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 596.576799][T11333] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 596.587371][T11333] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 596.598041][T11333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.612426][T11333] usb 6-1: config 0 descriptor?? [ 597.430255][T14590] CIFS: Attempting to mount //127.0.0.1/share [ 597.446658][T14590] CIFS: VFS: Error connecting to socket. Aborting operation. [ 597.454227][T14590] CIFS: VFS: cifs_mount failed w/return code = -111 [ 597.762568][T12803] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 598.895881][T12803] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 598.914564][T12803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.937849][T12803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 598.958695][T12803] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 598.971674][T11333] usb 6-1: string descriptor 0 read error: -71 [ 598.991947][T14612] tipc: Enabled bearer , priority 0 [ 598.998796][T11333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 598.998834][T11333] dvb-usb: bulk message failed: -22 (3/0) [ 599.005542][T12803] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 599.011158][T14612] syzkaller0: entered promiscuous mode [ 599.011916][T11333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 599.039839][T12803] usb 5-1: Manufacturer: syz [ 599.056046][T12803] usb 5-1: config 0 descriptor?? [ 599.067302][T11333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 599.080609][T12803] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 599.082418][T14612] syzkaller0: entered allmulticast mode [ 599.091101][T11333] usb 6-1: media controller created [ 599.098198][T14618] nbd: must specify a size in bytes for the device [ 599.102116][T11333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.126857][T14619] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 599.163798][T11333] dvb-usb: bulk message failed: -22 (6/0) [ 599.174497][T11333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 599.211647][T11333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input52 [ 599.263129][T11333] dvb-usb: schedule remote query interval to 150 msecs. [ 599.300202][T11333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 599.326013][T14626] tipc: Resetting bearer [ 599.345950][T11333] usb 6-1: USB disconnect, device number 33 [ 599.362921][T14611] tipc: Resetting bearer [ 599.575371][T14611] tipc: Disabling bearer [ 599.833614][T11333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 600.661393][ T5621] block nbd70: Receive control failed (result -32) [ 600.662627][ T5618] block nbd70: Receive control failed (result -32) [ 601.229820][T14658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2649'. [ 601.764300][T12803] usb 5-1: USB disconnect, device number 29 [ 601.964951][T14665] nbd: must specify a size in bytes for the device [ 602.477106][T14677] syzkaller0: entered promiscuous mode [ 602.499292][T14677] syzkaller0: entered allmulticast mode [ 602.897051][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2658'. [ 603.042314][ T5618] block nbd71: Receive control failed (result -32) [ 603.052814][ T5621] block nbd71: Receive control failed (result -32) [ 603.541370][T14672] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 604.056965][ T5621] block nbd72: Receive control failed (result -32) [ 604.057533][ T5618] block nbd72: Receive control failed (result -32) [ 604.228161][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 604.405705][ T9] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 604.431184][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 604.460211][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 604.487628][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.537666][ T9] usb 3-1: config 0 descriptor?? [ 604.710727][ T5732] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 604.866594][ T5732] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 604.932529][ T5618] block nbd73: Receive control failed (result -32) [ 604.932572][ T5621] block nbd73: Receive control failed (result -32) [ 604.945831][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.955663][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 604.991374][ T5732] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 605.023853][ T5732] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 605.064873][ T5732] usb 1-1: Manufacturer: syz [ 605.091845][ T5732] usb 1-1: config 0 descriptor?? [ 605.116869][ T5732] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 607.005437][ T9] usb 3-1: string descriptor 0 read error: -71 [ 607.022226][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 607.051259][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 607.075811][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 607.101076][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 607.112641][ T9] usb 3-1: media controller created [ 607.119262][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.137312][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 607.196801][T14742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2672'. [ 607.258752][T14733] block nbd74: shutting down sockets [ 607.288366][T14743] syzkaller0: entered promiscuous mode [ 607.289373][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 607.527439][T14743] syzkaller0: entered allmulticast mode [ 607.535229][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input53 [ 607.558216][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 607.601327][T14741] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 607.621549][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 607.669824][T12803] usb 1-1: USB disconnect, device number 31 [ 607.721418][ T9] usb 3-1: USB disconnect, device number 53 [ 607.800915][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 608.077229][T14767] CIFS: Attempting to mount //127.0.0.1/share [ 608.094040][T14767] CIFS: VFS: Error connecting to socket. Aborting operation. [ 608.105258][T14767] CIFS: VFS: cifs_mount failed w/return code = -111 [ 608.275355][ T5732] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 608.685079][ T5732] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 608.695258][ T5732] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 608.705144][ T5732] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 608.714238][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.724316][ T5732] usb 5-1: config 0 descriptor?? [ 608.767093][ T5621] block nbd74: Receive control failed (result -32) [ 608.768733][ T5618] block nbd74: Receive control failed (result -32) [ 609.096986][T14780] overlayfs: missing 'workdir' [ 609.392075][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2688'. [ 609.862824][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 609.936669][T14795] tipc: Enabled bearer , priority 0 [ 609.945859][T14795] syzkaller0: entered promiscuous mode [ 609.951391][T14795] syzkaller0: entered allmulticast mode [ 609.960635][T14795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 609.982162][T14795] tipc: Resetting bearer [ 610.025479][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 610.048883][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.072564][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.094378][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 610.119424][T14794] tipc: Resetting bearer [ 610.151697][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 610.161359][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 610.164282][T14794] tipc: Disabling bearer [ 610.170450][ T9] usb 3-1: Manufacturer: syz [ 610.184445][ T9] usb 3-1: config 0 descriptor?? [ 610.326799][T14810] CIFS: Attempting to mount //127.0.0.1/share [ 610.333921][T14810] CIFS: VFS: Error connecting to socket. Aborting operation. [ 610.345540][T14810] CIFS: VFS: cifs_mount failed w/return code = -101 [ 610.354121][T14809] overlayfs: missing 'workdir' [ 610.614503][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 610.881586][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 610.898178][ T9] usb 3-1: USB disconnect, device number 54 [ 611.037273][ T5732] usb 5-1: string descriptor 0 read error: -71 [ 611.049175][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 611.056531][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 611.065728][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 611.077950][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 611.085024][ T5732] usb 5-1: media controller created [ 611.091722][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 611.111100][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 611.121070][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 611.141754][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 611.161461][ T5618] block nbd75: Receive control failed (result -32) [ 611.169086][ T5621] block nbd75: Receive control failed (result -32) [ 611.181735][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 611.250544][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 611.346425][ T5732] usb 5-1: USB disconnect, device number 30 [ 611.423919][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 611.723031][T14840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2707'. [ 612.274820][T14845] tipc: Enabled bearer , priority 0 [ 612.293660][T14845] syzkaller0: entered promiscuous mode [ 612.308333][T14845] syzkaller0: entered allmulticast mode [ 612.328372][T14847] overlayfs: missing 'lowerdir' [ 612.401761][T14845] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 612.547638][T14845] tipc: Resetting bearer [ 612.600764][T14844] tipc: Resetting bearer [ 612.715487][T14857] CIFS: Attempting to mount //127.0.0.1/share [ 612.723534][T14844] tipc: Disabling bearer [ 612.738521][T14857] CIFS: VFS: Error connecting to socket. Aborting operation. [ 613.074364][T14857] CIFS: VFS: cifs_mount failed w/return code = -111 [ 613.122690][T14865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2712'. [ 613.847614][ T5621] block nbd76: Receive control failed (result -32) [ 613.848256][ T5618] block nbd76: Receive control failed (result -32) [ 614.946495][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2724'. [ 615.841778][T14905] tipc: Enabled bearer , priority 0 [ 616.177042][T14905] syzkaller0: entered promiscuous mode [ 616.195392][T14905] syzkaller0: entered allmulticast mode [ 616.212937][T14905] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 616.294086][T14905] tipc: Resetting bearer [ 616.314672][T14904] tipc: Resetting bearer [ 616.368110][T14912] CIFS: Attempting to mount //127.0.0.1/share [ 616.374464][T14904] tipc: Disabling bearer [ 617.206123][T14912] CIFS: VFS: cifs_mount failed w/return code = -112 [ 617.716573][T14943] overlayfs: missing 'lowerdir' [ 617.814103][T14947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2739'. [ 618.298844][T14948] tipc: Enabled bearer , priority 0 [ 618.332881][T14948] syzkaller0: entered promiscuous mode [ 618.348205][T14948] syzkaller0: entered allmulticast mode [ 618.393897][T14948] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 618.927829][T14948] tipc: Resetting bearer [ 618.959778][T14946] tipc: Resetting bearer [ 619.009615][T14946] tipc: Disabling bearer [ 619.160007][T14962] CIFS: Attempting to mount //127.0.0.1/share [ 619.173048][T13140] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 619.231452][ T5618] block nbd77: Receive control failed (result -32) [ 619.233423][ T5621] block nbd77: Receive control failed (result -32) [ 619.336512][T13140] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 619.448174][T13140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.470172][T13140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.480217][T13140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 619.936071][T13140] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 620.009133][T14962] CIFS: VFS: cifs_mount failed w/return code = -512 [ 620.018868][T13140] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 620.085680][T13140] usb 4-1: Manufacturer: syz [ 620.289519][T13140] usb 4-1: config 0 descriptor?? [ 620.656569][T14989] tipc: Enabled bearer , priority 0 [ 