last executing test programs: 22m36.31552751s ago: executing program 32 (id=142): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x0, 0x130, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'bond_slave_0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}, {{@ip={@private, @local, 0x0, 0x0, 'vcan0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x4}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'bridge_slave_0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) getsockname$packet(r5, 0x0, 0x0) 21m38.747560843s ago: executing program 33 (id=220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x20, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 19m33.210722041s ago: executing program 34 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 19m25.159054867s ago: executing program 35 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x20, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) 18m36.292241656s ago: executing program 1 (id=482): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r4, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(r0) 18m34.993008407s ago: executing program 1 (id=483): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) 18m33.34043034s ago: executing program 1 (id=487): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'pcmda12\x00', [0x181f, 0x401, 0xe2, 0x5, 0x2, 0x80000001, 0x1007, 0x800101, 0x1002, 0xffffffff, 0x200, 0x4007, 0x10000007, 0x1, 0x1, 0x6, 0x8, 0x40, 0x40001, 0x9, 0x10c, 0x40004002, 0x2, 0x2000000e, 0x5, 0x1, 0xb0c0, 0xe, 0x400000ff, 0x400002, 0x4000004]}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) r6 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r6, &(0x7f0000000180), 0x0, 0x100004) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendfile(r7, r6, 0x0, 0xd39a) 18m31.944502141s ago: executing program 1 (id=489): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') r0 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0) mknodat$null(0xffffffffffffffff, 0x0, 0x4c41, 0x103) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 18m28.466974921s ago: executing program 1 (id=493): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) close(r0) 18m14.761045116s ago: executing program 1 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x20, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 17m59.353021221s ago: executing program 36 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x20, 0x42, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x151}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) 10m43.715562287s ago: executing program 2 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) 10m43.430600785s ago: executing program 2 (id=1228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 10m42.164938429s ago: executing program 2 (id=1235): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000480)={0x1d, r1}, 0x10) 10m41.11266703s ago: executing program 2 (id=1239): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44040) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) 10m39.859993648s ago: executing program 2 (id=1245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d3c99b", 0x3}], 0x1}}, {{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x1, @empty, 'netdevsim0\x00'}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)='pz', 0x2}], 0x1}}], 0x2, 0x80) 10m38.65041375s ago: executing program 2 (id=1249): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB="125a4e481652c1d01e3dd9feef4e923196688563b84756b061da89bccf1b2f71bca89280b4316c9de0985013a655b4cab35a6f336e3b2214bc11bad0", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() r4 = epoll_create1(0x80000) socket(0x29, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) 10m23.423743254s ago: executing program 37 (id=1249): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB="125a4e481652c1d01e3dd9feef4e923196688563b84756b061da89bccf1b2f71bca89280b4316c9de0985013a655b4cab35a6f336e3b2214bc11bad0", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() r4 = epoll_create1(0x80000) socket(0x29, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) 9m47.085371465s ago: executing program 9 (id=1397): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 9m42.620230148s ago: executing program 9 (id=1409): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, 0x0) 9m39.256888969s ago: executing program 9 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 9m36.730183549s ago: executing program 9 (id=1420): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) r2 = syz_open_procfs(r0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) lseek(r2, 0xf5, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44e1bd6bd31c9044aea8cebe0c43000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000c4080000e4514000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)='\x00', 0x0) request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000600)='net/udite\x00\x00\x00', r5) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000500)='./file1\x00', r6, 0x4000, r7}, 0x18) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000003a00)) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/197, 0x0, 0x70000}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) fsync(r4) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf0ffffffffff0000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xd0}}, 0x44800) 9m35.437912338s ago: executing program 9 (id=1428): r0 = socket(0x1d, 0x2, 0x6) unshare(0x2a020400) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 9m34.592796669s ago: executing program 9 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 9m19.308448688s ago: executing program 38 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1m52.970331141s ago: executing program 4 (id=2655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 1m51.559042472s ago: executing program 4 (id=2657): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000001c0)=0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m49.734057371s ago: executing program 4 (id=2661): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x11) 1m48.069247484s ago: executing program 4 (id=2664): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000001c0)=0x6e) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m46.060115567s ago: executing program 4 (id=2668): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) shutdown(r4, 0x2) 1m43.329603424s ago: executing program 4 (id=2672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) timer_create(0x2, 0x0, &(0x7f0000000480)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) 1m27.939303091s ago: executing program 39 (id=2672): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) timer_create(0x2, 0x0, &(0x7f0000000480)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) 54.728898073s ago: executing program 8 (id=2786): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000000) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="c8ddceb6c72a1cf16364a34dc3468218045f71a837e0052912da02add7aaa0551cd873aa4e46ab448eb2880ce95d06003e3901d1590340dc6732141bb3516672f0d9f921ec75b81bd8164688464f50b9e0a09622d38ad1681201af18afa4ba008fec8e6c10998035403fd30b44ebbf8457f28c224bcd43a0b1b9279e09174dc55d", 0x81}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) 53.404033913s ago: executing program 8 (id=2787): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, 0x0, 0x0, 0x6, 0x1) 50.352738272s ago: executing program 8 (id=2795): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0xe, 0x3}, {0xb, 0x2}, {0xc, 0x3}, {0x0, 0x4}]}, @float={0x5, 0x0, 0x0, 0x10, 0xe}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000580)=""/164, 0x68, 0xa4, 0x1, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 42.883512973s ago: executing program 8 (id=2812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, 0x0, 0x0) 41.874611363s ago: executing program 0 (id=2813): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) pipe2$watch_queue(0x0, 0x80) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.817850763s ago: executing program 8 (id=2816): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006c00)=@delchain={0x60, 0x65, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x1}, {0x5, 0xa}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xe, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xd6, 0x3}}, @TCA_RATE={0x6, 0x5, {0xd6, 0xfd}}]}, 0x60}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3, 0x1, {0x2, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x8, 0xd215) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) close_range(r6, 0xffffffffffffffff, 0x0) 37.677921588s ago: executing program 0 (id=2818): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9000c0008"], 0x11) 34.138205197s ago: executing program 0 (id=2823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 32.317281975s ago: executing program 0 (id=2826): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000240)={'syzkaller0\x00', @random="2b0100004ec6"}) 31.412339523s ago: executing program 8 (id=2831): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r4, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.875272743s ago: executing program 0 (id=2836): syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) userfaultfd(0x80001) r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 29.489257673s ago: executing program 0 (id=2839): unshare(0x600) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_io_uring_setup(0x1b31, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 19.516406288s ago: executing program 3 (id=2858): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 18.872197735s ago: executing program 3 (id=2861): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.217134789s ago: executing program 3 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) 16.233748765s ago: executing program 40 (id=2831): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r4, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678", 0x85, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.99122446s ago: executing program 41 (id=2839): unshare(0x600) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x80000ffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_io_uring_setup(0x1b31, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) 11.159872674s ago: executing program 6 (id=2874): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x141, 0x1, 0x3}, 0x10) 9.541463997s ago: executing program 3 (id=2877): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = msgget(0x1, 0x244) msgctl$MSG_STAT(r4, 0xb, 0x0) 9.340310479s ago: executing program 6 (id=2878): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 9.078617477s ago: executing program 6 (id=2880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 7.241174263s ago: executing program 5 (id=2882): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0xe, 0x3}, {0xb, 0x2}, {0xc, 0x3}, {0x0, 0x4}]}, @float={0x5, 0x0, 0x0, 0x10, 0xe}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000580)=""/164, 0x68, 0xa4, 0x1, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 6.670052751s ago: executing program 6 (id=2884): syz_usb_connect(0x0, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010203010902e0000106e370130904dc02000e0100010a2401ff0729000201020b240406bea33c2d2031e80b240304020205000a0010092403040404010503052406000105240004000d240f0109000000810000020606241a04003c0c241b070008000b1000"], 0x0) 5.661981619s ago: executing program 7 (id=2885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000faffffff0000000000003e7c8500000005000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000000)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.579641553s ago: executing program 5 (id=2886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) 4.941755375s ago: executing program 7 (id=2887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xe1ee, 0x80, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x7f00, 0x46, 0x0, 0x0) 4.351741399s ago: executing program 5 (id=2888): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x6, 0x1, 0x4c}, &(0x7f0000000100)=0x10) 3.909060326s ago: executing program 5 (id=2889): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x6, 0x10100, 0x80, 0x301}, &(0x7f0000000400), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, &(0x7f0000000000), 0x0) 3.744227044s ago: executing program 6 (id=2890): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 3.728998093s ago: executing program 7 (id=2891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 3.572825291s ago: executing program 5 (id=2892): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x88000}], 0x4000000000001c0, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.541595523s ago: executing program 6 (id=2893): syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x8193, 0x0, 0x2, 0x1000034f}, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c2400", @ANYRES8=r0, @ANYBLOB="05"], 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.798062035s ago: executing program 7 (id=2894): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044044}, 0x4000000) 1.588281124s ago: executing program 3 (id=2895): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000400)={0x43c, @remote}) 1.560747402s ago: executing program 5 (id=2896): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010006418e01400004fcff", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x29d, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0xfff, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 764.907302ms ago: executing program 7 (id=2897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000faffffff0000000000003e7c8500000005000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000000)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 478.00019ms ago: executing program 3 (id=2898): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r4 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 7 (id=2899): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r0, r0, 0x0, 0x4800000009) kernel console output (not intermixed with test programs): er=0 [ 1202.283254][T15253] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1202.316814][T10763] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1202.648253][T10763] usb 6-1: USB disconnect, device number 4 [ 1202.754532][ T6010] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1203.045477][ T6010] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.056012][ T6010] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1203.067065][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.093505][ T6010] usb 9-1: config 0 descriptor?? [ 1203.113381][ T6010] pwc: Askey VC010 type 2 USB webcam detected. [ 1203.256527][T15279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.591376][ T6010] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1203.610919][ T6010] pwc: recv_control_msg error -32 req 02 val 2700 [ 1203.917069][ T6010] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1204.263552][ T6010] pwc: recv_control_msg error -32 req 04 val 1000 [ 1204.271608][ T6010] pwc: recv_control_msg error -32 req 04 val 1300 [ 1204.279834][ T6010] pwc: recv_control_msg error -32 req 04 val 1400 [ 1204.296539][ T6010] pwc: recv_control_msg error -32 req 02 val 2000 [ 1204.318966][ T6010] pwc: recv_control_msg error -71 req 02 val 2100 [ 1204.374588][ T6010] pwc: recv_control_msg error -71 req 04 val 1500 [ 1204.406015][ T6010] pwc: recv_control_msg error -71 req 02 val 2500 [ 1204.454272][ T6010] pwc: recv_control_msg error -71 req 02 val 2400 [ 1204.488474][ T6010] pwc: recv_control_msg error -71 req 02 val 2600 [ 1204.519355][ T6010] pwc: recv_control_msg error -71 req 02 val 2900 [ 1204.539676][ T6010] pwc: recv_control_msg error -71 req 02 val 2800 [ 1204.560142][ T6010] pwc: recv_control_msg error -71 req 04 val 1100 [ 1204.582653][ T6010] pwc: recv_control_msg error -71 req 04 val 1200 [ 1204.646172][ T6010] pwc: Registered as video103. [ 1204.669560][ T6010] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input29 [ 1204.723372][ T6010] usb 9-1: USB disconnect, device number 18 [ 1204.872064][ T8289] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1204.882084][T10763] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1205.070495][T10763] usb 8-1: Using ep0 maxpacket: 8 [ 