last executing test programs: 16m43.399094992s ago: executing program 0 (id=2114): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000e000000240012800b000100677265746170000014800280080004000800000006fb"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f000000000000000000000000000008"], 0xb4}}, 0x0) 16m42.055886321s ago: executing program 0 (id=2116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x138, 0x11, 0x148, 0x138, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0xa, 0x7}}, @common=@unspec=@cluster={{0x30}, {0x2, 0x1, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfa3, 0xc64, 0x4, '\x00', 'syz0\x00'}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x41, [0x6, 0x5, 0x0, 0x4, 0x2, 0x4], 0x5, 0x4}, {0x2, [0x7, 0x6, 0x6, 0x4, 0x6, 0x1], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 16m41.297815788s ago: executing program 0 (id=2117): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) 16m39.783069235s ago: executing program 0 (id=2118): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) 16m34.456546499s ago: executing program 0 (id=2129): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) 16m32.71745179s ago: executing program 0 (id=2131): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000880)={{r7}, "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16m16.709197058s ago: executing program 32 (id=2131): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000880)={{r7}, "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m1.706054661s ago: executing program 4 (id=2976): syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61bc550dd1dc2f01fe800000000000bbfe8000000000000000000000800000aa0c2088be000000010000010088a8000086dd080088be000000031c08c5020100000000007b40080022eb0080000223022309020000000000000300ebb41b0800655800000004000000800000000072e984acfb7b69ed51b4cab619f80615a3f47d296a4658e8b7957cc58fd13ee422855854ebd28bfbd69bedfeb92cb21c88f8b6b919fbd1d7bfd3336b1f1ed74a03fd"], 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r5 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0xb, 0x1, 0x4f424752, 0x2, 0x11, 0x5, 0x1, 0xa, 0x0, 0x1, 0x0, 0x4}}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r6, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) 9m59.82196414s ago: executing program 2 (id=2978): r0 = socket$can_raw(0x1d, 0x3, 0x1) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) close(0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000100)='\x00\x00\t\a\x00\x00\xe9\x130\nI\xed\xe7Y\v\xce\x00\x00\x00\x00\x05K\x96w\x1b}P\x00\xe9\x8e\x1e\xb8\xb9\xfed\xc8\xc6\x19\r\x91\xa2\x0e\xa9X\xad\xd1\xe8\xbe\x00\x00\x13\xb2O\x8e\xaf\x00\x90\x99\xedS5\x14\xc1\x9e\xbe\x15\xc7\xb3\xa2\x05p\x02\f\xf0\xb5\xb93\xc8\x14\x15\xa6c *\x96\xfc\xac\xcd\xbe[\xef\x0fi\xed)\xe2\x970x0}) r10 = socket(0x1d, 0x2, 0x6) r11 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r11, 0x3309) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4004000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 9m59.811310853s ago: executing program 4 (id=2979): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 9m55.24089457s ago: executing program 4 (id=2981): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0xad930b1ae15d6b13, 0x1af, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0xb0, 0x4f, 0x1a, 0x20, 0x1630, 0x42, 0x789d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19d, 0x2, 0x19, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xc6, 0x4, 0x1, 0x2, 0x2, 0xff, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "b4bde5"}, {0x5, 0x24, 0x0, 0xe25}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x400, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0x9b, 0x2}]}, @uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0xff, "6b9028bb6fbc"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf1d7, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7fff, 0xb, 0xff, "b2f3eb"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x8, "c8af06"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x1, 0x0, 0x9, "3d230c0defe26f"}]}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0x5, 0x40, 0x9}}]}}, {{0x9, 0x4, 0xdb, 0x3, 0x8, 0x0, 0xbb, 0xb7, 0x6, [@generic={0x2, 0x24}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a557de"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x916, 0x1ff, 0x31e, 0x7f}, [@mdlm_detail={0x49, 0x24, 0x13, 0x0, "0a23e902c0ccf43a7f5de3fbae0a117c6770800b653600003f23239b1c38d365b6608afe753768726bbc2eb9305f88200df5759bdcbef96f427b6f127f9baa7da98f0c8d9d"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x70, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x40, 0x7}}, {{0x9, 0x5, 0x2, 0x3, 0xbb68377409e3bf8c, 0x8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xb3f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x5, 0x1, 0xff, [@generic={0x22, 0x23, "d0a94530809636e5fe7048bd9df7520186fe0c64c2c546d2533b6c33625f2718"}, @generic={0x2, 0x11}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x65, 0x4, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x3}, @generic={0x2f, 0x9, "4724029e6f6e4d6b10fb7b6ca69fb71ef5c07e6a48be7451e4d0a2dcb36ec45d1949d346b475e393ef1676f1d6"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x9d, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x6, 0x5}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x2c, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x401}]}}]}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000b00)=ANY=[]) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x7, 0xd, 0x40, 0x4}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) r3 = syz_open_dev$evdev(0x0, 0x3214, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) 9m53.325325446s ago: executing program 2 (id=2984): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 9m53.265867221s ago: executing program 2 (id=2985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg(r0, &(0x7f00000093c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[{0x10, 0x29, 0x3}], 0x10}}], 0x1, 0x2000080c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m52.92324627s ago: executing program 2 (id=2986): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x20000051) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 9m52.685401785s ago: executing program 2 (id=2987): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000026c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000400)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m52.573277732s ago: executing program 2 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a246700000e0a050000000000000000000a0000050900010073797a31000000001c0003800c00008008000340000000020c00008008000340000000020900020073797a31"], 0x674c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 9m52.281557017s ago: executing program 33 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a246700000e0a050000000000000000000a0000050900010073797a31000000001c0003800c00008008000340000000020c00008008000340000000020900020073797a31"], 0x674c}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 9m52.058681039s ago: executing program 4 (id=2992): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 9m51.952705492s ago: executing program 4 (id=2993): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) dup2(r0, r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9m50.888796973s ago: executing program 4 (id=2994): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 9m50.401812829s ago: executing program 34 (id=2994): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 9m31.24318095s ago: executing program 3 (id=3062): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000061c0)=ANY=[@ANYBLOB="140000001400010600000000000000002b"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9m30.78724035s ago: executing program 3 (id=3065): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 9m30.544710213s ago: executing program 3 (id=3067): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x63, 0xfffffffb, 0x5}}}}]}, 0x44}}, 0x20040084) socket$unix(0x1, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x8}, {}, {0x0, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004) 9m30.121747409s ago: executing program 3 (id=3069): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 9m29.847400693s ago: executing program 3 (id=3073): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9m28.892604547s ago: executing program 3 (id=3083): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x19, 0x0, &(0x7f0000000340)) 9m28.530938963s ago: executing program 35 (id=3083): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x19, 0x0, &(0x7f0000000340)) 9m20.323834922s ago: executing program 6 (id=3152): ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000280)={0x401, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r1, 0x5, 0x70bd2b, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xfe}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}]}]}, 0x38}}, 0x4000000) 9m19.642837511s ago: executing program 6 (id=3155): 9m19.576229638s ago: executing program 6 (id=3157): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x1}]}) 9m19.437299343s ago: executing program 6 (id=3160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9m19.226407977s ago: executing program 6 (id=3162): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0xfc, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000340)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 9m18.984635865s ago: executing program 6 (id=3164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 9m3.852965745s ago: executing program 36 (id=3164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x2004, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0x10000, 0xa4, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x3, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffff7f, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2m17.737726653s ago: executing program 1 (id=4507): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) read(r0, 0x0, 0xfffffea1) close(r0) 2m16.32472838s ago: executing program 1 (id=4510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 2m13.818818244s ago: executing program 1 (id=4514): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 2m12.586858264s ago: executing program 1 (id=4516): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0ed", 0xd9}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41b", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m11.511069784s ago: executing program 1 (id=4518): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x8}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m10.277480937s ago: executing program 1 (id=4519): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') socket(0x15, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xcf27f49e3ec8fffe}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x12}, 0x4000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x5, 0x0, r4, 0x0}]) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "9d09b974e9060a3c", "46a278ba392c53fa29a17543c440dc8a", "01a55c10", "969509a9c9f65fc4"}, 0x28) 1m54.988509347s ago: executing program 37 (id=4519): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') socket(0x15, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xcf27f49e3ec8fffe}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x12}, 0x4000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x5, 0x0, r4, 0x0}]) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "9d09b974e9060a3c", "46a278ba392c53fa29a17543c440dc8a", "01a55c10", "969509a9c9f65fc4"}, 0x28) 19.34372773s ago: executing program 5 (id=4691): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 17.230443926s ago: executing program 5 (id=4695): syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x12101, 0x0) 16.856918802s ago: executing program 8 (id=4697): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 15.276544491s ago: executing program 5 (id=4699): syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/218, 0xda}, {0x0}, {&(0x7f0000000540)=""/175, 0xaf}], 0x3, &(0x7f0000000840)=""/210, 0xd2}, 0x400}], 0x1, 0x12101, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) fgetxattr(r2, &(0x7f0000000680)=@known='trusted.overlay.origin\x00', &(0x7f00000006c0)=""/59, 0x3b) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 14.089083581s ago: executing program 9 (id=4701): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) dup3(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 11.628480492s ago: executing program 5 (id=4702): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) 11.592310416s ago: executing program 8 (id=4703): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4) 10.356981448s ago: executing program 8 (id=4704): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 10.271236583s ago: executing program 9 (id=4705): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x1000000000000, 0x100009, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10.06667079s ago: executing program 5 (id=4706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {0x0}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {0x0}], 0x2, &(0x7f0000000940)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c00060000000000000000000800"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000600)=0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r3], 0x64}, 0x1, 0x0, 0x0, 0x480d4}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588382003c1"}]}}}}}}, 0xfd6c) 9.791147117s ago: executing program 9 (id=4708): socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) 9.181209843s ago: executing program 7 (id=4709): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@datasec={0xa, 0x7, 0x0, 0xf, 0x1, [{0x4, 0xd, 0x1}, {0x4, 0x10, 0x4}, {0x2, 0xf}, {0x5, 0x0, 0x7}, {0x8, 0x3, 0x5}, {0x1ff, 0x8bd, 0xa}, {0x4, 0xbc, 0x3}], "93"}, @float={0x7, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/100, 0x8b, 0x64, 0x1, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) setpgid(r6, r1) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.269036445s ago: executing program 9 (id=4710): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6.546345623s ago: executing program 7 (id=4711): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x14, 0x0, 0xfffffffe, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x2, 0x3, 0x100, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 6.489686417s ago: executing program 9 (id=4712): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000180)='D', 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2) 6.427963774s ago: executing program 8 (id=4713): rseq(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='SYNTH \'Mic\'\t '], 0x86) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.547209887s ago: executing program 8 (id=4714): syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/218, 0xda}, {0x0}, {&(0x7f0000000540)=""/175, 0xaf}], 0x3, &(0x7f0000000840)=""/210, 0xd2}, 0x400}], 0x1, 0x12101, 0x0) 3.544850826s ago: executing program 7 (id=4715): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) 3.448060518s ago: executing program 5 (id=4716): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 2.962498806s ago: executing program 7 (id=4717): r0 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0xffffe7fffffffffe, 0x3) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="fcc8c17acae48332febd6ef1c571950cee113039c7b6a7b872bd139efb64c99622d6cf0320d7d8d99d512746d3fffd16628d2d8a028aa72ab4ca31f67a115c7daa22d5eb6a4dffcc93bbbe97b8b12582349ca6e48ca7f593c729974fd7e4e48e33b3949d42eb59cab4a37b842a3ec598e776ec17a4a3be98fc2d413b37852656d56525016496273834d78a86e6f486b52da536c3efaab111fcb3ebb0ed3417b413f4bba57184eb4e79b2b7", 0xab}], 0x1}, 0x400c0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0xa3, "4b3be3a926be78d2cf7ec9af20d7a957d33a3dc183ae823ba018d61e507ad056aa9e1faf9dcd00a7c7ab3472c97f61c2578af893d391905fef44434535bd96de"}) 2.647884714s ago: executing program 8 (id=4718): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="6d932cbd7000fadb6b0701"], 0x14}, 0x1, 0x0, 0x0, 0xc815}, 0x0) 1.58054018s ago: executing program 7 (id=4719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xec1a}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0xffff, 0x9, 0x0, 0x4, 0x9, 0x3}}, {0xa, 0x2, [0x6, 0x1, 0x8]}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008000) 1.366397687s ago: executing program 9 (id=4720): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x3, [@datasec={0xa, 0x7, 0x0, 0xf, 0x1, [{0x4, 0xd, 0x1}, {0x4, 0x10, 0x4}, {0x2, 0xf}, {0x5, 0x0, 0x7}, {0x8, 0x3, 0x5}, {0x1ff, 0x8bd, 0xa}, {0x4, 0xbc, 0x3}], "93"}, @float={0x7, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/100, 0x8b, 0x64, 0x1, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) setpgid(r6, r1) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 7 (id=4721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e29f99178de6c11639ceb7a4", 0xc}, {&(0x7f0000000540)="fddf1773db588da6ac926191ee3dfb75fb140b8ce0d31c661b47b0a9371e0d487a058c9f42d9a021dc184fa0438044c20fef635da6ebe32dea0a16978c24dab8bdb5287705b4a6fcc432c716b809d2024c1a27deab8cadb755ac9552b509f45d983772082bcd74ea7fb076", 