620.666385][T14989] syzkaller0: entered promiscuous mode [ 620.677764][T14989] syzkaller0: entered allmulticast mode [ 620.688243][T14989] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 620.830667][T13140] usbhid 4-1:0.0: can't add hid device: -71 [ 620.837936][T13140] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 620.855358][T13140] usb 4-1: USB disconnect, device number 40 [ 620.860321][T15000] tipc: Resetting bearer [ 620.889681][T14988] tipc: Resetting bearer [ 621.436974][T14988] tipc: Disabling bearer [ 622.216302][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2769'. [ 622.406016][ T5618] block nbd78: Receive control failed (result -32) [ 622.709450][ T5621] block nbd78: Receive control failed (result -32) [ 623.867548][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.876202][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.920965][T15028] CIFS: Attempting to mount //127.0.0.1/share [ 624.296436][T15040] nbd: must specify at least one socket [ 624.578915][T15048] tipc: Enabled bearer , priority 0 [ 624.586893][T15048] syzkaller0: entered promiscuous mode [ 624.593163][T15048] syzkaller0: entered allmulticast mode [ 624.606837][T15048] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 624.629060][T15048] tipc: Resetting bearer [ 624.682838][T15047] tipc: Resetting bearer [ 624.742923][T15028] CIFS: VFS: cifs_mount failed w/return code = -512 [ 624.752524][T11333] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 624.771365][T15047] tipc: Disabling bearer [ 625.334286][T11333] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 625.367541][T11333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.472398][T11333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.482549][T11333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 625.498067][T11333] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 625.877485][T11333] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 625.911821][T11333] usb 4-1: Manufacturer: syz [ 625.931653][T11333] usb 4-1: config 0 descriptor?? [ 626.061731][T15062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 626.103685][T15062] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 626.141509][T15062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.207438][ T5621] block nbd79: Receive control failed (result -32) [ 626.214915][ T5618] block nbd79: Receive control failed (result -32) [ 626.351563][T11333] usbhid 4-1:0.0: can't add hid device: -71 [ 626.362752][T11333] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 626.380024][T11333] usb 4-1: USB disconnect, device number 41 [ 626.813591][ T5618] block nbd80: Receive control failed (result -32) [ 626.829071][ T5621] block nbd80: Receive control failed (result -32) [ 626.872595][T13140] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 626.936747][T15077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2778'. [ 627.464141][T13140] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 627.484681][T13140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 627.506174][T13140] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 627.615301][T13140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.646659][T15083] nbd: must specify at least one socket [ 627.656715][T13140] usb 1-1: config 0 descriptor?? [ 629.054141][T15102] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 629.087211][T15102] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 629.102760][T15102] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.302000][ T5621] block nbd81: Receive control failed (result -32) [ 629.309350][ T5618] block nbd81: Receive control failed (result -32) [ 629.417942][T13140] usb 1-1: string descriptor 0 read error: -71 [ 629.492712][ T5732] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 629.535887][T13140] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 629.564699][T13140] dvb-usb: bulk message failed: -22 (3/0) [ 629.582003][T13140] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 629.600975][T13140] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 629.621868][T13140] usb 1-1: media controller created [ 629.629280][T13140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.652515][T11333] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 629.665183][T13140] dvb-usb: bulk message failed: -22 (6/0) [ 629.680507][T13140] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 629.707848][T13140] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 629.739718][ T5732] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 629.763136][ T5732] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 629.772402][T13140] dvb-usb: schedule remote query interval to 150 msecs. [ 629.813884][T11333] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 629.832143][T11333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.853011][T11333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.875995][T11333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 629.941467][T13140] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 629.949486][ T5732] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 629.962743][T13140] usb 1-1: USB disconnect, device number 32 [ 629.968694][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.014177][T11333] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 630.021809][ T5732] usb 5-1: config 0 descriptor?? [ 630.041816][T11333] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 630.059316][T13140] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 630.061125][T11333] usb 3-1: Manufacturer: syz [ 630.088630][T11333] usb 3-1: config 0 descriptor?? [ 630.323872][ T5621] block nbd82: Receive control failed (result -32) [ 630.331787][ T5618] block nbd82: Receive control failed (result -32) [ 630.756350][T11333] usbhid 3-1:0.0: can't add hid device: -71 [ 630.762733][T11333] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 630.775216][T11333] usb 3-1: USB disconnect, device number 55 [ 630.992621][ T5618] block nbd83: Receive control failed (result -32) [ 631.000502][ T5621] block nbd83: Receive control failed (result -32) [ 631.381644][T15135] nbd: must specify at least one socket [ 631.516387][T15138] tipc: Enabled bearer , priority 0 [ 631.527486][T15138] syzkaller0: entered promiscuous mode [ 631.538338][T15138] syzkaller0: entered allmulticast mode [ 631.569413][T15138] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2796'. [ 631.597571][T15138] tipc: Resetting bearer [ 631.623010][T15137] tipc: Resetting bearer [ 631.678188][T15137] tipc: Disabling bearer [ 632.188449][ T5732] usb 5-1: string descriptor 0 read error: -71 [ 632.207436][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 632.222394][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 632.272094][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 632.294954][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 632.319138][ T5732] usb 5-1: media controller created [ 632.329644][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.362635][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 632.390225][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 632.430010][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 632.493044][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 632.556314][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 632.698234][ T5732] usb 5-1: USB disconnect, device number 31 [ 633.301933][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 634.272567][T11333] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 634.324342][ T5618] block nbd84: Receive control failed (result -32) [ 634.324576][ T5621] block nbd84: Receive control failed (result -32) [ 634.454159][T11333] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 634.597392][T11333] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 634.624699][T11333] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 634.635145][T11333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.660937][T11333] usb 5-1: config 0 descriptor?? [ 635.223318][ T5732] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 635.400922][ T5618] block nbd85: Receive control failed (result -32) [ 635.408931][ T5621] block nbd85: Receive control failed (result -32) [ 635.654378][ T5732] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 635.707178][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.724928][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.743531][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 635.757726][ T5732] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 635.766991][ T5732] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 635.822700][ T5732] usb 4-1: Manufacturer: syz [ 635.845612][ T5732] usb 4-1: config 0 descriptor?? [ 636.285147][ T5732] usbhid 4-1:0.0: can't add hid device: -71 [ 636.297044][ T5732] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 636.319998][ T5732] usb 4-1: USB disconnect, device number 42 [ 636.744436][T15189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15189 comm=syz.5.2809 [ 636.786087][T15189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15189 comm=syz.5.2809 [ 636.808829][T11333] usb 5-1: string descriptor 0 read error: -71 [ 636.847345][T11333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 636.865259][T11333] dvb-usb: bulk message failed: -22 (3/0) [ 636.938298][T11333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 636.963976][T11333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 636.984272][T11333] usb 5-1: media controller created [ 636.996659][T11333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.060626][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2812'. [ 637.490036][ T5618] block nbd86: Receive control failed (result -32) [ 637.497249][ T5621] block nbd86: Receive control failed (result -32) [ 637.517027][T11333] dvb-usb: bulk message failed: -22 (6/0) [ 637.578940][T11333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 637.596135][T11333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 637.615646][T11333] dvb-usb: schedule remote query interval to 150 msecs. [ 637.622853][T11333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 637.690917][T11333] usb 5-1: USB disconnect, device number 32 [ 637.719094][T15213] CIFS: Attempting to mount //127.0.0.1/share [ 637.794229][T11333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 638.469905][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.484992][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.494132][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.508113][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.517683][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.532010][ T5621] block nbd87: Receive control failed (result -32) [ 638.565615][T15213] CIFS: VFS: cifs_mount failed w/return code = -112 [ 639.637212][T15255] tipc: Enabled bearer , priority 0 [ 639.661831][T15255] syzkaller0: entered promiscuous mode [ 639.671621][T15255] syzkaller0: entered allmulticast mode [ 639.699455][T15255] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 639.729916][ T5618] block nbd88: Receive control failed (result -32) [ 639.736707][ T5621] block nbd88: Receive control failed (result -32) [ 639.773976][ T29] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 639.825036][T15255] tipc: Resetting bearer [ 639.835634][T15254] tipc: Resetting bearer [ 639.970286][T15254] tipc: Disabling bearer [ 639.974110][ T29] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 639.986345][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 639.996472][ T29] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 640.005779][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.047748][ T29] usb 1-1: config 0 descriptor?? [ 640.602755][ T5616] Bluetooth: hci2: command tx timeout [ 640.669402][ T5618] block nbd89: Receive control failed (result -32) [ 640.699038][ T5621] block nbd89: Receive control failed (result -32) [ 640.813151][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2827'. [ 641.271356][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.284089][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.299516][T15225] bridge_slave_0: entered allmulticast mode [ 641.324856][T15225] bridge_slave_0: entered promiscuous mode [ 641.341190][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.357205][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.380104][T15225] bridge_slave_1: entered allmulticast mode [ 641.402618][T15225] bridge_slave_1: entered promiscuous mode [ 641.456082][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.473080][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.516772][T15225] team0: Port device team_slave_0 added [ 641.647504][T15286] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2829'. [ 641.679009][T15225] team0: Port device team_slave_1 added [ 642.095561][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.105027][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.151124][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.195755][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.202798][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.229032][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.236131][T15293] CIFS: Attempting to mount //127.0.0.1/share [ 642.287103][T15225] hsr_slave_0: entered promiscuous mode [ 642.293216][T15294] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 642.293505][T15225] hsr_slave_1: entered promiscuous mode [ 642.301686][T15293] CIFS: VFS: cifs_mount failed w/return code = -112 [ 642.306674][T15225] debugfs: 'hsr0' already exists in 'hsr' [ 642.318621][T15225] Cannot create hsr debugfs directory [ 642.342085][ T5621] block nbd90: Receive control failed (result -32) [ 642.390518][ T5618] block nbd90: Receive control failed (result -32) [ 642.497792][ T29] usb 1-1: string descriptor 0 read error: -71 [ 642.522309][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 642.532186][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 642.540198][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 642.558530][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 642.566969][ T29] usb 1-1: media controller created [ 642.573589][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.663649][ T5618] Bluetooth: hci2: command tx timeout [ 642.677402][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 642.698761][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 642.718025][ T5621] block nbd91: Receive control failed (result -32) [ 642.759081][T15303] tipc: Enabled bearer , priority 0 [ 642.776084][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 642.791445][T15308] syzkaller0: entered promiscuous mode [ 643.347086][T15308] syzkaller0: entered allmulticast mode [ 643.368370][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 643.369731][T15311] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 643.377410][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 643.393163][T15307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15307 comm=syz.5.2836 [ 643.499376][T15307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15307 comm=syz.5.2836 [ 643.532507][T13140] dvb-usb: bulk message failed: -22 (1/0) [ 643.538276][T13140] dvb-usb: error while querying for an remote control event. [ 643.552045][ T29] usb 1-1: USB disconnect, device number 33 [ 643.597407][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 643.620089][T15308] tipc: Resetting bearer [ 644.622829][T15302] tipc: Resetting bearer [ 644.648688][T15302] tipc: Disabling bearer [ 644.742711][ T5621] Bluetooth: hci2: command tx timeout [ 644.756555][T11333] tipc: Node number set to 3520500542 [ 645.346689][T15225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.955932][T15225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.017526][T15336] CIFS: Attempting to mount //127.0.0.1/share [ 646.068740][T15337] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 646.103751][T15225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.230665][ T5621] block nbd92: Receive control failed (result -32) [ 646.237476][ T5618] block nbd92: Receive control failed (result -32) [ 646.300350][T15225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.396326][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2844'. [ 646.874054][ T5618] Bluetooth: hci2: command tx timeout [ 646.897089][T15336] CIFS: VFS: cifs_mount failed w/return code = -112 [ 647.485707][ T5618] block nbd93: Receive control failed (result -32) [ 647.492669][ T5621] block nbd93: Receive control failed (result -32) [ 647.556077][T15225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.774996][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.064854][T15225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.118111][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.133914][T15225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.164797][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.189684][T15225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.215073][T15225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.312785][T15370] tipc: Enabled bearer , priority 0 [ 648.335482][T15370] syzkaller0: entered promiscuous mode [ 648.347623][T15370] syzkaller0: entered allmulticast mode [ 648.363376][T15370] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 648.391090][T15370] tipc: Resetting bearer [ 648.403933][T15363] tipc: Resetting bearer [ 648.427166][T15363] tipc: Disabling bearer [ 648.458645][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.590647][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.593569][ T5724] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 648.607750][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.614879][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.662691][T15380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2852'. [ 648.984240][ T5724] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 648.995825][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.002982][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.132765][ T5724] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.152946][ T5724] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 649.165183][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.230390][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2857'. [ 649.274555][ T5724] usb 3-1: config 0 descriptor?? [ 649.736376][ T5618] block nbd94: Receive control failed (result -32) [ 649.736856][ T5621] block nbd94: Receive control failed (result -32) [ 649.907435][T15393] CIFS: Attempting to mount //127.0.0.1/share [ 649.960608][T15394] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 649.987728][T15393] CIFS: VFS: cifs_mount failed w/return code = -112 [ 650.911438][T15404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15404 comm=syz.0.2860 [ 650.946957][T15404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15404 comm=syz.0.2860 [ 651.624151][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.649662][ T5724] usb 3-1: string descriptor 0 read error: -71 [ 651.679489][ T5724] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 651.729918][ T5724] dvb-usb: bulk message failed: -22 (3/0) [ 651.737642][T15225] veth0_vlan: entered promiscuous mode [ 651.778330][T15225] veth1_vlan: entered promiscuous mode [ 651.789631][ T5724] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 651.821326][ T5724] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 651.838034][ T5724] usb 3-1: media controller created [ 651.852319][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.879504][T15225] veth0_macvtap: entered promiscuous mode [ 651.912808][ T5618] block nbd95: Receive control failed (result -32) [ 651.960020][ T5621] block nbd95: Receive control failed (result -32) [ 651.975090][T15225] veth1_macvtap: entered promiscuous mode [ 651.979062][ T5724] dvb-usb: bulk message failed: -22 (6/0) [ 651.998757][ T5724] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 652.012081][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input59 [ 652.031439][ T5724] dvb-usb: schedule remote query interval to 150 msecs. [ 652.038495][ T5724] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 652.042626][T11333] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 652.049037][ T5724] usb 3-1: USB disconnect, device number 56 [ 652.085918][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.099745][ T5724] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 652.143543][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.189546][ T7399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.215916][ T7399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.254807][ T7399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.267296][T11333] usb 5-1: Using ep0 maxpacket: 32 [ 652.283223][T11333] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 652.291454][ T7399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.308756][T11333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.330836][T11333] usb 5-1: config 0 has no interface number 0 [ 652.342982][T11333] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 652.383868][T11333] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 652.438612][T11333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.475806][T11333] usb 5-1: Product: syz [ 652.491681][T11333] usb 5-1: Manufacturer: syz [ 652.515516][ T7399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.524398][T11333] usb 5-1: SerialNumber: syz [ 652.539942][ T7399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.553526][T11333] usb 5-1: config 0 descriptor?? [ 652.581910][T11333] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input60 [ 652.667271][ T7406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.696718][ T7406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.849618][ T5703] usb 5-1: USB disconnect, device number 33 [ 653.012944][T11333] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 653.163647][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 653.174423][T11333] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 653.185108][T11333] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 653.195952][T11333] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 653.206027][T11333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.216265][T11333] usb 3-1: config 0 descriptor?? [ 653.274824][T15442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2879'. [ 653.285135][T15442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2879'. [ 653.314091][ T10] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 653.330680][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 653.347955][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 653.357150][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.383008][ T10] usb 4-1: config 0 descriptor?? [ 653.546815][ T5732] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 653.669389][T15446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2870'. [ 653.766961][ T5732] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 654.160363][ T5732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 654.176077][ T5732] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 654.190578][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.205966][ T5732] usb 6-1: config 0 descriptor?? [ 654.437254][T15448] CIFS: Attempting to mount //127.0.0.1/share [ 654.489895][T15449] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 654.504688][T15448] CIFS: VFS: cifs_mount failed w/return code = -112 [ 656.013852][ T10] usb 4-1: string descriptor 0 read error: -71 [ 656.048632][T11333] usb 3-1: string descriptor 0 read error: -71 [ 656.063511][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 656.093122][T11333] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 656.108621][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 656.130469][T11333] dvb-usb: bulk message failed: -22 (3/0) [ 656.156981][T11333] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 656.169686][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 656.188786][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 656.204801][T11333] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 656.217230][ T10] usb 4-1: media controller created [ 656.221298][ T5732] usb 6-1: string descriptor 0 read error: -71 [ 656.239575][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 656.244873][T11333] usb 3-1: media controller created [ 656.257540][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.264381][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 656.285277][T11333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.298204][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 656.336357][T15472] tipc: Enabled bearer , priority 0 [ 656.354221][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 656.362178][T15470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15470 comm=syz.4.2877 [ 656.376407][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 656.389013][T15476] syzkaller0: entered promiscuous mode [ 656.394888][T15475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15475 comm=syz.2.2878 [ 656.407370][ T5732] usb 6-1: media controller created [ 656.408374][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.421748][T15476] syzkaller0: entered allmulticast mode [ 656.429431][T15472] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 656.434445][T15475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15475 comm=syz.2.2878 [ 656.451246][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 656.552348][T15470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15470 comm=syz.4.2877 [ 656.566514][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 656.588240][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 656.597090][T11333] dvb-usb: bulk message failed: -22 (6/0) [ 656.599101][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 656.634307][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 656.668181][T15478] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2880'. [ 656.724748][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 657.085922][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.094127][T11333] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 657.124847][ T10] usb 4-1: USB disconnect, device number 43 [ 657.126446][T15472] tipc: Resetting bearer [ 657.145998][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 657.153694][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.155735][T11333] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63 [ 657.260123][T15469] tipc: Resetting bearer [ 657.268144][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 657.364159][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 657.379398][ T29] dvb-usb: error while querying for an remote control event. [ 657.388293][ T5732] usb 6-1: USB disconnect, device number 34 [ 657.426163][T11333] dvb-usb: schedule remote query interval to 150 msecs. [ 657.447734][T15469] tipc: Disabling bearer [ 657.494970][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2882'. [ 657.924028][T11333] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 657.967473][T11333] usb 3-1: USB disconnect, device number 57 [ 657.978734][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 657.988082][ T29] tipc: Node number set to 2684868122 [ 658.031485][T11333] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 658.207608][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 658.344464][T15491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2883'. [ 658.378775][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2884'. [ 658.413838][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 658.433978][T15491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2883'. [ 658.450655][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.474540][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.493289][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 658.538072][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 658.558501][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 658.582782][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2884'. [ 658.593162][ T10] usb 4-1: Manufacturer: syz [ 658.628901][ T10] usb 4-1: config 0 descriptor?? [ 659.582583][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 659.588596][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 659.601553][ T10] usb 4-1: USB disconnect, device number 44 [ 659.842661][ T5732] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 660.004111][ T5732] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 660.039624][ T5732] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 660.073936][ T5732] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 660.101823][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.151915][ T5732] usb 3-1: config 0 descriptor?? [ 661.376011][T15523] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2892'. [ 661.575074][T15527] CIFS: Attempting to mount //127.0.0.1/share [ 661.669042][T15528] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 661.721731][T15526] tipc: Started in network mode [ 661.727272][T15526] tipc: Node identity 02a8ce18354, cluster identity 4711 [ 661.735894][T15526] tipc: Enabled bearer , priority 0 [ 661.756050][T15521] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 661.765055][T15530] syzkaller0: entered promiscuous mode [ 661.770616][T15530] syzkaller0: entered allmulticast mode [ 661.779885][T15521] tipc: Resetting bearer [ 661.788303][T15519] tipc: Resetting bearer [ 661.805386][T15519] tipc: Disabling bearer [ 661.952559][ T29] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 662.073273][ T5732] usb 3-1: string descriptor 0 read error: -71 [ 662.093678][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 662.100350][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 662.120974][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 662.309396][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 662.320294][ T5732] usb 3-1: media controller created [ 662.325917][ T29] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 662.347603][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.357566][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 662.371918][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 662.380526][ T29] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 662.642726][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 662.649899][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.672714][T15527] CIFS: VFS: cifs_mount failed w/return code = -112 [ 662.845174][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 662.863319][ T29] usb 5-1: config 0 descriptor?? [ 662.875861][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 662.888476][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 662.910149][ T5732] usb 3-1: USB disconnect, device number 58 [ 662.927871][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 662.942760][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 663.023219][ T5618] block nbd96: Receive control failed (result -32) [ 663.024937][ T5621] block nbd96: Receive control failed (result -32) [ 663.172689][ T5724] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 663.223853][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 663.236287][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.298032][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.310321][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 663.336984][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 663.338357][ T5724] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 663.347457][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 663.372824][ T10] usb 6-1: Manufacturer: syz [ 663.407850][ T5724] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 663.416906][ T5724] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 663.432142][ T10] usb 6-1: config 0 descriptor?? [ 663.442476][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.465835][ T5724] usb 1-1: config 0 descriptor?? [ 663.822558][ T5703] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 663.862588][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 663.869081][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 663.889501][ T10] usb 6-1: USB disconnect, device number 35 [ 663.974035][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.987228][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.998438][ T5703] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 664.011901][ T5703] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 664.021514][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.048637][ T5703] hub 3-1:1.0: bad descriptor, ignoring hub [ 664.065078][ T5703] hub 3-1:1.0: probe with driver hub failed with error -5 [ 664.078394][ T5703] cdc_wdm 3-1:1.0: skipping garbage [ 664.088469][ T5703] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 664.276367][ T29] usb 5-1: string descriptor 0 read error: -71 [ 664.300714][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 664.310086][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 664.321004][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 664.339256][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 664.347985][ T29] usb 5-1: media controller created [ 664.355709][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.385750][ T5732] usb 3-1: USB disconnect, device number 59 [ 664.391905][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 664.399306][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 664.414502][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 664.449452][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 664.456541][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 664.478138][ T29] usb 5-1: USB disconnect, device number 34 [ 664.537122][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 664.543332][ T10] playstation 0003:054C:05C4.0024: hidraw0: USB HID v0.01 Gamepad [syz1] on syz1 [ 664.558732][ T10] playstation 0003:054C:05C4.0024: Failed to retrieve feature with reportID 18: -5 [ 664.571132][ T10] playstation 0003:054C:05C4.0024: Failed to retrieve DualShock4 pairing info: -5 [ 664.581176][ T10] playstation 0003:054C:05C4.0024: Failed to get MAC address from DualShock4 [ 664.590218][ T10] playstation 0003:054C:05C4.0024: Failed to create dualshock4. [ 664.602536][ T10] playstation 0003:054C:05C4.0024: probe with driver playstation failed with error -5 [ 664.614028][ T5703] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 664.779482][ T5703] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 664.799975][ T5703] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 664.816041][ T5703] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 664.830868][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.842903][ T5703] usb 4-1: config 0 descriptor?? [ 666.076038][ T5724] usb 1-1: string descriptor 0 read error: -71 [ 666.107737][ T5724] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 666.122552][ T5724] dvb-usb: bulk message failed: -22 (3/0) [ 666.401589][ T5724] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 666.413298][ T5724] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 666.420416][ T5724] usb 1-1: media controller created [ 666.426956][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.480678][ T5724] dvb-usb: bulk message failed: -22 (6/0) [ 666.502761][ T5724] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 666.515149][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 666.537564][ T5724] dvb-usb: schedule remote query interval to 150 msecs. [ 666.552226][ T5724] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 666.595114][ T5724] usb 1-1: USB disconnect, device number 34 [ 666.638818][ T5724] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 666.702523][ T5732] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 666.754380][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 666.765816][ T5618] block nbd97: Receive control failed (result -32) [ 666.772500][ T5621] block nbd97: Receive control failed (result -32) [ 666.918110][ T5732] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 666.984392][ T5732] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.993542][ T5732] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 667.005096][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.021017][ T5732] usb 6-1: config 0 descriptor?? [ 667.033839][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 667.152540][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.163512][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.393001][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 