1205.090855][T10763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1205.127930][T10763] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1205.172863][T10763] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1205.206261][T10763] usb 8-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1205.261987][T10763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.281075][T10763] usb 8-1: Product: syz [ 1205.285491][T10763] usb 8-1: Manufacturer: syz [ 1205.290143][T10763] usb 8-1: SerialNumber: syz [ 1206.039537][ T8289] usb 5-1: Using ep0 maxpacket: 16 [ 1206.070001][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.082460][ T8289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1206.093855][ T8289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1206.113647][T10763] ti_usb_3410_5052 8-1:1.0: TI USB 3410 1 port adapter converter detected [ 1206.137934][ T8289] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1206.179916][ T8289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.406498][ T8289] usb 5-1: config 0 descriptor?? [ 1206.647521][T15303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2005'. [ 1207.796422][ T8289] usbhid 5-1:0.0: can't add hid device: -71 [ 1208.085220][ T8289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1208.118009][ T8289] usb 5-1: USB disconnect, device number 23 [ 1208.786526][T10763] usb 8-1: USB disconnect, device number 25 [ 1209.056667][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 1209.273823][ T974] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1209.539159][ T30] audit: type=1326 audit(1773534967.739:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1209.828345][ T30] audit: type=1326 audit(1773534967.739:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1209.853114][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 1209.858871][ T30] audit: type=1326 audit(1773534967.739:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1209.885350][ T974] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1209.902047][ T974] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1210.090449][ T30] audit: type=1326 audit(1773534967.739:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.151981][ T974] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1210.160426][ T30] audit: type=1326 audit(1773534967.739:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.243087][ T974] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1210.265376][ T30] audit: type=1326 audit(1773534967.739:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.336040][ T974] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1210.345194][ T30] audit: type=1326 audit(1773534967.739:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.434043][ T974] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1210.478839][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.519546][ T30] audit: type=1326 audit(1773534967.739:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.550467][T15332] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1210.559548][T15332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1210.623360][T15332] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1210.634184][ T30] audit: type=1326 audit(1773534967.739:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.711143][T15332] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1210.728821][T15332] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1210.747864][ T30] audit: type=1326 audit(1773534967.739:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15310 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1210.813381][T15332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1210.819435][T15332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1210.901987][T15332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1210.922425][T15332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1211.034172][ T974] usb 5-1: usb_control_msg returned -32 [ 1211.039837][ T974] usbtmc 5-1:16.0: can't read capabilities [ 1211.191672][ T8289] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1211.363957][ T8289] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.224222][ T8289] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1212.235392][ T8289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.274976][T10763] usb 5-1: USB disconnect, device number 24 [ 1212.557919][ T8289] usb 8-1: config 0 descriptor?? [ 1212.564681][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1212.583271][ T8289] pwc: Askey VC010 type 2 USB webcam detected. [ 1212.722102][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 1212.811733][T15360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.892007][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1212.962368][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1212.979260][ T8289] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1212.988999][ T8289] pwc: recv_control_msg error -32 req 02 val 2700 [ 1212.997869][ T8289] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1213.011428][ T8289] pwc: recv_control_msg error -32 req 04 val 1000 [ 1213.092697][ T8289] pwc: recv_control_msg error -32 req 04 val 1300 [ 1213.181845][ T8289] pwc: recv_control_msg error -32 req 04 val 1400 [ 1213.209664][ T8289] pwc: recv_control_msg error -32 req 02 val 2000 [ 1213.237605][ T8289] pwc: recv_control_msg error -71 req 02 val 2100 [ 1213.264134][ T8289] pwc: recv_control_msg error -71 req 04 val 1500 [ 1213.284297][T10763] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1213.321947][ T8289] pwc: recv_control_msg error -71 req 02 val 2500 [ 1213.340214][ T8289] pwc: recv_control_msg error -71 req 02 val 2400 [ 1213.468821][T10763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.481678][T10763] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1213.535271][T10763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.691116][T10763] usb 6-1: config 0 descriptor?? [ 1213.946468][T10763] dvb-usb: found a 'TeVii S662' in warm state. [ 1213.989406][T10763] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1214.021571][T10763] dvb-usb: bulk message failed: -22 (2/0) [ 1214.073821][T10763] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1214.176044][ T8289] pwc: recv_control_msg error -71 req 02 val 2600 [ 1214.188120][ T8289] pwc: recv_control_msg error -71 req 02 val 2900 [ 1214.212274][ T8289] pwc: recv_control_msg error -71 req 02 val 2800 [ 1214.219363][ T8289] pwc: recv_control_msg error -71 req 04 val 1100 [ 1214.219911][T10763] dvb-usb: TeVii S662 error while loading driver (-19) [ 1214.251981][ T8289] pwc: recv_control_msg error -71 req 04 val 1200 [ 1214.266105][ T8289] pwc: Registered as video103. [ 1214.273891][T10763] usb 6-1: USB disconnect, device number 5 [ 1214.312157][ T8289] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 1214.474646][ T8289] usb 8-1: USB disconnect, device number 26 [ 1214.572649][ T5842] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1214.652357][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1214.782875][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1214.802337][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 1214.962320][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1214.992553][ T5842] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1215.016820][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.042756][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1215.068642][ T5842] usb 4-1: Product: syz [ 1215.075107][ T5842] usb 4-1: Manufacturer: syz [ 1215.079971][ T5842] usb 4-1: SerialNumber: syz [ 1215.130954][ T5842] usb 4-1: config 0 descriptor?? [ 1215.193273][ T5842] as10x_usb: device has been detected [ 1215.199558][ T5842] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1215.287422][ T5842] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1215.353856][ T5842] as10x_usb: error during firmware upload part1 [ 1215.367406][T15375] random: crng reseeded on system resumption [ 1215.409395][ T5842] Registered device Sky IT Digital Key (green led) [ 1215.578859][ T6010] usb 4-1: USB disconnect, device number 39 [ 1215.653217][ T6010] Unregistered device Sky IT Digital Key (green led) [ 1215.662890][ T6010] as10x_usb: device has been disconnected [ 1215.722759][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2035'. [ 1215.940440][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1215.940473][ T30] audit: type=1326 audit(1773534974.299:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.061306][ T30] audit: type=1326 audit(1773534974.299:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.328134][ T30] audit: type=1326 audit(1773534974.299:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.440529][ T30] audit: type=1326 audit(1773534974.299:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.490580][ T30] audit: type=1326 audit(1773534974.299:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.730781][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1216.745332][ T30] audit: type=1326 audit(1773534974.299:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.768088][ T30] audit: type=1326 audit(1773534974.299:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1216.792113][T15406] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2041'. [ 1216.805234][ T30] audit: type=1326 audit(1773534974.299:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1217.228431][ T30] audit: type=1326 audit(1773534974.299:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1217.409605][ T30] audit: type=1326 audit(1773534974.299:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15382 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c419c799 code=0x7ffc0000 [ 1218.603694][ T5842] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1218.653269][T14104] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1218.764657][ T5842] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.775056][ T5842] usb 9-1: config 0 has no interface number 0 [ 1218.814994][T14104] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.833362][ T5842] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.851626][T14104] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1218.883240][T14104] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.901683][ T5842] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.006874][T14104] usb 8-1: config 0 descriptor?? [ 1219.015375][ T5842] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1219.040493][T14104] pwc: Askey VC010 type 2 USB webcam detected. [ 1219.056637][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.407258][ T5842] usb 9-1: config 0 descriptor?? [ 1219.583246][T14104] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1219.594607][T14104] pwc: recv_control_msg error -32 req 02 val 2700 [ 1219.617778][T14104] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1219.662139][T14104] pwc: recv_control_msg error -32 req 04 val 1000 [ 1219.693299][T14104] pwc: recv_control_msg error -32 req 04 val 1300 [ 1219.706183][T14104] pwc: recv_control_msg error -32 req 04 val 1400 [ 1219.722557][T14104] pwc: recv_control_msg error -32 req 02 val 2000 [ 1219.746131][T14104] pwc: recv_control_msg error -71 req 02 val 2100 [ 1219.778019][T14104] pwc: recv_control_msg error -71 req 04 val 1500 [ 1219.805844][T14104] pwc: recv_control_msg error -71 req 02 val 2500 [ 1219.821993][T14104] pwc: recv_control_msg error -71 req 02 val 2400 [ 1219.829103][T14104] pwc: recv_control_msg error -71 req 02 val 2600 [ 1219.845795][T14104] pwc: recv_control_msg error -71 req 02 val 2900 [ 1220.133091][ T5842] usbhid 9-1:0.1: can't add hid device: -71 [ 1220.149250][T14104] pwc: recv_control_msg error -71 req 02 val 2800 [ 1220.161165][ T5842] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1220.169627][T14104] pwc: recv_control_msg error -71 req 04 val 1100 [ 1220.188861][ T5842] usb 9-1: USB disconnect, device number 19 [ 1220.203430][T14104] pwc: recv_control_msg error -71 req 04 val 1200 [ 1220.255479][T14104] pwc: Registered as video103. [ 1220.305249][T14104] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input31 [ 1220.407264][T14104] usb 8-1: USB disconnect, device number 27 [ 1221.452508][T15439] syz.7.2053 (15439): drop_caches: 2 [ 1223.151516][T14104] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1223.427189][T15453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.557477][T14104] usb 5-1: Using ep0 maxpacket: 16 [ 1223.648901][T14104] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1223.680520][T14104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.688594][T14104] usb 5-1: Product: syz [ 1224.012619][T15456] netlink: 17780 bytes leftover after parsing attributes in process `syz.8.2058'. [ 1224.152095][T14104] usb 5-1: Manufacturer: syz [ 1224.156775][T14104] usb 5-1: SerialNumber: syz [ 1224.166775][T14104] usb 5-1: config 0 descriptor?? [ 1224.223314][T14104] as10x_usb: device has been detected [ 1224.229650][T14104] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1224.304751][T14104] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1224.347231][T14104] as10x_usb: error during firmware upload part1 [ 1224.385919][T15449] random: crng reseeded on system resumption [ 1224.396594][T14104] Registered device Sky IT Digital Key (green led) [ 1224.522335][T14104] usb 5-1: USB disconnect, device number 25 [ 1224.597175][T14104] Unregistered device Sky IT Digital Key (green led) [ 1224.795285][T14104] as10x_usb: device has been disconnected [ 1227.703361][T15478] syz.6.2066 (15478): drop_caches: 2 [ 1227.809618][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1227.852900][T15483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 1228.101987][T14104] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1228.288406][T14104] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.336415][T14104] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.371934][T14104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.415361][T14104] usb 6-1: config 0 descriptor?? [ 1228.695087][T14104] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.636288][T14104] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1229.678358][T14104] pwc: recv_control_msg error -32 req 02 val 2700 [ 1229.703432][T14104] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1229.729161][T14104] pwc: recv_control_msg error -32 req 04 val 1000 [ 1229.747108][T14104] pwc: recv_control_msg error -32 req 04 val 1300 [ 1229.781835][T14104] pwc: recv_control_msg error -32 req 04 val 1400 [ 1229.972018][ T974] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1229.999546][T14104] pwc: recv_control_msg error -71 req 02 val 2100 [ 1230.048933][T14104] pwc: recv_control_msg error -71 req 04 val 1500 [ 1230.069912][T14104] pwc: recv_control_msg error -71 req 02 val 2500 [ 1230.177087][T14104] pwc: recv_control_msg error -71 req 02 val 2400 [ 1230.186283][T14104] pwc: recv_control_msg error -71 req 02 val 2600 [ 1230.194135][ T974] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1230.203249][ T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.215721][ T974] usb 8-1: Product: syz [ 1230.227299][ T974] usb 8-1: Manufacturer: syz [ 1230.234039][ T974] usb 8-1: SerialNumber: syz [ 1230.234242][T14104] pwc: recv_control_msg error -71 req 02 val 2900 [ 1230.253168][T14104] pwc: recv_control_msg error -71 req 02 val 2800 [ 1230.287029][T14104] pwc: recv_control_msg error -71 req 04 val 1100 [ 1230.298820][T14104] pwc: recv_control_msg error -71 req 04 val 1200 [ 1230.344049][T14104] pwc: Registered as video103. [ 1230.355681][T14104] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 1231.594267][T15518] syz.8.2081 (15518): drop_caches: 2 [ 1231.723318][T14104] usb 6-1: USB disconnect, device number 6 [ 1231.918051][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1231.984262][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1233.291616][T15530] syz.6.2068 (15530): drop_caches: 2 [ 1234.618772][T15533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1234.682464][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1234.722100][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1234.739807][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1234.786171][ T974] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1234.863694][ T974] usb 8-1: USB disconnect, device number 28 [ 1238.103041][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.109681][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.946387][T15572] syz.8.2096 (15572): drop_caches: 2 [ 1239.820509][T10763] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1240.312600][T10763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.371038][T10763] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1240.410704][T10763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.459503][T10763] usb 4-1: config 0 descriptor?? [ 1240.502553][T10763] pwc: Askey VC010 type 2 USB webcam detected. [ 1240.908439][T10763] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1240.936712][T10763] pwc: recv_control_msg error -32 req 02 val 2700 [ 1240.974647][T10763] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1241.012156][T10763] pwc: recv_control_msg error -32 req 04 val 1000 [ 1241.045405][T10763] pwc: recv_control_msg error -32 req 04 val 1300 [ 1241.094416][T10763] pwc: recv_control_msg error -32 req 04 val 1400 [ 1241.332212][T10763] pwc: recv_control_msg error -71 req 02 val 2100 [ 1241.367192][T10763] pwc: recv_control_msg error -71 req 04 val 1500 [ 1241.404860][T10763] pwc: recv_control_msg error -71 req 02 val 2500 [ 1241.426641][T10763] pwc: recv_control_msg error -71 req 02 val 2400 [ 1241.450773][T15585] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2102'. [ 1241.470178][T10763] pwc: recv_control_msg error -71 req 02 val 2600 [ 1241.488333][T10763] pwc: recv_control_msg error -71 req 02 val 2900 [ 1241.497622][T15585] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2102'. [ 1241.523913][T10763] pwc: recv_control_msg error -71 req 02 val 2800 [ 1241.560545][T10763] pwc: recv_control_msg error -71 req 04 val 1100 [ 1241.602343][T10763] pwc: recv_control_msg error -71 req 04 val 1200 [ 1241.671775][T10763] pwc: Registered as video103. [ 1241.915355][T10763] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 1242.046357][T10763] usb 4-1: USB disconnect, device number 40 [ 1242.357537][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 1242.440612][ T6010] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1242.666674][T15613] syz.7.2110 (15613): drop_caches: 2 [ 1243.556435][ T6010] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.937740][ T6010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1243.952551][ T6010] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1244.041395][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1244.122375][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 1244.142238][ T30] audit: type=1326 audit(1773535002.359:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.164907][T10763] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1244.173048][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1244.200110][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1244.236873][ T6010] usb 5-1: SerialNumber: syz [ 1244.247172][ T30] audit: type=1326 audit(1773535002.359:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.286036][ T30] audit: type=1326 audit(1773535002.359:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.358155][T10763] usb 7-1: Using ep0 maxpacket: 8 [ 1244.368650][ T30] audit: type=1326 audit(1773535002.359:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.400659][T10763] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1244.414535][T10763] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1244.460469][T10763] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1244.479101][ T30] audit: type=1326 audit(1773535002.359:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.522236][ T6010] usb 5-1: 0:2 : does not exist [ 1244.558513][T10763] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1244.593937][ T30] audit: type=1326 audit(1773535002.359:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.630487][T10763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.639179][T10763] usb 7-1: Product: syz [ 1244.677730][ T30] audit: type=1326 audit(1773535002.359:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.710505][T10763] usb 7-1: Manufacturer: syz [ 1244.715177][T10763] usb 7-1: SerialNumber: syz [ 1244.756908][ T6010] usb 5-1: USB disconnect, device number 26 [ 1244.763178][ T30] audit: type=1326 audit(1773535002.359:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.763259][ T30] audit: type=1326 audit(1773535002.359:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15599 comm="syz.3.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c979c799 code=0x7ffc0000 [ 1244.829074][T10763] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected [ 1245.372336][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2109'. [ 1245.632214][ T8289] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1246.151953][ T8289] usb 6-1: Using ep0 maxpacket: 16 [ 1246.172284][ T8289] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1246.231947][ T8289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1246.262389][ T8289] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1246.266277][T15633] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2117'. [ 1246.276754][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.317111][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2117'. [ 1246.331066][ T8289] usb 6-1: Product: syz [ 1246.339620][ T8289] usb 6-1: Manufacturer: syz [ 1246.357160][ T8289] usb 6-1: SerialNumber: syz [ 1246.391019][ T8289] usb 6-1: config 0 descriptor?? [ 1246.407951][ T8289] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1246.419132][ T8289] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1246.534868][ T6010] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1246.842164][ T24] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1246.906894][T15643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.914374][ T6010] usb 4-1: Using ep0 maxpacket: 8 [ 1246.922340][ T6010] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.933230][ T6010] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.946474][ T6010] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1246.955773][ T6010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.092547][ T8289] em28xx 6-1:0.0: unknown em28xx chip ID (223) [ 1247.193301][T10817] usb 7-1: USB disconnect, device number 24 [ 1247.412150][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.492151][ T8289] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1247.510291][ T24] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1247.604388][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.716598][ T6010] usbtmc 4-1:16.0: bulk endpoints not found [ 1247.768106][ T8289] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1247.836966][ T24] usb 9-1: config 0 descriptor?? [ 1247.878786][ T8289] em28xx 6-1:0.0: No AC97 audio processor [ 1247.938300][ T8289] usb 6-1: USB disconnect, device number 7 [ 1247.950230][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1247.961912][ T8289] em28xx 6-1:0.0: Disconnecting em28xx [ 1247.974712][ T8289] em28xx 6-1:0.0: Freeing device [ 1248.455553][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1248.471006][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1248.500747][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1248.508101][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1248.537754][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1249.162229][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1249.387730][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 1249.397958][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1249.407679][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1249.417822][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1249.432310][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1249.468997][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1249.478879][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1249.488443][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1249.557334][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1249.573626][ T24] pwc: Registered as video103. [ 1249.603969][T10763] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1249.676435][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 1249.798248][T10763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.850518][T10763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.855951][ T24] usb 9-1: USB disconnect, device number 20 [ 1249.887148][ T30] audit: type=1326 audit(1773535008.249:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1249.937426][ T974] usb 4-1: USB disconnect, device number 41 [ 1249.965220][T10763] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1250.008435][T10763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1250.046652][ T30] audit: type=1326 audit(1773535008.249:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.067303][T10763] usb 5-1: SerialNumber: syz [ 1250.138990][T15689] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2132'. [ 1250.222122][ T30] audit: type=1326 audit(1773535008.369:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.257905][T15689] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2132'. [ 1250.334479][ T30] audit: type=1326 audit(1773535008.379:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.419355][T10763] usb 5-1: 0:2 : does not exist [ 1250.423768][ T30] audit: type=1326 audit(1773535008.379:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.448489][ T30] audit: type=1326 audit(1773535008.379:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.501866][ T30] audit: type=1326 audit(1773535008.379:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15668 comm="syz.7.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad439c799 code=0x7ffc0000 [ 1250.766419][T15696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.060817][T10763] usb 5-1: USB disconnect, device number 27 [ 1251.212209][T15573] udevd[15573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.489719][ T6010] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1252.480725][ T6010] usb 7-1: Using ep0 maxpacket: 8 [ 1252.503434][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1252.536113][ T6010] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1252.579880][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1252.623703][ T6010] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1252.642966][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.078042][ T6010] usb 7-1: Product: syz [ 1254.431594][ T6010] usb 7-1: Manufacturer: syz [ 1254.436305][ T6010] usb 7-1: SerialNumber: syz [ 1254.615408][ T6010] usb 7-1: can't set config #1, error -71 [ 1254.646912][ T6010] usb 7-1: USB disconnect, device number 25 [ 1254.651795][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1254.832720][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1254.856722][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1254.890279][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1254.939903][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1254.968097][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.126906][T15734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.267274][ T24] usb 6-1: Product: syz [ 1255.274670][ T24] usb 6-1: Manufacturer: syz [ 1255.279317][ T24] usb 6-1: SerialNumber: syz [ 1255.292065][ T24] usb 6-1: config 0 descriptor?? [ 1255.312981][T15740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1255.373996][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1255.492417][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1255.568249][T15740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1255.852795][ T24] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1255.862576][ T24] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1255.879472][ T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1255.910864][ T24] em28xx 6-1:0.0: No AC97 audio processor [ 1255.976356][ T24] usb 6-1: USB disconnect, device number 8 [ 1256.027562][ T24] em28xx 6-1:0.0: Disconnecting em28xx [ 1256.057239][ T24] em28xx 6-1:0.0: Freeing device [ 1256.104324][ T8289] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1257.253924][ T8289] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.265629][ T8289] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1257.283270][ T8289] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1257.294676][ T8289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1257.304853][ T8289] usb 9-1: SerialNumber: syz [ 1257.663663][ T8289] usb 9-1: 0:2 : does not exist [ 1258.422344][ T8289] usb 9-1: USB disconnect, device number 21 [ 1258.466018][T15771] netlink: 17780 bytes leftover after parsing attributes in process `syz.7.2157'. [ 1258.487763][T14104] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1258.733438][T15573] udevd[15573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1258.811550][T14104] usb 4-1: Using ep0 maxpacket: 8 [ 1258.825159][T14104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1258.872669][T14104] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1258.915793][T14104] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1258.939742][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2161'. [ 1259.781739][T14104] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1259.792269][T14104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.800261][T14104] usb 4-1: Product: syz [ 1259.807392][T14104] usb 4-1: Manufacturer: syz [ 1259.824083][T14104] usb 4-1: SerialNumber: syz [ 1259.855049][T14104] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 1260.148941][ T30] audit: type=1326 audit(1773535018.419:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1260.358711][ T30] audit: type=1326 audit(1773535018.419:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15773 comm="syz.6.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f61d9c799 code=0x7ffc0000 [ 1260.496253][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 1262.010632][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2165'. [ 1262.019673][T15796] IPv6: NLM_F_CREATE should be specified when creating new route [ 1263.082936][ T8289] usb 4-1: USB disconnect, device number 42 [ 1265.538782][ T6010] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1265.720588][ T6010] usb 4-1: Using ep0 maxpacket: 16 [ 1265.761133][ T6010] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1265.790480][ T6010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1265.837954][ T6010] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1265.876472][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.911516][ T6010] usb 4-1: Product: syz [ 1265.943128][ T6010] usb 4-1: Manufacturer: syz [ 1265.959032][ T6010] usb 4-1: SerialNumber: syz [ 1265.987682][ T6010] usb 4-1: config 0 descriptor?? [ 1266.021365][ T6010] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.065143][ T6010] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1266.532367][T15806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1266.539874][T15806] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1266.560725][T15806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1266.577835][T15806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1266.619289][ T6010] em28xx 4-1:0.0: unknown em28xx chip ID (223) [ 1266.819905][ T6010] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1267.032627][ T6010] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1267.067836][ T6010] em28xx 4-1:0.0: No AC97 audio processor [ 1267.161642][ T6010] usb 4-1: USB disconnect, device number 43 [ 1267.188120][ T6010] em28xx 4-1:0.0: Disconnecting em28xx [ 1267.206112][T15658] udevd[15658]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 1267.214234][ T6010] em28xx 4-1:0.0: Freeing device [ 1267.269441][T15658] udevd[15658]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 1267.371638][T14104] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1267.703472][T14104] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.729870][T14104] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1267.764561][T14104] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1267.789521][T14104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1267.817486][T14104] usb 6-1: SerialNumber: syz [ 1267.844146][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1268.923261][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 1268.932292][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1268.938470][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1269.271889][T15838] syz.8.2168 (15838): drop_caches: 2 [ 1269.466843][T14104] usb 6-1: 0:2 : does not exist [ 1270.009657][T14104] usb 6-1: USB disconnect, device number 9 [ 1270.106701][ T5826] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1270.156350][T15573] udevd[15573]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.389117][ T5826] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1270.539094][T15853] block nbd5: NBD_DISCONNECT [ 1270.574673][T15853] block nbd5: Disconnected due to user request. [ 1270.583349][T15853] block nbd5: shutting down sockets [ 1272.610471][T10817] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1273.650460][T10817] usb 4-1: Using ep0 maxpacket: 16 [ 1273.703192][T10817] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 1273.728773][T10817] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1273.748708][T15877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2192'. [ 1273.765796][T10817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.797851][T15877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2192'. [ 1274.020473][T10817] usb 4-1: config 0 has no interface number 0 [ 1274.071528][T10817] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1274.115632][T10817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.407087][T15884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.847286][T10817] usb 4-1: Product: syz [ 1274.853803][T10817] usb 4-1: Manufacturer: syz [ 1274.859259][T10817] usb 4-1: SerialNumber: syz [ 1274.868071][T10817] usb 4-1: config 0 descriptor?? [ 1274.878199][T10817] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1274.885741][T10817] uvcvideo 4-1:0.105: No valid video chain found. [ 1275.132609][T10817] usb 4-1: USB disconnect, device number 44 [ 1275.490817][T10817] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1276.608722][T10817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.624228][T10817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.639703][T10817] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1276.651334][T10817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1276.659385][T10817] usb 5-1: SerialNumber: syz [ 1277.041573][T10817] usb 5-1: 0:2 : does not exist [ 1277.089739][T10817] usb 5-1: USB disconnect, device number 28 [ 1277.206879][T15573] udevd[15573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.176500][T15927] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2209'. [ 1278.445570][T15932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.735564][T15927] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2209'. [ 1279.069378][T15934] netlink: 'syz.3.2207': attribute type 11 has an invalid length. [ 1279.083089][T15934] netlink: 'syz.3.2207': attribute type 4 has an invalid length. [ 1279.091254][T15934] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.2207'. [ 1282.345578][ T5826] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1283.195909][T15980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.642343][T15989] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2226'. [ 1284.652691][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.660205][T15989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.026014][T15995] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2228'. [ 1287.705256][T16022] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1287.711839][T16022] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1287.773701][T16022] vhci_hcd vhci_hcd.0: Device attached [ 1287.799520][T16026] vhci_hcd: connection closed [ 1288.005377][ T6405] vhci_hcd vhci_hcd.8: stop threads [ 1288.019546][ T6405] vhci_hcd vhci_hcd.8: release socket [ 1288.026419][ T6405] vhci_hcd vhci_hcd.8: disconnect device [ 1288.055746][T16034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.371995][ T8289] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1288.409406][T16042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2242'. [ 1289.411865][ T8289] usb 6-1: Using ep0 maxpacket: 16 [ 1289.427856][ T8289] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1289.438808][ T8289] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.621831][ T8289] usb 6-1: Product: syz [ 1289.626153][ T8289] usb 6-1: Manufacturer: syz [ 1289.646077][T16053] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 1289.646390][ T8289] usb 6-1: SerialNumber: syz [ 1289.719093][ T8289] usb 6-1: config 0 descriptor?? [ 1289.817640][ T8289] as10x_usb: device has been detected [ 1289.859636][ T8289] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1289.906764][ T8289] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1289.956729][ T8289] as10x_usb: error during firmware upload part1 [ 1289.972694][ T8289] Registered device Sky IT Digital Key (green led) [ 1290.019762][T16038] random: crng reseeded on system resumption [ 1290.102591][ T8289] usb 6-1: USB disconnect, device number 10 [ 1290.438781][ T8289] Unregistered device Sky IT Digital Key (green led) [ 1291.078825][ T8289] as10x_usb: device has been disconnected [ 1292.412519][T13797] Bluetooth: hci2: command 0x0406 tx timeout [ 1293.080183][T16094] netlink: 17780 bytes leftover after parsing attributes in process `syz.5.2255'. [ 1293.361965][T16095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.052123][T16099] syz.7.2260 (16099): drop_caches: 2 [ 1295.581397][T16109] usb usb8: usbfs: process 16109 (syz.4.2262) did not claim interface 0 before use [ 1295.632190][ T30] audit: type=1326 audit(1773535059.937:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1295.930011][ T30] audit: type=1326 audit(1773535059.937:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1296.044601][T16110] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1296.211513][ T30] audit: type=1326 audit(1773535060.047:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1296.300754][ T30] audit: type=1326 audit(1773535060.047:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1296.329873][T16113] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 1296.364760][T16110] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1296.396434][ T30] audit: type=1326 audit(1773535060.057:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1296.450451][T16110] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1296.751964][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 1297.410823][ T30] audit: type=1326 audit(1773535060.057:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1297.569115][ T30] audit: type=1326 audit(1773535060.057:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1297.660657][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2266'. [ 1297.729944][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2266'. [ 1297.742478][ T30] audit: type=1326 audit(1773535060.057:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1297.897692][ T30] audit: type=1326 audit(1773535060.057:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1298.079316][ T30] audit: type=1326 audit(1773535060.057:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16102 comm="syz.4.2262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc553f9c799 code=0x7ffc0000 [ 1298.365068][ T5808] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1298.574826][ T5808] usb 9-1: Using ep0 maxpacket: 16 [ 1298.623719][ T5808] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1298.642236][T13797] Bluetooth: hci5: command 0x1003 tx timeout [ 1298.648978][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1298.703620][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.793429][ T5808] usb 9-1: Product: syz [ 1298.797630][ T5808] usb 9-1: Manufacturer: syz [ 1298.851755][ T5808] usb 9-1: SerialNumber: syz [ 1298.895089][ T5808] usb 9-1: config 0 descriptor?? [ 1298.949623][ T5808] as10x_usb: device has been detected [ 1299.084375][ T5808] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1299.461019][T16122] random: crng reseeded on system resumption [ 1299.505421][ T5808] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1299.527053][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.535722][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.556552][ T5808] as10x_usb: error during firmware upload part1 [ 1299.608923][ T5808] Registered device Sky IT Digital Key (green led) [ 1299.622417][ T5808] usb 9-1: USB disconnect, device number 22 [ 1299.776072][ T5808] Unregistered device Sky IT Digital Key (green led) [ 1299.790619][ T5808] as10x_usb: device has been disconnected [ 1300.231605][T14104] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1300.622007][T14104] usb 7-1: Using ep0 maxpacket: 32 [ 1300.629972][T14104] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1300.651927][T14104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.675256][T16148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.693131][T14104] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1301.430491][ T5808] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1301.852541][T14104] gspca_nw80x: reg_r err -71 [ 1301.857393][T14104] nw80x 7-1:3.0: probe with driver nw80x failed with error -71 [ 1301.871387][ T5808] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.883796][T14104] usb 7-1: USB disconnect, device number 26 [ 1301.938738][ T5808] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.980854][ T5808] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1302.000796][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1302.010653][ T5808] usb 8-1: SerialNumber: syz [ 1302.661142][ T5808] usb 8-1: 0:2 : does not exist [ 1302.799531][ T5808] usb 8-1: USB disconnect, device number 29 [ 1302.937983][T16035] udevd[16035]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.830624][ T5808] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1303.998328][T16198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.651003][ T5808] usb 7-1: Using ep0 maxpacket: 32 [ 1304.726347][ T5808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.840572][ T5808] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1304.864070][ T5808] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1304.889351][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.929706][ T5808] usb 7-1: config 0 descriptor?? [ 1304.951626][ T5808] hub 7-1:0.0: bad descriptor, ignoring hub [ 1304.957681][ T5808] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1304.984944][ T5808] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1306.132937][ T24] usb 7-1: USB disconnect, device number 27 [ 1307.371243][ T5808] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1307.580760][ T5808] usb 7-1: Using ep0 maxpacket: 8 [ 1307.614806][ T5808] usb 7-1: config 6 has an invalid interface number: 220 but max is 0 [ 1307.633888][ T5808] usb 7-1: config 6 has no interface number 0 [ 1307.640070][ T5808] usb 7-1: config 6 interface 220 has no altsetting 0 [ 1307.849561][ T5808] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1307.871083][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.899993][ T5808] usb 7-1: Product: syz [ 1307.910586][ T5808] usb 7-1: Manufacturer: syz [ 1307.941467][ T5808] usb 7-1: SerialNumber: syz [ 1309.426062][T16259] syz.7.2314 (16259): drop_caches: 2 [ 1310.149511][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1310.409621][ T5808] uvcvideo 7-1:6.220: Found multiple Units with ID 4 [ 1310.443937][ T5808] uvcvideo 7-1:6.220: Found Unit with invalid ID 0 [ 1310.472265][T16262] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 1310.480183][ T5808] uvcvideo 7-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 1310.511528][ T5808] uvcvideo 7-1:6.220: Entity type for entity Output 4 was not initialized! [ 1310.539863][ T5808] uvcvideo 7-1:6.220: Failed to create links for entity 4 [ 1310.571931][ T5808] uvcvideo 7-1:6.220: Failed to register entities (-22). [ 1310.610673][ T5808] usb 7-1: USB disconnect, device number 28 [ 1313.152491][ T24] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1313.507602][T16288] binder: 16287:16288 ioctl c0306201 200000000640 returned -22 [ 1313.563404][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.710629][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1313.719546][ T24] usb 9-1: config 1 has no interface number 0 [ 1313.732116][ T24] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1313.759600][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1313.866887][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.902191][ T24] usb 9-1: Product: syz [ 1313.906606][ T24] usb 9-1: Manufacturer: syz [ 1313.915024][ T24] usb 9-1: SerialNumber: syz [ 1313.939813][ T24] usb 9-1: selecting invalid altsetting 1 [ 1314.028164][ T5826] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1314.137872][T16302] netlink: 'syz.3.2329': attribute type 8 has an invalid length. [ 1314.153502][T16302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'. [ 1314.284710][T16302] bond0: entered promiscuous mode [ 1314.292521][T16302] bond_slave_0: entered promiscuous mode [ 1314.876380][ T24] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 1314.892254][T16302] bond_slave_1: entered promiscuous mode [ 1314.931725][T16302] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1314.941846][ T24] cdc_ncm 9-1:1.1: bind() failure [ 1314.982103][ T24] usb 9-1: USB disconnect, device number 23 [ 1315.033465][T16302] gretap0: entered promiscuous mode [ 1315.123070][T16302] bond0: left promiscuous mode [ 1315.150863][T16302] bond_slave_0: left promiscuous mode [ 1315.200847][T16302] bond_slave_1: left promiscuous mode [ 1315.249182][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2330'. [ 1315.283329][T16302] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 1315.397754][T16315] nbd: socks must be embedded in a SOCK_ITEM attr [ 1315.433800][T16302] gretap0: left promiscuous mode [ 1319.543863][T16039] udevd[16039]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1319.607793][T16035] udevd[16035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1323.463388][T16372] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2346'. [ 1323.482857][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.490584][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.440527][T10817] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1325.392674][T10817] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1325.430562][T10817] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1325.480493][T10817] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1325.489770][T10817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.691396][T16375] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1325.801198][T10817] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1326.463898][T16387] block nbd4: shutting down sockets [ 1326.850558][T10817] usb 8-1: USB disconnect, device number 30 [ 1327.125713][T16398] udevd[16398]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.451343][T16408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1327.466883][T16408] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1327.475956][T16408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1327.485189][T16408] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1327.560485][T10817] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1327.577148][T16408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1327.732511][T10817] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.760485][T10817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.804757][T10817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.830417][T10817] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1327.852867][T10817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.888176][T10817] usb 9-1: config 0 descriptor?? [ 1329.312231][T10817] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x3 [ 1329.351295][T10817] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.8-1/input0 [ 1329.523325][T13797] Bluetooth: hci3: command 0x0406 tx timeout [ 1329.523345][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 1329.529481][T13797] Bluetooth: hci4: command 0x0406 tx timeout [ 1329.600764][T16443] Bluetooth: hci2: command 0x0406 tx timeout [ 1329.818149][T10817] usb 9-1: USB disconnect, device number 24 [ 1330.883175][T10817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1331.403677][T10817] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1331.438023][T10817] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1331.506728][T10817] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1331.660540][T16443] Bluetooth: hci3: command 0x0406 tx timeout [ 1331.690573][T16461] block nbd4: shutting down sockets [ 1331.865797][T10817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.936622][T16450] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1331.986017][T10817] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1332.249342][T16450] fuse: Bad value for 'fd' [ 1332.355593][T10817] usb 6-1: USB disconnect, device number 11 [ 1337.442487][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 1338.015906][T16535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1338.084361][T16538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1338.386980][T16546] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2403'. [ 1338.429031][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2402'. [ 1338.795117][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1338.795145][ T30] audit: type=1326 audit(1773535127.150:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1338.881334][T16553] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1338.978360][ T30] audit: type=1326 audit(1773535127.150:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1339.119351][ T30] audit: type=1326 audit(1773535127.150:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1339.228533][ T30] audit: type=1326 audit(1773535127.150:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1339.346748][ T30] audit: type=1326 audit(1773535127.150:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1339.741795][ T30] audit: type=1326 audit(1773535127.150:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1339.908132][ T30] audit: type=1326 audit(1773535127.150:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1340.101887][ T30] audit: type=1326 audit(1773535127.150:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.8.