0x6b}], 0x4}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) dup(r0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 1200.497057][T17923] hsr1: entered promiscuous mode [ 1200.721287][T17930] overlayfs: missing 'lowerdir' [ 1200.909398][T17936] ubi31: attaching mtd0 [ 1200.909455][T17936] ubi31 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 1201.743651][T16386] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1201.893626][T16386] usb 10-1: Using ep0 maxpacket: 32 [ 1201.897459][T16386] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.897487][T16386] usb 10-1: config 0 has no interface number 0 [ 1201.897539][T16386] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1201.897561][T16386] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1201.900880][T16386] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1201.900911][T16386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.900932][T16386] usb 10-1: Product: syz [ 1201.900953][T16386] usb 10-1: Manufacturer: syz [ 1201.900968][T16386] usb 10-1: SerialNumber: syz [ 1201.979436][T16386] usb 10-1: config 0 descriptor?? [ 1202.202728][T16386] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1202.203201][T16386] cx231xx 10-1:0.1: Failed to read PCB config [ 1202.203265][T16386] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 1202.233952][T16386] usb 10-1: USB disconnect, device number 2 [ 1202.393643][T17020] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1202.553692][T17020] usb 8-1: Using ep0 maxpacket: 32 [ 1202.569938][T17020] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1202.569967][T17020] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1202.569988][T17020] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1202.570033][T17020] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1202.570055][T17020] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1202.570079][T17020] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1202.570119][T17020] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1202.570140][T17020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.656842][T17020] usb 8-1: config 0 descriptor?? [ 1202.713634][T16386] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1202.864884][T16386] usb 10-1: Using ep0 maxpacket: 32 [ 1202.931029][T16386] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1202.931060][T16386] usb 10-1: config 0 has no interface number 0 [ 1202.931104][T16386] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1202.931125][T16386] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1202.942186][T17020] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1202.978268][T16386] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1202.978301][T16386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.978321][T16386] usb 10-1: Product: syz [ 1202.978336][T16386] usb 10-1: Manufacturer: syz [ 1202.978351][T16386] usb 10-1: SerialNumber: syz [ 1203.049199][T16386] usb 10-1: config 0 descriptor?? [ 1203.074735][T18013] overlayfs: missing 'lowerdir' [ 1203.081890][T17020] usb 8-1: USB disconnect, device number 18 [ 1203.114438][T17020] usblp0: removed [ 1203.286142][T16386] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1203.286977][T16386] cx231xx 10-1:0.1: Failed to read PCB config [ 1203.287043][T16386] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -32 [ 1204.144941][T18040] overlayfs: missing 'lowerdir' [ 1204.534792][T17516] usb 10-1: USB disconnect, device number 3 [ 1204.611456][T18060] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1204.789767][T18060] kvm: pic: non byte read [ 1204.790068][T18060] kvm: pic: non byte read [ 1204.791138][T18060] kvm: pic: non byte read [ 1204.820579][T18060] kvm: pic: non byte read [ 1204.821271][T18060] kvm: pic: non byte read [ 1205.023728][T16386] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1205.153605][T16386] usb 10-1: device descriptor read/64, error -71 [ 1205.208655][T18084] overlayfs: missing 'lowerdir' [ 1205.343783][T17783] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1205.393659][T16386] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1205.458744][T18095] overlayfs: missing 'lowerdir' [ 1205.513345][T17783] usb 2-1: Using ep0 maxpacket: 32 [ 1205.517132][T17783] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1205.517160][T17783] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1205.517180][T17783] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1205.517249][T17783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1205.517270][T17783] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1205.517294][T17783] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1205.517335][T17783] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1205.517356][T17783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.530346][T16386] usb 10-1: device descriptor read/64, error -71 [ 1205.532602][T17783] usb 2-1: config 0 descriptor?? [ 1205.634207][T16386] usb usb10-port1: attempt power cycle [ 1205.800523][T17783] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1205.847036][T17783] usb 2-1: USB disconnect, device number 74 [ 1205.862355][T17783] usblp0: removed [ 1205.939860][T18111] syzkaller1: entered promiscuous mode [ 1205.939878][T18111] syzkaller1: entered allmulticast mode [ 1205.973946][T16386] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1205.996318][T16386] usb 10-1: device descriptor read/8, error -71 [ 1206.234729][T16386] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1206.254996][T16386] usb 10-1: device descriptor read/8, error -71 [ 1206.272449][T18122] overlayfs: missing 'workdir' [ 1206.379112][T16386] usb usb10-port1: unable to enumerate USB device [ 1206.397023][T18129] overlayfs: missing 'lowerdir' [ 1206.943038][T18148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3437'. [ 1206.970220][T18148] bond0: entered promiscuous mode [ 1206.970236][T18148] bond_slave_0: entered promiscuous mode [ 1206.970365][T18148] bond_slave_1: entered promiscuous mode [ 1206.979149][T18148] gretap0: entered promiscuous mode [ 1206.980388][T18148] debugfs: 'hsr1' already exists in 'hsr' [ 1206.980412][T18148] Cannot create hsr debugfs directory [ 1206.980428][T18148] hsr1: entered promiscuous mode [ 1206.982070][T18146] syzkaller1: entered promiscuous mode [ 1206.982091][T18146] syzkaller1: entered allmulticast mode [ 1207.085584][T18152] overlayfs: missing 'workdir' [ 1207.172484][T18155] overlayfs: missing 'lowerdir' [ 1207.254126][ T6523] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1207.423840][ T6523] usb 2-1: Using ep0 maxpacket: 32 [ 1207.424854][ T6523] usb 2-1: no configurations [ 1207.424871][ T6523] usb 2-1: can't read configurations, error -22 [ 1207.563889][ T6523] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1207.564422][T16778] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1207.725517][ T6523] usb 2-1: Using ep0 maxpacket: 32 [ 1207.726343][ T6523] usb 2-1: no configurations [ 1207.726360][ T6523] usb 2-1: can't read configurations, error -22 [ 1207.726770][ T6523] usb usb2-port1: attempt power cycle [ 1207.727045][T16778] usb 8-1: Using ep0 maxpacket: 32 [ 1207.734253][T16778] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1207.734279][T16778] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1207.734299][T16778] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1207.734345][T16778] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1207.734366][T16778] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1207.734390][T16778] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1207.734430][T16778] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1207.734452][T16778] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.759556][T16778] usb 8-1: config 0 descriptor?? [ 1207.930171][T18177] overlayfs: missing 'workdir' [ 1208.016796][T18181] overlayfs: missing 'lowerdir' [ 1208.052107][T16778] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1208.071858][T16778] usb 8-1: USB disconnect, device number 19 [ 1208.088879][T16778] usblp0: removed [ 1208.093675][ T6523] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1208.135084][ T6523] usb 2-1: Using ep0 maxpacket: 32 [ 1208.135915][ T6523] usb 2-1: no configurations [ 1208.135931][ T6523] usb 2-1: can't read configurations, error -22 [ 1208.189089][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1208.225755][T18187] bridge_slave_1: left allmulticast mode [ 1208.225777][T18187] bridge_slave_1: left promiscuous mode [ 1208.225928][T18187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.263816][ T6523] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1208.288465][ T6523] usb 2-1: Using ep0 maxpacket: 32 [ 1208.294724][ T6523] usb 2-1: no configurations [ 1208.294741][ T6523] usb 2-1: can't read configurations, error -22 [ 1208.295308][ T6523] usb usb2-port1: unable to enumerate USB device [ 1208.326414][T18187] bridge_slave_0: left allmulticast mode [ 1208.326442][T18187] bridge_slave_0: left promiscuous mode [ 1208.326689][T18187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.594843][T18191] syzkaller1: entered promiscuous mode [ 1208.594862][T18191] syzkaller1: entered allmulticast mode [ 1208.846836][T18200] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1209.259524][T18216] bridge0: port 3(syz_tun) entered blocking state [ 1209.259670][T18216] bridge0: port 3(syz_tun) entered disabled state [ 1209.259905][T18216] syz_tun: entered allmulticast mode [ 1209.303710][T18216] syz_tun: entered promiscuous mode [ 1209.327734][T18216] bridge0: port 3(syz_tun) entered blocking state [ 1209.327874][T18216] bridge0: port 3(syz_tun) entered forwarding state [ 1209.675751][T18235] syzkaller1: entered promiscuous mode [ 1209.675779][T18235] syzkaller1: entered allmulticast mode [ 1209.753609][ T5880] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1209.903599][ T5880] usb 8-1: Using ep0 maxpacket: 32 [ 1209.905790][ T5880] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1209.905807][ T5880] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1209.905827][ T5880] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1209.905861][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1209.905873][ T5880] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1209.905886][ T5880] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1209.905908][ T5880] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1209.905920][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.908792][ T5880] usb 8-1: config 0 descriptor?? [ 1210.148359][T18230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.148782][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.361743][ T5880] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1210.362524][T18256] overlayfs: failed to resolve './file0': -2 [ 1210.419963][ T5880] usb 8-1: USB disconnect, device number 20 [ 1210.507893][ T5880] usblp0: removed [ 1211.439271][T18313] vxcan1: entered promiscuous mode [ 1211.733996][T18324] binder: BINDER_SET_CONTEXT_MGR already set [ 1211.734012][T18324] binder: 18321:18324 ioctl 4018620d 200000000700 returned -16 [ 1211.853613][T16778] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1212.044995][T16778] usb 9-1: Using ep0 maxpacket: 32 [ 1212.050478][T16778] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1212.050506][T16778] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1212.050527][T16778] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1212.050574][T16778] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1212.050597][T16778] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1212.050621][T16778] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1212.050671][T16778] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1212.050693][T16778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.087680][T16778] usb 9-1: config 0 descriptor?? [ 1212.309853][T18320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.311599][T18320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.552460][T16778] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1212.580115][T16778] usb 9-1: USB disconnect, device number 2 [ 1212.633382][T16778] usblp0: removed [ 1212.682502][T18344] vxcan1: entered promiscuous mode [ 1213.033648][T18090] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1213.193920][T18090] usb 8-1: Using ep0 maxpacket: 16 [ 1213.210477][T18090] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1213.211503][T18090] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1213.211542][T18090] usb 8-1: can't read configurations, error -71 [ 1213.296609][T18361] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3521'. [ 1213.297481][T18361] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3521'. [ 1213.558128][T18372] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.558146][T18372] binder: 18371:18372 ioctl 4018620d 200000000700 returned -16 [ 1213.759738][ T5880] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1213.919760][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1213.934772][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1213.934801][ T5880] usb 2-1: config 0 has no interface number 0 [ 1213.934843][ T5880] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1213.934865][ T5880] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1213.964449][ T5880] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1213.964491][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.964513][ T5880] usb 2-1: Product: syz [ 1213.964528][ T5880] usb 2-1: Manufacturer: syz [ 1213.964544][ T5880] usb 2-1: SerialNumber: syz [ 1214.023246][ T5880] usb 2-1: config 0 descriptor?? [ 1214.255415][ T5880] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1214.259405][ T5880] cx231xx 2-1:0.1: Failed to read PCB config [ 1214.259484][ T5880] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1214.300897][ T5880] usb 2-1: USB disconnect, device number 79 [ 1214.759475][T18401] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3533'. [ 1214.760791][T18401] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3533'. [ 1214.775442][ T5880] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1214.903644][T16778] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1214.933679][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 1214.936178][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.936209][ T5880] usb 2-1: config 0 has no interface number 0 [ 1214.936282][ T5880] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1214.936303][ T5880] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1214.938881][ T5880] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1214.938909][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.938928][ T5880] usb 2-1: Product: syz [ 1214.938942][ T5880] usb 2-1: Manufacturer: syz [ 1214.938956][ T5880] usb 2-1: SerialNumber: syz [ 1215.018682][ T5880] usb 2-1: config 0 descriptor?? [ 1215.053622][T16778] usb 6-1: Using ep0 maxpacket: 8 [ 1215.056253][T16778] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1215.060292][T16778] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1215.060323][T16778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.060343][T16778] usb 6-1: Product: syz [ 1215.060357][T16778] usb 6-1: Manufacturer: syz [ 1215.060370][T16778] usb 6-1: SerialNumber: syz [ 1215.105822][T16778] usb 6-1: config 0 descriptor?? [ 1215.125425][T16778] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1215.125507][T16778] usb 6-1: setting power ON [ 1215.125527][T16778] dvb-usb: bulk message failed: -22 (2/0) [ 1215.143222][T16778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.154025][T16778] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1215.154092][T16778] usb 6-1: media controller created [ 1215.203382][T16778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.243784][ T5880] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1215.249644][ T5880] cx231xx 2-1:0.1: Failed to read PCB config [ 1215.249721][ T5880] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -32 [ 1215.305344][T16778] usb 6-1: selecting invalid altsetting 6 [ 1215.305368][T16778] usb 6-1: digital interface selection failed (-22) [ 1215.305382][T16778] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1215.306180][T16778] usb 6-1: setting power OFF [ 1215.306200][T16778] dvb-usb: bulk message failed: -22 (2/0) [ 1215.306217][T16778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1215.306230][T16778] (NULL device *): no alternate interface [ 1215.399472][T18417] fuse: Unknown parameter 'grou00000000000000000000' [ 1215.478465][T16778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1215.528538][T16778] usb 6-1: USB disconnect, device number 33 [ 1215.583576][T16779] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1215.674186][T18428] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.674196][T18428] binder: 18427:18428 ioctl 4018620d 200000000700 returned -16 [ 1215.733605][T16779] usb 8-1: Using ep0 maxpacket: 16 [ 