last executing test programs: 22m26.653166866s ago: executing program 2 (id=25): clock_gettime(0x3, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x24040000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 22m21.608721235s ago: executing program 2 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22m21.290548779s ago: executing program 2 (id=51): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005740)=""/4072, 0xfe8}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000000240)=""/117, 0x75}], 0x3, 0x0, 0x0, 0x8000000}, 0x0) 22m21.205186516s ago: executing program 2 (id=52): r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1}, 0x41) 22m20.959992413s ago: executing program 2 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="15b7", 0x2}], 0x1}, 0x80) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1}, 0x40) 22m20.596466827s ago: executing program 2 (id=58): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 22m5.305312643s ago: executing program 32 (id=58): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 11m55.601763445s ago: executing program 3 (id=1434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$inet6(0xa, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m51.133427732s ago: executing program 3 (id=1441): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) listen(r0, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004831}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m49.036941998s ago: executing program 3 (id=1449): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0xf77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4000000]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)=@x86={0x0, 0x9, 0x8, 0x0, 0xffc, 0xe, 0xb, 0xf9, 0x49, 0x10, 0x6, 0x9, 0x0, 0x6, 0x10, 0xa, 0x9, 0x7f, 0x9f, '\x00', 0x69, 0x1}) 11m45.536852962s ago: executing program 3 (id=1459): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) pipe(0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010"], 0x15) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18}}, @rthdrdstopts={{0x18}}], 0x30}, 0x440e0) 11m34.667108738s ago: executing program 3 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x25, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_b, @initial, {0x9, 0x40}}, @addba_resp={0x3, 0x1, {0xe1, 0x44, {0x1, 0x0, 0x7, 0x1}, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c010}, 0x8800) 11m34.462709558s ago: executing program 3 (id=1489): open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000000c0)) 11m22.074551957s ago: executing program 5 (id=1522): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0) 11m20.745739531s ago: executing program 5 (id=1524): socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 11m19.770898268s ago: executing program 5 (id=1529): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}}, 0x0) 11m19.491578449s ago: executing program 5 (id=1530): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0xbb41}) syz_open_dev$sg(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 11m19.40705305s ago: executing program 33 (id=1489): open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f00000000c0)) 11m19.297412433s ago: executing program 5 (id=1532): socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 11m18.314426537s ago: executing program 5 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) 11m2.424457082s ago: executing program 34 (id=1535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) 4m0.584011532s ago: executing program 4 (id=2685): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000002240)=""/253, 0xfd}], 0x1, 0x1b39, 0x6d, 0x10) 3m59.24547433s ago: executing program 4 (id=2688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m59.074320427s ago: executing program 4 (id=2690): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x494200) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) unshare(0x26020480) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x91) 3m56.646049137s ago: executing program 4 (id=2698): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) syz_emit_vhci(&(0x7f00000022c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x413}}}, 0x7) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x0) r3 = semget(0x1, 0x2, 0x210) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, r5, 0x8a, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m54.178560299s ago: executing program 4 (id=2702): socket(0x25, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) mount$overlay(0x0, 0x0, 0x0, 0x20400, &(0x7f00000003c0)={[], [], 0x2f}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x2b) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x35e, 0x862b01) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000100)=[0xc, 0x36]) ioctl$EVIOCSMASK(r4, 0x40104593, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x8, 0xc, 0xc, 0x383, 0x4, 0x401, 0x0, 0x34}}) 3m51.230499797s ago: executing program 4 (id=2705): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x40010) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 2m43.183290303s ago: executing program 6 (id=2855): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 2m39.234329633s ago: executing program 6 (id=2861): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m36.922741544s