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1340.209244][T16559] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 1342.948321][T16588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 1343.022231][T16592] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 1343.112344][T16598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1343.221986][ T5808] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1343.240775][T16604] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1343.247429][T16604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1343.276407][T16604] vhci_hcd vhci_hcd.0: Device attached [ 1343.305735][T16605] vhci_hcd: connection closed [ 1343.307513][ T36] vhci_hcd vhci_hcd.8: stop threads [ 1343.322161][ T36] vhci_hcd vhci_hcd.8: release socket [ 1343.338877][ T36] vhci_hcd vhci_hcd.8: disconnect device [ 1343.346110][T16611] netlink: 'syz.7.2424': attribute type 1 has an invalid length. [ 1343.452292][ T5808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.465537][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.478619][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.491561][ T5808] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1343.500978][ T5808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.512757][ T5808] usb 7-1: config 0 descriptor?? [ 1343.591302][T14104] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1343.745814][T16622] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2428'. [ 1343.777396][T14104] usb 6-1: Using ep0 maxpacket: 32 [ 1343.914284][T14104] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 1344.167271][T14104] usb 6-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 1344.365959][T14104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.416536][ T5808] usbhid 7-1:0.0: can't add hid device: -71 [ 1344.553245][T14104] usb 6-1: Product: syz [ 1344.646511][T14104] usb 6-1: Manufacturer: syz [ 1344.698093][ T5808] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1344.709581][ T5808] usb 7-1: USB disconnect, device number 29 [ 1344.734311][T14104] usb 6-1: SerialNumber: syz [ 1345.485844][T14104] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1345.514502][T14104] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1345.566775][T14104] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1345.594310][T14104] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1345.627912][T14104] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1345.759239][T14104] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1345.770547][ T6010] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1345.936161][ T6010] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1345.959101][T14104] usb 6-1: USB disconnect, device number 12 [ 1346.020383][ T6010] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1346.034695][ T5808] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1346.070363][ T6010] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1346.082930][T16624] udevd[16624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.109448][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.139127][T16637] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1346.153603][T16648] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1346.177786][ T6010] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.201876][ T5808] usb 8-1: device descriptor read/64, error -71 [ 1346.463797][ T5808] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1346.511469][T16637] fuse: Bad value for 'fd' [ 1346.553548][ T6010] usb 7-1: USB disconnect, device number 30 [ 1346.706245][ T5808] usb 8-1: device descriptor read/64, error -71 [ 1346.931979][ T5808] usb usb8-port1: attempt power cycle [ 1347.192637][T16655] netlink: 'syz.5.2439': attribute type 1 has an invalid length. [ 1347.411528][ T5808] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1347.444601][ T5808] usb 8-1: device descriptor read/8, error -71 [ 1347.690447][ T5808] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1347.713509][ T6010] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1347.730598][ T5808] usb 8-1: device descriptor read/8, error -71 [ 1347.802181][T16672] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2445'. [ 1347.844000][ T5808] usb usb8-port1: unable to enumerate USB device [ 1347.914849][ T6010] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.932281][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.947250][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.957746][ T6010] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1347.967284][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.989433][ T6010] usb 7-1: config 0 descriptor?? [ 1348.111930][ T974] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1348.281965][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 1348.295405][ T974] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1348.307961][T16680] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2440'. [ 1348.331829][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.595885][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 1348.610463][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1348.624755][ T974] usb 5-1: Product: syz [ 1348.629499][ T974] usb 5-1: Manufacturer: syz [ 1348.687954][ T974] usb 5-1: SerialNumber: syz [ 1348.695474][ T6010] usb 7-1: USB disconnect, device number 31 [ 1348.762168][ T974] usb 5-1: config 0 descriptor?? [ 1348.788303][ T974] as10x_usb: device has been detected [ 1348.797447][ T974] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1349.030516][T16675] random: crng reseeded on system resumption [ 1349.173470][ T974] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1349.193003][ T974] as10x_usb: error during firmware upload part1 [ 1349.202770][ T974] Registered device Sky IT Digital Key (green led) [ 1349.650433][ T6010] usb 5-1: USB disconnect, device number 29 [ 1349.721583][ T6010] Unregistered device Sky IT Digital Key (green led) [ 1349.737271][ T6010] as10x_usb: device has been disconnected [ 1353.832215][T16714] netlink: 'syz.5.2457': attribute type 1 has an invalid length. [ 1354.076686][T16717] overlayfs: overlapping lowerdir path [ 1354.156022][T16724] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.2460'. [ 1354.219110][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1354.423803][ T6010] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1354.483324][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2464'. [ 1354.730343][ T6010] usb 5-1: device descriptor read/64, error -71 [ 1355.161019][ T6010] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1355.435075][ T6010] usb 5-1: device descriptor read/64, error -71 [ 1355.700703][ T8289] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1356.005500][ T6010] usb usb5-port1: attempt power cycle [ 1356.604937][ T8289] usb 8-1: Using ep0 maxpacket: 8 [ 1356.651504][ T6010] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1356.681887][ T8289] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1356.695433][ T8289] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1356.714660][ T8289] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1356.717758][ T6010] usb 5-1: device descriptor read/8, error -71 [ 1356.762183][ T8289] usb 8-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1356.785789][ T8289] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.796070][ T8289] usb 8-1: Product: syz [ 1356.806129][ T8289] usb 8-1: Manufacturer: syz [ 1356.814122][ T8289] usb 8-1: SerialNumber: syz [ 1356.834698][ T8289] ti_usb_3410_5052 8-1:1.0: TI USB 3410 1 port adapter converter detected [ 1357.090406][ T6010] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1357.122454][ T6010] usb 5-1: device descriptor read/8, error -71 [ 1357.192257][T16777] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 1357.232971][ T6010] usb usb5-port1: unable to enumerate USB device [ 1357.495454][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2467'. [ 1359.189133][T16793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 1359.230112][T10817] usb 8-1: USB disconnect, device number 35 [ 1359.269469][T16793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 1359.310881][T16798] netlink: 17780 bytes leftover after parsing attributes in process `syz.6.2472'. [ 1360.827255][T12666] Bluetooth: hci5: Frame reassembly failed (-84) [ 1360.906470][T16819] lo speed is unknown, defaulting to 1000 [ 1360.966828][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.026551][T16819] lo speed is unknown, defaulting to 1000 [ 1361.038706][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.480654][T16819] lo speed is unknown, defaulting to 1000 [ 1362.250615][T16819] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1362.892054][T16443] Bluetooth: hci5: command 0x1003 tx timeout [ 1362.898675][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1363.033989][T16819] lo speed is unknown, defaulting to 1000 [ 1363.103565][T16819] lo speed is unknown, defaulting to 1000 [ 1363.112716][T16819] lo speed is unknown, defaulting to 1000 [ 1363.392693][T16819] lo speed is unknown, defaulting to 1000 [ 1363.404125][T16819] lo speed is unknown, defaulting to 1000 [ 1363.829862][T16819] lo speed is unknown, defaulting to 1000 [ 1364.631603][ T8289] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1364.832964][ T8289] usb 6-1: device descriptor read/64, error -71 [ 1365.082770][ T8289] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1365.279685][ T8289] usb 6-1: device descriptor read/64, error -71 [ 1365.539718][ T8289] usb usb6-port1: attempt power cycle [ 1366.096781][ T8289] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1366.196501][ T8289] usb 6-1: device descriptor read/8, error -71 [ 1366.451879][ T8289] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1366.503139][ T8289] usb 6-1: device descriptor read/8, error -71 [ 1366.728228][ T8289] usb usb6-port1: unable to enumerate USB device [ 1367.876539][T10817] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1369.050464][T10817] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1369.059427][T10817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.071446][T10817] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.315545][T10817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1369.336364][T10817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1369.350891][T10817] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1369.363338][T10817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1369.437535][T16881] netlink: 17780 bytes leftover after parsing attributes in process `syz.5.2506'. [ 1370.473759][T10817] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 1370.533550][T10817] usb 4-1: can't read configurations, error -71 [ 1370.618916][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2510'. [ 1370.891540][T16891] nbd: socks must be embedded in a SOCK_ITEM attr [ 1371.663832][T16783] udevd[16783]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1371.691544][ T974] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1372.004658][ T974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.016317][ T974] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.028159][ T974] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1372.776000][ T974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1372.786205][ T974] usb 9-1: SerialNumber: syz [ 1373.039586][ T974] usb 9-1: 0:2 : does not exist [ 1373.054071][ T974] usb 9-1: unit 5 not found! [ 1373.202135][ T974] usb 9-1: USB disconnect, device number 25 [ 1373.334892][T16783] udevd[16783]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.701341][T16926] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2521'. [ 1378.504832][T16936] syz.3.2525 (16936): drop_caches: 2 [ 1379.004455][T16966] netlink: 17780 bytes leftover after parsing attributes in process `syz.7.2534'. [ 1379.766787][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 1380.023329][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2536'. [ 1380.182223][T14104] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1380.251105][T16976] nbd: socks must be embedded in a SOCK_ITEM attr [ 1380.342099][T14104] usb 8-1: device descriptor read/64, error -71 [ 1380.359664][T16975] block nbd64: NBD_DISCONNECT [ 1381.422477][T14104] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1381.581749][T14104] usb 8-1: device descriptor read/64, error -71 [ 1381.713633][T14104] usb usb8-port1: attempt power cycle [ 1381.826508][T16978] udevd[16978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1382.232262][T14104] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1382.282124][T14104] usb 8-1: device descriptor read/8, error -71 [ 1382.541746][T14104] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1382.574192][T14104] usb 8-1: device descriptor read/8, error -71 [ 1382.691951][T14104] usb usb8-port1: unable to enumerate USB device [ 1384.671328][ T5808] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1384.858601][ T5808] usb 8-1: Using ep0 maxpacket: 8 [ 1384.895814][ T5808] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1384.925874][ T5808] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1385.005226][ T5808] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1385.053545][ T5808] usb 8-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1385.098516][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.130496][ T5808] usb 8-1: Product: syz [ 1385.143356][ T5808] usb 8-1: Manufacturer: syz [ 1385.148721][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2549'. [ 1385.167473][ T5808] usb 8-1: SerialNumber: syz [ 1385.224504][ T5808] ti_usb_3410_5052 8-1:1.0: TI USB 3410 1 port adapter converter detected [ 1385.275608][T17023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1386.415329][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2547'. [ 1388.090524][ T5808] usb 8-1: USB disconnect, device number 40 [ 1388.403750][T14104] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1388.426120][T17050] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2558'. [ 1388.693814][T14104] usb 4-1: device descriptor read/64, error -71 [ 1388.710111][T17050] nbd: socks must be embedded in a SOCK_ITEM attr [ 1389.099548][T14104] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1389.397125][T14104] usb 4-1: device descriptor read/64, error -71 [ 1389.520369][T16443] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1389.758995][T14104] usb