1215.739850][T16779] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1215.740853][T16779] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1215.740885][T16779] usb 8-1: can't read configurations, error -71 [ 1216.148841][T18444] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3545'. [ 1216.150395][T18444] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3545'. [ 1216.592079][ T6523] usb 2-1: USB disconnect, device number 80 [ 1217.254147][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1217.263789][T18483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3556'. [ 1217.495878][T18493] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.495893][T18493] binder: 18492:18493 ioctl 4018620d 200000000700 returned -16 [ 1217.591641][T18498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'. [ 1217.613246][T18498] bond0: entered promiscuous mode [ 1217.613262][T18498] bond_slave_0: entered promiscuous mode [ 1217.613389][T18498] bond_slave_1: entered promiscuous mode [ 1217.626930][T18498] gretap0: entered promiscuous mode [ 1217.628467][T18498] debugfs: 'hsr1' already exists in 'hsr' [ 1217.628492][T18498] Cannot create hsr debugfs directory [ 1217.628511][T18498] hsr1: entered promiscuous mode [ 1217.693970][ T6523] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1217.783625][T16923] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1217.853955][ T6523] usb 10-1: Using ep0 maxpacket: 16 [ 1217.858998][ T6523] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1217.860027][ T6523] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1217.860060][ T6523] usb 10-1: can't read configurations, error -71 [ 1217.934034][T16923] usb 9-1: Using ep0 maxpacket: 32 [ 1217.935681][T16923] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1217.935720][T16923] usb 9-1: config 0 has no interface number 0 [ 1217.935767][T16923] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1217.935783][T16923] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1217.938027][T16923] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1217.938052][T16923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.938063][T16923] usb 9-1: Product: syz [ 1217.938070][T16923] usb 9-1: Manufacturer: syz [ 1217.938081][T16923] usb 9-1: SerialNumber: syz [ 1217.941758][T16923] usb 9-1: config 0 descriptor?? [ 1218.197609][T16923] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1218.198525][T16923] cx231xx 9-1:0.1: Failed to read PCB config [ 1218.198595][T16923] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -71 [ 1218.210495][T16923] usb 9-1: USB disconnect, device number 3 [ 1218.402853][T18525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1218.406877][T18525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1218.589034][T18530] fuse: Unknown parameter 'group_i00000000000000000000' [ 1218.693631][T16923] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1218.793561][T18543] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1218.793588][T18543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1218.795866][T18543] vhci_hcd vhci_hcd.0: Device attached [ 1218.854564][T16923] usb 9-1: Using ep0 maxpacket: 32 [ 1218.864438][T16923] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.864463][T16923] usb 9-1: config 0 has no interface number 0 [ 1218.864506][T16923] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1218.864527][T16923] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1218.870119][T16923] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1218.870148][T16923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.870168][T16923] usb 9-1: Product: syz [ 1218.870181][T16923] usb 9-1: Manufacturer: syz [ 1218.870194][T16923] usb 9-1: SerialNumber: syz [ 1218.963438][T16923] usb 9-1: config 0 descriptor?? [ 1219.073634][T16779] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1219.076709][T13877] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1219.197729][T16923] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1219.216274][T16923] cx231xx 9-1:0.1: Failed to read PCB config [ 1219.216350][T16923] cx231xx 9-1:0.1: probe with driver cx231xx failed with error -32 [ 1219.244597][T13877] usb 6-1: no configurations [ 1219.244617][T13877] usb 6-1: can't read configurations, error -22 [ 1219.373609][T13877] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1219.524741][T13877] usb 6-1: no configurations [ 1219.524760][T13877] usb 6-1: can't read configurations, error -22 [ 1219.525050][T13877] usb usb6-port1: attempt power cycle [ 1219.863599][T13877] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1219.885088][T13877] usb 6-1: no configurations [ 1219.885101][T13877] usb 6-1: can't read configurations, error -22 [ 1219.974362][T16386] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1220.023607][T13877] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1220.045404][T13877] usb 6-1: no configurations [ 1220.045424][T13877] usb 6-1: can't read configurations, error -22 [ 1220.046465][T13877] usb usb6-port1: unable to enumerate USB device [ 1220.123667][T16386] usb 2-1: Using ep0 maxpacket: 16 [ 1220.129376][T18590] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1220.130631][T18590] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1220.162960][T16386] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1220.173109][T16386] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1220.173146][T16386] usb 2-1: can't read configurations, error -71 [ 1220.345368][T18598] fuse: Unknown parameter 'group_i00000000000000000000' [ 1220.564519][T13877] usb 9-1: USB disconnect, device number 4 [ 1221.134714][T18632] fuse: Unknown parameter 'group_i00000000000000000000' [ 1221.258342][T16386] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1221.268820][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1221.325353][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1221.383605][T16386] usb 9-1: device descriptor read/64, error -71 [ 1221.633600][T16386] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1221.763625][T16386] usb 9-1: device descriptor read/64, error -71 [ 1221.783643][T16923] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1221.796995][T18546] vhci_hcd: connection reset by peer [ 1221.801612][T17338] vhci_hcd vhci_hcd.5: stop threads [ 1221.801635][T17338] vhci_hcd vhci_hcd.5: release socket [ 1221.801848][T17338] vhci_hcd vhci_hcd.5: disconnect device [ 1221.875241][T16386] usb usb9-port1: attempt power cycle [ 1221.945643][T16923] usb 8-1: Using ep0 maxpacket: 32 [ 1221.947895][T16923] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1221.947921][T16923] usb 8-1: config 0 has no interface number 0 [ 1221.947963][T16923] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1221.947985][T16923] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1221.951627][T16923] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1221.951654][T16923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.951673][T16923] usb 8-1: Product: syz [ 1221.951688][T16923] usb 8-1: Manufacturer: syz [ 1221.951701][T16923] usb 8-1: SerialNumber: syz [ 1222.031614][T16923] usb 8-1: config 0 descriptor?? [ 1222.073670][ T6523] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1222.213652][T16386] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1222.241301][T16386] usb 9-1: device descriptor read/8, error -71 [ 1222.257054][T16923] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1222.259202][ T6523] usb 10-1: Using ep0 maxpacket: 16 [ 1222.261671][T16923] cx231xx 8-1:0.1: Failed to read PCB config [ 1222.262124][ T6523] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1222.262711][T16923] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -71 [ 1222.263152][ T6523] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1222.263183][ T6523] usb 10-1: can't read configurations, error -71 [ 1222.326895][T16923] usb 8-1: USB disconnect, device number 25 [ 1222.543642][T16386] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1222.566163][T16386] usb 9-1: device descriptor read/8, error -71 [ 1222.675192][T16386] usb usb9-port1: unable to enumerate USB device [ 1222.783870][T16923] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1222.837902][T18689] fuse: Unknown parameter 'group_id00000000000000000000' [ 1222.853717][ T31] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1222.953602][T16923] usb 8-1: Using ep0 maxpacket: 32 [ 1222.959064][T16923] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.959092][T16923] usb 8-1: config 0 has no interface number 0 [ 1222.959135][T16923] usb 8-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1222.959156][T16923] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1223.003058][T16923] usb 8-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1223.003089][T16923] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.003108][T16923] usb 8-1: Product: syz [ 1223.003122][T16923] usb 8-1: Manufacturer: syz [ 1223.003137][T16923] usb 8-1: SerialNumber: syz [ 1223.003617][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1223.008246][ T31] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1223.010468][ T31] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1223.010496][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.010516][ T31] usb 2-1: Product: syz [ 1223.010531][ T31] usb 2-1: Manufacturer: syz [ 1223.010544][ T31] usb 2-1: SerialNumber: syz [ 1223.083128][ T31] usb 2-1: config 0 descriptor?? [ 1223.107669][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1223.107735][ T31] usb 2-1: setting power ON [ 1223.107753][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1223.140006][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1223.141423][T16923] usb 8-1: config 0 descriptor?? [ 1223.142361][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1223.142412][ T31] usb 2-1: media controller created [ 1223.205620][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1223.278762][ T31] usb 2-1: selecting invalid altsetting 6 [ 1223.278786][ T31] usb 2-1: digital interface selection failed (-22) [ 1223.278800][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1223.280131][ T31] usb 2-1: setting power OFF [ 1223.280152][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 1223.280168][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1223.280309][ T31] (NULL device *): no alternate interface [ 1223.296696][T18683] dvb-usb: bulk message failed: -22 (3/0) [ 1223.296721][T18683] dvb-usb: bulk message failed: -22 (3/0) [ 1223.321956][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1223.376766][T18704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1223.383333][T16923] cx231xx 8-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1223.392064][T16923] cx231xx 8-1:0.1: Failed to read PCB config [ 1223.392141][T16923] cx231xx 8-1:0.1: probe with driver cx231xx failed with error -32 [ 1223.442130][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1223.457700][ T31] usb 2-1: USB disconnect, device number 83 [ 1223.471199][T17503] udevd[17503]: setting mode of /dev/bus/usb/002/083 to 020664 failed: No such file or directory [ 1223.471356][T17503] udevd[17503]: setting owner of /dev/bus/usb/002/083 to uid=0, gid=0 failed: No such file or directory [ 1224.214305][T16779] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1224.363295][T18728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.600579][T13963] usb 8-1: USB disconnect, device number 26 [ 1225.037458][ T5858] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1225.183888][ T5858] usb 10-1: device descriptor read/64, error -71 [ 1225.463675][ T5858] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1225.593725][ T5858] usb 10-1: device descriptor read/64, error -71 [ 1225.631883][T18764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1225.684444][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1225.707594][ T5858] usb usb10-port1: attempt power cycle [ 1225.763638][T16778] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1225.915663][T16778] usb 6-1: Using ep0 maxpacket: 8 [ 1225.917451][T16778] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1225.919588][T16778] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1225.919618][T16778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.919633][T16778] usb 6-1: Product: syz [ 1225.919641][T16778] usb 6-1: Manufacturer: syz [ 1225.919648][T16778] usb 6-1: SerialNumber: syz [ 1225.925699][T16778] usb 6-1: config 0 descriptor?? [ 1225.961110][T16778] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1225.961183][T16778] usb 6-1: setting power ON [ 1225.961201][T16778] dvb-usb: bulk message failed: -22 (2/0) [ 1225.978343][T16778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.979736][T16778] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1225.979789][T16778] usb 6-1: media controller created [ 1226.023432][T16778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1226.051867][ T5858] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1226.053314][T16778] usb 6-1: selecting invalid altsetting 6 [ 1226.053335][T16778] usb 6-1: digital interface selection failed (-22) [ 1226.053349][T16778] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1226.058738][T16778] usb 6-1: setting power OFF [ 1226.058758][T16778] dvb-usb: bulk message failed: -22 (2/0) [ 1226.058775][T16778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1226.058787][T16778] (NULL device *): no alternate interface [ 1226.064988][ T5858] usb 10-1: device descriptor read/8, error -71 [ 1226.152933][T16778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1226.178235][T13963] usb 6-1: USB disconnect, device number 38 [ 1226.313620][ T5858] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1226.335583][ T5858] usb 10-1: device descriptor read/8, error -71 [ 1226.446656][ T5858] usb usb10-port1: unable to enumerate USB device [ 1227.640389][T18816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3636'. [ 1227.692767][T18820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3636'. [ 1229.683830][T13963] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1229.843179][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1229.873592][T13963] usb 8-1: Using ep0 maxpacket: 8 [ 1229.875520][T13963] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1229.875554][T13963] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1229.875579][T13963] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1229.875603][T13963] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.875652][T13963] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1229.875675][T13963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.042873][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1230.180963][T13963] usb 8-1: usb_control_msg returned -32 [ 1230.181013][T13963] usbtmc 8-1:16.0: can't read capabilities [ 1231.433607][T13877] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1231.600281][T13877] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.600310][T13877] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1231.600344][T13877] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1231.646542][T13877] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1231.646573][T13877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.646594][T13877] usb 6-1: Product: syz [ 1231.646608][T13877] usb 6-1: Manufacturer: syz [ 1231.646622][T13877] usb 6-1: SerialNumber: syz [ 1231.941039][T13877] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1231.941072][T13877] uvcvideo 6-1:220.0: No valid video chain found. [ 1231.973610][T13877] usb 6-1: USB disconnect, device number 39 [ 1232.535337][T16386] usb 8-1: USB disconnect, device number 27 [ 1233.063683][T16386] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1233.213602][T16386] usb 6-1: Using ep0 maxpacket: 8 [ 1233.219488][T16386] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1233.219522][T16386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1233.219547][T16386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1233.219577][T16386] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.219612][T16386] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1233.219635][T16386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.482895][T16386] usb 6-1: usb_control_msg returned -32 [ 1233.482943][T16386] usbtmc 6-1:16.0: can't read capabilities [ 1234.974874][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1235.066288][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1235.113167][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1235.180047][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 1235.663686][T13963] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1235.823663][T13963] usb 2-1: Using ep0 maxpacket: 8 [ 1235.826833][T13963] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1235.826866][T13963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1235.826891][T13963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.826914][T13963] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.826954][T13963] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1235.826977][T13963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.933790][T13877] usb 