ago: executing program 6 (id=2866): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0053000000200400010500"}) r1 = syz_open_pts(r0, 0x141601) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) 2m35.124421729s ago: executing program 6 (id=2871): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) 2m34.986753481s ago: executing program 6 (id=2872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r4, 0xfffffffffffffffe, 0x39) 2m33.51212446s ago: executing program 6 (id=2875): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m18.222952036s ago: executing program 35 (id=2875): socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.475316561s ago: executing program 1 (id=3198): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="03"], 0x0) 4.250385504s ago: executing program 0 (id=3200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) 4.01310425s ago: executing program 0 (id=3202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 3.114258035s ago: executing program 0 (id=3203): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xac0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000300)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) r9 = memfd_secret(0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0xc}) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {}, {r12}, 0x8000, 0x8004}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4000000000010001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0xfffffffd, 0x8000000000010000, 0x906, r13, r14, 0xc000, '\x00', 0x6, 0x27efc00800000, 0xc, 0x9, {0xa, 0x3fe}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0x800d, 0xfffffffe, 0x5}}}}) fchown(r7, r12, r14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flock(r7, 0x9) 2.974816693s ago: executing program 7 (id=3204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000000000200040000000300000041010000", @ANYRES32=r3, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000200)=0x5) read$FUSE(r4, &(0x7f0000008400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c900"/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.362613059s ago: executing program 1 (id=3205): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.242676814s ago: executing program 1 (id=3206): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b337d9cc2c86df42", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", "de2925ea", "0c2ae32fb6d80f6a"}, 0x38) 2.072759763s ago: executing program 0 (id=3207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) 2.053331501s ago: executing program 7 (id=3208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, @in={0x2, 0x4e20, @remote}], 0x3c) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000180)=""/105) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)=0x2c) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 1.086408196s ago: executing program 1 (id=3209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.002616631s ago: executing program 7 (id=3210): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 990.443228ms ago: executing program 0 (id=3211): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x16, 0x5, 0x9ee, 0x7ae, 0x8000000000000002, 0x4, 0x100, 0x0, 0x100fff}) 794.699937ms ago: executing program 7 (id=3212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) 794.259125ms ago: executing program 0 (id=3213): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="03"], 0x0) 486.755154ms ago: executing program 7 (id=3214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 342.713548ms ago: executing program 7 (id=3215): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e40", 0xac0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000300)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) memfd_secret(0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000003c80)={0x3, 0x7f, {r9}, {r12}, 0x8000, 0x8004}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x4000000000010001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0xfffffffd, 0x8000000000010000, 0x906, r13, r14, 0xc000, '\x00', 0x6, 0x27efc00800000, 0xc, 0x9, {0xa, 0x3fe}, {0x6, 0x3}, {0x5, 0x4}, {0xffffffffe, 0xa03}, 0x80008001, 0x800d, 0xfffffffe, 0x5}}}}) fchown(r7, r12, r14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000d00)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) flock(r7, 0x9) 121.086131ms ago: executing program 1 (id=3216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x200, 0x0) 0s ago: executing program 1 (id=3217): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b337d9cc2c86df42", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", "de2925ea", "0c2ae32fb6d80f6a"}, 0x38) kernel console output (not intermixed with test programs): eed USB device number 8 using dummy_hcd [ 849.602685][ T5858] usb 1-1: device descriptor read/8, error -71 [ 849.888213][ T5858] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 850.408097][ T5858] usb 1-1: device descriptor read/8, error -71 [ 850.531949][ T5858] usb usb1-port1: unable to enumerate USB device [ 851.285094][T12083] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 853.777343][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 854.339231][T12110] team3: entered promiscuous mode [ 854.382683][T12118] 9p: Bad value for 'rfdno' [ 854.411709][T12110] team3: entered allmulticast mode [ 854.428347][T12110] 8021q: adding VLAN 0 to HW filter on device team3 [ 854.928041][ T5880] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 855.085767][ T5880] usb 8-1: device descriptor read/64, error -71 [ 855.216006][T12137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 855.328251][ T5880] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 855.541772][ T5880] usb 8-1: device descriptor read/64, error -71 [ 855.840567][ T5880] usb usb8-port1: attempt power cycle [ 856.829602][ T5880] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 856.890453][T12150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 856.974287][ T5880] usb 8-1: device descriptor read/8, error -71 [ 858.489756][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1774'. [ 858.569035][T12169] 9p: Bad value for 'rfdno' [ 858.680261][T12163] team1: entered promiscuous mode [ 858.680288][T12163] team1: entered allmulticast mode [ 858.686438][T12163] 8021q: adding VLAN 0 to HW filter on device team1 [ 859.677944][ T5858] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 859.808633][ T5858] usb 2-1: device descriptor read/64, error -71 [ 860.114150][T12206] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 860.932106][ T5858] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 861.764296][ T5858] usb 2-1: device descriptor read/64, error -71 [ 862.191136][ T5858] usb usb2-port1: attempt power cycle [ 863.582315][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 864.707033][T12225] team4: entered promiscuous mode [ 864.707062][T12225] team4: entered allmulticast mode [ 864.707483][T12225] 8021q: adding VLAN 0 to HW filter on device team4 [ 865.201166][T12244] 9p: Bad value for 'rfdno' [ 865.264661][T12243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 865.840247][T12254] netlink: 'syz.7.1802': attribute type 1 has an invalid length. [ 865.898204][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1802'. [ 865.937407][T12254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 866.036376][T12256] bond1: (slave gretap1): making interface the new active one [ 866.050523][T12256] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 866.058183][ T5882] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 866.208001][ T5882] usb 5-1: device descriptor read/64, error -71 [ 866.368908][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1806'. [ 866.644852][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 866.680860][T12264] team2: entered promiscuous mode [ 866.680886][T12264] team2: entered allmulticast mode [ 866.681335][T12264] 8021q: adding VLAN 0 to HW filter on device team2 [ 867.350897][ T59] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 867.815274][ T5882] usb 5-1: device descriptor read/64, error -71 [ 868.116711][ T5882] usb usb5-port1: attempt power cycle [ 868.778363][ T5882] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 869.075075][ T5882] usb 5-1: device descriptor read/8, error -71 [ 870.033121][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.033187][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.950373][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 872.336651][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 874.573333][ T31] usb 8-1: device descriptor read/all, error -71 [ 874.945349][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 875.087881][ T43] usb 5-1: device descriptor read/64, error -71 [ 875.963758][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 876.097929][ T43] usb 5-1: device descriptor read/64, error -71 [ 876.208988][ T43] usb usb5-port1: attempt power cycle [ 878.794054][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 879.639418][ T43] usb 5-1: device descriptor read/8, error -71 [ 882.423464][T12392] fuse: Bad value for 'fd' [ 882.457898][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 882.611762][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 882.611803][ T5883] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 882.611825][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.784490][ T5883] usb 1-1: config 0 descriptor?? [ 884.247935][ T814] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 884.507902][ T814] usb 8-1: Using ep0 maxpacket: 16 [ 884.511277][ T814] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 884.511302][ T814] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 884.571886][ T814] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 884.571929][ T814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.571948][ T814] usb 8-1: Product: syz [ 884.571961][ T814] usb 8-1: Manufacturer: syz [ 884.571976][ T814] usb 8-1: SerialNumber: syz [ 884.828121][ T5883] video4linux radio48: keene_cmd_main failed (-71) [ 884.828162][ T5883] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 884.904776][ T814] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 884.904803][ T814] usb 8-1: no configuration chosen from 1 choice [ 884.906644][ T5883] usb 1-1: USB disconnect, device number 10 [ 886.163233][ T43] usb 8-1: USB disconnect, device number 10 [ 889.117880][ T5883] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 889.301565][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 