usb4-port1: attempt power cycle [ 1390.284574][T14104] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1390.552518][T14104] usb 4-1: device descriptor read/8, error -71 [ 1390.984615][T14104] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1391.496973][T14104] usb 4-1: device descriptor read/8, error -71 [ 1391.604437][T17014] udevd[17014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1391.653457][T16978] udevd[16978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1391.662658][T14104] usb usb4-port1: unable to enumerate USB device [ 1391.733842][T17063] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1393.121018][T17072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1394.565498][T10817] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1394.740993][T10817] usb 9-1: Using ep0 maxpacket: 8 [ 1394.758358][T10817] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1394.787547][T10817] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1394.806686][ T6010] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1394.826012][T10817] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1394.859016][T10817] usb 9-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1394.878538][T10817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.894698][T10817] usb 9-1: Product: syz [ 1394.907050][T10817] usb 9-1: Manufacturer: syz [ 1394.929589][T10817] usb 9-1: SerialNumber: syz [ 1394.941100][T17102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1394.970842][ T6010] usb 7-1: device descriptor read/64, error -71 [ 1395.000172][T10817] ti_usb_3410_5052 9-1:1.0: TI USB 3410 1 port adapter converter detected [ 1395.413765][ T6010] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1395.540554][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2571'. [ 1395.553018][ T6010] usb 7-1: device descriptor read/64, error -71 [ 1396.397411][ T6010] usb usb7-port1: attempt power cycle [ 1396.751509][ T6010] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1396.781295][ T6010] usb 7-1: device descriptor read/8, error -71 [ 1396.929912][T17111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1397.021618][ T6010] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1397.061917][ T6010] usb 7-1: device descriptor read/8, error -71 [ 1397.185060][ T6010] usb usb7-port1: unable to enumerate USB device [ 1397.398504][T17123] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1397.538972][ T974] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1397.557793][T14104] usb 9-1: USB disconnect, device number 26 [ 1397.668232][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1397.716055][ T974] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1397.729708][ T974] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1397.743601][ T974] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1397.784942][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.013068][T17117] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1398.034967][ T974] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1398.069035][T17124] nbd: socks must be embedded in a SOCK_ITEM attr [ 1398.148415][T16978] block nbd64: NBD_DISCONNECT [ 1398.332737][ T974] usb 4-1: USB disconnect, device number 51 [ 1399.175485][T16978] udevd[16978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1400.900427][ T5808] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1402.070410][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 1402.101631][ T5808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1402.130398][ T5808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1402.160542][ T5808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1402.205793][ T5808] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1402.228082][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.260305][ T5808] usb 6-1: Product: syz [ 1402.264578][ T5808] usb 6-1: Manufacturer: syz [ 1402.269245][ T5808] usb 6-1: SerialNumber: syz [ 1402.337619][ T5808] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 1402.701189][T17180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1402.880577][T16443] Bluetooth: hci5: command 0x1003 tx timeout [ 1402.889161][T13797] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1403.001054][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1407.987502][T17194] syz.8.2604 (17194): drop_caches: 2 [ 1408.051822][ T974] usb 6-1: USB disconnect, device number 17 [ 1410.453135][T13797] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1410.613897][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1411.094926][T17220] nbd: socks must be embedded in a SOCK_ITEM attr [ 1411.433740][T17221] sp0: Synchronizing with TNC [ 1411.453731][T17133] block nbd64: NBD_DISCONNECT [ 1411.911116][T16978] udevd[16978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1412.104987][T17236] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1412.429579][T12655] Bluetooth: hci5: Frame reassembly failed (-84) [ 1413.400370][T15650] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1414.470317][T15650] usb 7-1: Using ep0 maxpacket: 8 [ 1414.477565][T15650] usb 7-1: config 6 has an invalid interface number: 220 but max is 0 [ 1414.486508][T13797] Bluetooth: hci5: command 0x1003 tx timeout [ 1414.493154][T16443] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1414.505348][T15650] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.516534][T15650] usb 7-1: config 6 has no interface number 0 [ 1414.527010][T15650] usb 7-1: config 6 interface 220 has no altsetting 0 [ 1414.542009][T15650] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1414.558015][T15650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.567683][T15650] usb 7-1: Product: syz [ 1414.577822][T15650] usb 7-1: Manufacturer: syz [ 1414.582781][T15650] usb 7-1: SerialNumber: syz [ 1414.830440][T15650] uvcvideo 7-1:6.220: probe with driver uvcvideo failed with error -22 [ 1414.859815][T15650] usb 7-1: USB disconnect, device number 36 [ 1415.080355][ T5808] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1415.870335][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 1415.884931][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1415.942632][ T5808] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1416.347453][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1416.681156][ T5808] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1416.692086][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.701510][ T5808] usb 4-1: Product: syz [ 1416.705846][ T5808] usb 4-1: Manufacturer: syz [ 1416.710621][ T5808] usb 4-1: SerialNumber: syz [ 1417.753279][ T5808] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 1419.270406][T17297] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1419.296694][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1419.617342][T17298] nbd: socks must be embedded in a SOCK_ITEM attr [ 1419.663671][T16978] block nbd64: NBD_DISCONNECT [ 1419.942334][ T5808] usb 4-1: USB disconnect, device number 52 [ 1420.225553][T16978] udevd[16978]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1422.415836][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.422464][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.618102][ T6088] Bluetooth: hci5: Frame reassembly failed (-84) [ 1423.461602][T17320] syz.7.2638 (17320): drop_caches: 2 [ 1423.900512][ T5808] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1424.075675][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 1424.105372][ T5808] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1424.137020][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.159787][ T5808] usb 5-1: Product: syz [ 1424.179255][ T5808] usb 5-1: Manufacturer: syz [ 1424.184316][ T5808] usb 5-1: SerialNumber: syz [ 1424.203517][ T5808] usb 5-1: config 0 descriptor?? [ 1424.260048][ T5808] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1424.464772][ T5808] dvb-usb: bulk message failed: -22 (4/0) [ 1424.488646][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1425.202226][T13797] Bluetooth: hci5: command 0x1003 tx timeout [ 1425.208772][T16443] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1427.905587][ T5808] dvb-usb: bulk message failed: -22 (5/0) [ 1429.153306][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1429.168066][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1429.179145][ T5808] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1429.187393][ T5808] usb 5-1: media controller created [ 1429.245988][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1429.286850][ T5808] usb 5-1: selecting invalid altsetting 3 [ 1429.329689][ T5808] ttusb2: set interface to alts=3 failed [ 1430.735278][T17349] syz.6.2648 (17349): drop_caches: 2 [ 1432.199015][ T5808] DVB: Unable to find symbol tda10086_attach() [ 1432.260508][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2649'. [ 1432.294945][ T5808] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1432.337667][ T5808] dvb-usb: bulk message failed: -22 (4/0) [ 1432.348306][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1432.419313][ T5808] dvb-usb: bulk message failed: -22 (5/0) [ 1432.445612][ T5808] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1432.797644][T17369] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2653'. [ 1432.950524][ T30] audit: type=1326 audit(1773535263.274:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1432.975170][ T5808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1433.052167][ T5808] usb 5-1: USB disconnect, device number 34 [ 1433.108603][ T30] audit: type=1326 audit(1773535263.274:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1433.522642][ T30] audit: type=1326 audit(1773535263.274:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1433.546243][ T5808] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1434.261365][ T30] audit: type=1326 audit(1773535263.274:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.343503][ T30] audit: type=1326 audit(1773535263.274:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.515452][ T30] audit: type=1326 audit(1773535263.274:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.650993][ T30] audit: type=1326 audit(1773535263.274:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.790578][ T30] audit: type=1326 audit(1773535263.274:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.915289][ T30] audit: type=1326 audit(1773535263.274:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1434.972612][T17383] syz.4.2657 (17383): drop_caches: 2 [ 1435.050099][ T30] audit: type=1326 audit(1773535263.274:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17356 comm="syz.8.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71ec59c799 code=0x7ffc0000 [ 1435.297220][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2658'. [ 1435.463162][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2658'. [ 1438.422734][ T974] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1438.706939][ T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.763378][ T974] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1438.794099][ T974] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1438.825640][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1438.856149][ T974] usb 4-1: SerialNumber: syz [ 1439.338852][T17421] syz.4.2664 (17421): drop_caches: 2 [ 1439.385909][ T974] usb 4-1: 0:2 : does not exist [ 1439.411727][ T974] usb 4-1: unit 5 not found! [ 1439.675434][ T974] usb 4-1: USB disconnect, device number 53 [ 1439.867458][T17418] udevd[17418]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.842056][T14104] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1447.981854][T14104] usb 8-1: device descriptor read/64, error -71 [ 1448.491862][T14104] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1448.631706][T14104] usb 8-1: device descriptor read/64, error -71 [ 1448.782110][T14104] usb usb8-port1: attempt power cycle [ 1449.131938][T14104] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1449.150279][T16759] Bluetooth: hci5: Frame reassembly failed (-84) [ 1451.210827][T16443] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1451.217613][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 1451.372915][T14104] usb 8-1: device descriptor read/8, error -71 [ 1451.421842][T17496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2685'. [ 1452.436027][T17515] bridge0: entered allmulticast mode [ 1452.559274][T17515] bridge_slave_1: left allmulticast mode [ 1452.609422][T17515] bridge_slave_1: left promiscuous mode [ 1452.652452][T17515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.771762][T17515] bridge_slave_0: left allmulticast mode [ 1452.795986][T17515] bridge_slave_0: left promiscuous mode [ 1452.811693][T17515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.338307][T17527] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2696'. [ 1455.301971][T10817] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1455.640430][T10817] usb 7-1: device descriptor read/64, error -71 [ 1457.678580][T10817] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1457.890407][T10817] usb 7-1: device descriptor read/64, error -71 [ 1458.020538][T10817] usb usb7-port1: attempt power cycle [ 1458.592847][T16443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1458.603256][T16443] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1458.612493][T16443] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1458.623545][T16443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1458.637865][T16443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1459.970522][T17558] lo speed is unknown, defaulting to 1000 [ 1460.721910][ T5837] Bluetooth: hci5: command tx timeout [ 1460.820656][T10817] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1461.040621][T10817] usb 7-1: Using ep0 maxpacket: 8 [ 1461.098705][T10817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.112983][T17558] chnl_net:caif_netlink_parms(): no params data found [ 1461.120103][T10817] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1461.190924][T10817] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1461.239453][T10817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.332754][T10817] usb 7-1: config 0 descriptor?? [ 1461.367489][T10817] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1462.744947][T17598] syz.8.2716 (17598): drop_caches: 2 [ 1463.251095][ T5837] Bluetooth: hci5: command tx timeout [ 1463.531026][T10817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1463.867470][T10817] usb 6-1: device descriptor read/64, error -71 [ 1463.888942][T17558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.896754][T17558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.904380][T17558] bridge_slave_0: entered allmulticast mode [ 1463.917766][T17558] bridge_slave_0: entered promiscuous mode [ 1463.968439][T17558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.996776][T17558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.039287][T17558] bridge_slave_1: entered allmulticast mode [ 1464.071716][T17558] bridge_slave_1: entered promiscuous mode [ 1464.121655][T10817] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1464.231080][T17558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.272985][T17558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.285911][T10817] usb 6-1: device descriptor read/64, error -71 [ 1464.422195][T10817] usb usb6-port1: attempt power cycle [ 1464.538125][T17558] team0: Port device team_slave_0 added [ 1464.582383][T17558] team0: Port device team_slave_1 added [ 1464.846466][T17558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.879020][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.961784][T17558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.013790][T17558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.037997][T17558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.211550][ T5808] usb 7-1: USB disconnect, device number 40 [ 1465.230602][T17558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.265790][T17615] tipc: Started in network mode [ 1465.282071][ T5837] Bluetooth: hci5: command tx timeout [ 1465.308029][T17615] tipc: Node identity 2a9d5db819a2, cluster identity 4711 [ 1465.421698][T17615] tipc: Enabled bearer , priority 0 [ 1465.470853][T17616] syzkaller0: entered promiscuous mode [ 1465.507319][T17616] syzkaller0: entered