6-1: USB disconnect, device number 40 [ 1236.119951][T13963] usb 2-1: usb_control_msg returned -32 [ 1236.119996][T13963] usbtmc 2-1:16.0: can't read capabilities [ 1236.299671][T18985] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1236.885069][T18995] overlayfs: missing 'lowerdir' [ 1237.731769][T19009] binder: BINDER_SET_CONTEXT_MGR already set [ 1237.731780][T19009] binder: 19006:19009 ioctl 4018620d 200000000040 returned -16 [ 1238.376778][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3694'. [ 1238.445095][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3694'. [ 1238.463208][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3694'. [ 1238.477976][T16386] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1238.502905][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3694'. [ 1238.705596][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.705663][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.708457][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1238.803693][T13963] usb 2-1: USB disconnect, device number 84 [ 1238.893636][T16386] usb 6-1: Using ep0 maxpacket: 8 [ 1238.903362][T16386] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1238.903397][T16386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1238.903422][T16386] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1238.903445][T16386] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.903609][T16386] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1238.903631][T16386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.206700][T16386] usb 6-1: usb_control_msg returned -32 [ 1239.206728][T16386] usbtmc 6-1:16.0: can't read capabilities [ 1239.350713][T19042] overlayfs: missing 'lowerdir' [ 1239.822724][T19064] overlayfs: missing 'lowerdir' [ 1239.853768][T16386] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1240.003594][T16386] usb 9-1: Using ep0 maxpacket: 32 [ 1240.006064][T16386] usb 9-1: config 0 has no interfaces? [ 1240.008835][T16386] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1240.008863][T16386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.008882][T16386] usb 9-1: Product: syz [ 1240.008890][T16386] usb 9-1: Manufacturer: syz [ 1240.008898][T16386] usb 9-1: SerialNumber: syz [ 1240.020908][T16386] usb 9-1: config 0 descriptor?? [ 1240.957794][T16778] usb 9-1: USB disconnect, device number 9 [ 1241.027007][ T6523] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1241.108998][ T31] usb 6-1: USB disconnect, device number 41 [ 1241.201909][T19072] overlayfs: missing 'lowerdir' [ 1241.213640][ T6523] usb 2-1: Using ep0 maxpacket: 8 [ 1241.215931][ T6523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.215976][ T6523] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1241.216004][ T6523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.224956][ T6523] usb 2-1: config 0 descriptor?? [ 1241.693667][ T31] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1241.856879][ T31] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1241.856939][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1241.857082][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1241.857106][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.911116][ T31] usb 6-1: config 0 descriptor?? [ 1241.930233][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1242.433670][T16778] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1242.614646][T16778] usb 9-1: too many configurations: 109, using maximum allowed: 8 [ 1243.046296][T16778] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1243.046332][T16778] usb 9-1: can't read configurations, error -61 [ 1243.183634][T16778] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1243.252108][ T6523] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1243.285941][ T6523] usb 2-1: USB disconnect, device number 85 [ 1243.341969][T16778] usb 9-1: too many configurations: 109, using maximum allowed: 8 [ 1243.354652][T16778] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1243.354689][T16778] usb 9-1: can't read configurations, error -61 [ 1243.355030][T16778] usb usb9-port1: attempt power cycle [ 1243.424033][T19112] overlayfs: missing 'lowerdir' [ 1243.693614][T16778] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1243.703639][ T6523] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1243.731344][T16778] usb 9-1: too many configurations: 109, using maximum allowed: 8 [ 1243.745011][T16778] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1243.745049][T16778] usb 9-1: can't read configurations, error -61 [ 1244.593450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5880 ms [ 1244.593516][ C0] lec:lec_tx_timeout: lec0 [ 1244.607534][ T31] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1244.629003][ T6523] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1244.629020][ T6523] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1244.629031][ T6523] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1244.629058][ T6523] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1244.637124][ T6523] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1244.637152][ T6523] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1244.637175][ T6523] usb 2-1: Product: syz [ 1244.637188][ T6523] usb 2-1: Manufacturer: syz [ 1244.668990][T16778] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1244.684833][T16778] usb 9-1: too many configurations: 109, using maximum allowed: 8 [ 1244.698877][T16778] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1244.698912][T16778] usb 9-1: can't read configurations, error -61 [ 1244.700366][T16778] usb usb9-port1: unable to enumerate USB device [ 1244.760166][ T31] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1244.760196][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.760207][ T31] usb 10-1: Product: syz [ 1244.760214][ T31] usb 10-1: Manufacturer: syz [ 1244.760222][ T31] usb 10-1: SerialNumber: syz [ 1244.793187][ T5858] usb 6-1: USB disconnect, device number 42 [ 1244.799031][ T6523] cdc_wdm 2-1:1.0: skipping garbage [ 1244.799050][ T6523] cdc_wdm 2-1:1.0: skipping garbage [ 1244.799082][ T6523] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1244.956386][T18090] usb 2-1: USB disconnect, device number 86 [ 1245.113211][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1245.113280][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1245.113301][ T31] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1245.165777][ T31] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1245.783785][T18090] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1245.943682][T18090] usb 9-1: Using ep0 maxpacket: 8 [ 1245.967424][T18090] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1246.005461][ T6523] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1246.115965][T18090] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1246.115984][T18090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.115995][T18090] usb 9-1: Product: syz [ 1246.116002][T18090] usb 9-1: Manufacturer: syz [ 1246.116010][T18090] usb 9-1: SerialNumber: syz [ 1246.128296][T18090] usb 9-1: config 0 descriptor?? [ 1246.135041][T19145] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1246.186285][ T6523] usb 2-1: Using ep0 maxpacket: 8 [ 1246.193968][ T6523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.194014][ T6523] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1246.194037][ T6523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.229126][ T6523] usb 2-1: config 0 descriptor?? [ 1246.356969][T18090] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1246.357020][T18090] usb 9-1: setting power ON [ 1246.357033][T18090] dvb-usb: bulk message failed: -22 (2/0) [ 1246.408714][T18090] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1246.410044][T18090] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1246.410110][T18090] usb 9-1: media controller created [ 1246.618493][T18090] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.670510][T19136] dvb-usb: bulk message failed: -22 (3/0) [ 1246.670536][T19136] dvb-usb: bulk message failed: -22 (79/0) [ 1246.721288][T18090] usb 9-1: selecting invalid altsetting 6 [ 1246.721313][T18090] usb 9-1: digital interface selection failed (-22) [ 1246.721329][T18090] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1246.722528][T18090] usb 9-1: setting power OFF [ 1246.722549][T18090] dvb-usb: bulk message failed: -22 (2/0) [ 1246.722874][T18090] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1246.722889][T18090] (NULL device *): no alternate interface [ 1246.878750][T18090] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1246.902606][T18090] usb 9-1: USB disconnect, device number 14 [ 1246.962395][T17692] udevd[17692]: setting owner of /dev/bus/usb/009/014 to uid=0, gid=0 failed: No such file or directory [ 1246.991935][T16923] usb 10-1: USB disconnect, device number 16 [ 1247.307263][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1247.396123][T19161] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3736'. [ 1247.531807][T17502] udevd[17502]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1247.849737][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3740'. [ 1248.095421][T19179] fuse: Bad value for 'fd' [ 1248.988137][ T6523] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1249.107182][ T6523] usb 2-1: USB disconnect, device number 87 [ 1249.160660][T19173] bond0: entered promiscuous mode [ 1249.160683][T19173] bond_slave_0: entered promiscuous mode [ 1249.160894][T19173] bond_slave_1: entered promiscuous mode [ 1249.181763][T19173] gretap0: entered promiscuous mode [ 1249.187937][T19173] debugfs: 'hsr1' already exists in 'hsr' [ 1249.187964][T19173] Cannot create hsr debugfs directory [ 1249.187983][T19173] hsr1: entered promiscuous mode [ 1249.417884][T19194] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3748'. [ 1249.643729][ T6523] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1250.627588][ T6523] usb 8-1: Using ep0 maxpacket: 8 [ 1250.632546][ T6523] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1250.642364][ T6523] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1250.642393][ T6523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.642413][ T6523] usb 8-1: Product: syz [ 1250.642426][ T6523] usb 8-1: Manufacturer: syz [ 1250.642440][ T6523] usb 8-1: SerialNumber: syz [ 1250.670121][ T6523] usb 8-1: config 0 descriptor?? [ 1250.718735][ T6523] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1250.718779][ T6523] usb 8-1: setting power ON [ 1250.718791][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1250.740703][ T6523] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1250.743446][ T6523] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1250.747333][ T6523] usb 8-1: media controller created [ 1250.782264][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1250.881200][ T6523] usb 8-1: selecting invalid altsetting 6 [ 1250.881216][ T6523] usb 8-1: digital interface selection failed (-22) [ 1250.881224][ T6523] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1250.881799][T19191] dvb-usb: bulk message failed: -22 (3/0) [ 1250.881812][T19191] dvb-usb: bulk message failed: -22 (79/0) [ 1250.882819][ T6523] usb 8-1: setting power OFF [ 1250.882831][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1250.882841][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1250.882848][ T6523] (NULL device *): no alternate interface [ 1251.047972][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1251.080861][ T6523] usb 8-1: USB disconnect, device number 28 [ 1251.383639][T13877] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1251.397607][T19215] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1251.397658][T19215] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1251.543707][T13877] usb 9-1: Using ep0 maxpacket: 8 [ 1251.545680][T13877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1251.545727][T13877] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1251.545750][T13877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.552501][T13877] usb 9-1: config 0 descriptor?? [ 1253.055036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 1253.055071][ C0] lec:lec_tx_timeout: lec0 [ 1253.120207][T19249] overlayfs: missing 'lowerdir' [ 1253.166258][ T6523] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1253.229207][T19250] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1254.093601][ T6523] usb 10-1: Using ep0 maxpacket: 8 [ 1254.098211][ T6523] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1254.102747][ T6523] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1254.102778][ T6523] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.102885][ T6523] usb 10-1: Product: syz [ 1254.102900][ T6523] usb 10-1: Manufacturer: syz [ 1254.102913][ T6523] usb 10-1: SerialNumber: syz [ 1254.168214][ T6523] usb 10-1: config 0 descriptor?? [ 1254.198183][T13877] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1254.244258][ T6523] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1254.244312][ T6523] usb 10-1: setting power ON [ 1254.244331][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1254.312545][ T6523] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1254.322725][ T6523] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1254.322781][ T6523] usb 10-1: media controller created [ 1254.328280][T13877] usb 9-1: USB disconnect, device number 15 [ 1254.386232][T19246] dvb-usb: bulk message failed: -22 (3/0) [ 1254.386260][T19246] dvb-usb: bulk message failed: -22 (80/0) [ 1254.402775][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1255.014460][ T6523] usb 10-1: selecting invalid altsetting 6 [ 1255.014476][ T6523] usb 10-1: digital interface selection failed (-22) [ 1255.014484][ T6523] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1255.024491][ T6523] usb 10-1: setting power OFF [ 1255.024514][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1255.024531][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1255.024543][ T6523] (NULL device *): no alternate interface [ 1255.185632][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1255.206091][ T6523] usb 10-1: USB disconnect, device number 17 [ 1255.250590][T19281] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3780'. [ 1255.308954][T19284] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3780'. [ 1255.938079][T19301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1256.790821][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3791'. [ 1256.792160][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3791'. [ 1257.203659][ T6523] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1257.323662][T13877] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1257.357243][ T6523] usb 8-1: Using ep0 maxpacket: 8 [ 1257.359347][ T6523] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 1257.362015][ T6523] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1257.362042][ T6523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.362062][ T6523] usb 8-1: Product: syz [ 1257.362076][ T6523] usb 8-1: Manufacturer: syz [ 1257.362090][ T6523] usb 8-1: SerialNumber: syz [ 1257.375926][ T6523] usb 8-1: config 0 descriptor?? [ 1257.392241][ T6523] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1257.392292][ T6523] usb 8-1: setting power ON [ 1257.392311][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1257.399019][ T6523] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1257.399820][ T6523] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1257.399870][ T6523] usb 8-1: media controller created [ 1257.414961][ T6523] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1257.431796][ T6523] usb 8-1: selecting invalid altsetting 6 [ 1257.431818][ T6523] usb 8-1: digital interface selection failed (-22) [ 1257.431832][ T6523] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1257.432622][ T6523] usb 8-1: setting power OFF [ 1257.432641][ T6523] dvb-usb: bulk message failed: -22 (2/0) [ 1257.432656][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1257.432668][ T6523] (NULL device *): no alternate interface [ 1257.478966][T13877] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1257.479021][T13877] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1257.479046][T13877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1257.479071][T13877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1257.479093][T13877] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1257.479132][T13877] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1257.479154][T13877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.492889][T13877] usb 9-1: config 0 descriptor?? [ 1257.525384][ T6523] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1257.652763][ T6523] usb 8-1: USB disconnect, device number 29 [ 1258.112647][T19337] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1258.299102][T13877] usbhid 9-1:0.0: can't add hid device: -71 [ 1258.299221][T13877] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1258.309659][T13877] usb 9-1: USB disconnect, device number 16 [ 1258.783691][T13877] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1258.956164][T13877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.956201][T13877] usb 2-1: config 0 has no interfaces? [ 1258.956229][T13877] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1258.956250][T13877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.965036][T13877] usb 2-1: config 0 descriptor?? [ 1260.394335][T19370] binder: 19369:19370 ioctl 4018620d 0 returned -22 [ 1260.580947][T19374] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1260.580974][T19374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.659742][T19374] vhci_hcd vhci_hcd.0: Device attached [ 1260.893640][T13877] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1260.893788][ T31] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1261.086057][T13877] usb 8-1: config 0 has no interfaces? [ 1261.086083][T13877] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1261.086096][T13877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.089814][T13877] usb 8-1: config 0 descriptor?? [ 1261.259110][T13675] Bluetooth: hci1: command 0x0406 tx timeout [ 1261.303275][T19375] vhci_hcd: cannot find a urb of seqnum 64 max seqnum 1 [ 1261.303811][T19180] vhci_hcd vhci_hcd.7: stop threads [ 1261.303828][T19180] vhci_hcd vhci_hcd.7: release socket [ 1261.303898][T19180] vhci_hcd vhci_hcd.7: disconnect device [ 1261.305330][ T6523] usb 8-1: USB disconnect, device number 30 [ 1261.581215][T16386] usb 2-1: USB disconnect, device number 88 [ 1261.694064][T19399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1261.753669][T13963] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1261.904901][T13963] usb 6-1: Using ep0 maxpacket: 8 [ 1261.908322][T13963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1261.908370][T13963] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1261.908393][T13963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.970729][T13963] usb 6-1: config 0 descriptor?? [ 1262.346667][T13963] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1263.237009][T19416] tipc: Enabling of bearer rejected, failed to enable media [ 1263.237743][T19416] syzkaller0: entered promiscuous mode [ 1263.237766][T19416] syzkaller0: entered allmulticast mode [ 1264.135108][T19431] binder: 19430:19431 ioctl 4018620d 0 returned -22 [ 1264.474632][T13963] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1264.831618][T13877] usb 6-1: USB disconnect, device number 43 [ 1264.929806][T13963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.929835][T13963] usb 2-1: config 0 has no interfaces? [ 1264.929865][T13963] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1264.929965][T13963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.973197][T13963] usb 2-1: config 0 descriptor?? [ 1265.817372][T19464] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1266.175200][ T31] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1268.260107][T13877] usb 2-1: USB disconnect, device number 89 [ 1268.303676][T16778] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1268.367393][T19477] binder: 19476:19477 ioctl 4018620d 0 returned -22 [ 1268.412837][T19479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3849'. [ 1268.463643][T16778] usb 9-1: Using ep0 maxpacket: 8 [ 1268.465611][T16778] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.465652][T16778] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1268.465666][T16778] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.472071][T16778] usb 9-1: config 0 descriptor?? [ 1268.754034][T16778] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1269.882972][T19499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.094441][T13963] usb 9-1: USB disconnect, device number 17 [ 1271.552664][T13963] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1271.757402][T19514] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1272.580896][T13963] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.580924][T13963] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1272.580962][T13963] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1272.580986][T13963] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.592102][T13963] usb 9-1: config 0 descriptor?? [ 1272.767304][T19523] binder: BINDER_SET_CONTEXT_MGR already set [ 1272.767319][T19523] binder: 19521:19523 ioctl 4018620d 200000000700 returned -16 [ 1273.423789][T19540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.315247][T16386] usb 9-1: USB disconnect, device number 18 [ 1275.853632][T16778] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1276.006275][T16778] usb 10-1: Using ep0 maxpacket: 8 [ 1276.013687][T16778] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.013798][T16778] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1276.013823][T16778] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.028780][T16778] usb 10-1: config 0 descriptor?? [ 1277.137600][T16778] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1277.843868][ T31] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1279.230572][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.230601][ T31] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1279.230639][ T31] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1279.230664][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.366217][T16386] usb 10-1: USB disconnect, device number 18 [ 1279.429047][ T31] usb 8-1: config 0 descriptor?? [ 1280.873608][T16386] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1280.875421][ T6523] usb 8-1: USB disconnect, device number 31 [ 1281.047059][T16386] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1281.047114][T16386] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1281.047141][T16386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1281.047167][T16386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1281.047192][T16386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1281.047233][T16386] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1281.047256][T16386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.143675][T16386] usb 2-1: config 0 descriptor?? [ 1281.281099][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3889'. [ 1281.281136][T19596] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3889'. [ 1281.489311][T19600] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1281.567636][T16386] hid_parser_main: 5 callbacks suppressed [ 1281.567663][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.567696][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.567725][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.567752][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.567778][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.567806][T16386] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1281.714382][T16386] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1281.820382][T16386] usb 2-1: USB disconnect, device number 90 [ 1281.903942][T19603] fido_id[19603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1282.563498][T19608] Invalid logical block size (8192) [ 1285.423305][T19631] binder: 19628:19631 unknown command 0 [ 1285.423327][T19631] binder: 19628:19631 ioctl c0306201 200000000080 returned -22 [ 1286.853678][T16424] Bluetooth: hci0: command 0x0406 tx timeout [ 1286.923876][T19649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.063650][T16386] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1287.254649][T19657] netlink: 'syz.1.3908': attribute type 8 has an invalid length. [ 1287.254669][T19657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1288.065933][T16386] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1288.065994][T16386] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1288.066022][T16386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1288.066049][T16386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1288.066073][T16386] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1288.066114][T16386] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.066137][T16386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.158766][T16386] usb 6-1: config 0 descriptor?? [ 1288.569254][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.569291][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.569320][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.569347][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.569375][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.569416][T16386] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1288.698161][T16386] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1288.838109][ T31] usb 6-1: USB disconnect, device number 44 [ 1288.862254][T19664] fido_id[19664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1289.198890][T19670] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1289.735410][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1293.007950][T19709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.663649][T17783] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1293.857743][T17783] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1293.857811][T17783] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.857838][T17783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.857865][T17783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1293.857888][T17783] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.857929][T17783] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.857951][T17783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.948619][T17783] usb 8-1: config 0 descriptor?? [ 1294.548262][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3925'. [ 1294.850725][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.850765][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.850794][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.850822][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.850850][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.850877][T17783] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 1294.939452][T17783] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1295.102553][T17783] usb 8-1: USB disconnect, device number 32 [ 1295.127324][T19720] fido_id[19720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1297.528142][T19752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.502157][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1300.328101][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.328168][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.346450][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1300.395887][T16386] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1300.543994][T16386] usb 2-1: Using ep0 maxpacket: 32 [ 1300.546257][T16386] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1300.546285][T16386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.546305][T16386] usb 2-1: config 0 has no interface number 0 [ 1300.546348][T16386] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1300.546371][T16386] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1300.549091][T16386] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1300.549119][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.549141][T16386] usb 2-1: Product: syz [ 1300.549156][T16386] usb 2-1: Manufacturer: syz [ 1300.549172][T16386] usb 2-1: SerialNumber: syz [ 1300.651695][T16386] usb 2-1: config 0 descriptor?? [ 1300.801861][T19777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1300.886479][T16386] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1300.886512][T16386] cx231xx 2-1:0.1: Not found matching IAD interface [ 1300.914790][T16386] usb 2-1: USB disconnect, device number 91 [ 1301.933673][T16386] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1302.083784][T16386] usb 2-1: Using ep0 maxpacket: 32 [ 1302.335234][T16386] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1302.335364][T16386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.335797][T16386] usb 2-1: config 0 has no interface number 0 [ 1302.336507][T16386] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1302.336974][T16386] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1302.571862][T16386] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1302.571895][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.571915][T16386] usb 2-1: Product: syz [ 1302.571930][T16386] usb 2-1: Manufacturer: syz [ 1302.571945][T16386] usb 2-1: SerialNumber: syz [ 1302.592923][T16386] usb 2-1: config 0 descriptor?? [ 1302.837020][T16386] usb 2-1: can't set config #0, error -71 [ 1302.874257][T16386] usb 2-1: USB disconnect, device number 92 [ 1303.536467][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1305.893544][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 1305.893581][ C0] lec:lec_tx_timeout: lec0 [ 1307.415773][T16424] Bluetooth: hci4: command 0x0406 tx timeout [ 1309.579252][T19846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.672798][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1316.803620][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1317.005790][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.005825][ T10] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1317.005838][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.048525][ T10] usb 10-1: config 0 descriptor?? [ 1317.077481][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1317.448765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1317.454493][ C0] lec:lec_tx_timeout: lec0 [ 1317.697258][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1317.698896][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1317.708229][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1317.751800][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1317.752503][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1317.753145][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1317.775684][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1317.790105][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1317.792535][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1317.793403][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1317.825073][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1317.825417][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1317.825537][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1317.827759][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1317.827884][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1317.828349][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1317.828489][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1317.861273][T19894] netlink: 'syz.5.3978': attribute type 10 has an invalid length. [ 1317.861288][T19894] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3978'. [ 1317.958759][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1317.959098][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 1317.959640][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1318.100357][ T10] pwc: Registered as video103. [ 1318.124336][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input13 [ 1318.130318][ T10] usb 10-1: USB disconnect, device number 19 [ 1324.943646][T16386] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1325.099088][T16386] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1325.099115][T16386] usb 9-1: config 0 has no interface number 0 [ 1325.132196][T16386] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1325.132215][T16386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.132226][T16386] usb 9-1: Product: syz [ 1325.132234][T16386] usb 9-1: Manufacturer: syz [ 1325.132242][T16386] usb 9-1: SerialNumber: syz [ 1325.167690][T16386] usb 9-1: config 0 descriptor?? [ 1325.401262][T16386] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1326.477717][T16386] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1326.478047][T16386] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1326.478093][T16386] usb 9-1: media controller created [ 1326.534144][T16386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1326.589712][T16386] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1326.673841][T16386] usb 9-1: USB disconnect, device number 19 [ 1327.607197][T19948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.956214][T19968] netlink: 'syz.5.4005': attribute type 10 has an invalid length. [ 1328.956230][T19968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1328.991581][T19970] fuse: Unknown parameter 'grou00000000000000000000' [ 1333.772220][T19991] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1336.312679][T20005] netlink: 'syz.1.4014': attribute type 10 has an invalid length. [ 1336.312693][T20005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4014'. [ 1336.313594][T20005] batman_adv: batadv0: Adding interface: vlan1 [ 1336.313603][T20005] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.313622][T20005] batman_adv: batadv0: Interface activated: vlan1 [ 1338.358899][T20015] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4015'. [ 1338.697197][T20021] binder: 20018:20021 