last executing test programs: 14m41.951555894s ago: executing program 32 (id=661): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x3c, 0x48, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x3, 0x1e}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000100)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000000)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) 8m57.435727346s ago: executing program 0 (id=1433): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x8000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 8m55.405376078s ago: executing program 0 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000580)={&(0x7f0000000480)=[{0xa8, 0x3, 0x6, 0x6}, {0xfff, 0xa, 0x7, 0x8}, {0x7ff, 0x8, 0x1, 0x3}, {0x4, 0x7fff, 0xffffffff, 0x5}, {0x8, 0x6, 0x8, 0xffffffff}, {0x2, 0x9, 0x3, 0x276c90f5}], 0x6, 0x20, 0x1}) r5 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8m42.758834856s ago: executing program 0 (id=1458): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0x80}, 0x28) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8m42.40398906s ago: executing program 0 (id=1459): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 8m41.026276502s ago: executing program 0 (id=1464): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x8000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 8m38.509312521s ago: executing program 0 (id=1468): socket$inet_smc(0x2b, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r5, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) socket$nl_generic(0x10, 0x3, 0x10) 8m22.872312507s ago: executing program 33 (id=1468): socket$inet_smc(0x2b, 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r5, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) socket$nl_generic(0x10, 0x3, 0x10) 7m6.829718219s ago: executing program 3 (id=1669): syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x8) 6m59.206022695s ago: executing program 3 (id=1688): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) inotify_init() r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000300)='./file1\x00', 0x10000200) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 6m59.057394293s ago: executing program 3 (id=1689): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 6m58.772203873s ago: executing program 3 (id=1692): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80104132, &(0x7f0000000140)) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e44751170", 0x30}, {&(0x7f0000006d40)="cd", 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$netlink(0x10, 0x3, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 6m58.489651809s ago: executing program 3 (id=1695): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x6) 6m58.310700359s ago: executing program 3 (id=1698): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 6m42.965801408s ago: executing program 34 (id=1698): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 6m0.873356224s ago: executing program 1 (id=1843): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(r0, 0x0, 0x0, 0x0) 5m49.83551541s ago: executing program 1 (id=1865): socket(0x400000000010, 0x3, 0x0) io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup(r1) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x176, &(0x7f0000000000)="$eJzskj9OAkEUxr9Zlj9aGEmsaCCRGCyUZVFjbLTE3gNIcEXiosKSKIRijTEUFsbSE3ANEy+ghfEA1BTE2oyZ2bfj4BWcX8G38837M++Fs6ATpAF8z4YNHECSwBLeGYMNIM8ib2pF+kT6Qco550LfKO6Q/DvSXIAM4Ptet7BXQFYY/cF5XRoAvqSnrGD/1sJUlvqcDRvi41hrwqmJHpMA0NFicjawIofgKsbGL+Ve+6oc9AcbrXa96TW9C9et7jhbjrPtlk9bvudEv0xrYclyoi2wDkDsa0G7TwK4p83NkwfTniZYBJiemwLwSHel1flsSx+dlOFF5aYB1fUIa2LRuA6Z5hZlFRtypBoYEnSoxCthqldGXmw2Lv2TERhYnDaGrWpUJkiqg6sfqrth/OwRaZG0RjomncTL+fOXSSKLEA90KoVACjf1Xq9bEUuKvpTnKs9dDvWFia7P1vxwrxYMBoPBYDAYDAaD4b/zEwAA//9yiHzx") userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 5m47.253431967s ago: executing program 1 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0xa, 0x801, 0x84) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 5m37.786497214s ago: executing program 1 (id=1893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000580)={&(0x7f0000000480)=[{0xfff, 0xa, 0x7, 0x8}, {0x7ff, 0x8, 0x1, 0x3}, {0x4, 0x7fff, 0xffffffff, 0x5}, {0x8, 0x6, 0x8, 0xffffffff}, {0x2, 0x9, 0x3, 0x276c90f5}], 0x5, 0x20, 0x1}) r5 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x800) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5m35.750751068s ago: executing program 1 (id=1897): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000240)={0xffffffff, 0xfffffff7, 0x4, 0x83, 0x6, 0x7, 0xa2, 0x9}) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0), 0x0, 0x8000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 5m33.422245145s ago: executing program 1 (id=1901): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x2, "0c8a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x20, 0xbe9c2c1eddf788b6, 0x4, '\x00\x00XY'}, 0x0, 0x0, 0x0, 0x0}) 5m16.779565339s ago: executing program 35 (id=1901): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x2, "0c8a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x20, 0xbe9c2c1eddf788b6, 0x4, '\x00\x00XY'}, 0x0, 0x0, 0x0, 0x0}) 1m45.321905319s ago: executing program 4 (id=2401): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m44.988478858s ago: executing program 4 (id=2403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$loop(0x0, 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0x8) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m43.896024027s ago: executing program 4 (id=2404): io_setup(0x6, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1m36.087320335s ago: executing program 4 (id=2423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1m34.869638897s ago: executing program 4 (id=2425): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd514000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES8, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000", @ANYBLOB="08000300030000000800", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m31.791118253s ago: executing program 4 (id=2432): io_setup(0x6, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 1m15.811757096s ago: executing program 36 (id=2432): io_setup(0x6, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 15.913106917s ago: executing program 5 (id=2641): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 14.742746044s ago: executing program 5 (id=2645): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211063865578ae0109029c000100000440090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="37ef8954a34ff90ebbede3cdd96ff3", 0xf) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) 10.969686133s ago: executing program 8 (id=2656): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32=r0, @ANYRES8, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000", @ANYBLOB="080003000300000008", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.767959747s ago: executing program 2 (id=2657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.642815806s ago: executing program 8 (id=2658): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 9.564079066s ago: executing program 8 (id=2660): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x5, 0x8, 0x4, 0x40, 0x83, {}, {0x4, 0x8, 0x7, 0xf9, 0x1, 0x5, "e5ca18ce"}, 0xfffffffd, 0x3, {0x0}, 0x406bd}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0x2}) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x2) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x100}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d0ff0000000007000000000000000020060000c2b600000000000000000000d75573b01947eefba87cbc6b1560fcb5521f648a8fabc2a2232405efcd80ba81382580155720ed669e5b612fab7dfc5c02c7e33f65a852c61f6f617ec6694743c259ca414a32f0ea6d97d4e0adb6f84931e87cb27884fe45044ec7b3b5fc97669f2aa73801ab53cd6a236a959b499d1f7910d1d9649896a61d463051181e678e96cb58209bb1e1a9e343ca5b54f15584a8ea145e8b5c", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000", @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 9.39364045s ago: executing program 9 (id=2661): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 9.110874296s ago: executing program 6 (id=2662): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.103674243s ago: executing program 9 (id=2663): socket$inet_smc(0x2b, 0x1, 0x0) rseq(0x0, 0x0, 0x10000, 0x0) r0 = io_uring_setup(0x7b8b, &(0x7f0000000280)={0x0, 0x22b9, 0x2000, 0x1, 0x31a}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x7) msgget$private(0x0, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) r3 = socket(0x25, 0xa, 0x3ff) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f00000005c0)) pipe2(0x0, 0x80000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="01980000000000002000128008000100736974001400028006000e00060000000800", @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) futex(&(0x7f0000000240), 0x6, 0x0, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) 8.309052166s ago: executing program 2 (id=2664): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000001"], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x1000009, 0x13, r0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x1, 0x5, 0xeff, 0x2, '\x00', 0x7f}, 0x6, 0x400, 0x0, 0x0, 0x4, 0x401, 'syz0\x00', &(0x7f0000000080)=[')]$\x00', '/dev/loop-control\x00', '[\x00', '[/{\x00'], 0x1c}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) 8.295232528s ago: executing program 7 (id=2665): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dy']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r6, &(0x7f0000000300)={0x405b, 0x0, 0x2, 0x6, 0x7, 0x1, 0xfff, 0x7fffffffffffffff, 0x1}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 8.116763289s ago: executing program 7 (id=2666): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) 7.53832605s ago: executing program 6 (id=2667): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x5, 0x8, 0x4, 0x40, 0x83, {}, {0x4, 0x8, 0x7, 0xf9, 0x1, 0x5, "e5ca18ce"}, 0xfffffffd, 0x3, {0x0}, 0x406bd}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0x2}) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x2) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x100}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d0ff0000000007000000000000000020060000c2b600000000000000000000d75573b01947eefba87cbc6b1560fcb5521f648a8fabc2a2232405efcd80ba81382580155720ed669e5b612fab7dfc5c02c7e33f65a852c61f6f617ec6694743c259ca414a32f0ea6d97d4e0adb6f84931e87cb27884fe45044ec7b3b5fc97669f2aa73801ab53cd6a236a959b499d1f7910d1d9649896a61d463051181e678e96cb58209bb1e1a9e343ca5b54f15584a8ea145e8b5c", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000", @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) 7.271663408s ago: executing program 5 (id=2668): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4044004}, 0x40) 6.559138422s ago: executing program 7 (id=2669): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x10000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) 6.456200489s ago: executing program 2 (id=2670): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.790083958s ago: executing program 6 (id=2671): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 5.500211638s ago: executing program 5 (id=2672): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x401, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x2, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x4) 5.419008828s ago: executing program 6 (id=2673): mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000002c0), 0x0, 0x8240) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\b') 5.246266704s ago: executing program 2 (id=2674): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.232558474s ago: executing program 9 (id=2675): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bca", 0x54}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.017260556s ago: executing program 9 (id=2676): sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 5.015439484s ago: executing program 5 (id=2677): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) 3.007740248s ago: executing program 5 (id=2678): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000300)='./file1\x00', 0x10000200) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2.920243844s ago: executing program 9 (id=2679): timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x40000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002180)={'raw\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004) 2.819818957s ago: executing program 8 (id=2680): ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000009c0)={0x80000000, 0x0, 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$6lowpan_control(r2, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$FUSE_INIT(r2, 0x0, 0x0) 1.947528458s ago: executing program 9 (id=2681): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x401, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x2, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, 0x0}, 0x4) 1.737577607s ago: executing program 2 (id=2682): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000001"], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x1000009, 0x13, r0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x1, 0x5, 0xeff, 0x2, '\x00', 0x7f}, 0x6, 0x400, 0x0, 0x0, 0x4, 0x401, 'syz0\x00', &(0x7f0000000080)=[')]$\x00', '/dev/loop-control\x00', '[\x00', '[/{\x00'], 0x1c}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x2) 1.711002864s ago: executing program 6 (id=2683): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32=r0, @ANYRES8, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000", @ANYBLOB="08000300030000000800", @ANYRES32=r0, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.516038916s ago: executing program 8 (id=2684): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c01", @ANYRES16, @ANYRES32=r0, @ANYRES8, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000", @ANYBLOB="080003000300000008", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 689.562412ms ago: executing program 2 (id=2685): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x5, 0x8, 0x4, 0x40, 0x83, {}, {0x4, 0x8, 0x7, 0xf9, 0x1, 0x5, "e5ca18ce"}, 0xfffffffd, 0x3, {0x0}, 0x406bd}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x9371, 0x0, 0x2}) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x2) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x100}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d0ff0000000007000000000000000020060000c2b600000000000000000000d75573b01947eefba87cbc6b1560fcb5521f648a8fabc2a2232405efcd80ba81382580155720ed669e5b612fab7dfc5c02c7e33f65a852c61f6f617ec6694743c259ca414a32f0ea6d97d4e0adb6f84931e87cb27884fe45044ec7b3b5fc97669f2aa73801ab53cd6a236a959b499d1f7910d1d9649896a61d463051181e678e96cb58209bb1e1a9e343ca5b54f15584a8ea145e8b5c", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000", @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}}, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) 398.479719ms ago: executing program 7 (id=2686): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4044004}, 0x40) 258.156792ms ago: executing program 7 (id=2687): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 51.015998ms ago: executing program 7 (id=2688): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000028a550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400f130cd514000000110001"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0xa1}}], 0x30}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000500)='./file1\x00', 0xffffffffffffff81) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 48.907191ms ago: executing program 8 (id=2689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0x5, 0x2, "5c80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000030c0)={0x34, &(0x7f0000002ec0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 0s ago: executing program 6 (id=2690): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4044004}, 0x40) kernel console output (not intermixed with test programs): ce