889.303585][ T5883] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 889.303610][ T5883] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 889.318708][ T5883] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 889.318738][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.318758][ T5883] usb 5-1: Product: syz [ 889.318772][ T5883] usb 5-1: Manufacturer: syz [ 889.318786][ T5883] usb 5-1: SerialNumber: syz [ 889.415486][ T5883] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 889.415512][ T5883] usb 5-1: no configuration chosen from 1 choice [ 889.995926][T12460] No control pipe specified [ 892.245461][ T814] usb 5-1: USB disconnect, device number 21 [ 893.260756][T12494] No control pipe specified [ 893.893118][T12508] 9p: Bad value for 'rfdno' [ 895.665850][T12528] No control pipe specified [ 897.910580][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 897.988287][T12545] 9p: Bad value for 'rfdno' [ 903.786442][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'. [ 906.404670][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 906.732576][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 906.938385][ T59] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 907.029318][ T31] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 907.029369][ T31] usb 7-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 907.029395][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 907.033060][ T31] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 907.033087][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.033107][ T31] usb 7-1: Product: syz [ 907.033121][ T31] usb 7-1: Manufacturer: syz [ 907.033135][ T31] usb 7-1: SerialNumber: syz [ 907.044902][T12640] overlayfs: failed to resolve './file1': -2 [ 907.109347][ T31] usb 7-1: config 0 descriptor?? [ 907.179078][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 907.542648][ T5810] usb 7-1: USB disconnect, device number 4 [ 909.873034][T12684] overlayfs: failed to resolve './file1': -2 [ 910.391007][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 910.464433][T12694] /dev/nullb0: Can't open blockdev [ 911.221423][T12694] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 911.788943][ T5802] Bluetooth: Frame is too long (len 16, expected len 4) [ 913.148715][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 913.628137][T12734] program syz.4.1956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.175489][ T59] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 914.927852][ T814] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 916.207868][ T814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.207926][ T814] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 916.207949][ T814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.251038][ T814] usb 7-1: config 0 descriptor?? [ 916.274149][ T814] pwc: Askey VC010 type 2 USB webcam detected. [ 916.734672][ T814] pwc: recv_control_msg error -32 req 02 val 2b00 [ 917.945308][ T814] pwc: recv_control_msg error -71 req 02 val 2c00 [ 917.945793][ T814] pwc: recv_control_msg error -71 req 04 val 1000 [ 917.946246][ T814] pwc: recv_control_msg error -71 req 04 val 1300 [ 917.979253][ T814] pwc: recv_control_msg error -71 req 04 val 1400 [ 917.981112][ T814] pwc: recv_control_msg error -71 req 02 val 2000 [ 918.005638][ T814] pwc: recv_control_msg error -71 req 02 val 2100 [ 918.007521][ T814] pwc: recv_control_msg error -71 req 04 val 1500 [ 918.007961][ T814] pwc: recv_control_msg error -71 req 02 val 2500 [ 918.008421][ T814] pwc: recv_control_msg error -71 req 02 val 2400 [ 918.008827][ T814] pwc: recv_control_msg error -71 req 02 val 2600 [ 918.009203][ T814] pwc: recv_control_msg error -71 req 02 val 2900 [ 918.025866][ T814] pwc: recv_control_msg error -71 req 02 val 2800 [ 918.067396][ T814] pwc: recv_control_msg error -71 req 04 val 1100 [ 918.069475][ T814] pwc: recv_control_msg error -71 req 04 val 1200 [ 918.123657][ T814] pwc: Registered as video103. [ 918.144918][ T814] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 918.195401][ T814] usb 7-1: USB disconnect, device number 5 [ 919.383091][ T59] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 925.104548][ T59] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 926.291551][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 926.752698][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 926.825801][ T43] usb 2-1: config 8 has an invalid interface number: 111 but max is 0 [ 926.825828][ T43] usb 2-1: config 8 has no interface number 0 [ 926.825870][ T43] usb 2-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 926.825896][ T43] usb 2-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 926.877268][ T43] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 926.877298][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.877318][ T43] usb 2-1: Product: syz [ 926.877331][ T43] usb 2-1: Manufacturer: syz [ 926.877345][ T43] usb 2-1: SerialNumber: syz [ 928.434433][ T43] usb 2-1: can't set config #8, error -71 [ 928.505357][ T43] usb 2-1: USB disconnect, device number 15 [ 931.847458][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.847520][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.657849][T12914] netlink: 