ioctl 4018620d 0 returned -22 [ 1339.729954][T20025] fuse: Unknown parameter 'grou00000000000000000000' [ 1342.293623][T16386] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1342.473595][T16386] usb 2-1: Using ep0 maxpacket: 32 [ 1343.143622][T16386] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1343.143652][T16386] usb 2-1: config 0 has no interface number 0 [ 1343.143725][T16386] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1343.143748][T16386] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1343.149157][T16386] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1343.149187][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.149208][T16386] usb 2-1: Product: syz [ 1343.149224][T16386] usb 2-1: Manufacturer: syz [ 1343.149239][T16386] usb 2-1: SerialNumber: syz [ 1343.296549][T16386] usb 2-1: config 0 descriptor?? [ 1343.601099][T16386] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1343.601506][T16386] cx231xx 2-1:0.1: Failed to read PCB config [ 1343.601548][T16386] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1343.603259][T16386] usb 2-1: USB disconnect, device number 93 [ 1344.093609][T16386] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1344.273607][T16386] usb 2-1: Using ep0 maxpacket: 32 [ 1344.275815][T16386] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1344.275840][T16386] usb 2-1: config 0 has no interface number 0 [ 1344.275884][T16386] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1344.275906][T16386] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1344.325557][T16386] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1344.325588][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.325608][T16386] usb 2-1: Product: syz [ 1344.325623][T16386] usb 2-1: Manufacturer: syz [ 1344.325639][T16386] usb 2-1: SerialNumber: syz [ 1344.330819][T16386] usb 2-1: config 0 descriptor?? [ 1344.785278][T16386] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1344.790921][T16386] cx231xx 2-1:0.1: Failed to read PCB config [ 1344.790982][T16386] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -32 [ 1344.798068][T20056] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1344.973695][T18090] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1345.134444][T18090] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1345.134476][T18090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.134497][T18090] usb 9-1: Product: syz [ 1345.134512][T18090] usb 9-1: Manufacturer: syz [ 1345.134527][T18090] usb 9-1: SerialNumber: syz [ 1345.687856][T18090] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1345.687920][T18090] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1345.857116][ T31] usb 2-1: USB disconnect, device number 94 [ 1346.561906][T18090] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1346.562011][T18090] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1346.600895][T18090] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1346.699354][T18090] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1347.756706][ T10] usb 9-1: USB disconnect, device number 20 [ 1349.966103][T20093] overlayfs: failed to resolve './file1': -2 [ 1350.171117][T20100] fuse: Unknown parameter 'grou00000000000000000000' [ 1350.918231][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1351.383947][T20106] Invalid logical block size (8192) [ 1354.473577][T18090] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1355.784435][T20132] overlayfs: failed to resolve './file1': -2 [ 1355.827978][T18090] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1355.828010][T18090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.828031][T18090] usb 6-1: Product: syz [ 1355.828046][T18090] usb 6-1: Manufacturer: syz [ 1355.828060][T18090] usb 6-1: SerialNumber: syz [ 1356.318086][T18090] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1356.318148][T18090] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1357.174191][T18090] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1357.174249][T18090] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1357.175028][T18090] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1357.215319][T18090] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1357.402531][T20145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.728269][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1358.265390][T18090] usb 6-1: USB disconnect, device number 45 [ 1358.276333][T16386] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1358.506848][T16386] usb 8-1: Using ep0 maxpacket: 8 [ 1358.597246][T16386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1358.597285][T16386] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1358.597305][T16386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.844482][T16386] usb 8-1: config 0 descriptor?? [ 1358.866985][T16386] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1361.411227][T16778] usb 8-1: USB disconnect, device number 33 [ 1361.523961][T20185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4071'. [ 1361.595809][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.595877][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.598749][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1361.693619][T17783] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1361.863706][T17783] usb 6-1: Using ep0 maxpacket: 8 [ 1361.866096][T17783] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1361.866130][T17783] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1361.866157][T17783] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1361.866181][T17783] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1361.866222][T17783] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1361.866254][T17783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.883638][T16386] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1362.049158][T16386] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1362.049190][T16386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.049271][T16386] usb 2-1: Product: syz [ 1362.049287][T16386] usb 2-1: Manufacturer: syz [ 1362.049301][T16386] usb 2-1: SerialNumber: syz [ 1362.156268][T17783] usb 6-1: usb_control_msg returned -32 [ 1362.156316][T17783] usbtmc 6-1:16.0: can't read capabilities [ 1362.611441][T16386] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1362.611501][T16386] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1363.534144][T20207] fuse: Unknown parameter 'group_i00000000000000000000' [ 1363.574176][T16386] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1363.574231][T16386] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1363.575550][T16386] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1363.620281][T16386] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1365.020481][T13877] usb 2-1: USB disconnect, device number 95 [ 1365.028224][T17783] usb 6-1: USB disconnect, device number 46 [ 1365.788703][T20221] netlink: 'syz.1.4082': attribute type 10 has an invalid length. [ 1365.788718][T20221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1365.816915][T20225] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4084'. [ 1365.816952][T20225] netlink: 'syz.8.4084': attribute type 8 has an invalid length. [ 1365.933645][T17783] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1366.093802][T17783] usb 6-1: Using ep0 maxpacket: 8 [ 1366.096457][T17783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1366.096498][T17783] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1366.096522][T17783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.168367][T17783] usb 6-1: config 0 descriptor?? [ 1366.210695][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4085'. [ 1366.654084][T17783] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1366.753659][ T31] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1366.853568][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1366.853601][ C0] lec:lec_tx_timeout: lec0 [ 1366.906837][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 1366.906863][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1366.913865][ T31] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1366.913893][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.913912][ T31] usb 2-1: Product: syz [ 1366.913927][ T31] usb 2-1: Manufacturer: syz [ 1366.913941][ T31] usb 2-1: SerialNumber: syz [ 1366.919769][ T31] usb 2-1: config 0 descriptor?? [ 1366.955726][ T31] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1367.486994][T20222] udevd[20222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1368.541076][T13963] usb 6-1: USB disconnect, device number 47 [ 1368.846635][T20251] fuse: Unknown parameter 'group_i00000000000000000000' [ 1369.541025][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1369.541577][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4083'. [ 1371.853665][T16779] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1372.032332][T16779] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1372.032366][T16779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.032388][T16779] usb 8-1: Product: syz [ 1372.032403][T16779] usb 8-1: Manufacturer: syz [ 1372.032419][T16779] usb 8-1: SerialNumber: syz [ 1372.636836][T16779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1372.637361][T16779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1373.204602][T16386] usb 2-1: USB disconnect, device number 96 [ 1373.743724][T16386] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1373.787631][T16779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1373.787665][T16779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1373.788084][T16779] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1373.868815][T16779] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1373.903604][T16386] usb 2-1: Using ep0 maxpacket: 8 [ 1373.905511][T16386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1373.905553][T16386] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1373.905572][T16386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.909931][T16386] usb 2-1: config 0 descriptor?? [ 1373.981862][T16386] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1374.787863][T16779] usb 8-1: USB disconnect, device number 34 [ 1374.837089][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1374.924882][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1375.195233][T20295] fuse: Unknown parameter 'group_i00000000000000000000' [ 1378.335769][T16778] usb 2-1: USB disconnect, device number 97 [ 1379.843603][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1379.843626][ C0] lec:lec_tx_timeout: lec0 [ 1380.896705][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4114'. [ 1384.403633][ T6523] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1384.630415][ T6523] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1384.630446][ T6523] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.630465][ T6523] usb 6-1: Product: syz [ 1384.630479][ T6523] usb 6-1: Manufacturer: syz [ 1384.630493][ T6523] usb 6-1: SerialNumber: syz [ 1387.053847][ T6523] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1387.053887][ T6523] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1387.184368][T20356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1388.459932][ T6523] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1388.460205][ T6523] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1388.608015][ T6523] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1388.822159][ T6523] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 1389.252243][T16778] usb 6-1: USB disconnect, device number 48 [ 1389.329172][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1392.330968][T20380] binder: BINDER_SET_CONTEXT_MGR already set [ 1392.330984][T20380] binder: 20378:20380 ioctl 4018620d 200000000700 returned -16 [ 1392.335295][T20380] binder: 20378:20380 ioctl c0306201 0 returned -14 [ 1394.516584][T20394] netlink: 'syz.8.4134': attribute type 10 has an invalid length. [ 1394.516600][T20394] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4134'. [ 1394.517436][T20394] batman_adv: batadv0: Adding interface: vlan1 [ 1394.517445][T20394] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.517462][T20394] batman_adv: batadv0: Interface activated: vlan1 [ 1398.307037][T13963] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1398.464082][T13963] usb 10-1: Using ep0 maxpacket: 32 [ 1398.468073][T13963] usb 10-1: config 0 has no interfaces? [ 1398.470690][T13963] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1398.470719][T13963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.470738][T13963] usb 10-1: Product: syz [ 1398.470750][T13963] usb 10-1: Manufacturer: syz [ 1398.470759][T13963] usb 10-1: SerialNumber: syz [ 1398.557204][T13963] usb 10-1: config 0 descriptor?? [ 1398.869195][T13963] usb 10-1: USB disconnect, device number 20 [ 1399.036253][T20427] binder: 20426:20427 ioctl c0306201 0 returned -14 [ 1402.243237][T20452] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1403.479312][T20460] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1419.683558][T20557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1420.051584][T20570] overlayfs: missing 'lowerdir' [ 1422.039687][T20602] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1422.892827][T20603] overlayfs: missing 'lowerdir' [ 1423.027993][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.028033][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.029582][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1423.830985][T20622] netlink: 'syz.9.4203': attribute type 10 has an invalid length. [ 1423.831000][T20622] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4203'. [ 1423.831928][T20622] batman_adv: batadv0: Adding interface: vlan1 [ 1423.831937][T20622] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.831955][T20622] batman_adv: batadv0: Interface activated: vlan1 [ 1428.853541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.853572][ C0] lec:lec_tx_timeout: lec0 [ 1434.708715][T20678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4219'. [ 1434.887241][T20682] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1437.221134][T20691] binder: 20690:20691 ioctl c0306201 0 returned -14 [ 1438.687127][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1440.203579][T20712] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4232'. [ 1443.581992][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1443.813537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 1443.813568][ C0] lec:lec_tx_timeout: lec0 [ 1445.265425][T20751] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1445.265440][T20751] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1445.444962][T20753] netlink: 'syz.1.4246': attribute type 10 has an invalid length. [ 1445.444976][T20753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4246'. [ 1445.962657][T20762] binder: BINDER_SET_CONTEXT_MGR already set [ 1445.962668][T20762] binder: 20761:20762 ioctl 4018620d 200000004a80 returned -16 [ 1446.751883][T20766] binder: 20761:20766 ioctl c0306201 0 returned -14 [ 1446.836475][T20767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4249'. [ 1447.523796][T16424] Bluetooth: hci4: command 0x0406 tx timeout [ 1449.098435][T20786] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1450.018541][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4257'. [ 1450.189731][T20794] binder: 20790:20794 ioctl c0306201 0 returned -14 [ 1455.801926][T20832] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1457.034798][T20835] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4273'. [ 1457.932498][T20842] binder: BINDER_SET_CONTEXT_MGR already set [ 1457.932541][T20842] binder: 20839:20842 ioctl 4018620d 200000004a80 returned -16 [ 1462.301271][T20869] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1464.401608][T20875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4285'. [ 1469.389673][T20919] fuse: Unknown parameter '0x0000000000000006' [ 1470.873697][T13877] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 1471.386110][T13877] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.386141][T13877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1471.386174][T13877] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1471.386324][T13877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.544767][T13877] usb 6-1: config 0 descriptor?? [ 1472.160219][T13877] kye 0003:0458:0153.001B: item fetching failed at offset 2/5 [ 1472.171374][T13877] kye 0003:0458:0153.001B: parse failed [ 1472.181626][T13877] kye 0003:0458:0153.001B: probe with driver kye failed with error -22 [ 1473.533309][T13877] usb 6-1: USB disconnect, device number 49 [ 1476.013911][T17783] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1476.315877][T17783] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.315927][T17783] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1476.315951][T17783] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.321187][T17783] usb 8-1: config 0 descriptor?? [ 1476.433631][T20968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.028384][T17783] usbhid 8-1:0.0: can't add hid device: -71 [ 1477.028496][T17783] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1477.032499][T17783] usb 8-1: USB disconnect, device number 35 [ 1477.559922][T20980] fuse: Unknown parameter 'fd0x0000000000000006' [ 1477.718690][T20981] overlay: Unknown parameter '/' [ 1478.329214][T20982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1479.652709][T20986] netlink: 'syz.9.4316': attribute type 10 has an invalid length. [ 1479.652724][T20986] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4316'. [ 1481.755234][T17783] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1481.920505][T17783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1481.920555][T17783] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1481.920579][T17783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.010460][T17783] usb 9-1: config 0 descriptor?? [ 1482.226083][T21008] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1482.686489][T17783] elan 0003:04F3:0755.001C: unknown main item tag 0x0 [ 1482.686513][T17783] elan 0003:04F3:0755.001C: item fetching failed at offset 3/5 [ 1482.686862][T17783] elan 0003:04F3:0755.001C: Hid Parse failed [ 1482.686913][T17783] elan 0003:04F3:0755.001C: probe with driver elan failed with error -22 [ 1482.939417][T21014] fuse: Unknown parameter 'fd0x0000000000000006' [ 1483.825568][ T6523] usb 9-1: USB disconnect, device number 21 [ 1484.251412][T21019] overlay: Unknown parameter '/' [ 1484.394607][T21020] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1484.876797][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.876865][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.880078][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1485.814956][T21038] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1488.243595][T21054] fuse: Unknown parameter 'fd0x0000000000000006' [ 1488.273187][T21055] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1490.752497][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5870 ms [ 1490.752531][ C0] lec:lec_tx_timeout: lec0 [ 1491.190317][T21075] overlay: Unknown parameter '/' [ 1491.330973][T21076] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1493.739028][ T37] audit: type=1326 audit(1772050294.