667.413436][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 667.422860][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 667.430993][ T10] usb 3-1: Manufacturer: syz [ 667.437530][ T5703] usb 4-1: string descriptor 0 read error: -71 [ 667.445937][ T10] usb 3-1: config 0 descriptor?? [ 667.460953][ T5703] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 667.468635][ T5703] dvb-usb: bulk message failed: -22 (3/0) [ 667.481040][ T5703] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 667.496271][ T5703] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 667.519217][ T5703] usb 4-1: media controller created [ 667.545471][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.606852][ T5703] dvb-usb: bulk message failed: -22 (6/0) [ 667.630480][ T5703] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 667.663231][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 667.687968][ T5618] block nbd98: Receive control failed (result -32) [ 667.742620][ T5621] block nbd98: Receive control failed (result -32) [ 667.806554][ T5703] dvb-usb: schedule remote query interval to 150 msecs. [ 667.813803][ T5703] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 667.836347][ T5703] usb 4-1: USB disconnect, device number 45 [ 667.861814][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 667.873327][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 667.880578][ T5703] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 667.890292][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 667.903602][ T10] usb 3-1: USB disconnect, device number 60 [ 669.155820][ T5732] usb 6-1: string descriptor 0 read error: -71 [ 669.191858][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 669.224178][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 669.250156][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 669.365967][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 669.392613][ T5732] usb 6-1: media controller created [ 669.403271][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.989306][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 669.999007][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 670.012044][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 670.056107][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 670.085874][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 670.184262][ T5732] usb 6-1: USB disconnect, device number 36 [ 670.235682][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 670.647598][T15657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2935'. [ 672.076429][ T5618] block nbd99: Receive control failed (result -32) [ 672.086165][ T5621] block nbd99: Receive control failed (result -32) [ 672.292734][T13140] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 672.374752][ T10] playstation 0003:054C:05C4.0025: hidraw0: USB HID v0.01 Gamepad [syz1] on syz1 [ 672.393381][ T10] playstation 0003:054C:05C4.0025: Failed to retrieve feature with reportID 18: -5 [ 672.404511][ T10] playstation 0003:054C:05C4.0025: Failed to retrieve DualShock4 pairing info: -5 [ 672.422587][ T10] playstation 0003:054C:05C4.0025: Failed to get MAC address from DualShock4 [ 672.438499][ T10] playstation 0003:054C:05C4.0025: Failed to create dualshock4. [ 672.466954][ T10] playstation 0003:054C:05C4.0025: probe with driver playstation failed with error -5 [ 672.486735][T13140] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.523633][T13140] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.550118][T13140] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.552647][ T5703] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 672.573040][T13140] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 672.582683][T13140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.611642][T13140] hub 5-1:1.0: bad descriptor, ignoring hub [ 672.630102][T13140] hub 5-1:1.0: probe with driver hub failed with error -5 [ 672.647301][T13140] cdc_wdm 5-1:1.0: skipping garbage [ 672.659685][T13140] cdc_wdm 5-1:1.0: skipping garbage [ 672.682820][T13140] cdc_wdm 5-1:1.0: skipping garbage [ 672.694894][T13140] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 672.762399][ T5703] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 672.782978][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.812579][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.837955][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 672.872059][ T5703] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 672.881897][ T5703] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 672.906746][ T5703] usb 4-1: Manufacturer: syz [ 672.930131][ T5703] usb 4-1: config 0 descriptor?? [ 672.972770][ T5813] usb 5-1: USB disconnect, device number 35 [ 673.363959][ T5703] usbhid 4-1:0.0: can't add hid device: -71 [ 673.382844][ T5703] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 673.422885][ T5703] usb 4-1: USB disconnect, device number 46 [ 674.728446][T15726] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2958'. [ 674.760709][ T5618] block nbd100: Receive control failed (result -32) [ 674.768593][ T5621] block nbd100: Receive control failed (result -32) [ 675.809731][T15747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2963'. [ 676.363789][ T5703] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 676.533706][ T5703] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 676.569679][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.601232][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.632731][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 676.660524][ T5703] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 676.680099][ T5703] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 676.701107][ T5703] usb 3-1: Manufacturer: syz [ 676.716713][ T5703] usb 3-1: config 0 descriptor?? [ 677.680854][ T5703] usbhid 3-1:0.0: can't add hid device: -71 [ 677.690947][ T5703] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 677.809006][ T5703] usb 3-1: USB disconnect, device number 61 [ 677.905447][T15772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2972'. [ 679.378232][ T5618] block nbd101: Receive control failed (result -32) [ 679.385186][ T5621] block nbd101: Receive control failed (result -32) [ 679.835507][ T8859] block nbd102: shutting down sockets [ 680.721546][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.766717][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.777552][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.793812][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.803373][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 681.814193][ T5703] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 681.883838][T15838] CIFS: Attempting to mount //127.0.0.1/share [ 682.003826][ T5703] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 682.106725][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.143087][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.175877][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 682.222917][ T5703] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 682.247518][ T5703] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 682.269637][ T5703] usb 5-1: Manufacturer: syz [ 682.277060][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.286777][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.293645][ T5703] usb 5-1: config 0 descriptor?? [ 682.296009][T15807] bridge_slave_0: entered allmulticast mode [ 682.311073][T15807] bridge_slave_0: entered promiscuous mode [ 682.319752][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.327808][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.335348][T15807] bridge_slave_1: entered allmulticast mode [ 682.342592][T15807] bridge_slave_1: entered promiscuous mode [ 682.391774][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.405571][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.470873][T15807] team0: Port device team_slave_0 added [ 682.481683][T15807] team0: Port device team_slave_1 added [ 682.532762][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.539802][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.571095][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.585566][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.593333][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.619786][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.686522][T15807] hsr_slave_0: entered promiscuous mode [ 682.693733][T15807] hsr_slave_1: entered promiscuous mode [ 682.700023][T15807] debugfs: 'hsr0' already exists in 'hsr' [ 682.708259][T15807] Cannot create hsr debugfs directory [ 682.715889][T15838] CIFS: VFS: cifs_mount failed w/return code = -512 [ 682.822843][ T5621] Bluetooth: hci4: command tx timeout [ 682.916386][T15807] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.928922][ T5703] usbhid 5-1:0.0: can't add hid device: -71 [ 682.935472][ T5813] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 682.952995][ T5703] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 682.972872][ T5703] usb 5-1: USB disconnect, device number 36 [ 683.025219][T15807] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.069923][T15807] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.117617][T15807] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.131313][ T5813] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 683.154580][ T5813] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 683.172871][ T5813] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 683.182527][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.217794][ T5813] usb 6-1: config 0 descriptor?? [ 683.387852][T15807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 683.408646][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.422181][T15807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 683.487228][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.513669][T15807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 683.546018][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.585991][T15807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 683.605074][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.769124][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.772905][ T29] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 683.798362][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.824430][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.831604][ T7409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.890220][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.897384][ T7409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.994465][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 684.005579][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.016829][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.084108][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 684.127859][ T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 684.137549][ T29] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 684.174984][ T29] usb 4-1: Manufacturer: syz [ 684.190011][ T29] usb 4-1: config 0 descriptor?? [ 684.705727][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.771812][T15807] veth0_vlan: entered promiscuous mode [ 684.789373][T15807] veth1_vlan: entered promiscuous mode [ 684.861655][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 684.868101][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 684.878351][ T29] usb 4-1: USB disconnect, device number 47 [ 684.902824][ T5621] Bluetooth: hci4: command tx timeout [ 684.915706][T15807] veth0_macvtap: entered promiscuous mode [ 684.927093][T15903] CIFS: Attempting to mount //127.0.0.1/share [ 684.930210][T15807] veth1_macvtap: entered promiscuous mode [ 685.286050][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.303865][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.310363][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.311557][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.332869][ T7399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.341708][ T7399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.354163][ T7399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.368540][ T7417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.458614][ T7417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.474215][ T7417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.517934][ T7416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.531075][ T7416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.675246][ T5813] usb 6-1: string descriptor 0 read error: -71 [ 685.722037][ T5813] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 685.733662][ T5813] dvb-usb: bulk message failed: -22 (3/0) [ 685.747522][ T5813] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 685.758058][ T5813] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 685.765154][ T5813] usb 6-1: media controller created [ 685.771588][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 685.812787][T15903] CIFS: VFS: cifs_mount failed w/return code = -512 [ 685.835247][ T5813] dvb-usb: bulk message failed: -22 (6/0) [ 685.842818][T15912] CIFS: Attempting to mount //127.0.0.1/share [ 685.888351][ T5813] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 685.917538][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 686.280681][ T5813] dvb-usb: schedule remote query interval to 150 msecs. [ 686.289832][ T5813] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 686.315826][ T5813] usb 6-1: USB disconnect, device number 37 [ 686.391497][ T5813] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 686.434039][T15921] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.525640][T15912] CIFS: VFS: cifs_mount failed w/return code = -512 [ 686.532719][T15929] CIFS: Attempting to mount //127.0.0.1/share [ 686.545232][T15929] CIFS: VFS: Error connecting to socket. Aborting operation. [ 686.560066][T15929] CIFS: VFS: cifs_mount failed w/return code = -111 [ 686.673201][T15921] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.867319][T15921] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.923195][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 686.941687][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 686.960941][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 686.972802][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 686.980711][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.988191][ T5616] Bluetooth: hci4: command tx timeout [ 687.125882][T15937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.291671][T15921] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.320083][T15945] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.660878][T15945] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.965189][T15945] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.016302][T15937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.046747][T15945] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.076488][ T7409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.103957][T15937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.148337][ T7416] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.205715][T15937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.265848][ T7416] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.331203][ T7417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.373541][ T7417] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.434736][ T7417] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.461369][ T7417] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.510655][T15940] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.519051][T15940] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.527186][T15940] bridge_slave_0: entered allmulticast mode [ 688.540631][T15940] bridge_slave_0: entered promiscuous mode [ 688.607036][T15940] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.623971][T15940] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.637067][T15940] bridge_slave_1: entered allmulticast mode [ 688.652727][T15940] bridge_slave_1: entered promiscuous mode [ 688.664086][ T7409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.679565][ T7409] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.756886][ T7416] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.848789][ T7409] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.892038][T15940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.945654][T15940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.073267][ T5621] Bluetooth: hci4: command tx timeout [ 689.080791][ T5618] Bluetooth: hci1: command tx timeout [ 689.098740][ T7416] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.115171][T15940] team0: Port device team_slave_0 added [ 689.126858][T15940] team0: Port device team_slave_1 added [ 689.169623][T15940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.177593][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.205889][T15940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.219467][T15940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.226986][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.255946][T15940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.352837][T15940] hsr_slave_0: entered promiscuous mode [ 689.359380][T15940] hsr_slave_1: entered promiscuous mode [ 689.365826][T15940] debugfs: 'hsr0' already exists in 'hsr' [ 689.371639][T15940] Cannot create hsr debugfs directory [ 690.002945][T15999] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.097521][T15940] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.240306][T15999] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.325008][T15940] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.386113][T15999] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.442099][T15940] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.498439][T15999] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.548521][T15940] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.614750][ T7424] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.692761][ T7424] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.781563][ T7409] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.841654][ T7409] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.055827][T16026] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.142596][ T5618] Bluetooth: hci1: command tx timeout [ 691.250932][T16026] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.294803][T16040] CIFS: Attempting to mount //127.0.0.1/share [ 691.304176][T16040] CIFS: VFS: Error connecting to socket. Aborting operation. [ 691.308315][T15940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 691.319889][T16040] CIFS: VFS: cifs_mount failed w/return code = -111 [ 691.332342][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.342317][T15940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 691.413853][T16041] nbd: must specify at least one socket [ 691.484023][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.686881][T15940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 691.698047][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.709366][T15940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 691.719359][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.735423][T16026] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.821712][T16026] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.883310][T15940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.904656][T15940] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.919263][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.926365][ T7409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.958857][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.966037][ T7409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.098795][T16059] CIFS: Attempting to mount //127.0.0.1/share [ 692.106962][T16059] CIFS: VFS: Error connecting to socket. Aborting operation. [ 692.117691][T16059] CIFS: VFS: cifs_mount failed w/return code = -111 [ 692.195001][T15940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.207683][T15940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.253522][T11333] playstation 0003:054C:05C4.0026: hidraw0: USB HID v0.01 Gamepad [syz1] on syz1 [ 692.597468][T11333] playstation 0003:054C:05C4.0026: Failed to retrieve feature with reportID 18: -5 [ 692.607209][T11333] playstation 0003:054C:05C4.0026: Failed to retrieve DualShock4 pairing info: -5 [ 692.616483][T11333] playstation 0003:054C:05C4.0026: Failed to get MAC address from DualShock4 [ 692.626700][T11333] playstation 0003:054C:05C4.0026: Failed to create dualshock4. [ 692.627637][T16065] block nbd102: server does not support multiple connections per device. [ 692.635750][T11333] playstation 0003:054C:05C4.0026: probe with driver playstation failed with error -5 [ 692.643091][T16065] block nbd102: shutting down sockets [ 692.697759][T16069] fido_id[16069]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 692.716681][T16070] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.758707][ T7406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.786700][ T7406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.800774][T16070] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.819962][ T7406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.840740][ T7424] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.861982][T16070] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.102175][T16070] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.153236][T16089] CIFS: Attempting to mount //127.0.0.1/share [ 693.160350][T16089] CIFS: VFS: Error connecting to socket. Aborting operation. [ 693.180309][T16089] CIFS: VFS: cifs_mount failed w/return code = -111 [ 693.226244][ T5618] Bluetooth: hci1: command tx timeout [ 693.365803][T15940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.463553][ T7406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.585707][ T7416] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.707953][ T7424] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.775542][ T7399] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.846363][T16102] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.939672][T16102] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.980674][T15940] veth0_vlan: entered promiscuous mode [ 694.002448][T15940] veth1_vlan: entered promiscuous mode [ 694.018912][T16102] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.062622][ T5813] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 694.089118][T16102] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.116320][T15940] veth0_macvtap: entered promiscuous mode [ 694.124838][T16117] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.139518][T15940] veth1_macvtap: entered promiscuous mode [ 694.158607][T15940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.171747][T15940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.185526][T16117] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.204935][ T7417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.214009][ T7417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.226244][ T7417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.235168][ T7417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.257365][T16117] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.267698][ T5813] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 694.279907][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.282647][ T5732] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 694.297698][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.311283][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 694.325640][ T5813] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 694.374808][ T5813] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 694.397241][ T5813] usb 4-1: Manufacturer: syz [ 694.399097][T16117] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.410619][ T5813] usb 4-1: config 0 descriptor?? [ 694.439884][ T7424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.448742][ T7424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.454892][ T5732] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 694.466410][ T5732] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 694.476598][ T5732] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 