'syz.6.2010': attribute type 12 has an invalid length. [ 935.600050][ T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 936.359539][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 936.409617][ T43] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.409653][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 936.438909][ T43] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 936.438939][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.438959][ T43] usb 5-1: Product: syz [ 936.438973][ T43] usb 5-1: Manufacturer: syz [ 936.438987][ T43] usb 5-1: SerialNumber: syz [ 936.616680][ T43] usb 5-1: config 0 descriptor?? [ 937.576521][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 937.778584][T12962] overlayfs: missing 'lowerdir' [ 937.781307][ T43] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 939.094884][ T43] imon:send_packet: packet tx failed (-71) [ 939.108693][ T43] imon 5-1:0.0: panel buttons/knobs setup failed [ 939.119794][T12974] netlink: 'syz.0.2023': attribute type 12 has an invalid length. [ 939.377923][ T43] rc_core: IR keymap rc-imon-pad not found [ 939.377945][ T43] Registered IR keymap rc-empty [ 939.378022][ T43] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 939.378040][ T43] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 939.378353][ T43] imon:send_packet: packet tx failed (-71) [ 939.407914][ T43] imon 5-1:0.0: remote input dev register failed [ 939.408063][ T43] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 939.414771][T12984] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 940.737841][ T59] Bluetooth: Frame is too long (len 16, expected len 4) [ 941.929472][ T43] imon 5-1:0.0: unable to initialize intf0, err 0 [ 941.929494][ T43] imon:imon_probe: failed to initialize context! [ 941.929506][ T43] imon 5-1:0.0: unable to register, err -19 [ 941.981443][ T43] usb 5-1: USB disconnect, device number 22 [ 944.205820][T13025] overlayfs: missing 'lowerdir' [ 944.434250][T13035] netlink: 'syz.6.2041': attribute type 12 has an invalid length. [ 944.537950][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 944.718984][T13042] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 944.888287][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 945.299697][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.299731][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 945.307579][ T43] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 945.307606][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.307624][ T43] usb 1-1: Product: syz [ 945.307638][ T43] usb 1-1: Manufacturer: syz [ 945.307652][ T43] usb 1-1: SerialNumber: syz [ 945.379309][ T43] usb 1-1: config 0 descriptor?? [ 945.439534][T13048] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2045'. [ 947.012084][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 947.087845][ T43] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25 [ 947.130646][ T43] imon:send_packet: packet tx failed (-71) [ 947.152351][ T43] imon 1-1:0.0: panel buttons/knobs setup failed [ 947.271014][ T43] rc_core: IR keymap rc-imon-pad not found [ 947.271029][ T43] Registered IR keymap rc-empty [ 947.271076][ T43] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 947.271085][ T43] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 947.271544][ T43] imon:send_packet: packet tx failed (-71) [ 947.317307][ T43] imon 1-1:0.0: remote input dev register failed [ 947.317475][ T43] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 949.575651][ T43] imon 1-1:0.0: unable to initialize intf0, err 0 [ 949.575674][ T43] imon:imon_probe: failed to initialize context! [ 949.575685][ T43] imon 1-1:0.0: unable to register, err -19 [ 949.679863][ T43] usb 1-1: USB disconnect, device number 11 [ 950.194267][T13095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2060'. [ 950.206776][T13096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 950.415457][ T31] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 950.705542][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 950.705566][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.705588][ T31] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 950.705600][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.854061][ T31] usb 5-1: config 0 descriptor?? [ 951.936582][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.951405][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.031848][ T31] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 952.207922][ T6008] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 952.337120][ T31] usb 5-1: USB disconnect, device number 23 [ 952.357923][ T6008] usb 1-1: Using ep0 maxpacket: 16 [ 952.359935][ T6008] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 952.359973][ T6008] usb 1-1: config 0 interface 0 has no altsetting 0 [ 952.362219][ T6008] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 952.362245][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.362265][ T6008] usb 1-1: Product: syz [ 952.362278][ T6008] usb 1-1: Manufacturer: syz [ 952.362293][ T6008] usb 1-1: SerialNumber: syz [ 952.888504][ T6008] usb 1-1: config 0 descriptor?? [ 953.285538][T13118] fido_id[13118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 