number 74 using dummy_hcd [ 956.116243][ T29] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 956.286000][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.861726][ T29] usb 3-1: Product: syz [ 956.887006][ T29] usb 3-1: Manufacturer: syz [ 956.909994][ T29] usb 3-1: SerialNumber: syz [ 956.945734][ T29] usb 3-1: config 0 descriptor?? [ 957.239771][ T29] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 959.377510][T13281] overlayfs: failed to clone upperpath [ 960.740731][ T29] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 963.160036][ T803] usb 3-1: USB disconnect, device number 74 [ 964.201288][T13294] binder: 13289:13294 ioctl c0306201 200000000040 returned -22 [ 968.219267][T13318] siw: device registration error -23 [ 969.551290][T13324] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1924'. [ 969.597155][T13324] Set syz0 is full, maxelem 0 reached [ 970.660155][T13333] overlayfs: failed to clone upperpath [ 971.800293][ T7627] syz_tun (unregistering): left allmulticast mode [ 971.888552][T12685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 971.901303][T12685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 971.919949][T12685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 971.940269][T12685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 971.952937][T12685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 972.310257][ T29] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 972.517477][ T29] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 973.143008][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.157191][ T29] usb 7-1: Product: syz [ 973.170318][ T29] usb 7-1: Manufacturer: syz [ 973.178253][ T29] usb 7-1: SerialNumber: syz [ 973.199438][ T29] usb 7-1: config 0 descriptor?? [ 973.989708][ T29] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 974.019966][T12685] Bluetooth: hci1: command tx timeout [ 974.179318][ T9752] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.317108][T13366] siw: device registration error -23 [ 974.330925][T13366] afs: Unknown parameter '' [ 975.365994][ T29] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 975.425059][ T29] usb 7-1: USB disconnect, device number 38 [ 975.570675][ T9752] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.100190][T12685] Bluetooth: hci1: command tx timeout [ 976.136402][ T9752] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.585500][T13392] loop8: detected capacity change from 0 to 128 [ 978.180586][T12685] Bluetooth: hci1: command tx timeout [ 979.406270][ T9752] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.639962][T13096] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 979.825538][T13447] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1953'. [ 979.843161][T13096] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 979.857699][T13096] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 979.869764][T13096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.892828][T13447] Set syz0 is full, maxelem 0 reached [ 979.918072][T13096] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 980.420292][T12685] Bluetooth: hci1: command tx timeout [ 981.167509][T13463] Invalid option length (1047852) for dns_resolver key [ 981.218307][T13096] stv0680 7-1:4.0: Could not get descriptor 0200 [ 982.428952][T13096] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 982.515681][T13096] stv0680 7-1:4.0: last error: 34, command = 0x19 [ 982.695616][ T5762] usb 7-1: USB disconnect, device number 39 [ 982.829499][ T9752] bridge_slave_1: left allmulticast mode [ 982.862492][ T9752] bridge_slave_1: left promiscuous mode [ 982.881503][ T9752] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.964657][ T9752] bridge_slave_0: left allmulticast mode [ 982.994840][ T9752] bridge_slave_0: left promiscuous mode [ 983.025965][ T9752] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.886442][ T31] audit: type=1800 audit(1780038399.597:31): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1962" name="file0" dev="overlay" ino=1183 res=0 errno=0 [ 987.609377][ T9752] bond1 (unregistering): (slave gretap1): Releasing active interface [ 987.944415][ T9051] smbdirect: ib_dev[syz1] removed [ 987.950637][ T9752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.980828][T13537] loop6: detected capacity change from 0 to 2048 [ 987.993962][ T9752] bond_slave_0: left promiscuous mode [ 988.017464][T13537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.083816][ T9752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.112223][ T9752] bond_slave_1: left promiscuous mode [ 988.151969][ T9752] bond0 (unregistering): Released all slaves [ 988.246043][ T9752] bond1 (unregistering): Released all slaves [ 988.588743][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 988.680175][ T9752] tipc: Left network mode [ 989.094370][T13546] loop8: detected capacity change from 0 to 2048 [ 991.005982][T13546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.192051][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.236887][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.362221][ T9049] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 992.635609][ T9049] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1024 with error 28 [ 992.774060][ T9049] EXT4-fs (loop8): This should not happen!! Data will be lost [ 992.774060][ T9049] [ 992.787466][ T9049] EXT4-fs (loop8): Total free blocks count 0 [ 992.793888][ T9049] EXT4-fs (loop8): Free/Dirty block details [ 992.800301][ T9049] EXT4-fs (loop8): free_blocks=2415919504 [ 992.807354][ T9049] EXT4-fs (loop8): dirty_blocks=1024 [ 992.813233][ T9049] EXT4-fs (loop8): Block reservation details [ 992.819269][ T9049] EXT4-fs (loop8): i_reserved_data_blocks=64 [ 993.382554][T12684] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 994.208723][T12684] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.708790][ T9752] hsr_slave_0: left promiscuous mode [ 994.787719][ T9752] hsr_slave_1: left promiscuous mode [ 994.840579][ T9752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.897685][ T9752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.985571][ T9752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.103799][ T9752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.475238][ T9752] veth1_macvtap: left promiscuous mode [ 995.526972][ T9752] veth0_macvtap: left promiscuous mode [ 995.625912][ T9752] veth1_vlan: left promiscuous mode [ 995.677164][ T9752] veth0_vlan: left promiscuous mode [ 996.633115][ T5895] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 996.717308][T12685] Bluetooth: hci0: unexpected event 0x35 length: 7 > 6 [ 996.842637][ T5895] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 996.978254][ T5895] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 997.040298][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.269437][ T5895] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 998.354080][ T5895] stv0680 3-1:4.0: Could not get descriptor 0200 [ 998.882456][ T5895] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 998.944509][ T5895] stv0680 3-1:4.0: last error: 34, command = 0x19 [ 999.923108][ T29] usb 3-1: USB disconnect, device number 75 [ 1001.015807][ T9752] team0 (unregistering): Port device team_slave_1 removed [ 1001.341819][ T9752] team0 (unregistering): Port device team_slave_0 removed [ 1004.629910][T13335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.650194][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.662457][T13335] bridge_slave_0: entered allmulticast mode [ 1004.686069][T13335] bridge_slave_0: entered promiscuous mode [ 1004.725906][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1004.869110][T13335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.931078][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.970328][T13335] bridge_slave_1: entered allmulticast mode [ 1005.015907][T13335] bridge_slave_1: entered promiscuous mode [ 1005.296371][T13335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.404785][T13335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.741994][T13335] team0: Port device team_slave_0 added [ 1006.010798][T13335] team0: Port device team_slave_1 added [ 1006.432429][T13335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.476684][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.602901][T13335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.738682][T13335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.773237][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.887277][T13335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.973046][ T9752] IPVS: stop unused estimator thread 0... [ 1008.360950][T13335] hsr_slave_0: entered promiscuous mode [ 1008.390436][T13335] hsr_slave_1: entered promiscuous mode [ 1008.443164][T13335] debugfs: 'hsr0' already exists in 'hsr' [ 1008.512798][T13335] Cannot create hsr debugfs directory [ 1008.595385][ T5632] Bluetooth: hci5: unexpected event 0x35 length: 7 > 6 [ 1009.147333][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 1009.628059][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 1011.025210][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1011.427733][T13773] loop2: detected capacity change from 0 to 2048 [ 1011.610016][T13773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.943252][T13335] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1012.229988][T13777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1013.065619][T13335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.085891][ T9051] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1024 with error 28 [ 1013.184289][ T9051] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1013.184289][ T9051] [ 1013.218221][T13335] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1013.234268][ T9051] EXT4-fs (loop2): Total free blocks count 0 [ 1013.435269][ T9051] EXT4-fs (loop2): Free/Dirty block details [ 1013.450658][ T9051] EXT4-fs (loop2): free_blocks=2415919504 [ 1013.465882][ T9051] EXT4-fs (loop2): dirty_blocks=1024 [ 1013.482086][ T9051] EXT4-fs (loop2): Block reservation details [ 1013.495023][ T9051] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 1014.153370][T13335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.176946][T13335] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1014.219455][ T5642] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1014.281710][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.622651][T13335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.686338][T13335] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1014.759676][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1014.846976][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2014'. [ 1014.860370][T13335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.960278][ T9] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.993783][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1015.031777][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.094662][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1015.508300][T13335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.823079][T13335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.005218][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.012418][ T8660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.579246][ T9] stv0680 3-1:4.0: Could not get descriptor 0200 [ 1016.595315][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.602527][ T8660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.100635][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 1017.238384][ T9] stv0680 3-1:4.0: last error: 34, command = 0x19 [ 1018.739486][T12685] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 1019.032971][ T5776] usb 3-1: USB disconnect, device number 76 [ 1020.002934][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1020.630347][T13899] loop8: detected capacity change from 0 to 2048 [ 1020.704406][T12685] Bluetooth: hci6: unexpected event 0x35 length: 7 > 6 [ 1020.799914][T13899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1022.391772][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1023.593195][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2032'. [ 1025.565495][T13335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.219957][ T5762] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1027.401622][ T5762] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1027.527403][ T5762] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1028.230748][ T5762] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1028.295026][ T5762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1028.355201][ T5762] usb 9-1: SerialNumber: syz [ 1028.646865][T12685] Bluetooth: hci0: unexpected event 0x35 length: 7 > 6 [ 1028.864630][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1028.884900][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1028.894743][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1028.908893][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1028.916982][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1028.960645][ T5762] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1028.986957][ T5762] usb 9-1: USB disconnect, device number 2 [ 1029.236773][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2042'. [ 1029.425627][T14009] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1029.467124][T14009] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1029.563571][T14009] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1029.630688][T14010] loop2: detected capacity change from 0 to 2048 [ 1029.716922][T14009] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1029.744695][T14010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.853169][ T9752] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1030.936401][ T9752] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1024 with error 28 [ 1030.994809][T12685] Bluetooth: hci7: command tx timeout [ 1031.042283][ T9752] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1031.042283][ T9752] [ 1031.052518][ T9752] EXT4-fs (loop2): Total free blocks count 0 [ 1031.058527][ T9752] EXT4-fs (loop2): Free/Dirty block details [ 1031.068714][ T9752] EXT4-fs (loop2): free_blocks=2415919504 [ 1031.074871][ T9752] EXT4-fs (loop2): dirty_blocks=1024 [ 1031.086420][ T9752] EXT4-fs (loop2): Block reservation details [ 1031.105447][ T9752] EXT4-fs (loop2): i_reserved_data_blocks=64 [ 1031.212688][ T5642] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 1031.294960][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.547222][T12685] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 1032.539080][T14028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2051'. [ 1033.130059][T12685] Bluetooth: hci7: command tx timeout [ 1036.145477][T12685] Bluetooth: hci7: command tx timeout [ 1036.641923][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2059'. [ 1036.782396][T12685] Bluetooth: hci2: unexpected event 0x35 length: 7 > 6 [ 1036.884219][T14072] loop2: detected capacity change from 0 to 1024 [ 1036.983072][T14072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.751112][T14078] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.2062: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1037.780079][T14078] EXT4-fs (loop2): Remounting filesystem read-only [ 1038.180037][T12685] Bluetooth: hci7: command tx timeout [ 1038.279018][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.743567][ T9053] bridge_slave_1: left allmulticast mode [ 1044.771988][ T9053] bridge_slave_1: left promiscuous mode [ 1046.526394][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.602203][ T9053] bridge_slave_0: left allmulticast mode [ 1047.641514][ T9053] bridge_slave_0: left promiscuous mode [ 1047.664085][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.716365][ T9053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.756195][ T9053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.803212][ T9053] bond0 (unregistering): Released all slaves [ 1051.348405][ T9053] hsr_slave_0: left promiscuous mode [ 1051.398534][ T9053] hsr_slave_1: left promiscuous mode [ 1051.431319][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.664977][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.712836][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.722238][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.480246][ T9053] team0 (unregistering): Port device team_slave_1 removed [ 1054.565069][ T9053] team0 (unregistering): Port device team_slave_0 removed [ 1054.586896][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2086'. [ 1055.848857][T14000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.882159][T14000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.914565][T14000] bridge_slave_0: entered allmulticast mode [ 1055.967907][T14000] bridge_slave_0: entered promiscuous mode [ 1056.125740][T14000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.178400][T14000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.223660][T14000] bridge_slave_1: entered allmulticast mode [ 1056.251379][T14000] bridge_slave_1: entered promiscuous mode [ 1057.563423][T14000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.663482][T14000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.973046][T14000] team0: Port device team_slave_0 added [ 1059.033584][T14000] team0: Port device team_slave_1 added [ 1059.166731][T14240] Cannot find add_set index 0 as target [ 1059.872036][T14000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.913429][T14000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.033280][T14000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.085338][T14000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.113045][T14000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.186356][T14000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.659080][T14000] hsr_slave_0: entered promiscuous mode [ 1062.706600][T14000] hsr_slave_1: entered promiscuous mode [ 1062.732532][T14000] debugfs: 'hsr0' already exists in 'hsr' [ 1062.756722][T14000] Cannot create hsr debugfs directory [ 1065.522706][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2113'. [ 1065.861171][T14309] overlayfs: failed to clone upperpath [ 1067.104761][T14304] loop2: detected capacity change from 0 to 32768 [ 1067.230196][ T5798] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1067.423454][ T5798] usb 9-1: Using ep0 maxpacket: 16 [ 1067.453238][ T5798] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1067.482797][ T5798] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1067.549238][ T5798] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1067.587313][ T5798] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.635227][ T5798] usb 9-1: Product: syz [ 1067.658220][ T5798] usb 9-1: Manufacturer: syz [ 1067.678211][ T5798] usb 9-1: SerialNumber: syz [ 1067.961194][ T5798] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1068.002882][ T5798] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1068.345398][T14318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.389802][T14318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.547467][ T5798] usb 9-1: USB disconnect, device number 3 [ 1068.661318][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.212210][T14000] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1069.463280][T14000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1069.519625][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1070.082320][T14000] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1070.276288][T14000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.286494][T14000] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1070.311637][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1070.351037][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1070.402942][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.420720][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1070.428934][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 1070.443891][ T9] usb 9-1: SerialNumber: syz [ 1070.469411][T14000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.498760][T14000] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1070.585809][T14000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.950271][ T9] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 1070.989455][ T9] usb 9-1: USB disconnect, device number 4 [ 1071.485306][T14000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.626662][T14000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.272754][ T9766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.279926][ T9766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.851649][ T9766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.858897][ T9766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.587886][T12685] Bluetooth: hci5: unexpected event 0x35 length: 7 > 6 [ 1076.422311][T14389] bond0: left promiscuous mode [ 1076.435098][T14389] bond_slave_0: left promiscuous mode [ 1076.440865][T14389] bond_slave_1: left promiscuous mode [ 1076.446358][T14389] syz_tun: left promiscuous mode [ 1076.452948][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.740413][ T803] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1078.929326][ T803] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1078.973960][ T803] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1079.010875][ T803] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1079.065805][ T803] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1079.103906][ T803] usb 9-1: Product: syz [ 1079.109329][T14000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.121777][ T803] usb 9-1: Manufacturer: syz [ 1079.144774][ T803] usb 9-1: SerialNumber: syz [ 1079.178533][ T803] usb 9-1: config 0 descriptor?? [ 1079.241264][ T803] usb 9-1: selecting invalid altsetting 0 [ 1079.303984][ T31] audit: type=1800 audit(1780038494.347:32): pid=14402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2136" name="file0" dev="overlay" ino=1352 res=0 errno=0 [ 1079.580913][ T803] usb 9-1: USB disconnect, device number 5 [ 1080.486934][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'. [ 1080.780019][T14000] veth0_vlan: entered promiscuous mode [ 1080.865945][T14000] veth1_vlan: entered promiscuous mode [ 1081.048670][T14000] veth0_macvtap: entered promiscuous mode [ 1081.096672][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2149'. [ 1081.144335][T14000] veth1_macvtap: entered promiscuous mode [ 1081.261652][T14000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.355999][T14000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.439667][ T5763] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1081.440434][ T9766] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.518783][ T9766] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.622080][ T5763] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1081.653640][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.702102][ T5763] usb 9-1: config 0 descriptor?? [ 1081.985049][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.041881][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.681544][ T5763] usb 9-1: Cannot set autoneg [ 1083.171712][ T5763] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1083.210345][ T5763] usb 9-1: USB disconnect, device number 6 [ 1083.381507][ T8660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.441679][ T8660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.400827][T14472] Cannot find add_set index 0 as target [ 1085.701776][T14468] bridge1: entered promiscuous mode [ 1085.707008][T14468] bridge1: entered allmulticast mode [ 1087.260945][T13096] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1087.268601][ T5798] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1087.324497][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.345618][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.587698][ T5798] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1087.625328][T13096] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1088.380411][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.399604][T13096] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1088.412451][ T5798] usb 3-1: config 0 descriptor?? [ 1088.434331][T13096] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1088.476800][T13096] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1088.559345][T13096] usb 9-1: Product: syz [ 1088.632827][T13096] usb 9-1: Manufacturer: syz [ 1088.673025][ T5798] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1088.688463][T13096] usb 9-1: SerialNumber: syz [ 1088.747034][T13096] usb 9-1: config 0 descriptor?? [ 1088.880882][ T5798] [drm:udl_init] *ERROR* Selecting channel failed [ 1089.147425][T14504] SET target dimension over the limit! [ 1092.437802][T13096] usb 9-1: selecting invalid altsetting 0 [ 1092.458143][T14504] bridge2: entered promiscuous mode [ 1092.463417][T14504] bridge2: entered allmulticast mode [ 1092.466081][ T5798] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1092.616604][ T5798] [drm] Initialized udl on minor 2 [ 1093.145460][ T5798] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1093.547828][ T5798] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1093.555479][ T803] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1093.563856][ T803] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1094.571221][ T5798] usb 3-1: USB disconnect, device number 77 [ 1095.555787][T13096] usb 9-1: USB disconnect, device number 7 [ 1095.936417][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1095.970524][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1096.962267][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1096.977277][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1096.988219][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1097.392281][ T3362] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.522050][ T5632] Bluetooth: hci6: unexpected event 0x35 length: 7 > 6 [ 1097.722015][ T3362] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.935228][ T3362] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.061155][T12685] Bluetooth: hci1: command tx timeout [ 1099.100703][T13804] udevd[13804]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.690734][T14582] Cannot find add_set index 0 as target [ 1101.050505][ T5763] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1101.132282][ T3362] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.143076][T12685] Bluetooth: hci1: command tx timeout [ 1101.240961][ T5763] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1101.296704][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.357979][ T5763] usb 9-1: config 0 descriptor?? [ 1101.665592][ T5763] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1102.699187][ T5763] [drm:udl_init] *ERROR* Selecting channel failed [ 1103.220278][T12685] Bluetooth: hci1: command tx timeout [ 1103.304042][ T5763] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1103.354853][ T5763] [drm] Initialized udl on minor 2 [ 1103.555188][ T5763] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1103.566061][ T5763] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1103.573735][ T5776] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1103.585439][ T5763] usb 9-1: USB disconnect, device number 8 [ 1103.591539][ T5776] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1104.826573][ T3362] bridge_slave_1: left allmulticast mode [ 1104.832306][ T3362] bridge_slave_1: left promiscuous mode [ 1104.838182][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.045009][ T3362] bridge_slave_0: left allmulticast mode [ 1105.058159][ T3362] bridge_slave_0: left promiscuous mode [ 1105.078435][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.299681][T12685] Bluetooth: hci1: command tx timeout [ 1106.134295][T14640] Cannot find add_set index 0 as target [ 1109.671646][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1109.791918][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.549278][ T3362] bond0 (unregistering): Released all slaves [ 1110.787307][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1115.065054][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.073336][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.055105][T14716] loop2: detected capacity change from 0 to 32768 [ 1121.820923][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 1123.115537][T12526] syz_tun (unregistering): left allmulticast mode [ 1123.172335][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1126.351612][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.391695][T14538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.637690][T14538] bridge_slave_0: entered allmulticast mode [ 1126.679315][T14780] Cannot find add_set index 0 as target [ 1126.740028][T14538] bridge_slave_0: entered promiscuous mode [ 1126.808544][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.860008][T14538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.905490][T14538] bridge_slave_1: entered allmulticast mode [ 1127.142945][T14538] bridge_slave_1: entered promiscuous mode [ 1127.344466][ T3362] hsr_slave_0: left promiscuous mode [ 1127.387012][ T3362] hsr_slave_1: left promiscuous mode [ 1127.421343][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.457405][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.490219][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.527109][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.645510][ T3362] veth1_macvtap: left promiscuous mode [ 1127.680603][ T3362] veth0_macvtap: left promiscuous mode [ 1127.708331][ T3362] veth1_vlan: left promiscuous mode [ 1127.739101][ T3362] veth0_vlan: left promiscuous mode [ 1129.312985][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 1129.385862][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 1129.828161][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1129.868272][T14538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.904857][T14538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.101049][T14538] team0: Port device team_slave_0 added [ 1130.129179][T14538] team0: Port device team_slave_1 added [ 1130.268186][T14538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.312679][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.426114][T14538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.540142][T14538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.597724][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.724029][T14538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.990364][T14538] hsr_slave_0: entered promiscuous mode [ 1131.016794][T14538] hsr_slave_1: entered promiscuous mode [ 1131.041460][T14538] debugfs: 'hsr0' already exists in 'hsr' [ 1131.061446][T14538] Cannot create hsr debugfs directory [ 1131.485363][ T31] audit: type=1800 audit(1780038546.527:33): pid=14853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2250" name="nullb0" dev="tmpfs" ino=2152 res=0 errno=0 [ 1131.847504][T14835] loop6: detected capacity change from 0 to 32768 [ 1136.262573][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.304319][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.503735][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1136.867858][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.897417][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.099632][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1137.261679][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1137.277016][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1137.304412][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1137.315606][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1137.328866][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1137.338582][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.349825][ T9] usb 3-1: Product: syz [ 