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.739488][ T37] audit: type=1326 audit(1772050294.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.739839][ T37] audit: type=1326 audit(1772050294.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.740172][ T37] audit: type=1326 audit(1772050294.973:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.741534][ T37] audit: type=1326 audit(1772050294.973:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.741861][ T37] audit: type=1326 audit(1772050294.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.935448][ T37] audit: type=1326 audit(1772050294.993:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1493.935720][ T37] audit: type=1326 audit(1772050294.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21092 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652094c629 code=0x7ffc0000 [ 1495.458253][T21102] netlink: 'syz.5.4350': attribute type 10 has an invalid length. [ 1495.458269][T21102] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4350'. [ 1502.395119][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1502.921915][T21156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1507.530966][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 1507.530998][ C0] lec:lec_tx_timeout: lec0 [ 1509.333904][T21194] netlink: 'syz.1.4373': attribute type 10 has an invalid length. [ 1509.333919][T21194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4373'. [ 1516.718245][T21259] netlink: 'syz.7.4388': attribute type 10 has an invalid length. [ 1516.718291][T21259] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4388'. [ 1516.939839][T21259] batman_adv: batadv0: Adding interface: vlan1 [ 1516.939853][T21259] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.939877][T21259] batman_adv: batadv0: Interface activated: vlan1 [ 1522.025767][T21302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.048714][ T31] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1522.074520][ T31] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1523.577589][ T31] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1523.916993][ T31] usb 6-1: config 0 has no interfaces? [ 1523.932532][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1523.932553][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1523.932564][ T31] usb 6-1: SerialNumber: syz [ 1523.935348][ T31] usb 6-1: config 0 descriptor?? [ 1526.605943][T21317] netlink: 'syz.7.4409': attribute type 10 has an invalid length. [ 1526.605958][T21317] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4409'. [ 1526.717242][T21324] netlink: 'syz.8.4411': attribute type 10 has an invalid length. [ 1526.717280][T21324] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4411'. [ 1529.594549][ T6523] usb 6-1: USB disconnect, device number 50 [ 1536.195949][T21376] netlink: 'syz.8.4425': attribute type 10 has an invalid length. [ 1536.196072][T21376] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4425'. [ 1538.071317][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1538.257301][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1540.626452][T21408] netlink: 'syz.9.4436': attribute type 10 has an invalid length. [ 1540.627470][T21408] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1543.341036][T21416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1544.599194][ T10] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 1544.599220][ T10] usb 2-1: can't read configurations, error -110 [ 1545.874829][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.874898][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.877618][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1551.050467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 1551.050500][ C0] lec:lec_tx_timeout: lec0 [ 1557.254280][T21502] netlink: 'syz.5.4460': attribute type 10 has an invalid length. [ 1557.254302][T21502] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1565.699115][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1567.855660][T21564] netlink: 'syz.1.4475': attribute type 10 has an invalid length. [ 1567.855698][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4475'. [ 1571.028888][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1571.028921][ C0] lec:lec_tx_timeout: lec0 [ 1585.611966][T21651] netlink: 'syz.8.4500': attribute type 10 has an invalid length. [ 1585.611984][T21651] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4500'. [ 1590.198457][T21675] Bluetooth: MGMT ver 1.23 [ 1592.605120][T21686] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1594.017102][T21697] trusted_key: encrypted_key: insufficient parameters specified [ 1606.560093][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.560159][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.568252][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1609.329707][T21779] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1612.060278][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1612.060360][ C0] lec:lec_tx_timeout: lec0 [ 1615.201072][T16424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1615.229511][T16424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1615.229776][T16424] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1615.248851][T16424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1615.249572][T16424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.780107][T16424] Bluetooth: hci2: command tx timeout [ 1620.425613][T16424] Bluetooth: hci2: command tx timeout [ 1621.134582][T21815] chnl_net:caif_netlink_parms(): no params data found [ 1621.843841][T21815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.919280][T21815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.919517][T21815] bridge_slave_0: entered allmulticast mode [ 1621.925241][T21815] bridge_slave_0: entered promiscuous mode [ 1622.476772][T16424] Bluetooth: hci2: command tx timeout [ 1623.503819][T21815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.505439][T21815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.505614][T21815] bridge_slave_1: entered allmulticast mode [ 1623.534519][T21815] bridge_slave_1: entered promiscuous mode [ 1624.539944][T16424] Bluetooth: hci2: command tx timeout [ 1624.841378][T21815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.065628][T17338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.366333][T21815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.928499][T21901] overlayfs: overlapping lowerdir path [ 1629.099238][T17338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.880104][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1629.988479][T21815] team0: Port device team_slave_0 added [ 1630.032177][T21815] team0: Port device team_slave_1 added [ 1630.349802][T21919] overlayfs: overlapping lowerdir path [ 1635.029668][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5150 ms [ 1635.029705][ C0] lec:lec_tx_timeout: lec0 [ 1635.375011][T17338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.003710][T21815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.003727][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.003753][T21815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.006741][T21947] netlink: 'syz.7.4576': attribute type 10 has an invalid length. [ 1636.006754][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4576'. [ 1637.049637][T21815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.049658][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.049684][T21815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1639.721132][T17338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.151506][T21815] hsr_slave_0: entered promiscuous mode [ 1641.206936][T21815] hsr_slave_1: entered promiscuous mode [ 1641.207923][T21815] debugfs: 'hsr0' already exists in 'hsr' [ 1641.207948][T21815] Cannot create hsr debugfs directory [ 1645.490393][T17338] bridge_slave_1: left allmulticast mode [ 1645.490422][T17338] bridge_slave_1: left promiscuous mode [ 1645.490666][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.371125][T17338] bridge_slave_0: left allmulticast mode [ 1647.371154][T17338] bridge_slave_0: left promiscuous mode [ 1647.371405][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.669344][T17338] gretap0 (unregistering): left promiscuous mode [ 1654.351472][T22066] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4607'. [ 1654.442806][T17338] bond0 (unregistering): left promiscuous mode [ 1654.442830][T17338] bond_slave_0: left promiscuous mode [ 1654.443069][T17338] bond_slave_1: left promiscuous mode [ 1654.886407][T16779] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1655.222041][T17338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.243451][T16779] usb 6-1: device descriptor read/64, error -71 [ 1655.410307][T17338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.473293][T17338] bond0 (unregistering): Released all slaves [ 1655.485900][T16779] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1655.742552][T16779] usb 6-1: device descriptor read/64, error -71 [ 1655.850032][T16779] usb usb6-port1: attempt power cycle [ 1656.253771][T16779] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1659.945627][T16779] usb 6-1: device descriptor read/8, error -71 [ 1660.079643][ T6523] IPVS: starting estimator thread 0... [ 1660.169675][T22114] IPVS: using max 16 ests per chain, 38400 per kthread [ 1660.490055][ T6523] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1664.465189][T17338] hsr_slave_0: left promiscuous mode [ 1664.501553][T17338] hsr_slave_1: left promiscuous mode [ 1664.503139][T17338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.503174][T17338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.566329][T17338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.566358][T17338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.840556][T17338] batman_adv: batadv0: Interface deactivated: vlan1 [ 1664.840584][T17338] batman_adv: batadv0: Removing interface: vlan1 [ 1665.699637][ T6523] usb 10-1: device descriptor read/64, error -110 [ 1665.812465][T17338] veth1_macvtap: left promiscuous mode [ 1665.812566][T17338] veth0_macvtap: left promiscuous mode [ 1665.812826][T17338] veth1_vlan: left promiscuous mode [ 1665.813010][T17338] veth0_vlan: left promiscuous mode [ 1666.159552][ T6523] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1666.300555][ T6523] usb 10-1: device descriptor read/64, error -32 [ 1666.434155][ T6523] usb usb10-port1: attempt power cycle [ 1667.900279][T22164] syz.8.4627 (22164) used greatest stack depth: 16808 bytes left [ 1668.693031][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.693099][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.696220][ T1320] lec:lec_start_xmit: lec0:No lecd attached [ 1670.045070][T17338] team0 (unregistering): Port device team_slave_1 removed [ 1670.100058][T17338] team0 (unregistering): Port device team_slave_0 removed [ 1671.977925][T21815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1672.028298][T21815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1672.075867][T21815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1672.246414][T21815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1673.935851][T13675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.980997][T13675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.985671][T13675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.989445][T13675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.994328][T13675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1674.059555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 1674.059588][ C0] lec:lec_tx_timeout: lec0 [ 1676.892346][T16424] Bluetooth: hci3: command tx timeout [ 1678.940611][T16424] Bluetooth: hci3: command tx timeout [ 1681.036194][T16424] Bluetooth: hci3: command tx timeout [ 1681.965505][T22290] trusted_key: encrypted_key: insufficient parameters specified [ 1684.369647][T16424] Bluetooth: hci3: command tx timeout [ 1686.639984][T22227] chnl_net:caif_netlink_parms(): no params data found [ 1687.275296][T17783] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1688.889642][T17783] usb 9-1: Using ep0 maxpacket: 8 [ 1689.452615][T17783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.452642][T17783] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1689.490274][T17783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.490302][T17783] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1689.497604][T17783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.497621][T17783] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1689.504754][T17783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.504782][T17783] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1689.504818][T17783] usb 9-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1689.504833][T17783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.617857][T17783] usb 9-1: config 0 descriptor?? [ 1692.942294][T22227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.942507][T22227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.942749][T22227] bridge_slave_0: entered allmulticast mode [ 1693.132863][T22227] bridge_slave_0: entered promiscuous mode [ 1693.141539][T22227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.141651][T22227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.141866][T22227] bridge_slave_1: entered allmulticast mode [ 1693.144204][T22227] bridge_slave_1: entered promiscuous mode [ 1695.665676][T22227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.697121][T22227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.955346][ T6523] usb 9-1: USB disconnect, device number 22 [ 1699.093046][T22227] team0: Port device team_slave_0 added [ 1699.269609][T13877] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1699.485933][T13877] usb 9-1: Using ep0 maxpacket: 8 [ 1699.531747][T13877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.531775][T13877] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1699.561052][T13877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.561079][T13877] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1699.602590][T13877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.602619][T13877] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1699.609826][T13877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.610039][T13877] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1699.610076][T13877] usb 9-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1699.610097][T13877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.673952][T13877] usb 9-1: config 0 descriptor?? [ 1699.942338][T22227] team0: Port device team_slave_1 added [ 1700.681651][T15146] bridge_slave_1: left allmulticast mode [ 1700.681680][T15146] bridge_slave_1: left promiscuous