694.485748][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.497522][ T5732] usb 1-1: config 0 descriptor?? [ 694.522225][ T7424] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.531763][ T7409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.548374][ T7424] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.550145][ T7409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.576993][ T7424] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.603145][ T7416] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.717807][ T5732] usb 1-1: string descriptor 0 read error: -71 [ 694.735262][ T5732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 694.747584][ T5732] dvb-usb: bulk message failed: -22 (3/0) [ 694.757552][ T5732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 694.781600][ T5732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 694.790669][ T5732] usb 1-1: media controller created [ 694.809116][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.831701][ T5813] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 694.858449][ T5732] dvb-usb: bulk message failed: -22 (6/0) [ 694.871098][ T5732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 694.879293][ T5813] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 694.890895][ T5732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input70 [ 694.922837][ T5732] dvb-usb: schedule remote query interval to 150 msecs. [ 694.939832][ T5732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 694.964258][ T5732] usb 1-1: USB disconnect, device number 35 [ 695.006228][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 695.048585][T13140] usb 4-1: USB disconnect, device number 48 [ 695.102577][ T10] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 695.128182][ T7417] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.173990][ T7399] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.195056][ T7399] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.214342][ T7399] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.307682][ T5618] Bluetooth: hci1: command tx timeout [ 695.338665][ T10] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 695.477545][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 695.725492][T16142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3076'. [ 695.752832][T16139] block nbd102: server does not support multiple connections per device. [ 695.761544][T16139] block nbd102: shutting down sockets [ 695.820375][ T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 695.835848][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.278554][ T10] usb 6-1: config 0 descriptor?? [ 697.041725][T16154] CIFS: Attempting to mount //127.0.0.1/share [ 697.049392][T16154] CIFS: VFS: Error connecting to socket. Aborting operation. [ 697.064771][T16154] CIFS: VFS: cifs_mount failed w/return code = -111 [ 697.093623][T16158] block nbd102: server does not support multiple connections per device. [ 697.102407][T16158] block nbd102: shutting down sockets [ 697.744503][T16184] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.835130][T16187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3090'. [ 698.735491][ T10] usb 6-1: string descriptor 0 read error: -71 [ 698.776775][T16189] block nbd102: shutting down sockets [ 698.872074][T16184] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.885000][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 698.898737][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 698.925782][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 698.945708][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 698.954683][T16193] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.963827][ T10] usb 6-1: media controller created [ 698.971771][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.004818][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 699.018840][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 699.028567][T16184] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.046605][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 699.081588][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 699.099735][T16193] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.110383][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 699.147357][ T10] usb 6-1: USB disconnect, device number 38 [ 699.159905][T16184] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.186760][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 699.282600][T16159] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 699.456548][T16159] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 699.486687][T16159] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 699.518219][T16159] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 699.582106][T16159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.714949][T16159] usb 4-1: config 0 descriptor?? [ 700.067890][T16193] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.083623][T16159] usb 4-1: string descriptor 0 read error: -71 [ 700.098079][T16159] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 700.122536][T16159] dvb-usb: bulk message failed: -22 (3/0) [ 700.150935][T16159] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 700.174692][T16159] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 700.181842][T16159] usb 4-1: media controller created [ 700.212798][T16193] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.228916][T16159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 700.271060][T16159] dvb-usb: bulk message failed: -22 (6/0) [ 700.281606][T16159] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 700.321199][T16159] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 700.422330][T16159] dvb-usb: schedule remote query interval to 150 msecs. [ 700.429583][T16159] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 700.440180][T16159] usb 4-1: USB disconnect, device number 49 [ 700.464380][T16159] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 700.529870][T16218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3104'. [ 701.087525][ T7393] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.100463][ T7393] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.110537][T16229] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.132046][ T7414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.147766][ T7414] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.202819][T16229] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.259086][ T7409] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.263294][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 701.271841][ T7409] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.291405][ T7409] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.324823][ T7409] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.651638][ T10] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 701.938238][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 701.961750][T16229] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.979776][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 701.997974][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.045236][ T10] usb 5-1: config 0 descriptor?? [ 702.081956][T16229] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.170155][ T5618] block nbd102: Receive control failed (result -32) [ 702.265460][ T7409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.853666][ T7406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.020269][ T7406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.070522][ T7414] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.813139][ T5618] block nbd103: Receive control failed (result -32) [ 703.825720][ T5621] block nbd103: Receive control failed (result -32) [ 704.297993][T16278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'. [ 704.820592][ T10] usb 5-1: string descriptor 0 read error: -71 [ 704.843481][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 704.850124][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 704.907948][T16282] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.924285][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 704.939119][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 704.950072][ T10] usb 5-1: media controller created [ 704.958962][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.997650][T16282] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.022036][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 705.049548][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 705.078393][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 705.093174][T16289] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 705.126985][T16282] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.138596][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 705.161720][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 705.185569][ T10] usb 5-1: USB disconnect, device number 37 [ 705.239846][T16295] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.291294][T16282] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.308718][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 705.357698][T16295] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.434488][T16295] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.597454][T16295] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.213097][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3132'. [ 707.342582][ T805] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 707.510672][ T5621] block nbd104: Receive control failed (result -32) [ 707.543649][ T5618] block nbd104: Receive control failed (result -32) [ 707.695327][ T805] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 707.706727][ T805] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 707.716110][ T805] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 707.727808][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.737775][ T805] usb 6-1: config 0 descriptor?? [ 707.815179][T16326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3137'. [ 708.222591][ T10] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 708.384092][ T10] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 708.394296][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 708.403358][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 708.412535][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.423051][ T10] usb 1-1: config 0 descriptor?? [ 708.611425][ T7409] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.619874][ T7409] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.635666][ T7409] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.653035][ T7399] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.371091][ T805] usb 6-1: string descriptor 0 read error: -71 [ 710.396945][ T7417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.410799][ T805] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 710.426507][ T7417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.437854][ T805] dvb-usb: bulk message failed: -22 (3/0) [ 710.467760][ T7417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.479254][T16345] tipc: Started in network mode [ 710.488473][T16345] tipc: Node identity 2e905834e36, cluster identity 4711 [ 710.523598][ T805] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 710.580126][ T805] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 710.592733][T16345] tipc: Enabled bearer , priority 0 [ 710.600009][ T805] usb 6-1: media controller created [ 710.623225][T16349] syzkaller0: entered promiscuous mode [ 711.020292][ T10] usb 1-1: string descriptor 0 read error: -71 [ 711.030428][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.053501][T16349] syzkaller0: entered allmulticast mode [ 711.064265][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 711.069067][ T7389] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.082589][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 711.091270][ T805] dvb-usb: bulk message failed: -22 (6/0) [ 711.105206][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 711.119848][ T805] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 711.134666][T16345] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 