1137.355406][ T9] usb 3-1: Manufacturer: syz [ 1137.369747][ T9] usb 3-1: SerialNumber: syz [ 1137.386302][ T9] usb 3-1: config 0 descriptor?? [ 1137.419482][ T9] usb 3-1: selecting invalid altsetting 0 [ 1137.722702][ T5776] usb 3-1: USB disconnect, device number 78 [ 1137.760628][ T31] audit: type=1800 audit(1780038552.797:34): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2263" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1137.868119][T14003] udevd[14003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.088666][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.146538][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.432694][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2266'. [ 1139.693992][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1139.748844][ T13] bridge_slave_1: left allmulticast mode [ 1139.775083][ T13] bridge_slave_1: left promiscuous mode [ 1139.797379][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.837279][ T13] bridge_slave_0: left allmulticast mode [ 1139.858139][ T13] bridge_slave_0: left promiscuous mode [ 1139.859693][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1139.886819][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.916772][ T9] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1139.958552][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.997688][ T9] usb 9-1: Product: syz [ 1140.017321][ T9] usb 9-1: Manufacturer: syz [ 1140.039918][ T9] usb 9-1: SerialNumber: syz [ 1141.024627][ T9] usb 9-1: config 0 descriptor?? [ 1141.060153][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1141.783482][T14957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2273'. [ 1141.979260][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.056502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.101191][ T13] bond0 (unregistering): Released all slaves [ 1142.117563][ T5763] IPVS: starting estimator thread 0... [ 1142.175016][T14969] loop8: detected capacity change from 0 to 2048 [ 1142.206912][ T9] gspca_se401: read req failed req 0x06 error -19 [ 1142.254534][ T9] usb 9-1: USB disconnect, device number 9 [ 1142.281921][T14968] IPVS: using max 25 ests per chain, 60000 per kthread [ 1142.324490][T14973] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1142.458055][T14973] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1142.469467][T14973] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1142.480084][ T13] tipc: Left network mode [ 1142.494925][T14973] Remounting filesystem read-only [ 1142.566464][T12684] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1142.929799][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1142.964789][T14538] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1143.015032][T14538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1143.046139][T14538] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1143.137155][ T9] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1143.153743][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.189275][ T9] usb 9-1: config 0 descriptor?? [ 1143.189771][T14538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1143.410829][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1143.433600][ T9] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1143.452535][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 1143.489406][ T9] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1143.519253][ T9] [drm] Initialized udl on minor 2 [ 1143.529088][ T13] hsr_slave_0: left promiscuous mode [ 1143.550652][ T9] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.571675][ T13] hsr_slave_1: left promiscuous mode [ 1143.584542][ T9] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1143.591756][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.606364][ T803] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1143.616666][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.629141][ T9] usb 9-1: USB disconnect, device number 10 [ 1143.639142][ T803] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1143.650059][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.677777][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.722115][ T13] veth1_macvtap: left promiscuous mode [ 1143.741533][ T13] veth0_macvtap: left promiscuous mode [ 1143.766713][ T13] veth1_vlan: left promiscuous mode [ 1143.790334][ T13] veth0_vlan: left promiscuous mode [ 1146.304230][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1146.326899][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1146.479654][T14538] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1146.491927][T14538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.542238][T14538] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1146.595591][T14538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.899155][ T5762] IPVS: starting estimator thread 0... [ 1147.000379][T15063] IPVS: using max 25 ests per chain, 60000 per kthread [ 1147.331992][ T13] IPVS: stop unused estimator thread 0... [ 1147.425325][T14538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.465630][T14538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.485224][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.492439][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.528566][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.535790][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.312687][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1149.322795][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1149.334878][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1149.350097][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1149.362129][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1151.421103][ T5762] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1151.459651][ T5632] Bluetooth: hci3: command tx timeout [ 1151.592886][ T5632] Bluetooth: hci5: unexpected event 0x35 length: 7 > 6 [ 1151.649638][ T5762] usb 3-1: Using ep0 maxpacket: 16 [ 1152.052030][ T5762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1152.210160][ T5762] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1152.270593][ T5762] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1152.325382][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.385093][ T5762] usb 3-1: Product: syz [ 1152.402750][ T5762] usb 3-1: Manufacturer: syz [ 1152.444526][ T5762] usb 3-1: SerialNumber: syz [ 1152.721633][ T5762] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1152.777120][ T5762] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1153.116955][T15117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.154120][T15117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.348131][ T5762] usb 3-1: USB disconnect, device number 79 [ 1153.542140][ T5632] Bluetooth: hci3: command tx timeout [ 1155.619579][ T5632] Bluetooth: hci3: command tx timeout [ 1156.293588][ T5895] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1156.499824][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 1156.589041][ T5895] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1156.623018][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.632017][ T5895] usb 3-1: Product: syz [ 1156.651046][ T5895] usb 3-1: Manufacturer: syz [ 1156.662089][ T5895] usb 3-1: SerialNumber: syz [ 1156.705581][ T5895] usb 3-1: config 0 descriptor?? [ 1156.793719][ T5895] gspca_main: se401-2.14.0 probing 047d:5003 [ 1156.818166][ T58] bridge_slave_1: left allmulticast mode [ 1156.838829][ T58] bridge_slave_1: left promiscuous mode [ 1156.858493][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.913899][ T58] bridge_slave_0: left allmulticast mode [ 1156.936051][ T58] bridge_slave_0: left promiscuous mode [ 1156.969423][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.166499][ T5895] gspca_se401: Wrong descriptor type [ 1157.383156][ T5895] usb 3-1: USB disconnect, device number 80 [ 1157.779723][ T5632] Bluetooth: hci3: command tx timeout [ 1157.789081][T15210] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2320'. [ 1158.038956][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.691595][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.290899][ T58] bond0 (unregistering): Released all slaves [ 1159.321454][T15095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.329650][T15095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.336893][T15095] bridge_slave_0: entered allmulticast mode [ 1159.348834][T15095] bridge_slave_0: entered promiscuous mode [ 1159.369400][ T5287] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1159.469651][T13096] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1159.664600][T13096] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1159.712676][T13096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.748662][T13096] usb 3-1: Product: syz [ 1159.771296][T13096] usb 3-1: Manufacturer: syz [ 1159.842731][T13096] usb 3-1: SerialNumber: syz [ 1159.860934][T13096] usb 3-1: config 0 descriptor?? [ 1159.947611][T15226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.956393][T15226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.216748][T15226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.257178][T15226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.707218][T15095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.730984][T15095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.748464][T15095] bridge_slave_1: entered allmulticast mode [ 1160.770726][T15095] bridge_slave_1: entered promiscuous mode [ 1160.867906][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.882598][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.925456][T13096] usb 3-1: f81604_read: reg: 100f failed: -EPIPE [ 1160.956621][ T58] hsr_slave_0: left promiscuous mode [ 1160.970847][ T58] hsr_slave_1: left promiscuous mode [ 1160.981298][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.000755][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.278331][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1161.300880][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1161.458043][T15095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.478012][T15095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.487220][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.521360][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.787737][T13096] usb 3-1: f81604_read: reg: 200e failed: -EPROTO [ 1161.813456][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1161.817584][T13096] usb 3-1: USB disconnect, device number 81 [ 1161.880996][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2333'. [ 1162.174910][T13096] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 1162.216120][ T5287] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1162.255403][T15095] team0: Port device team_slave_0 added [ 1162.281314][T15095] team0: Port device team_slave_1 added [ 1162.317387][T13096] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 1162.386277][T15095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.546528][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.598852][T15095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.609403][ T31] audit: type=1800 audit(1780038577.647:35): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2336" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1162.695780][T15095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.715891][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.796066][T15095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.998223][T15095] hsr_slave_0: entered promiscuous mode [ 1163.013030][T15095] hsr_slave_1: entered promiscuous mode [ 1164.470682][T15284] loop8: detected capacity change from 0 to 32768 [ 1164.663094][T15284] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1165.184857][T15284] XFS (loop8): Ending clean mount [ 1165.600170][T12684] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1165.788047][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1167.689736][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1169.297724][T13096] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1169.825911][T13096] usb 3-1: Using ep0 maxpacket: 16 [ 1169.873637][T13096] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.976663][T15395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.985311][T15395] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.999403][T15395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.009568][T13096] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1170.028512][T13096] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1170.136191][T13096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.143022][T15395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.153905][T15395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.167260][T15395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1170.175248][T13096] usb 3-1: Product: syz [ 1170.177614][T15395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1170.195608][T13096] usb 3-1: Manufacturer: syz [ 1170.208694][T15395] veth1_vlan: left promiscuous mode [ 1170.209683][T13096] usb 3-1: SerialNumber: syz [ 1170.215215][T15395] veth0_vlan: left promiscuous mode [ 1170.224655][T15395] veth0_vlan: entered promiscuous mode [ 1170.233208][T15395] veth1_vlan: entered promiscuous mode [ 1170.243094][T15395] veth1_macvtap: left promiscuous mode [ 1170.249595][T15395] veth0_macvtap: left promiscuous mode [ 1170.255961][T15395] veth0_macvtap: entered promiscuous mode [ 1170.263028][T15395] veth1_macvtap: entered promiscuous mode [ 1170.273922][T15395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.282085][T15395] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.290296][T15395] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.299855][T15395] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.399337][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1170.926697][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.933960][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1171.006144][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.013388][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1171.023109][T13096] usb 3-1: 0:2 : does not exist [ 1171.039291][T13096] usb 3-1: unit 6 not found! [ 1171.191736][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.220655][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.249364][T13096] usb 3-1: USB disconnect, device number 82 [ 1171.317851][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.360736][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.387005][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1171.628436][T15095] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1171.656190][T15095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.687169][T15095] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1171.708663][T15411] fuse: fd is not a fuse device [ 1171.744052][T15095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.768676][T15095] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1171.804127][T15095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.829903][T15095] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1171.874731][T15095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.933238][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2366'. [ 1172.045104][T15413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.052791][T15413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.252819][T15413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.267808][T15413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1172.429834][ T5763] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1172.467630][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.478021][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.487452][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.497082][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.514658][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.524199][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.534493][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.544175][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.593687][ T5763] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1172.612846][ T5763] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1172.635058][ T5763] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1172.644260][ T5763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.660007][ T5763] usb 9-1: Product: syz [ 1172.676732][ T5763] usb 9-1: Manufacturer: syz [ 1172.694154][ T5763] usb 9-1: SerialNumber: syz [ 1172.742418][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.819431][T15095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1172.859771][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.866987][ T9052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.902363][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.911422][T13596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.944236][ T5763] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1173.748996][ T5763] usb 9-1: failed to enable PITCH for EP 0x82 [ 1173.770133][ T5763] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1173.785420][ T31] audit: type=1800 audit(1780038588.827:36): pid=15458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2376" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1173.826008][ T5763] usb 9-1: clock source 0 is not valid, cannot use [ 1173.841729][ T5763] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 1173.853008][ T5763] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1174.013018][ T5763] usb 9-1: USB disconnect, device number 11 [ 1174.341081][ T29] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1174.572945][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1174.605470][ T29] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1174.650336][ T29] usb 3-1: config 0 has no interface number 0 [ 1174.688009][ T29] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1174.747460][ T29] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1174.788076][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.794023][T15095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.831655][ T29] usb 3-1: Product: syz [ 1174.841832][ T29] usb 3-1: Manufacturer: syz [ 1174.853401][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2383'. [ 1174.867747][ T29] usb 3-1: SerialNumber: syz [ 1174.895214][ T29] usb 3-1: config 0 descriptor?? [ 1174.935201][T15466] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1175.188086][T15466] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1175.772331][T15095] veth0_vlan: entered promiscuous mode [ 1175.823454][T15095] veth1_vlan: entered promiscuous mode [ 1176.240491][T15430] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1176.466117][ T29] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1176.522001][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.551946][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.683048][T15095] veth0_macvtap: entered promiscuous mode [ 1176.699373][T15095] veth1_macvtap: entered promiscuous mode [ 1176.715733][T15430] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1176.723968][ T29] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1176.735804][ T29] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1176.757927][T15430] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1176.795581][T15430] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1176.820862][T15430] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.872291][T15430] usb 9-1: Product: syz [ 1176.879478][T15095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.909315][T15430] usb 9-1: Manufacturer: syz [ 1176.917002][T15430] usb 9-1: SerialNumber: syz [ 1176.933705][T15095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.985070][ T9752] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.007692][ T9752] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.035089][ T9752] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.053506][ T9752] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.212392][T15430] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1177.266808][ T9752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.283802][ T9752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.323534][ T9752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.332346][ T9752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.392773][T15430] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1178.446904][T15528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2392'. [ 1178.521367][ T5763] usb 3-1: USB disconnect, device number 83 [ 1178.587554][T15430] usb 9-1: USB disconnect, device number 12 [ 1178.763713][T14911] udevd[14911]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.419625][T15430] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1179.593177][T15430] usb 9-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.654902][T15430] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1179.678740][T15430] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1179.711093][T15430] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1179.739132][T15430] usb 9-1: Product: syz [ 1179.759267][T15430] usb 9-1: Manufacturer: syz [ 1179.772992][T15430] usb 9-1: SerialNumber: syz [ 1179.795928][T15430] usb 9-1: config 0 descriptor?? [ 1180.412158][T15430] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1180.450921][T15430] usb 9-1: USB disconnect, device number 13 [ 1180.496264][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.262308][T13096] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1182.931008][T13096] usb 3-1: Using ep0 maxpacket: 16 [ 1183.059267][T13096] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 1183.086401][T13096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.134424][T13096] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.156935][T13096] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1183.212717][T13096] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.537742][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2410'. [ 1184.163346][T13096] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1184.197544][T13096] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.219413][T13096] usb 3-1: Manufacturer: syz [ 1184.238169][T13096] usb 3-1: config 0 descriptor?? [ 1184.616631][T13096] rc_core: IR keymap rc-hauppauge not found [ 1184.644587][T13096] Registered IR keymap rc-empty [ 1184.660189][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1184.709818][ T5895] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1184.719036][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1184.787258][T13096] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1184.820390][T13096] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 1184.892582][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1184.924162][ T5895] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.961417][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1184.971885][ T5895] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1185.008699][ T5895] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1185.020277][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.061346][ T5895] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1185.072823][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.098963][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.107820][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.140189][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.157400][T15599] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1185.186558][ T5895] hub 10-1:1.0: bad descriptor, ignoring hub [ 1185.209810][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.227308][ T5895] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1185.252443][ T5895] cdc_wdm 10-1:1.0: skipping garbage [ 1185.260504][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.271223][ T5895] cdc_wdm 10-1:1.0: skipping garbage [ 1185.301473][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.314265][ T5895] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1185.338943][ T5895] cdc_wdm 10-1:1.0: Unknown control protocol [ 1185.350151][T13096] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1185.411205][T13096] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1185.436678][T13096] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1185.492422][T13096] usb 3-1: USB disconnect, device number 84 [ 1185.602460][ C0] wdm_int_callback: 93 callbacks suppressed [ 1185.602479][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.615038][ C0] wdm_int_callback: 93 callbacks suppressed [ 1185.615054][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.627298][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.633981][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.640379][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.647041][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.653526][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.660193][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.666975][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.673645][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.679855][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1185.829144][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.876180][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.899428][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.906120][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.912577][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.919239][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.925602][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.932281][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.938765][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.945442][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1185.951980][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1185.958655][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1188.305388][T13096] usb 10-1: USB disconnect, device number 2 [ 1188.362529][T15631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.426369][T15631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.532867][T15631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.609045][ T31] audit: type=1326 audit(1780038603.647:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1188.937761][ T31] audit: type=1326 audit(1780038603.687:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1189.016635][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'. [ 1189.283600][ T31] audit: type=1326 audit(1780038603.687:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1189.813731][ T31] audit: type=1326 audit(1780038603.687:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1189.907295][T15631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.007714][T15631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.009675][ T31] audit: type=1326 audit(1780038603.687:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1190.079576][ T31] audit: type=1800 audit(1780038603.697:42): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2420" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1190.127869][ T31] audit: type=1326 audit(1780038603.737:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9939ce59 code=0x7ffc0000 [ 1190.145155][T15631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1190.202551][ T31] audit: type=1326 audit(1780038603.737:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c9935d68e code=0x7ffc0000 [ 1190.221306][T15631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.262784][ T31] audit: type=1326 audit(1780038603.737:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c9935d68e code=0x7ffc0000 [ 1190.803937][ T31] audit: type=1326 audit(1780038603.747:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15642 comm="syz.8.2421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c9935d68e code=0x7ffc0000 [ 1190.854402][T15631] veth1_vlan: left promiscuous mode [ 1190.884908][T15631] veth0_vlan: left promiscuous mode [ 1190.904425][T15631] veth0_vlan: entered promiscuous mode [ 1190.950749][T15631] veth1_vlan: entered promiscuous mode [ 1191.040298][T15672] siw: device registration error -23 [ 1191.284846][T15631] veth1_macvtap: left promiscuous mode [ 1191.415677][T15631] veth0_macvtap: left promiscuous mode [ 1191.581886][T15631] veth0_macvtap: entered promiscuous mode [ 1191.743680][T15631] veth1_macvtap: entered promiscuous mode [ 1191.817047][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.873756][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1192.402248][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1192.444631][T15631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1192.497771][T15631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1192.552120][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.559300][ T9053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.590812][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.597974][ T9053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.725935][ T9048] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.753736][ T9048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.808804][ T9048] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.820076][ T9] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1192.835690][ T9048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.890533][ T9048] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1192.910427][ T9048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.002909][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.042870][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1193.065552][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.073332][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.087804][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1193.116726][ T9] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1193.146761][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.191266][T15678] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1193.233152][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 1193.255240][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1193.276548][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 1193.294505][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 1193.324295][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1193.341363][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 1193.355559][T15680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.374331][T15680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.709002][T15678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.739948][T15678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.020246][T15430] usb 9-1: USB disconnect, device number 14 [ 1194.543086][ T9048] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.576789][ T9048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.614429][ T9048] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.727061][ T9048] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.756766][ T9048] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.216257][ T9048] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.616482][T15720] loop2: detected capacity change from 0 to 7 [ 1195.644739][T15720] Dev loop2: unable to read RDB block 7 [ 1195.657494][T15720] loop2: AHDI p1 p2 p3 [ 1195.675138][T15720] loop2: partition table partially beyond EOD, truncated [ 1195.708281][T15720] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1195.735715][T15720] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1197.008154][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 1197.008170][ T31] audit: type=1326 audit(1780038612.047:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1197.116062][ T31] audit: type=1326 