mode [ 1700.681913][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.793524][T15146] bridge_slave_0: left allmulticast mode [ 1700.793552][T15146] bridge_slave_0: left promiscuous mode [ 1700.793816][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.170549][T22435] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1704.135416][T13877] usb 9-1: USB disconnect, device number 23 [ 1704.301165][T15146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.414259][T22444] IPVS: persistence engine module ip_vs_pe_ not found [ 1704.740350][T15146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.045112][T15146] bond0 (unregistering): Released all slaves [ 1706.121410][T22227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.121427][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.121452][T22227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.127960][T22227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.127977][T22227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1706.128004][T22227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.207594][T10189] lec:lec_start_xmit: lec0:No lecd attached [ 1706.610219][T15146] hsr_slave_0: left promiscuous mode [ 1706.638993][T15146] hsr_slave_1: left promiscuous mode [ 1706.640196][T15146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.680497][T15146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.923855][T15146] team0 (unregistering): Port device team_slave_1 removed [ 1711.302972][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1711.303013][ C0] lec:lec_tx_timeout: lec0 [ 1711.409215][T15146] team0 (unregistering): Port device team_slave_0 removed [ 1711.793479][T22227] hsr_slave_0: entered promiscuous mode [ 1711.802806][T22227] hsr_slave_1: entered promiscuous mode [ 1711.803631][T22227] debugfs: 'hsr0' already exists in 'hsr' [ 1711.803655][T22227] Cannot create hsr debugfs directory [ 1712.913576][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.913790][T22517] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.948466][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.950577][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.950683][T22517] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.964754][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.966927][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.967047][T22517] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.974977][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1712.975815][T22517] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4685'. [ 1724.813118][T22597] overlayfs: overlapping lowerdir path [ 1728.085144][T16424] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1728.085247][T16424] CPU: 0 UID: 0 PID: 16424 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1728.085280][T16424] Tainted: [L]=SOFTLOCKUP [ 1728.085289][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.085304][T16424] Workqueue: hci1 hci_rx_work [ 1728.085561][T16424] Call Trace: [ 1728.085575][T16424] [ 1728.085588][T16424] dump_stack_lvl+0xe8/0x150 [ 1728.085692][T16424] sysfs_create_dir_ns+0x271/0x2a0 [ 1728.085808][T16424] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1728.085896][T16424] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1728.085919][T16424] ? __rcu_read_unlock+0x83/0xe0 [ 1728.085970][T16424] ? rt_spin_unlock+0x160/0x200 [ 1728.085995][T16424] kobject_add_internal+0x631/0xd10 [ 1728.086097][T16424] kobject_add+0x163/0x240 [ 1728.086137][T16424] ? __pfx_kobject_add+0x10/0x10 [ 1728.086176][T16424] ? get_device_parent+0x370/0x3a0 [ 1728.086289][T16424] device_add+0x408/0xb80 [ 1728.086324][T16424] hci_conn_add_sysfs+0xd5/0x210 [ 1728.086385][T16424] le_conn_complete_evt+0xf1d/0x1430 [ 1728.086474][T16424] ? __pfx_[ 1728.086474][T16424] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1728.086504][T16424] ? lockdep_hardirqs_on+0x7a/0x110 [ 1728.086556][T16424] ? irqentry_exit+0x59e/0x620 [ 1728.086582][T16424] ? rcu_is_watching+0x15/0xb0 [ 1728.086609][T16424] ? skb_pull_data+0xfb/0x200 [ 1728.086695][T16424] hci_le_conn_complete_evt+0x187/0x470 [ 1728.086734][T16424] hci_event_packet+0x7af/0x12c0 [ 1728.086768][T16424] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1728.086798][T16424] ? __pfx_hci_event_packet+0x10/0x10 [ 1728.086835][T16424] ? hci_send_to_monitor+0xe2/0x590 [ 1728.086897][T16424] hci_rx_work+0x3ee/0x1030 [ 1728.086925][T16424] ? preempt_schedule_thunk+0x16/0x30 [ 1728.086955][T16424] ? process_scheduled_works+0xa25/0x1830 [ 1728.086994][T16424] process_scheduled_works+0xb02/0x1830 [ 1728.087055][T16424] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.087091][T16424] ? assign_work+0x3d5/0x5e0 [ 1728.087127][T16424] worker_thread+0xa50/0xfc0 [ 1728.087186][T16424] kthread+0x388/0x470 [ 1728.087209][T16424] ? __pfx_worker_thread+0x10/0x10 [ 1728.087236][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.087261][T16424] ret_from_fork+0x51e/0xb90 [ 1728.087304][T16424] ? __pfx_ret_from_fork+0x10/0x10 [ 1728.087339][T16424] ? __switch_to+0xc7d/0x1450 [ 1728.087384][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.087408][T16424] ret_from_fork_asm+0x1a/0x30 [ 1728.087447][T16424] [ 1728.087802][T16424] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1728.087996][T16424] Bluetooth: hci1: failed to register connection device [ 1728.355277][T16424] ================================================================== [ 1728.355300][T16424] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.355407][T16424] Read of size 8 at addr ffff8880352f87b0 by task kworker/u9:2/16424 [ 1728.355427][T16424] [ 1728.355452][T16424] CPU: 0 UID: 0 PID: 16424 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1728.355484][T16424] Tainted: [L]=SOFTLOCKUP [ 1728.355493][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.355510][T16424] Workqueue: hci1 hci_rx_work [ 1728.355539][T16424] Call Trace: [ 1728.355550][T16424] [ 1728.355561][T16424] dump_stack_lvl+0xe8/0x150 [ 1728.355594][T16424] print_report+0xba/0x230 [ 1728.355631][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.355655][T16424] kasan_report+0x117/0x150 [ 1728.355762][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.355790][T16424] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.355816][T16424] l2cap_connect_cfm+0x368/0x1390 [ 1728.355853][T16424] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1728.355887][T16424] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1728.355950][T16424] ? mutex_lock_nested+0x152/0x1d0 [ 1728.355970][T16424] ? hci_connect_cfm+0x2c/0x140 [ 1728.355999][T16424] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1728.356031][T16424] hci_connect_cfm+0x95/0x140 [ 1728.356062][T16424] le_conn_complete_evt+0xf65/0x1430 [ 1728.356098][T16424] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1728.356127][T16424] ? lockdep_hardirqs_on+0x7a/0x110 [ 1728.356154][T16424] ? irqentry_exit+0x59e/0x620 [ 1728.356179][T16424] ? rcu_is_watching+0x15/0xb0 [ 1728.356201][T16424] ? skb_pull_data+0xfb/0x200 [ 1728.356232][T16424] hci_le_conn_complete_evt+0x187/0x470 [ 1728.356265][T16424] hci_event_packet+0x7af/0x12c0 [ 1728.356291][T16424] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1728.356320][T16424] ? __pfx_hci_event_packet+0x10/0x10 [ 1728.356348][T16424] ? hci_send_to_monitor+0xe2/0x590 [ 1728.356382][T16424] hci_rx_work+0x3ee/0x1030 [ 1728.356407][T16424] ? preempt_schedule_thunk+0x16/0x30 [ 1728.356433][T16424] ? process_scheduled_works+0xa25/0x1830 [ 1728.356470][T16424] process_scheduled_works+0xb02/0x1830 [ 1728.356512][T16424] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.356544][T16424] ? assign_work+0x3d5/0x5e0 [ 1728.356574][T16424] worker_thread+0xa50/0xfc0 [ 1728.356616][T16424] kthread+0x388/0x470 [ 1728.356638][T16424] ? __pfx_worker_thread+0x10/0x10 [ 1728.356665][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.356687][T16424] ret_from_fork+0x51e/0xb90 [ 1728.356717][T16424] ? __pfx_ret_from_fork+0x10/0x10 [ 1728.356744][T16424] ? __switch_to+0xc7d/0x1450 [ 1728.356770][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.356791][T16424] ret_from_fork_asm+0x1a/0x30 [ 1728.356818][T16424] [ 1728.356826][T16424] [ 1728.356832][T16424] Allocated by task 16424: [ 1728.356844][T16424] kasan_save_track+0x3e/0x80 [ 1728.356869][T16424] __kasan_kmalloc+0x93/0xb0 [ 1728.356894][T16424] __kmalloc_noprof+0x3e7/0x7b0 [ 1728.356975][T16424] sk_prot_alloc+0xe7/0x210 [ 1728.357075][T16424] sk_alloc+0x3a/0x390 [ 1728.357097][T16424] bt_sock_alloc+0x3b/0x310 [ 1728.357151][T16424] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1728.357173][T16424] l2cap_connect_cfm+0x368/0x1390 [ 1728.357200][T16424] hci_connect_cfm+0x95/0x140 [ 1728.357225][T16424] le_conn_complete_evt+0xf65/0x1430 [ 1728.357254][T16424] hci_le_conn_complete_evt+0x187/0x470 [ 1728.357279][T16424] hci_event_packet+0x7af/0x12c0 [ 1728.357301][T16424] hci_rx_work+0x3ee/0x1030 [ 1728.357322][T16424] process_scheduled_works+0xb02/0x1830 [ 1728.357347][T16424] worker_thread+0xa50/0xfc0 [ 1728.357372][T16424] kthread+0x388/0x470 [ 1728.357390][T16424] ret_from_fork+0x51e/0xb90 [ 1728.357415][T16424] ret_from_fork_asm+0x1a/0x30 [ 1728.357433][T16424] [ 1728.357446][T16424] Freed by task 22616: [ 1728.357456][T16424] kasan_save_track+0x3e/0x80 [ 1728.357481][T16424] kasan_save_free_info+0x46/0x50 [ 1728.357514][T16424] __kasan_slab_free+0x5c/0x80 [ 1728.357538][T16424] kfree+0x1c1/0x6c0 [ 1728.357561][T16424] __sk_destruct+0x626/0x880 [ 1728.357584][T16424] l2cap_sock_cleanup_listen+0xe0/0x440 [ 1728.357603][T16424] l2cap_sock_release+0x6e/0x270 [ 1728.357621][T16424] sock_close+0xc3/0x240 [ 1728.357674][T16424] __fput+0x461/0xa90 [ 1728.357727][T16424] task_work_run+0x1d9/0x270 [ 1728.357748][T16424] get_signal+0x11c3/0x1310 [ 1728.357784][T16424] arch_do_signal_or_restart+0xbc/0x830 [ 1728.357807][T16424] exit_to_user_mode_loop+0x86/0x480 [ 1728.357852][T16424] do_syscall_64+0x32d/0xf80 [ 1728.357904][T16424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.357939][T16424] [ 1728.357945][T16424] The buggy address belongs to the object at ffff8880352f8000 [ 1728.357945][T16424] which belongs to the cache kmalloc-2k of size 2048 [ 1728.357964][T16424] The buggy address is located 1968 bytes inside of [ 1728.357964][T16424] freed 2048-byte region [ffff8880352f8000, ffff8880352f8800) [ 1728.357987][T16424] [ 1728.357993][T16424] The buggy address belongs to the physical page: [ 1728.358013][T16424] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880352fd000 pfn:0x352f8 [ 1728.358036][T16424] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1728.358055][T16424] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1728.358078][T16424] page_type: f5(slab) [ 1728.358099][T16424] raw: 0080000000000240 ffff88813fe1c000 ffffea0000e12e10 ffff88813fe16c88 [ 1728.358118][T16424] raw: ffff8880352fd000 0000000000080005 00000000f5000000 0000000000000000 [ 1728.358138][T16424] head: 0080000000000240 ffff88813fe1c000 ffffea0000e12e10 ffff88813fe16c88 [ 1728.358157][T16424] head: ffff8880352fd000 0000000000080005 00000000f5000000 0000000000000000 [ 1728.358178][T16424] head: 0080000000000003 ffffea0000d4be01 00000000ffffffff 00000000ffffffff [ 1728.358195][T16424] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1728.358207][T16424] page dumped because: kasan: bad access detected [ 1728.358223][T16424] page_owner tracks the page as allocated [ 1728.358231][T16424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 16677, tgid 16677 (syz-executor), ts 1144822745635, free_ts 1144494398593 [ 1728.358269][T16424] post_alloc_hook+0x231/0x280 [ 1728.358322][T16424] get_page_from_freelist+0x28bb/0x2950 [ 1728.358341][T16424] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1728.358360][T16424] allocate_slab+0x77/0x660 [ 1728.358405][T16424] refill_objects+0x334/0x3c0 [ 1728.358425][T16424] __pcs_replace_empty_main+0x328/0x5f0 [ 1728.358454][T16424] __kvmalloc_node_noprof+0x6f4/0x8e0 [ 1728.358483][T16424] page_pool_create_percpu+0x2ea/0xba0 [ 1728.358568][T16424] nsim_open+0x3c4/0xa20 [ 1728.358665][T16424] __dev_open+0x44d/0x830 [ 1728.358707][T16424] __dev_change_flags+0x1f7/0x690 [ 1728.358773][T16424] netif_change_flags+0x88/0x1a0 [ 1728.358797][T16424] do_setlink+0xf82/0x4590 [ 1728.358847][T16424] rtnl_newlink+0x15a9/0x1be0 [ 1728.358867][T16424] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1728.358887][T16424] netlink_rcv_skb+0x232/0x4b0 [ 1728.358947][T16424] page last free pid 16677 tgid 16677 stack trace: [ 1728.358960][T16424] __free_frozen_pages+0xfe3/0x1170 [ 1728.358987][T16424] __slab_free+0x24f/0x2a0 [ 1728.359014][T16424] qlist_free_all+0x97/0x100 [ 1728.359037][T16424] kasan_quarantine_reduce+0x148/0x160 [ 1728.359061][T16424] __kasan_slab_alloc+0x22/0x80 [ 1728.359081][T16424] __kmalloc_cache_noprof+0x338/0x690 [ 1728.359108][T16424] netdevice_event+0x3cb/0x8f0 [ 1728.359173][T16424] notifier_call_chain+0x1be/0x400 [ 1728.359192][T16424] register_netdevice+0x1751/0x1d10 [ 1728.359219][T16424] nsim_create+0xba4/0x1120 [ 1728.359241][T16424] __nsim_dev_port_add+0x72a/0xb50 [ 1728.359268][T16424] nsim_dev_port_add_all+0x37/0xf0 [ 1728.359294][T16424] nsim_drv_probe+0x90d/0xc30 [ 1728.359319][T16424] really_probe+0x267/0xaf0 [ 1728.359366][T16424] __driver_probe_device+0x18c/0x320 [ 1728.359396][T16424] driver_probe_device+0x4f/0x240 [ 1728.359426][T16424] [ 1728.359432][T16424] Memory state around the buggy address: [ 1728.359453][T16424] ffff8880352f8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1728.359466][T16424] ffff8880352f8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1728.359478][T16424] >ffff8880352f8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1728.359488][T16424] ^ [ 1728.359499][T16424] ffff8880352f8800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1728.359513][T16424] ffff8880352f8880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1728.359525][T16424] ================================================================== [ 1728.359587][T16424] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1728.359608][T16424] CPU: 0 UID: 0 PID: 16424 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1728.359638][T16424] Tainted: [L]=SOFTLOCKUP [ 1728.359646][T16424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.359661][T16424] Workqueue: hci1 hci_rx_work [ 1728.359688][T16424] Call Trace: [ 1728.359698][T16424] [ 1728.359708][T16424] vpanic+0x56c/0xa60 [ 1728.359742][T16424] ? __pfx_vpanic+0x10/0x10 [ 1728.359773][T16424] ? irqentry_exit+0x59e/0x620 [ 1728.359803][T16424] panic+0xc5/0xd0 [ 1728.359831][T16424] ? __pfx_panic+0x10/0x10 [ 1728.359860][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.359889][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.359912][T16424] check_panic_on_warn+0x89/0xb0 [ 1728.359936][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.359959][T16424] end_report+0x73/0x180 [ 1728.359989][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.360011][T16424] kasan_report+0x128/0x150 [ 1728.360042][T16424] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.360069][T16424] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1728.360094][T16424] l2cap_connect_cfm+0x368/0x1390 [ 1728.360130][T16424] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1728.360164][T16424] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1728.360190][T16424] ? mutex_lock_nested+0x152/0x1d0 [ 1728.360210][T16424] ? hci_connect_cfm+0x2c/0x140 [ 1728.360237][T16424] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1728.360269][T16424] hci_connect_cfm+0x95/0x140 [ 1728.360298][T16424] le_conn_complete_evt+0xf65/0x1430 [ 1728.360334][T16424] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1728.360363][T16424] ? lockdep_hardirqs_on+0x7a/0x110 [ 1728.360389][T16424] ? irqentry_exit+0x59e/0x620 [ 1728.360414][T16424] ? rcu_is_watching+0x15/0xb0 [ 1728.360448][T16424] ? skb_pull_data+0xfb/0x200 [ 1728.360482][T16424] hci_le_conn_complete_evt+0x187/0x470 [ 1728.360515][T16424] hci_event_packet+0x7af/0x12c0 [ 1728.360542][T16424] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1728.360571][T16424] ? __pfx_hci_event_packet+0x10/0x10 [ 1728.360601][T16424] ? hci_send_to_monitor+0xe2/0x590 [ 1728.360633][T16424] hci_rx_work+0x3ee/0x1030 [ 1728.360659][T16424] ? preempt_schedule_thunk+0x16/0x30 [ 1728.360685][T16424] ? process_scheduled_works+0xa25/0x1830 [ 1728.360714][T16424] process_scheduled_works+0xb02/0x1830 [ 1728.360755][T16424] ? __pfx_process_scheduled_works+0x10/0x10 [ 1728.360786][T16424] ? assign_work+0x3d5/0x5e0 [ 1728.360816][T16424] worker_thread+0xa50/0xfc0 [ 1728.360857][T16424] kthread+0x388/0x470 [ 1728.360879][T16424] ? __pfx_worker_thread+0x10/0x10 [ 1728.360907][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.360933][T16424] ret_from_fork+0x51e/0xb90 [ 1728.360964][T16424] ? __pfx_ret_from_fork+0x10/0x10 [ 1728.360991][T16424] ? __switch_to+0xc7d/0x1450 [ 1728.361017][T16424] ? __pfx_kthread+0x10/0x10 [ 1728.361039][T16424] ret_from_fork_asm+0x1a/0x30 [ 1728.361066][T16424] [ 1728.361562][T16424] Kernel Offset: disabled