711.135009][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 711.156585][ T10] usb 1-1: media controller created [ 711.157187][T16356] CIFS: Attempting to mount //127.0.0.1/share [ 711.164723][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.179312][ T805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input74 [ 711.187596][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 711.209366][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 711.215328][ T805] dvb-usb: schedule remote query interval to 150 msecs. [ 711.229571][T16345] tipc: Resetting bearer [ 711.238607][ T805] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 711.246554][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input75 [ 711.265833][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 711.275428][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 711.297218][ T10] usb 1-1: USB disconnect, device number 36 [ 711.308072][T16344] tipc: Resetting bearer [ 711.341928][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 711.392191][T16344] tipc: Disabling bearer [ 711.398855][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 711.409319][ T805] usb 6-1: USB disconnect, device number 39 [ 711.415426][ T29] dvb-usb: error while querying for an remote control event. [ 711.446860][ T805] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 711.623180][ T5733] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 711.774678][ T5733] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 711.785140][ T5733] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 711.795951][ T5733] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 711.805129][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.821834][ T5733] usb 3-1: config 0 descriptor?? [ 712.002770][ T805] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 712.016641][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3160'. [ 712.148386][T16356] CIFS: VFS: \\127.0.0.1 Error -32 sending data on socket to server [ 712.215417][T16356] ------------[ cut here ]------------ [ 712.221795][T16356] server->in_flight == 0 [ 712.221812][T16356] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#1: syz.0.3149/16356 [ 712.238588][T16356] Modules linked in: [ 712.242732][T16356] CPU: 1 UID: 0 PID: 16356 Comm: syz.0.3149 Not tainted syzkaller #0 PREEMPT(full) [ 712.252120][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 712.262223][T16356] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 712.268083][T16356] Code: c6 e8 21 ea b5 fe 84 db 0f 85 0a fb ff ff e8 04 f0 b5 fe 48 8d 3d ad 9f d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 ee ef b5 fe 90 <0f> 0b 90 0f b6 05 87 d6 b5 0d 31 ff 89 c6 88 44 24 28 e8 e6 e9 b5 [ 712.287897][T16356] RSP: 0000:ffffc900032772d8 EFLAGS: 00010287 [ 712.294066][T16356] RAX: 0000000000035aed RBX: ffff888067ad2300 RCX: ffffc9001bdf1000 [ 712.302069][T16356] RDX: 0000000000080000 RSI: ffffffff83547052 RDI: ffff88807d504a80 [ 712.310104][T16356] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 712.318160][T16356] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003277518 [ 712.326600][T16356] R13: 0000000000000200 R14: 0000000000000002 R15: ffff888067ad2000 [ 712.335612][T16356] FS: 00007f2d55f986c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 712.345295][T16356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.351887][T16356] CR2: 000000110c2d05f7 CR3: 000000005e081000 CR4: 00000000003526f0 [ 712.359977][T16356] Call Trace: [ 712.363322][T16356] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 712.366256][T16356] ? compound_send_recv+0xed0/0x2a10 [ 712.371561][T16356] compound_send_recv+0x1030/0x2a10 [ 712.376821][T16356] ? irqentry_exit+0x24d/0xa00 [ 712.381614][T16356] ? __pfx_compound_send_recv+0x10/0x10 [ 712.387221][T16356] ? lock_acquire+0x1b9/0x370 [ 712.391917][T16356] ? rcu_is_watching+0x12/0xc0 [ 712.396769][T16356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.402716][T16356] ? __mutex_unlock_slowpath+0x35d/0x930 [ 712.408353][T16356] ? cifs_strtoUTF16+0x283/0x3e0 [ 712.413379][T16356] ? find_held_lock+0x2b/0x80 [ 712.418070][T16356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.424092][T16356] cifs_send_recv+0x43/0x60 [ 712.428635][T16356] SMB2_negotiate+0x15c4/0x5380 [ 712.434576][T16356] ? __pfx_SMB2_negotiate+0x10/0x10 [ 712.439803][T16356] ? smb2_negotiate+0x57/0x80 [ 712.445263][T16356] ? smb2_negotiate+0x57/0x80 [ 712.449958][T16356] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.455271][T16356] ? cifs_negotiate_protocol+0x268/0x4c0 [ 712.460922][T16356] cifs_negotiate_protocol+0x268/0x4c0 [ 712.466454][T16356] cifs_get_smb_ses+0xfc9/0x2170 [ 712.471400][T16356] cifs_mount_get_session+0xf8/0x460 [ 712.476739][T16356] dfs_mount_share+0x200/0x1e20 [ 712.481621][T16356] ? do_raw_spin_lock+0x128/0x260 [ 712.486708][T16356] ? __pfx_dfs_mount_share+0x10/0x10 [ 712.492000][T16356] ? __lock_acquire+0x49f/0x1a40 [ 712.497000][T16356] ? lockdep_hardirqs_on+0x78/0x100 [ 712.502199][T16356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 712.508045][T16356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 712.513905][T16356] cifs_mount+0xc4/0xdb0 [ 712.518147][T16356] ? find_held_lock+0x2b/0x80 [ 712.522867][T16356] ? find_nls+0x125/0x170 [ 712.527198][T16356] ? find_nls+0x125/0x170 [ 712.531553][T16356] ? __pfx_cifs_mount+0x10/0x10 [ 712.537403][T16356] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.543322][T16356] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 712.548595][T16356] cifs_smb3_do_mount+0x2c0/0x1b20 [ 712.553754][T16356] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 712.560013][T16356] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 712.565627][T16356] smb3_get_tree+0x1fd/0x440 [ 712.570233][T16356] vfs_get_tree+0x92/0x320 [ 712.574707][T16356] vfs_cmd_create+0xd7/0x2a0 [ 712.579327][T16356] __do_sys_fsconfig+0x55a/0xcb0 [ 712.584359][T16356] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 712.589838][T16356] do_syscall_64+0x115/0x870 [ 712.594470][T16356] ? clear_bhb_loop+0x40/0x90 [ 712.599174][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.605350][T16356] RIP: 0033:0x7f2d5519de99 [ 712.609768][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.629437][T16356] RSP: 002b:00007f2d55f98028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 712.638903][T16356] RAX: ffffffffffffffda RBX: 00007f2d55425fa0 RCX: 00007f2d5519de99 [ 712.647650][T16356] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 712.655707][T16356] RBP: 00007f2d55233eaf R08: 0000000000000000 R09: 0000000000000000 [ 712.664962][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.672985][T16356] R13: 00007f2d55426038 R14: 00007f2d55425fa0 R15: 00007ffe9a2298a8 [ 712.680994][T16356] [ 712.684061][T16356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.691329][T16356] CPU: 1 UID: 0 PID: 16356 Comm: syz.0.3149 Not tainted syzkaller #0 PREEMPT(full) [ 712.700703][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 712.710737][T16356] Call Trace: [ 712.714000][T16356] [ 712.716912][T16356] dump_stack_lvl+0x100/0x190 [ 712.721583][T16356] vpanic+0x552/0x970 [ 712.725545][T16356] ? __pfx_vpanic+0x10/0x10 [ 712.730036][T16356] panic+0xd1/0xe0 [ 712.733742][T16356] ? __pfx_panic+0x10/0x10 [ 712.738151][T16356] check_panic_on_warn.cold+0x19/0x34 [ 712.743508][T16356] ? smb2_add_credits+0x1213/0x1790 [ 712.748700][T16356] __warn.cold+0x191/0x318 [ 712.753102][T16356] __report_bug+0x30f/0x440 [ 712.757589][T16356] ? smb2_add_credits+0x1213/0x1790 [ 712.762776][T16356] ? __pfx___report_bug+0x10/0x10 [ 712.767784][T16356] ? lockdep_hardirqs_on+0x78/0x100 [ 712.773022][T16356] ? irqentry_exit+0x24d/0xa00 [ 712.777774][T16356] ? smb2_add_credits+0x1213/0x1790 [ 712.782966][T16356] ? smb2_add_credits+0x1213/0x1790 [ 712.788153][T16356] report_bug+0xb2/0x220 [ 712.792377][T16356] ? smb2_add_credits+0x1213/0x1790 [ 712.797569][T16356] handle_bug+0x16a/0x2a0 [ 712.801886][T16356] exc_invalid_op+0x17/0x50 [ 712.806376][T16356] asm_exc_invalid_op+0x1a/0x20 [ 712.811209][T16356] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 712.817009][T16356] Code: c6 e8 21 ea b5 fe 84 db 0f 85 0a fb ff ff e8 04 f0 b5 fe 48 8d 3d ad 9f d5 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 ee ef b5 fe 90 <0f> 0b 90 0f b6 05 87 d6 b5 0d 31 ff 89 c6 88 44 24 28 e8 e6 e9 b5 [ 712.836598][T16356] RSP: 0000:ffffc900032772d8 EFLAGS: 00010287 [ 712.842652][T16356] RAX: 0000000000035aed RBX: ffff888067ad2300 RCX: ffffc9001bdf1000 [ 712.850615][T16356] RDX: 0000000000080000 RSI: ffffffff83547052 RDI: ffff88807d504a80 [ 712.858572][T16356] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 712.866523][T16356] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90003277518 [ 712.874478][T16356] R13: 0000000000000200 R14: 0000000000000002 R15: ffff888067ad2000 [ 712.882458][T16356] ? smb2_add_credits+0x1212/0x1790 [ 712.887666][T16356] ? smb2_add_credits+0x1212/0x1790 [ 712.892852][T16356] ? compound_send_recv+0xed0/0x2a10 [ 712.898130][T16356] compound_send_recv+0x1030/0x2a10 [ 712.903325][T16356] ? irqentry_exit+0x24d/0xa00 [ 712.908072][T16356] ? __pfx_compound_send_recv+0x10/0x10 [ 712.913612][T16356] ? lock_acquire+0x1b9/0x370 [ 712.918281][T16356] ? rcu_is_watching+0x12/0xc0 [ 712.923031][T16356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.928921][T16356] ? __mutex_unlock_slowpath+0x35d/0x930 [ 712.934537][T16356] ? cifs_strtoUTF16+0x283/0x3e0 [ 712.939462][T16356] ? find_held_lock+0x2b/0x80 [ 712.944132][T16356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.950114][T16356] cifs_send_recv+0x43/0x60 [ 712.954614][T16356] SMB2_negotiate+0x15c4/0x5380 [ 712.959461][T16356] ? __pfx_SMB2_negotiate+0x10/0x10 [ 712.964660][T16356] ? smb2_negotiate+0x57/0x80 [ 712.969324][T16356] ? smb2_negotiate+0x57/0x80 [ 712.973990][T16356] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.979181][T16356] ? cifs_negotiate_protocol+0x268/0x4c0 [ 712.984795][T16356] cifs_negotiate_protocol+0x268/0x4c0 [ 712.990245][T16356] cifs_get_smb_ses+0xfc9/0x2170 [ 712.995169][T16356] cifs_mount_get_session+0xf8/0x460 [ 713.000447][T16356] dfs_mount_share+0x200/0x1e20 [ 713.005287][T16356] ? do_raw_spin_lock+0x128/0x260 [ 713.010298][T16356] ? __pfx_dfs_mount_share+0x10/0x10 [ 713.015570][T16356] ? __lock_acquire+0x49f/0x1a40 [ 713.020490][T16356] ? lockdep_hardirqs_on+0x78/0x100 [ 713.025675][T16356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.031461][T16356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 713.037255][T16356] cifs_mount+0xc4/0xdb0 [ 713.041481][T16356] ? find_held_lock+0x2b/0x80 [ 713.046150][T16356] ? find_nls+0x125/0x170 [ 713.050464][T16356] ? find_nls+0x125/0x170 [ 713.054778][T16356] ? __pfx_cifs_mount+0x10/0x10 [ 713.059610][T16356] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.064802][T16356] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 713.069986][T16356] cifs_smb3_do_mount+0x2c0/0x1b20 [ 713.075083][T16356] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 713.081324][T16356] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 713.086863][T16356] smb3_get_tree+0x1fd/0x440 [ 713.091446][T16356] vfs_get_tree+0x92/0x320 [ 713.095852][T16356] vfs_cmd_create+0xd7/0x2a0 [ 713.100432][T16356] __do_sys_fsconfig+0x55a/0xcb0 [ 713.105373][T16356] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 713.110829][T16356] do_syscall_64+0x115/0x870 [ 713.115402][T16356] ? clear_bhb_loop+0x40/0x90 [ 713.120065][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.125941][T16356] RIP: 0033:0x7f2d5519de99 [ 713.130338][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.149929][T16356] RSP: 002b:00007f2d55f98028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 713.158326][T16356] RAX: ffffffffffffffda RBX: 00007f2d55425fa0 RCX: 00007f2d5519de99 [ 713.166278][T16356] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 713.174230][T16356] RBP: 00007f2d55233eaf R08: 0000000000000000 R09: 0000000000000000 [ 713.182185][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.190138][T16356] R13: 00007f2d55426038 R14: 00007f2d55425fa0 R15: 00007ffe9a2298a8 [ 713.198102][T16356] [ 713.201307][T16356] Kernel Offset: disabled [ 713.205609][T16356] Rebooting in 86400 seconds..