audit(1780038612.087:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1197.195265][ T31] audit: type=1326 audit(1780038612.127:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1197.263883][ T31] audit: type=1326 audit(1780038612.127:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1197.391715][ T31] audit: type=1326 audit(1780038612.127:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1197.419578][ T5763] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1197.492487][ T31] audit: type=1326 audit(1780038612.187:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1197.580141][T15745] fuse: Unknown parameter 'group_id00000000000000000000' [ 1197.618100][ T31] audit: type=1326 audit(1780038612.197:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1197.647211][ T5763] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1197.729243][ T5763] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.767241][ T5763] usb 9-1: config 0 descriptor?? [ 1197.778307][ T31] audit: type=1326 audit(1780038612.197:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1198.469590][ T31] audit: type=1326 audit(1780038612.207:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1198.494811][ T31] audit: type=1326 audit(1780038612.207:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.9.2440" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1198.600181][ T5763] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1198.616638][ T5763] [drm:udl_init] *ERROR* Selecting channel failed [ 1198.675868][ T5763] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1198.703108][ T5763] [drm] Initialized udl on minor 2 [ 1198.724924][ T5763] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1198.753550][ T5763] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1198.786977][ T29] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1198.807340][ T5763] usb 9-1: USB disconnect, device number 15 [ 1198.826889][ T29] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1199.629744][ T5895] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1199.812370][ T5895] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1199.857945][ T5895] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1199.919607][ T5895] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1199.952446][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.985594][ T5895] usb 10-1: Product: syz [ 1199.997844][ T5895] usb 10-1: Manufacturer: syz [ 1200.012039][ T5895] usb 10-1: SerialNumber: syz [ 1200.161788][T15780] loop2: detected capacity change from 0 to 7 [ 1200.192650][T15780] Dev loop2: unable to read RDB block 7 [ 1200.211698][T15780] loop2: AHDI p1 p2 p3 [ 1200.231139][T15780] loop2: partition table partially beyond EOD, truncated [ 1200.257814][T15780] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1200.281125][T15780] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1200.469267][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1200.489952][ T5895] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1200.505158][ T5895] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1201.304202][ T5895] usb 10-1: USB disconnect, device number 3 [ 1201.431851][T15794] loop2: detected capacity change from 0 to 7 [ 1201.866324][T15794] Dev loop2: unable to read RDB block 7 [ 1201.954435][T15794] loop2: unable to read partition table [ 1201.966721][T15794] loop2: partition table beyond EOD, truncated [ 1201.978878][T15794] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1202.045642][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1203.538989][ T31] kauditd_printk_skb: 146 callbacks suppressed [ 1203.539011][ T31] audit: type=1800 audit(1780038618.577:232): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2463" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1204.569577][ T5763] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1204.751784][ T5763] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1204.818173][ T31] audit: type=1326 audit(1780038619.857:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.7.2469" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b999ce59 code=0x7ffc0000 [ 1204.837187][ T5763] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1204.844011][ T31] audit: type=1326 audit(1780038619.857:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.7.2469" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b999ce59 code=0x7ffc0000 [ 1205.485625][ T5763] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1205.494831][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.503176][ T5763] usb 10-1: Product: syz [ 1205.507449][ T5763] usb 10-1: Manufacturer: syz [ 1205.512352][ T5763] usb 10-1: SerialNumber: syz [ 1205.644953][ T31] audit: type=1326 audit(1780038619.857:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.7.2469" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f06b999ce59 code=0x7ffc0000 [ 1205.724312][ T31] audit: type=1326 audit(1780038619.857:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15840 comm="syz.7.2469" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f06b999ce59 code=0x7ffc0000 [ 1205.837062][ T31] audit: type=1800 audit(1780038620.877:237): pid=15855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2472" name="nullb0" dev="tmpfs" ino=796 res=0 errno=0 [ 1205.890181][ T5763] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1206.029970][ T5895] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1206.204262][ T5895] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1206.883398][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.899314][ T5895] usb 9-1: Product: syz [ 1206.903989][ T5895] usb 9-1: Manufacturer: syz [ 1206.908657][ T5895] usb 9-1: SerialNumber: syz [ 1206.917928][ T5763] usb 10-1: failed to enable PITCH for EP 0x82 [ 1206.929051][ T5763] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1206.938114][ T5763] usb 10-1: clock source 0 is not valid, cannot use [ 1206.943371][ T5895] usb 9-1: config 0 descriptor?? [ 1206.945447][ T5763] usb 10-1: 2:1: cannot get freq (v2/v3): err -71 [ 1206.959221][ T5763] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1207.027812][ T5763] usb 10-1: USB disconnect, device number 4 [ 1207.291638][T13736] udevd[13736]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.593030][ T5895] usb 9-1: Firmware version (0.0) predates our first public release. [ 1207.619339][ T5895] usb 9-1: Please update to version 0.2 or newer [ 1207.695615][ T5895] usb 9-1: USB disconnect, device number 16 [ 1207.779943][ T5763] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1207.932237][ T5798] IPVS: starting estimator thread 0... [ 1208.032144][T15886] IPVS: using max 25 ests per chain, 60000 per kthread [ 1208.277578][ T5763] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1208.350694][ T5763] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1208.689155][ T5763] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1208.743418][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.801082][ T5763] usb 3-1: Product: syz [ 1208.840339][ T5763] usb 3-1: Manufacturer: syz [ 1208.875975][ T5763] usb 3-1: SerialNumber: syz [ 1208.958430][T15893] loop2: detected capacity change from 0 to 7 [ 1208.968005][T15893] Dev loop2: unable to read RDB block 7 [ 1208.973771][T15893] loop2: unable to read partition table [ 1208.987271][T15893] loop2: partition table beyond EOD, truncated [ 1209.008071][T15893] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1209.293075][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1209.339941][T12685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1209.351211][ T5762] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1209.358933][ T5763] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1209.370415][ T5763] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1209.392406][T12685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1209.404189][T12685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1209.415070][T12685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1209.422890][T12685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1209.542615][ T5762] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.571624][ T5762] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1209.602253][ T5762] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1209.641460][ T5763] usb 3-1: USB disconnect, device number 85 [ 1209.652161][ T5762] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1209.679390][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.759948][T15899] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1209.802493][ T5762] hub 10-1:1.0: bad descriptor, ignoring hub [ 1209.830669][ T5762] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1210.684047][ T5762] cdc_wdm 10-1:1.0: skipping garbage [ 1210.699394][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.700673][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.723667][ T5762] cdc_wdm 10-1:1.0: skipping garbage [ 1210.742280][ T5762] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1210.768740][ T5762] cdc_wdm 10-1:1.0: Unknown control protocol [ 1210.803939][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.303658][ T5798] usb 10-1: USB disconnect, device number 5 [ 1211.488452][T15930] syzkaller0: entered promiscuous mode [ 1211.509599][T15930] syzkaller0: entered allmulticast mode [ 1211.591103][ T5632] Bluetooth: hci1: command tx timeout [ 1212.005587][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1213.745759][ T5632] Bluetooth: hci1: command tx timeout [ 1213.868127][T15950] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1213.879011][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 1215.781313][ T5632] Bluetooth: hci1: command tx timeout [ 1216.603160][T15968] loop9: detected capacity change from 0 to 16 [ 1216.625840][T15968] erofs (device loop9): mounted with root inode @ nid 36. [ 1217.031520][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2506'. [ 1217.869548][ T5632] Bluetooth: hci1: command tx timeout [ 1218.639450][T15949] warning: `syz.7.2501' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1219.507310][ T31] audit: type=1326 audit(1780038634.547:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1219.600040][ T31] audit: type=1326 audit(1780038634.547:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1219.689658][ T5798] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1219.703917][ T31] audit: type=1326 audit(1780038634.577:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1219.816543][ T31] audit: type=1326 audit(1780038634.577:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1219.879954][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.887198][ T31] audit: type=1326 audit(1780038634.577:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1219.912148][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.924418][ T5798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.932616][T15901] bridge_slave_0: entered allmulticast mode [ 1219.956275][ T5798] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1219.968791][T15901] bridge_slave_0: entered promiscuous mode [ 1219.995411][ T5798] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1220.008402][ T31] audit: type=1326 audit(1780038634.627:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40a19ce59 code=0x7ffc0000 [ 1220.037042][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.044776][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.055355][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.062968][ T5798] usb 3-1: Product: syz [ 1220.067240][ T5798] usb 3-1: Manufacturer: syz [ 1220.072416][T15901] bridge_slave_1: entered allmulticast mode [ 1220.078395][ T5798] usb 3-1: SerialNumber: syz [ 1220.087327][ T31] audit: type=1326 audit(1780038634.627:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1220.113731][T15901] bridge_slave_1: entered promiscuous mode [ 1220.147138][ T31] audit: type=1326 audit(1780038634.627:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1220.227654][ T31] audit: type=1326 audit(1780038634.627:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1220.306127][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.329282][ T31] audit: type=1326 audit(1780038634.627:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.9.2511" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd40a15d68e code=0x7ffc0000 [ 1220.338528][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.378566][ T5798] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1220.588989][T15901] team0: Port device team_slave_0 added [ 1220.624040][T15901] team0: Port device team_slave_1 added [ 1220.696240][T16003] loop2: detected capacity change from 0 to 7 [ 1220.727417][T16003] Dev loop2: unable to read RDB block 7 [ 1220.748843][T16003] loop2: unable to read partition table [ 1220.767852][T16003] loop2: partition table beyond EOD, truncated [ 1220.776800][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.792043][T16003] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1220.802011][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.911594][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.954621][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.978816][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1221.133282][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.169376][ T5798] usb 3-1: failed to enable PITCH for EP 0x82 [ 1221.204043][ T5798] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1221.243599][ T5798] usb 3-1: clock source 0 is not valid, cannot use [ 1221.267676][ T5798] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1221.285267][ T5798] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1221.506797][T15901] hsr_slave_0: entered promiscuous mode [ 1221.522234][ T5798] usb 3-1: USB disconnect, device number 86 [ 1221.580476][T15901] hsr_slave_1: entered promiscuous mode [ 1221.621812][T15901] debugfs: 'hsr0' already exists in 'hsr' [ 1221.664840][T15901] Cannot create hsr debugfs directory [ 1221.728711][T14003] udevd[14003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1222.352457][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 1225.980952][ T5762] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1227.261836][ T5762] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1227.391819][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2531'. [ 1227.457227][ T5762] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1227.851531][ T5762] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1227.887589][ T5762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.913147][ T5762] usb 9-1: Product: syz [ 1227.926131][ T5762] usb 9-1: Manufacturer: syz [ 1227.945902][ T5762] usb 9-1: SerialNumber: syz [ 1228.218961][ T5762] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1229.603200][ T5762] usb 9-1: failed to enable PITCH for EP 0x82 [ 1229.634004][ T5762] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1229.703732][ T5762] usb 9-1: clock source 0 is not valid, cannot use [ 1229.727735][ T5762] usb 9-1: 2:1: cannot get freq (v2/v3): err -71 [ 1229.752624][ T5762] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1229.913588][T15901] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1229.958257][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.962570][ T5762] usb 9-1: USB disconnect, device number 17 [ 1229.976192][T15901] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1230.070775][ T5763] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1230.101489][T14579] udevd[14579]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.189279][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1230.205727][T15901] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1230.239558][ T5763] usb 10-1: Using ep0 maxpacket: 32 [ 1230.255020][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1230.266436][ T5763] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1230.285798][T15901] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1230.316434][ T5763] usb 10-1: config 0 has no interface number 0 [ 1230.332941][ T5763] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1230.355016][ T5763] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1230.366759][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.374931][ T5763] usb 10-1: Product: syz [ 1230.381473][ T5763] usb 10-1: Manufacturer: syz [ 1230.384193][T15901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1230.386186][ T5763] usb 10-1: SerialNumber: syz [ 1230.401721][ T5763] usb 10-1: config 0 descriptor?? [ 1230.754083][T15901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.831770][T15901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.932774][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.939986][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.047844][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.055044][ T9052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.370315][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2544'. [ 1235.063017][ T5763] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1235.078250][ T5763] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1235.094312][ T5763] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1235.102114][ T5763] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1235.116270][ T5763] usb 10-1: USB disconnect, device number 6 [ 1236.919795][ T5763] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1237.127727][ T5763] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.172592][ T5763] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 1237.218042][ T5763] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1237.246475][ T5763] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1237.275812][ T5763] usb 10-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1237.300356][ T5763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.370456][ T5763] usb 10-1: config 0 descriptor?? [ 1238.403239][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.415138][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.450875][ T5763] hid_parser_main: 7 callbacks suppressed [ 1238.450897][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.537123][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.573111][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.586559][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.595333][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.606368][ T5763] logitech-djreceiver 0003:046D:C532.002B: unknown main item tag 0x0 [ 1238.663066][ T5763] logitech-djreceiver 0003:046D:C532.002B: item fetching failed at offset 39/40 [ 1238.695771][ T5763] logitech-djreceiver 0003:046D:C532.002B: logi_dj_probe: parse failed [ 1238.728068][ T5763] logitech-djreceiver 0003:046D:C532.002B: probe with driver logitech-djreceiver failed with error -22 [ 1238.784462][ T5763] usb 10-1: USB disconnect, device number 7 [ 1238.895735][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.208826][T16203] loop8: detected capacity change from 0 to 32768 [ 1239.232078][T16203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2555 (16203) [ 1239.265023][T16203] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1239.275316][T16203] BTRFS info (device loop8): using sha256 checksum algorithm [ 1239.391546][T16203] BTRFS info (device loop8): setting nodatasum [ 1239.397749][T16203] BTRFS info (device loop8): enabling ssd optimizations [ 1239.404735][T16203] BTRFS info (device loop8): turning on async discard [ 1239.411548][T16203] BTRFS info (device loop8): enabling free space tree [ 1239.627572][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 1239.627594][ T31] audit: type=1800 audit(1780038654.637:311): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2555" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1240.981193][T12684] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1242.132706][T15901] veth0_vlan: entered promiscuous mode [ 1242.233092][T15901] veth1_vlan: entered promiscuous mode [ 1242.374353][T15901] veth0_macvtap: entered promiscuous mode [ 1242.394653][T15901] veth1_macvtap: entered promiscuous mode [ 1242.461312][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.735271][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.569392][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.677637][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.742727][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.767956][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.062946][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.120315][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.296692][T16276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.304176][T16276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.568770][T16276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.595879][T16276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.641568][ T803] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1245.707502][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.779899][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.807337][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.816449][ T803] usb 9-1: Using ep0 maxpacket: 16 [ 1245.832134][ T803] usb 9-1: config 0 has an invalid interface number: 68 but max is 0 [ 1245.845600][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.860522][ T803] usb 9-1: config 0 has no interface number 0 [ 1245.874774][ T803] usb 9-1: config 0 interface 68 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1245.888643][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.891155][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.906320][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.924772][ T803] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1245.934756][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.951156][ T803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.998417][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1246.037133][ T803] usb 9-1: Product: syz [ 1246.044504][ T803] usb 9-1: Manufacturer: syz [ 1246.050110][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.280670][ T803] usb 9-1: SerialNumber: syz [ 1246.381482][ T803] usb 9-1: config 0 descriptor?? [ 1246.503753][ T803] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1246.733424][ T5912] usb 9-1: Failed to submit usb control message: -71 [ 1246.734414][T15430] usb 9-1: USB disconnect, device number 18 [ 1246.780327][ T5912] usb 9-1: unable to send the bmi data to the device: -71 [ 1246.818368][ T5912] usb 9-1: unable to get target info from device [ 1246.842299][ T5912] usb 9-1: could not get target info (-71) [ 1246.856236][ T5912] usb 9-1: could not probe fw (-71) [ 1249.844311][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1250.293988][T16345] loop8: detected capacity change from 0 to 32768 [ 1250.316745][T16345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2581 (16345) [ 1250.342838][T16345] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1250.353014][T16345] BTRFS info (device loop8): using sha256 checksum algorithm [ 1250.468089][T16345] BTRFS info (device loop8): setting nodatasum [ 1250.474395][T16345] BTRFS info (device loop8): enabling ssd optimizations [ 1250.481617][T16345] BTRFS info (device loop8): turning on async discard [ 1250.488373][T16345] BTRFS info (device loop8): enabling free space tree [ 1250.566836][ T31] audit: type=1800 audit(1780038665.607:312): pid=16345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2581" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1250.987940][T16365] netlink: 'syz.6.2582': attribute type 4 has an invalid length. [ 1251.498743][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1251.510428][T16370] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1251.588352][T12684] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1254.629799][ T5798] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1255.439631][ T5798] usb 6-1: Using ep0 maxpacket: 16 [ 1255.457432][ T5798] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.493177][ T5798] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1255.555215][ T5798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1255.583407][ T5798] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1255.617064][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.680162][ T5798] usb 6-1: config 0 descriptor?? [ 1255.709924][ T5762] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1255.773602][T16404] loop8: detected capacity change from 0 to 32768 [ 1255.815299][T16404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2593 (16404) [ 1255.873200][ T5762] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.906274][ T5762] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 1255.945143][ T5762] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.986442][ T5762] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1255.993754][T16404] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1255.993810][T16404] BTRFS info (device loop8): using sha256 checksum algorithm [ 1256.065587][ T5762] usb 10-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1256.097006][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.148590][ T5762] usb 10-1: config 0 descriptor?? [ 1256.166091][ T5798] nzxt-smart2 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1256.214872][T16404] BTRFS info (device loop8): setting nodatasum [ 1256.247841][T16404] BTRFS info (device loop8): enabling ssd optimizations [ 1256.271250][T16404] BTRFS info (device loop8): turning on async discard [ 1256.291226][T16404] BTRFS info (device loop8): enabling free space tree [ 1256.334061][ T5798] usb 6-1: USB disconnect, device number 32 [ 1256.514005][T12684] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1256.541865][T16458] fido_id[16458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1256.596944][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1256.787755][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1256.811268][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1256.852246][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1256.911298][T15430] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1257.212712][T16468] bridge1: left promiscuous mode [ 1257.217779][T16468] bridge1: left allmulticast mode [ 1257.226863][T16468] bridge2: left promiscuous mode [ 1257.232084][T16468] bridge2: left allmulticast mode [ 1257.384136][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1257.568571][ T5762] logitech-djreceiver 0003:046D:C532.002D: unknown main item tag 0x0 [ 1257.578384][ T5762] logitech-djreceiver 0003:046D:C532.002D: item fetching failed at offset 39/40 [ 1257.579067][T15430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.603292][ T5762] logitech-djreceiver 0003:046D:C532.002D: logi_dj_probe: parse failed [ 1257.628161][ T5762] logitech-djreceiver 0003:046D:C532.002D: probe with driver logitech-djreceiver failed with error -22 [ 1257.659385][T15430] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1257.689997][T15430] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1257.712713][ T5762] usb 10-1: USB disconnect, device number 8 [ 1257.722724][T15430] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1257.756162][T15430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.830604][T16462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1257.962979][T15430] hub 3-1:1.0: bad descriptor, ignoring hub [ 1258.075089][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.075953][T15430] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1258.082489][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.227891][T15430] cdc_wdm 3-1:1.0: skipping garbage [ 1258.248924][T15430] cdc_wdm 3-1:1.0: skipping garbage [ 1258.284543][T15430] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1258.307058][T15430] cdc_wdm 3-1:1.0: Unknown control protocol [ 1258.608399][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.758568][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.834568][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.905523][T16471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.157592][ T5762] usb 3-1: USB disconnect, device number 87 [ 1259.691653][T16507] netlink: 'syz.8.2607': attribute type 4 has an invalid length. [ 1260.309013][ T9053] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.371237][ T9766] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.429857][ T9766] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.479104][ T9766] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.757378][T16528] loop2: detected capacity change from 0 to 7 [ 1260.864602][T16528] Dev loop2: unable to read RDB block 7 [ 1260.919957][T16532] netlink: 'syz.9.2616': attribute type 4 has an invalid length. [ 1260.975843][T16528] loop2: AHDI p1 p2 p3 [ 1260.995163][T16528] loop2: partition table partially beyond EOD, truncated [ 1261.070958][T16528] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1261.099584][T16528] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1261.167868][T16536] netlink: 'syz.7.2618': attribute type 4 has an invalid length. [ 1261.808125][T16512] loop2: detected capacity change from 0 to 32768 [ 1263.037822][T16543] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1263.166449][T16512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2612 (16512) [ 1264.169570][T16517] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1264.356422][T16517] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.399224][T16517] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 1264.448061][T16517] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.486163][T16572] syzkaller0: entered promiscuous mode [ 1264.507861][T16517] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1264.525744][T16572] syzkaller0: entered allmulticast mode [ 1264.553958][T16517] usb 9-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1264.605101][T16517] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.351241][T16517] usb 9-1: config 0 descriptor?? [ 1266.490155][ T5763] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 1267.261375][ T5763] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.308616][ T5763] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1267.314391][T16517] usbhid 9-1:0.0: can't add hid device: -71 [ 1267.357607][ T5763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1267.372095][T16517] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1267.425409][ T5763] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1267.458998][T16517] usb 9-1: USB disconnect, device number 19 [ 1267.503762][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.558444][T16592] loop2: detected capacity change from 0 to 7 [ 1267.610530][ T5763] usb 6-1: can't set config #1, error -71 [ 1267.622485][T16592] Dev loop2: unable to read RDB block 7 [ 1267.650094][ T5763] usb 6-1: USB disconnect, device number 33 [ 1267.661779][T16592] loop2: unable to read partition table [ 1267.704250][T16592] loop2: partition table beyond EOD, truncated [ 1267.740883][T16592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1267.833476][ T4992] Dev loop2: unable to read RDB block 7 [ 1267.857676][ T4992] loop2: unable to read partition table [ 1267.936102][ T4992] loop2: partition table beyond EOD, truncated [ 1268.977909][T16615] loop5: detected capacity change from 0 to 2048 [ 1269.033517][T16615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.049634][ T5763] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1269.224430][ T5763] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1269.253482][ T5763] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1269.288063][ T5763] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1269.327994][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.360156][ T5763] usb 10-1: Product: syz [ 1269.374717][ T5763] usb 10-1: Manufacturer: syz [ 1269.388805][ T5763] usb 10-1: SerialNumber: syz [ 1269.864041][T16621] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1269.888969][T16632] netlink: 'syz.7.2622': attribute type 4 has an invalid length. [ 1269.910894][ T5763] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1269.978504][ T9048] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1270.055632][ T9048] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1270.055632][ T9048] [ 1271.527866][ T5763] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1271.558885][ T9048] EXT4-fs (loop5): Total free blocks count 0 [ 1271.585473][ T9048] EXT4-fs (loop5): Free/Dirty block details [ 1271.614380][ T9048] EXT4-fs (loop5): free_blocks=2415919504 [ 1271.648325][ T9048] EXT4-fs (loop5): dirty_blocks=7552 [ 1271.685494][ T9048] EXT4-fs (loop5): Block reservation details [ 1271.905378][ T9048] EXT4-fs (loop5): i_reserved_data_blocks=472 [ 1272.329626][ T5763] usb 10-1: USB disconnect, device number 9 [ 1272.510650][T13423] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 2048 with error 28 [ 1272.553789][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1272.766849][T15901] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1273.999533][T16516] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1274.166637][T16683] loop8: detected capacity change from 0 to 2048 [ 1274.169559][T16517] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1274.180857][T16516] usb 6-1: Using ep0 maxpacket: 32 [ 1274.204127][T16516] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1274.229249][T16683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.240090][T16516] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1274.266902][T16516] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1274.294579][T16516] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1274.321787][T16516] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1274.342960][T16516] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.63 [ 1274.358179][T16516] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=174 [ 1274.377612][T16516] usb 6-1: Product: syz [ 1274.389540][T16516] usb 6-1: Manufacturer: syz [ 1274.395745][T16516] usb 6-1: SerialNumber: syz [ 1274.442745][T16517] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1274.453881][T16516] usb 6-1: config 0 descriptor?? [ 1274.465599][T16517] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1274.502424][T16517] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1274.519577][T16517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.532872][T16516] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1274.552031][T16517] usb 3-1: Product: syz [ 1274.567785][T16517] usb 3-1: Manufacturer: syz [ 1274.584375][T16516] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1274.608379][T16517] usb 3-1: SerialNumber: syz [ 1275.082594][ T13] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1275.124199][T16517] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1275.136946][T16517] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1275.193106][ T13] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1275.221163][ T13] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1275.221163][ T13] [ 1275.241458][ T13] EXT4-fs (loop8): Total free blocks count 0 [ 1275.253925][ T13] EXT4-fs (loop8): Free/Dirty block details [ 1275.271022][ T13] EXT4-fs (loop8): free_blocks=2415919504 [ 1275.287984][ T13] EXT4-fs (loop8): dirty_blocks=7888 [ 1275.298882][ T13] EXT4-fs (loop8): Block reservation details [ 1275.328604][ T13] EXT4-fs (loop8): i_reserved_data_blocks=493 [ 1275.349911][T16517] usb 3-1: USB disconnect, device number 88 [ 1275.416264][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.576971][ T13] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 2048 with error 28 [ 1275.747129][T16671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.871602][T16709] netlink: 'syz.6.2662': attribute type 4 has an invalid length. [ 1275.989601][T12685] Bluetooth: hci3: command 0x0406 tx timeout [ 1276.001076][ T5763] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1276.003615][T16671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.258579][T16517] usb 6-1: USB disconnect, device number 34 [ 1276.287285][ T5763] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.323717][ T5763] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1276.339648][T16517] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1276.362799][ T5763] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1276.415181][ T5763] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1276.438563][T12684] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1276.453589][ T5763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.473977][T16714] siw: device registration error -23 [ 1276.488072][T16714] afs: Unknown parameter 'dy' [ 1276.537420][T16707] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1276.594176][ T5763] hub 10-1:1.0: bad descriptor, ignoring hub [ 1276.621004][ T5763] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1276.710947][ T5763] cdc_wdm 10-1:1.0: skipping garbage [ 1277.019780][ T5763] cdc_wdm 10-1:1.0: skipping garbage [ 1277.134269][ T5763] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1277.154599][ T5763] cdc_wdm 10-1:1.0: Unknown control protocol [ 1277.378276][T16707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.072415][T16707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.859807][T16515] usb 10-1: USB disconnect, device number 10 [ 1279.300696][T16751] syzkaller0: entered promiscuous mode [ 1279.315371][T16751] syzkaller0: entered allmulticast mode [ 1279.700184][T16515] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1281.754896][T16515] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1281.800588][T16515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.838180][T16515] usb 3-1: Product: syz [ 1282.573681][T16515] usb 3-1: Manufacturer: syz [ 1282.578348][T16515] usb 3-1: SerialNumber: syz [ 1282.589312][T16515] usb 3-1: config 0 descriptor?? [ 1282.843374][T16515] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1282.888413][T16515] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1282.935424][T16515] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1283.526257][T16515] usb 3-1: USB disconnect, device number 89 [ 1284.635119][T16811] [ 1284.637486][T16811] ============================================ [ 1284.643623][T16811] WARNING: possible recursive locking detected [ 1284.649765][T16811] syzkaller #0 Tainted: G L [ 1284.655734][T16811] -------------------------------------------- [ 1284.661861][T16811] syz.5.2678/16811 is trying to acquire lock: [ 1284.667905][T16811] ffffffff8f3d6330 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1284.678119][T16811] [ 1284.678119][T16811] but task is already holding lock: [ 1284.685482][T16811] ffffffff8f3d6330 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1284.695659][T16811] [ 1284.695659][T16811] other info that might help us debug this: [ 1284.703693][T16811] Possible unsafe locking scenario: [ 1284.703693][T16811] [ 1284.711294][T16811] CPU0 [ 1284.714551][T16811] ---- [ 1284.717808][T16811] lock(qp_broker_list.mutex); [ 1284.722648][T16811] lock(qp_broker_list.mutex); [ 1284.727505][T16811] [ 1284.727505][T16811] *** DEADLOCK *** [ 1284.727505][T16811] [ 1284.735630][T16811] May be due to missing lock nesting notation [ 1284.735630][T16811] [ 1284.743936][T16811] 1 lock held by syz.5.2678/16811: [ 1284.749023][T16811] #0: ffffffff8f3d6330 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1284.759642][T16811] [ 1284.759642][T16811] stack backtrace: [ 1284.765511][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.5.2678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1284.765537][T16811] Tainted: [L]=SOFTLOCKUP [ 1284.765544][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1284.765556][T16811] Call Trace: [ 1284.765564][T16811] [ 1284.765574][T16811] dump_stack_lvl+0xe8/0x150 [ 1284.765602][T16811] print_deadlock_bug+0x279/0x290 [ 1284.765628][T16811] __lock_acquire+0x253f/0x2cf0 [ 1284.765652][T16811] ? is_bpf_text_address+0x292/0x2b0 [ 1284.765671][T16811] ? is_bpf_text_address+0x26/0x2b0 [ 1284.765691][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.765713][T16811] ? kernel_text_address+0xa5/0xe0 [ 1284.765743][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.765765][T16811] ? __kernel_text_address+0xd/0x30 [ 1284.765801][T16811] ? vmci_qp_broker_detach+0x117/0xf20 [ 1284.765844][T16811] lock_acquire+0x106/0x350 [ 1284.765867][T16811] ? vmci_qp_broker_detach+0x117/0xf20 [ 1284.765896][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.765921][T16811] __mutex_lock+0x1a3/0x1550 [ 1284.765941][T16811] ? vmci_qp_broker_detach+0x117/0xf20 [ 1284.765969][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.765990][T16811] ? kasan_save_track+0x4f/0x80 [ 1284.766016][T16811] ? kasan_save_track+0x3e/0x80 [ 1284.766040][T16811] ? kasan_save_free_info+0x46/0x50 [ 1284.766061][T16811] ? __kasan_slab_free+0x5c/0x80 [ 1284.766087][T16811] ? kfree+0x1c5/0x640 [ 1284.766110][T16811] ? vmci_ctx_put+0x5ef/0xc40 [ 1284.766127][T16811] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1284.766146][T16811] ? vmci_datagram_dispatch+0x450/0xc60 [ 1284.766165][T16811] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1284.766191][T16811] ? vmci_host_close+0x98/0x160 [ 1284.766220][T16811] ? vmci_qp_broker_detach+0x117/0xf20 [ 1284.766249][T16811] ? exit_to_user_mode_loop+0x193/0x680 [ 1284.766268][T16811] ? __pfx___mutex_lock+0x10/0x10 [ 1284.766296][T16811] vmci_qp_broker_detach+0x117/0xf20 [ 1284.766329][T16811] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1284.766355][T16811] ? kasan_quarantine_put+0xbb/0x1f0 [ 1284.766380][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766401][T16811] ? lockdep_hardirqs_on+0x7a/0x110 [ 1284.766419][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766442][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766464][T16811] ? kfree+0x1c5/0x640 [ 1284.766486][T16811] ? vmci_ctx_put+0x5ef/0xc40 [ 1284.766503][T16811] ? vmci_ctx_put+0x141/0xc40 [ 1284.766520][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766544][T16811] vmci_ctx_put+0x64e/0xc40 [ 1284.766562][T16811] ? __pfx___schedule+0x10/0x10 [ 1284.766590][T16811] ? vmci_ctx_put+0x141/0xc40 [ 1284.766609][T16811] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1284.766628][T16811] ? preempt_schedule_thunk+0x16/0x30 [ 1284.766655][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766677][T16811] ? preempt_schedule_common+0x82/0xd0 [ 1284.766706][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766732][T16811] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1284.766755][T16811] vmci_datagram_dispatch+0x450/0xc60 [ 1284.766779][T16811] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1284.766800][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766830][T16811] vmci_qp_broker_detach+0x8dd/0xf20 [ 1284.766873][T16811] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1284.766906][T16811] ? kasan_quarantine_put+0xbb/0x1f0 [ 1284.766935][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.766957][T16811] ? kfree+0x1c5/0x640 [ 1284.766979][T16811] ? vmci_ctx_put+0x5ef/0xc40 [ 1284.766995][T16811] ? vmci_ctx_put+0x141/0xc40 [ 1284.767012][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.767036][T16811] vmci_ctx_put+0x64e/0xc40 [ 1284.767054][T16811] ? vmci_ctx_put+0x141/0xc40 [ 1284.767074][T16811] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1284.767093][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.767115][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.767140][T16811] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1284.767164][T16811] vmci_host_close+0x98/0x160 [ 1284.767189][T16811] ? __pfx_vmci_host_close+0x10/0x10 [ 1284.767213][T16811] __fput+0x44f/0xa60 [ 1284.767242][T16811] task_work_run+0x1d9/0x270 [ 1284.767275][T16811] ? __pfx_task_work_run+0x10/0x10 [ 1284.767308][T16811] exit_to_user_mode_loop+0x193/0x680 [ 1284.767326][T16811] ? rcu_is_watching+0x15/0xb0 [ 1284.767350][T16811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.767369][T16811] do_syscall_64+0x353/0x580 [ 1284.767394][T16811] ? trace_irq_disable+0x3b/0x140 [ 1284.767437][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.767460][T16811] RIP: 0033:0x7fc84459ce59 [ 1284.767477][T16811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.767492][T16811] RSP: 002b:00007fc845431028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1284.767511][T16811] RAX: 0000000000000000 RBX: 00007fc844816090 RCX: 00007fc84459ce59 [ 1284.767525][T16811] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1284.767537][T16811] RBP: 00007fc844632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1284.767549][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.767560][T16811] R13: 00007fc844816128 R14: 00007fc844816090 R15: 00007ffdd8636e28 [ 1284.767582][T16811] [ 1285.279555][T15481] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1285.699627][T15481] usb 9-1: Using ep0 maxpacket: 32 [ 1285.731025][T15481] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1285.739328][T15481] usb 9-1: config 0 has no interface number 0 [ 1285.767185][T15481] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1285.782178][T15481] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1285.793272][T15481] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.818888][T15481] usb 9-1: Product: syz [ 1285.824770][T15481] usb 9-1: Manufacturer: syz [ 1285.829361][T15481] usb 9-1: SerialNumber: syz [ 1285.835501][T15481] usb 9-1: config 0 descriptor?? [ 1285.842660][T16813] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1286.035021][T15690] syz_tun (unregistering): left allmulticast mode [ 1286.055900][T16813] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1286.175749][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.224960][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.276105][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.316620][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.418091][ T13] bridge_slave_1: left allmulticast mode [ 1286.424207][ T13] bridge_slave_1: left promiscuous mode [ 1286.430651][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.439990][ T13] bridge_slave_0: left allmulticast mode [ 1286.445735][ T13] bridge_slave_0: left promiscuous mode [ 1286.451564][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.556808][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.568255][ T58] smbdirect: ib_dev[syz1] removed [ 1286.578507][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.594937][ T13] bond0 (unregistering): Released all slaves [ 1286.654183][ T13] tipc: Left network mode [ 1286.813305][ T13] hsr_slave_0: left promiscuous mode [ 1286.819108][ T13] hsr_slave_1: left promiscuous mode [ 1286.825515][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.833343][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.841389][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.848785][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.861357][ T13] veth1_macvtap: left promiscuous mode [ 1286.866870][ T13] veth0_macvtap: left promiscuous mode [ 1286.872712][ T13] veth1_vlan: left promiscuous mode [ 1286.877976][ T13] veth0_vlan: left promiscuous mode [ 1287.006713][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1287.020448][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1287.069332][T15481] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1287.082821][T15481] asix 9-1:0.188: probe with driver asix failed with error -61 [ 1287.108882][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1287.470878][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1287.766870][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1288.052956][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1288.312640][T16517] usb 9-1: USB disconnect, device number 20