allmulticast mode [ 1466.141056][T17615] tipc: Resetting bearer [ 1466.771997][T17614] tipc: Resetting bearer [ 1467.031421][T17614] tipc: Disabling bearer [ 1467.130718][ T5808] tipc: Node number set to 859790776 [ 1467.362991][ T5837] Bluetooth: hci5: command tx timeout [ 1467.718472][T12655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.894053][T17558] hsr_slave_0: entered promiscuous mode [ 1467.919796][T17558] hsr_slave_1: entered promiscuous mode [ 1468.348840][T10817] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1468.515812][T12655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.539720][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2728'. [ 1468.553673][T10817] usb 9-1: Using ep0 maxpacket: 8 [ 1469.229511][T17653] syz.5.2729 (17653): drop_caches: 2 [ 1470.490834][T10817] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1470.552055][T10817] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1470.850478][T10817] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1470.970760][T10817] usb 9-1: string descriptor 0 read error: -71 [ 1470.981386][T10817] usb 9-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1471.103345][T10817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.285532][T12655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.314279][T10817] usb 9-1: can't set config #1, error -71 [ 1471.390349][T10817] usb 9-1: USB disconnect, device number 27 [ 1472.637019][T12655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.474536][ T6088] Bluetooth: hci2: Frame reassembly failed (-84) [ 1476.240308][T16443] Bluetooth: hci2: command 0x1003 tx timeout [ 1476.241859][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1476.554658][T17688] netlink: 'syz.8.2739': attribute type 1 has an invalid length. [ 1476.651998][T17688] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2739'. [ 1476.820526][T17688] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2739'. [ 1476.850688][T17688] netlink: 'syz.8.2739': attribute type 1 has an invalid length. [ 1476.979167][T17688] netlink: 634 bytes leftover after parsing attributes in process `syz.8.2739'. [ 1477.063056][T12655] bridge_slave_1: left allmulticast mode [ 1477.069100][T12655] bridge_slave_1: left promiscuous mode [ 1477.078731][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.115164][T12655] bridge_slave_0: left allmulticast mode [ 1477.127881][T12655] bridge_slave_0: left promiscuous mode [ 1477.137828][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.170659][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2743'. [ 1477.250386][ T6010] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1477.413885][ T6010] usb 7-1: Using ep0 maxpacket: 8 [ 1477.435892][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1477.460225][ T6010] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1477.474251][T12655] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1477.475231][ T6010] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1477.500821][ T6010] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1477.510675][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.518832][ T6010] usb 7-1: Product: syz [ 1477.524015][ T6010] usb 7-1: Manufacturer: syz [ 1477.529745][ T6010] usb 7-1: SerialNumber: syz [ 1477.562219][ T6010] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected [ 1477.619851][T12655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.637894][T12655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.652169][T12655] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1477.666514][T12655] bond0 (unregistering): Released all slaves [ 1477.680183][T12655] bond1 (unregistering): Released all slaves [ 1477.781641][ T5842] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1478.183924][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1478.195297][ T5842] usb 6-1: device descriptor read/64, error -71 [ 1478.379876][ T24] usb 7-1: USB disconnect, device number 41 [ 1478.462643][ T5842] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1478.582209][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2746'. [ 1478.752529][T17717] nbd: socks must be embedded in a SOCK_ITEM attr [ 1478.834221][T17552] block nbd64: NBD_DISCONNECT [ 1479.288248][ T5842] usb 6-1: device descriptor read/64, error -71 [ 1479.413932][ T5842] usb usb6-port1: attempt power cycle [ 1479.464524][T17552] udevd[17552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1479.547208][T12655] hsr_slave_0: left promiscuous mode [ 1479.562665][T12655] hsr_slave_1: left promiscuous mode [ 1479.576044][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.590193][T12655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.633247][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.655339][T12655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.689062][T12655] veth1_macvtap: left promiscuous mode [ 1479.703625][T12655] veth0_macvtap: left promiscuous mode [ 1479.724814][T12655] veth1_vlan: left promiscuous mode [ 1479.740723][T12655] veth0_vlan: left promiscuous mode [ 1480.035158][ T5842] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1480.157042][T17741] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1480.171448][T17741] cramfs: wrong magic [ 1480.741918][ T5842] usb 6-1: device descriptor read/8, error -71 [ 1480.776341][T17744] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1481.662771][T12655] team0 (unregistering): Port device team_slave_1 removed [ 1481.718378][T12655] team0 (unregistering): Port device team_slave_0 removed [ 1482.376552][T17744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.384133][T17744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.804965][T17558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1482.858445][T17558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1482.946797][T17558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1483.004489][T17558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1483.855776][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.162744][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.271777][T17558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.496787][T17558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.601697][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.608981][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1484.692115][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.699430][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.986162][T17558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.300850][T17853] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2778'. [ 1488.368261][T17558] veth0_vlan: entered promiscuous mode [ 1488.738529][T17558] veth1_vlan: entered promiscuous mode [ 1488.759882][T17856] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.2780'. [ 1489.042224][T17558] veth0_macvtap: entered promiscuous mode [ 1489.081927][T17558] veth1_macvtap: entered promiscuous mode [ 1489.232003][T17558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.304950][T17558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1489.479530][T16759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.511697][T16759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.536675][T16759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.604843][T16759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.040739][T12664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.070357][T12664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.068390][T16759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.111983][T16759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.463145][T17912] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2793'. [ 1495.474354][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.481868][T17912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.871927][T17917] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2796'. [ 1496.007581][T17917] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2796'. [ 1503.097727][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1503.108421][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.108536][ T5837] Tainted: [L]=SOFTLOCKUP [ 1503.108556][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1503.108593][ T5837] Workqueue: hci4 hci_rx_work [ 1503.108658][ T5837] Call Trace: [ 1503.108671][ T5837] [ 1503.108687][ T5837] dump_stack_lvl+0x100/0x190 [ 1503.108751][ T5837] sysfs_warn_dup.cold+0x1c/0x28 [ 1503.108805][ T5837] sysfs_create_dir_ns+0x24b/0x2b0 [ 1503.108851][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1503.108895][ T5837] ? find_held_lock+0x2b/0x80 [ 1503.108938][ T5837] ? kobject_add_internal+0x25f/0x930 [ 1503.108999][ T5837] ? kobject_add_internal+0x25f/0x930 [ 1503.109066][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.109111][ T5837] ? do_raw_spin_unlock+0x145/0x1e0 [ 1503.109155][ T5837] kobject_add_internal+0x2c8/0x930 [ 1503.109220][ T5837] kobject_add+0x16a/0x1e0 [ 1503.109254][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 1503.109283][ T5837] ? class_to_subsys+0x10f/0x150 [ 1503.109332][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.109378][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.109421][ T5837] ? kobject_put+0xb9/0x640 [ 1503.109484][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 1503.109543][ T5837] device_add+0x294/0x1950 [ 1503.109587][ T5837] ? __pfx_dev_set_name+0x10/0x10 [ 1503.109637][ T5837] ? __pfx_device_add+0x10/0x10 [ 1503.109676][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.109720][ T5837] ? mgmt_send_event_skb+0x2fb/0x460 [ 1503.109780][ T5837] hci_conn_add_sysfs+0x1a3/0x260 [ 1503.109837][ T5837] le_conn_complete_evt+0x11cb/0x1f40 [ 1503.109895][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1503.109954][ T5837] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1503.110004][ T5837] ? skb_pull_data+0x15f/0x1e0 [ 1503.110050][ T5837] hci_le_meta_evt+0x34a/0x5f0 [ 1503.110100][ T5837] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1503.110155][ T5837] hci_event_packet+0x682/0x11c0 [ 1503.110199][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1503.110252][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 1503.110296][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.110345][ T5837] ? kcov_remote_start+0x374/0x660 [ 1503.110394][ T5837] ? lockdep_hardirqs_on+0x78/0x100 [ 1503.110449][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.110512][ T5837] hci_rx_work+0x451/0xfc0 [ 1503.110567][ T5837] process_one_work+0xa23/0x19a0 [ 1503.110625][ T5837] ? __pfx_process_one_work+0x10/0x10 [ 1503.110659][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.110719][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.110771][ T5837] worker_thread+0x5ef/0xe50 [ 1503.110823][ T5837] ? kthread+0x13a/0x450 [ 1503.110877][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 1503.110909][ T5837] kthread+0x370/0x450 [ 1503.110963][ T5837] ? __pfx_kthread+0x10/0x10 [ 1503.111024][ T5837] ret_from_fork+0x754/0xd80 [ 1503.111086][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.111147][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1503.111192][ T5837] ? __switch_to+0x7b4/0x1120 [ 1503.111234][ T5837] ? __pfx_kthread+0x10/0x10 [ 1503.111294][ T5837] ret_from_fork_asm+0x1a/0x30 [ 1503.111360][ T5837] [ 1503.424732][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2808'. [ 1504.321749][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1504.817655][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.971468][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1504.980630][ T5837] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1504.980731][ T5837] Bluetooth: hci4: failed to register connection device [ 1505.448013][ T24] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1505.649916][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.762386][ T24] usb 6-1: config 0 descriptor?? [ 1506.823694][ T24] usb 6-1: can't set config #0, error -71 [ 1506.863339][ T24] usb 6-1: USB disconnect, device number 25 [ 1507.213796][T16443] Bluetooth: hci4: command 0x0406 tx timeout [ 1508.745908][T17992] udevd[17992]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1509.682254][T16443] Bluetooth: hci4: command 0x0406 tx timeout [ 1509.792908][T18007] udevd[18007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1513.957236][T18057] netlink: 17780 bytes leftover after parsing attributes in process `syz.7.2827'. [ 1514.155233][T18062] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 1514.195613][T18062] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1514.281778][T18062] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1514.413702][T18068] syzkaller0: entered promiscuous mode [ 1514.419209][T18068] syzkaller0: entered allmulticast mode [ 1514.457088][T18062] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 1514.484559][T18062] netlink: 634 bytes leftover after parsing attributes in process `syz.5.2825'. [ 1515.807428][T18082] netlink: 'syz.3.2832': attribute type 4 has an invalid length. [ 1515.879160][T18086] netlink: 'syz.3.2832': attribute type 3 has an invalid length. [ 1515.891667][T10817] lo speed is unknown, defaulting to 1000 [ 1515.892412][T18086] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2832'. [ 1515.936876][T18086] netlink: 'syz.3.2832': attribute type 3 has an invalid length. [ 1515.948190][T10817] syz2: Port: 1 Link DOWN [ 1515.988935][T18086] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2832'. [ 1519.750961][T18123] netlink: 17780 bytes leftover after parsing attributes in process `syz.5.2843'. [ 1522.309919][T12675] Bluetooth: hci2: Frame reassembly failed (-84) [ 1522.439537][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2850'. [ 1524.321369][ T5837] Bluetooth: hci2: command 0x1003 tx timeout [ 1524.321388][T16443] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1526.542703][T18174] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1526.837077][T18175] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1531.883477][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1531.901562][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1531.910205][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1531.921025][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1531.931859][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1532.165562][T18219] lo speed is unknown, defaulting to 1000 [ 1533.498255][T16443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1533.509478][T16443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1533.531523][T16443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1533.638385][T16443] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1533.657658][T16443] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1534.151733][ T5837] Bluetooth: hci2: command tx timeout [ 1534.960676][T18231] lo speed is unknown, defaulting to 1000 [ 1535.317173][T18246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1535.755278][ T5837] Bluetooth: hci7: command tx timeout [ 1536.241625][ T5837] Bluetooth: hci2: command tx timeout [ 1536.615363][T12666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.647552][T12666] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1536.744224][T18219] chnl_net:caif_netlink_parms(): no params data found [ 1536.810316][T10817] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1536.818654][ T6010] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1537.010619][T10817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.025118][ T6010] usb 4-1: Using ep0 maxpacket: 8 [ 1537.064565][T10817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1537.073967][ T6010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1537.107451][ T6010] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1537.143066][T10817] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1537.180285][ T6010] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1537.210598][T10817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1537.242036][T12666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.290809][T10817] usb 6-1: SerialNumber: syz [ 1537.327992][ T6010] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1537.359327][T12666] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1537.465457][ T6010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.616639][ T6010] usb 4-1: Product: syz [ 1537.674287][ T6010] usb 4-1: Manufacturer: syz [ 1537.678982][ T6010] usb 4-1: SerialNumber: syz [ 1537.775370][T10817] usb 6-1: 0:2 : does not exist [ 1537.786092][ T6010] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 1537.842033][ T5837] Bluetooth: hci7: command tx timeout [ 1538.274801][T12666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.287324][T12666] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1538.304667][T10817] usb 6-1: USB disconnect, device number 26 [ 1538.322027][ T5837] Bluetooth: hci2: command tx timeout [ 1538.453787][T18224] udevd[18224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1538.529525][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 1539.921987][ T5837] Bluetooth: hci7: command tx timeout [ 1540.269564][T12666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.307263][T12666] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1540.403630][ T5837] Bluetooth: hci2: command tx timeout [ 1540.547070][T18219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.630450][T10817] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1540.851117][T18219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.931410][T18219] bridge_slave_0: entered allmulticast mode [ 1540.939166][T18219] bridge_slave_0: entered promiscuous mode [ 1541.039307][T18219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.070152][T10817] usb 7-1: Using ep0 maxpacket: 8 [ 1541.078200][T10817] usb 7-1: config 6 has an invalid interface number: 220 but max is 0 [ 1541.088007][T18219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.088804][T10817] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.106970][T10817] usb 7-1: config 6 has no interface number 0 [ 1541.113385][T10817] usb 7-1: config 6 interface 220 has no altsetting 0 [ 1541.123218][T10817] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 1541.138731][T10817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.139162][T18219] bridge_slave_1: entered allmulticast mode [ 1541.148076][T10817] usb 7-1: Product: syz [ 1541.157242][T10817] usb 7-1: Manufacturer: syz [ 1541.189329][T10817] usb 7-1: SerialNumber: syz [ 1541.212945][T18219] bridge_slave_1: entered promiscuous mode [ 1541.232500][T18316] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1541.476950][T10817] uvcvideo 7-1:6.220: probe with driver uvcvideo failed with error -22 [ 1541.495930][T18219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.545240][T10817] usb 7-1: USB disconnect, device number 42 [ 1541.581711][T18219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.883890][T18231] chnl_net:caif_netlink_parms(): no params data found [ 1541.952599][T18219] team0: Port device team_slave_0 added [ 1542.001825][ T5837] Bluetooth: hci7: command tx timeout [ 1542.125797][T18219] team0: Port device team_slave_1 added [ 1542.457205][T14104] usb 4-1: USB disconnect, device number 54 [ 1544.311993][T14104] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1544.523368][T18361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2896'. [ 1544.546555][T14104] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.769615][T14104] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1544.934739][T18219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.018438][T14104] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1545.107473][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.172492][T14104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1545.262187][T14104] usb 7-1: SerialNumber: syz [ 1545.285371][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.296421][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.332194][T18219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.389239][T18219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.663360][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.691260][T18219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.847050][T14104] usb 7-1: 0:2 : does not exist [ 1545.857172][T18361] ------------[ cut here ]------------ [ 1545.864411][T18361] !rwb [ 1545.864431][T18361] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x164/0x1c0, CPU#1: syz.5.2896/18361 [ 1545.878971][T18361] Modules linked in: [ 1545.884827][T18361] CPU: 1 UID: 0 PID: 18361 Comm: syz.5.2896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.896950][T18361] Tainted: [L]=SOFTLOCKUP [ 1545.900666][T12666] bridge_slave_1: left allmulticast mode [ 1545.903289][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1545.906910][T12666] bridge_slave_1: left promiscuous mode [ 1545.919630][T18361] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 1545.932392][T18361] Code: a8 21 fd 5b 5d 41 5c 41 5d 41 5e e9 d1 4f 29 fc 4c 89 f7 e8 ce 36 8d fd eb 83 4c 89 f7 e8 c4 36 8d fd eb d0 e8 cd a8 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 bf a8 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 1545.953582][T18361] RSP: 0018:ffffc90003677180 EFLAGS: 00010283 [ 1545.959708][T18361] RAX: 0000000000020c19 RBX: ffff888077e99000 RCX: ffffc9000e9a1000 [ 1545.969659][T18361] RDX: 0000000000080000 RSI: ffffffff84e6f153 RDI: ffffffff8c1b05a0 [ 1545.979268][T18361] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1545.988882][T18361] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b3de8d8 [ 1545.998461][T18361] R13: ffff88802a58dbac R14: ffff888077e99390 R15: ffff88802b3de8e8 [ 1546.008478][T18361] FS: 00007fe0c50606c0(0000) GS:ffff888124443000(0000) knlGS:0000000000000000 [ 1546.012522][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.020638][T18361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1546.033668][T18361] CR2: 00007ffad45ea078 CR3: 000000003a8a8000 CR4: 0000000000350ef0 [ 1546.043271][T18361] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1546.046759][T18361] [ 1546.049717][T18361] blk_register_queue+0x42c/0x590 [ 1546.056417][T18361] __add_disk+0x73f/0xe40 [ 1546.062314][T18361] add_disk_fwnode+0x118/0x5c0 [ 1546.067144][T18361] nbd_dev_add+0x77a/0xb10 [ 1546.073099][T18361] ? find_held_lock+0x2b/0x80 [ 1546.077825][T18361] ? __pfx_nbd_dev_add+0x10/0x10 [ 1546.084523][T18361] ? nbd_genl_connect+0x131a/0x1a40 [ 1546.089782][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.097315][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.104501][T18361] ? __radix_tree_lookup+0x217/0x2b0 [ 1546.110818][T18361] nbd_genl_connect+0xb8d/0x1a40 [ 1546.118256][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.125004][T18361] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1546.131981][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.137670][T18361] ? __nla_parse+0x40/0x60 [ 1546.143690][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.149397][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.156657][T18361] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1546.165400][T18361] genl_family_rcv_msg_doit+0x214/0x300 [ 1546.172568][T18361] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1546.178680][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.186051][T18361] ? genl_get_cmd+0x3ef/0x720 [ 1546.192304][T18361] ? __dev_queue_xmit+0x5af/0x4800 [ 1546.197458][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.204931][T18361] ? __radix_tree_lookup+0x217/0x2b0 [ 1546.210897][T18361] genl_rcv_msg+0x560/0x800 [ 1546.215446][T18361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.221482][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.227177][T18361] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1546.233077][T18361] netlink_rcv_skb+0x159/0x420 [ 1546.237901][T18361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.244600][T18361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1546.249938][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.256360][T18361] ? __rcu_read_unlock+0x26a/0x5e0 [ 1546.263076][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.268750][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.275310][T18361] genl_rcv+0x28/0x40 [ 1546.279317][T18361] netlink_unicast+0x5aa/0x870 [ 1546.285603][T18361] ? __pfx_netlink_unicast+0x10/0x10 [ 1546.292524][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.298225][T18361] netlink_sendmsg+0x8b0/0xda0 [ 1546.304584][T18361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.310222][T18361] ? PageHuge+0x170/0x180 [ 1546.314589][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.323431][T18361] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1546.329129][T18361] ____sys_sendmsg+0x9e1/0xb70 [ 1546.335927][T18361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.342779][T18361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1546.348104][T18361] ? __pfx_futex_wake_mark+0x10/0x10 [ 1546.354918][T18361] ___sys_sendmsg+0x190/0x1e0 [ 1546.359633][T18361] ? __pfx____sys_sendmsg+0x10/0x10 [ 1546.366690][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.373876][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.379609][T18361] __sys_sendmsg+0x170/0x220 [ 1546.385746][T18361] ? __pfx___sys_sendmsg+0x10/0x10 [ 1546.392447][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.398132][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.405378][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.412795][T18361] do_syscall_64+0x106/0xf80 [ 1546.417427][T18361] ? irqentry_exit+0x138/0x670 [ 1546.424668][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.430964][T18361] RIP: 0033:0x7fe0c419c799 [ 1546.435407][T18361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.457133][T18361] RSP: 002b:00007fe0c5060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.467102][T18361] RAX: ffffffffffffffda RBX: 00007fe0c4416180 RCX: 00007fe0c419c799 [ 1546.476591][T18361] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 1546.486295][T18361] RBP: 00007fe0c4232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1546.495817][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.505435][T18361] R13: 00007fe0c4416218 R14: 00007fe0c4416180 R15: 00007ffe62b91a88 [ 1546.515267][T18361] [ 1546.518305][T18361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1546.525598][T18361] CPU: 1 UID: 0 PID: 18361 Comm: syz.5.2896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1546.536565][T18361] Tainted: [L]=SOFTLOCKUP [ 1546.540896][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1546.550962][T18361] Call Trace: [ 1546.554245][T18361] [ 1546.557183][T18361] dump_stack_lvl+0x100/0x190 [ 1546.561912][T18361] vpanic+0x552/0x970 [ 1546.565918][T18361] ? __pfx_vpanic+0x10/0x10 [ 1546.570457][T18361] panic+0xd1/0xe0 [ 1546.574213][T18361] ? __pfx_panic+0x10/0x10 [ 1546.578693][T18361] check_panic_on_warn.cold+0x19/0x34 [ 1546.584115][T18361] ? wbt_init_enable_default+0x164/0x1c0 [ 1546.589789][T18361] __warn.cold+0x191/0x348 [ 1546.594242][T18361] __report_bug+0x296/0x3d0 [ 1546.598789][T18361] ? wbt_init_enable_default+0x164/0x1c0 [ 1546.604452][T18361] ? __pfx___report_bug+0x10/0x10 [ 1546.609531][T18361] ? wbt_init_enable_default+0x164/0x1c0 [ 1546.615274][T18361] report_bug+0xb2/0x220 [ 1546.619635][T18361] ? wbt_init_enable_default+0x164/0x1c0 [ 1546.625293][T18361] handle_bug+0x16a/0x2a0 [ 1546.629665][T18361] exc_invalid_op+0x17/0x50 [ 1546.634199][T18361] asm_exc_invalid_op+0x1a/0x20 [ 1546.639068][T18361] RIP: 0010:wbt_init_enable_default+0x164/0x1c0 [ 1546.645346][T18361] Code: a8 21 fd 5b 5d 41 5c 41 5d 41 5e e9 d1 4f 29 fc 4c 89 f7 e8 ce 36 8d fd eb 83 4c 89 f7 e8 c4 36 8d fd eb d0 e8 cd a8 21 fd 90 <0f> 0b 90 e9 e9 fe ff ff e8 bf a8 21 fd 90 0f 0b 90 48 b8 00 00 00 [ 1546.665255][T18361] RSP: 0018:ffffc90003677180 EFLAGS: 00010283 [ 1546.671350][T18361] RAX: 0000000000020c19 RBX: ffff888077e99000 RCX: ffffc9000e9a1000 [ 1546.679326][T18361] RDX: 0000000000080000 RSI: ffffffff84e6f153 RDI: ffffffff8c1b05a0 [ 1546.687567][T18361] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1546.695562][T18361] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802b3de8d8 [ 1546.703538][T18361] R13: ffff88802a58dbac R14: ffff888077e99390 R15: ffff88802b3de8e8 [ 1546.711531][T18361] ? wbt_init_enable_default+0x163/0x1c0 [ 1546.717203][T18361] blk_register_queue+0x42c/0x590 [ 1546.722250][T18361] __add_disk+0x73f/0xe40 [ 1546.726627][T18361] add_disk_fwnode+0x118/0x5c0 [ 1546.731427][T18361] nbd_dev_add+0x77a/0xb10 [ 1546.735883][T18361] ? find_held_lock+0x2b/0x80 [ 1546.740583][T18361] ? __pfx_nbd_dev_add+0x10/0x10 [ 1546.745547][T18361] ? nbd_genl_connect+0x131a/0x1a40 [ 1546.750950][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.756689][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.762361][T18361] ? __radix_tree_lookup+0x217/0x2b0 [ 1546.767722][T18361] nbd_genl_connect+0xb8d/0x1a40 [ 1546.772968][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.777795][T18361] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1546.783211][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.788879][T18361] ? __nla_parse+0x40/0x60 [ 1546.793326][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.798976][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.804637][T18361] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1546.811610][T18361] genl_family_rcv_msg_doit+0x214/0x300 [ 1546.817195][T18361] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1546.823303][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.828977][T18361] ? genl_get_cmd+0x3ef/0x720 [ 1546.833691][T18361] ? __dev_queue_xmit+0x5af/0x4800 [ 1546.839107][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.845000][T18361] ? __radix_tree_lookup+0x217/0x2b0 [ 1546.850434][T18361] genl_rcv_msg+0x560/0x800 [ 1546.854986][T18361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.860032][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.865696][T18361] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1546.871133][T18361] netlink_rcv_skb+0x159/0x420 [ 1546.875956][T18361] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1546.881086][T18361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1546.886429][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.891266][T18361] ? __rcu_read_unlock+0x26a/0x5e0 [ 1546.896420][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.902082][T18361] ? rcu_is_watching+0x12/0xc0 [ 1546.906872][T18361] genl_rcv+0x28/0x40 [ 1546.910874][T18361] netlink_unicast+0x5aa/0x870 [ 1546.915688][T18361] ? __pfx_netlink_unicast+0x10/0x10 [ 1546.921003][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.926862][T18361] netlink_sendmsg+0x8b0/0xda0 [ 1546.931699][T18361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.937032][T18361] ? PageHuge+0x170/0x180 [ 1546.941383][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.947058][T18361] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1546.952756][T18361] ____sys_sendmsg+0x9e1/0xb70 [ 1546.957560][T18361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.962907][T18361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1546.968221][T18361] ? __pfx_futex_wake_mark+0x10/0x10 [ 1546.973557][T18361] ___sys_sendmsg+0x190/0x1e0 [ 1546.978278][T18361] ? __pfx____sys_sendmsg+0x10/0x10 [ 1546.983498][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.989180][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1546.994867][T18361] __sys_sendmsg+0x170/0x220 [ 1546.999515][T18361] ? __pfx___sys_sendmsg+0x10/0x10 [ 1547.004662][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1547.010322][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1547.016010][T18361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1547.021670][T18361] do_syscall_64+0x106/0xf80 [ 1547.026291][T18361] ? irqentry_exit+0x138/0x670 [ 1547.031088][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.036996][T18361] RIP: 0033:0x7fe0c419c799 [ 1547.041417][T18361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.061039][T18361] RSP: 002b:00007fe0c5060028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.069467][T18361] RAX: ffffffffffffffda RBX: 00007fe0c4416180 RCX: 00007fe0c419c799 [ 1547.077447][T18361] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 1547.085455][T18361] RBP: 00007fe0c4232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1547.093502][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.101494][T18361] R13: 00007fe0c4416218 R14: 00007fe0c4416180 R15: 00007ffe62b91a88 [ 1547.109516][T18361] [ 1547.113017][T18361] Kernel Offset: disabled [ 1547.117340][T18361] Rebooting in 86400 seconds..