953.507912][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 953.540142][ T6008] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 953.681950][ T6008] imon:send_packet: packet tx failed (-71) [ 953.698032][ T6008] imon 1-1:0.0: panel buttons/knobs setup failed [ 953.887885][ T6008] rc_core: IR keymap rc-imon-pad not found [ 953.887905][ T6008] Registered IR keymap rc-empty [ 953.887978][ T6008] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 953.887995][ T6008] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 953.889534][ T6008] imon:send_packet: packet tx failed (-71) [ 953.908028][ T6008] imon 1-1:0.0: remote input dev register failed [ 953.908188][ T6008] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 954.381132][T13145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 954.758670][ T6008] imon 1-1:0.0: unable to initialize intf0, err 0 [ 954.758693][ T6008] imon:imon_probe: failed to initialize context! [ 954.758712][ T6008] imon 1-1:0.0: unable to register, err -19 [ 954.804076][ T6008] usb 1-1: USB disconnect, device number 12 [ 956.337330][T13147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 957.263745][T13163] netlink: 'syz.4.2078': attribute type 2 has an invalid length. [ 957.263831][T13163] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 957.267626][T13163] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 964.486104][T13211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 965.541556][T13219] 9p: Bad value for 'rfdno' [ 965.548441][T13225] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 965.548465][T13225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 966.826977][T13243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2106'. [ 968.388423][T13263] overlayfs: missing 'lowerdir' [ 969.223436][T13273] netlink: 'syz.0.2117': attribute type 2 has an invalid length. [ 969.223458][T13273] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 969.223487][T13273] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 969.427837][T13277] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2107'. [ 969.427861][T13277] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2107'. [ 971.137604][T13285] netlink: 'syz.4.2120': attribute type 12 has an invalid length. [ 971.601212][T13298] overlayfs: missing 'lowerdir' [ 972.541737][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 972.977820][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 972.982393][ T43] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 972.982420][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.982438][ T43] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 972.987319][ T43] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 972.987346][ T43] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 972.987365][ T43] usb 7-1: Product: syz [ 972.987379][ T43] usb 7-1: Manufacturer: syz [ 972.987393][ T43] usb 7-1: SerialNumber: syz [ 973.181148][ T43] usb 7-1: config 0 descriptor?? [ 973.481774][ T43] usb 7-1: USB disconnect, device number 6 [ 973.832168][ T59] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 975.353669][T13327] ubi: mtd0 is already attached to ubi16 [ 975.777903][ T5810] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 975.937176][ T5810] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.937210][ T5810] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 975.937236][ T5810] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 975.937276][ T5810] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 975.937299][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.980962][T13324] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 976.800181][ T5810] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 977.460010][ T5810] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input29 [ 978.744177][ T5810] usb 8-1: USB disconnect, device number 11 [ 979.255412][T13348] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 979.872533][T13354] syzkaller1: entered promiscuous mode [ 979.872556][T13354] syzkaller1: entered allmulticast mode [ 979.954772][T13353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 980.297861][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 980.693775][ T59] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 980.981924][T13370] blktrace: Concurrent blktraces are not allowed on loop2 [ 981.293124][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 981.293161][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 981.293199][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.293220][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.345151][T13360] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 981.412656][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 984.798132][ T43] usb 7-1: USB disconnect, device number 7 [ 985.847392][T11310] udevd[11310]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.996720][T13410] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 987.988035][T11761] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 990.127852][ T59] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 990.717879][T11761] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 990.717916][T11761] usb 1-1: can't read configurations, error -71 [ 991.619039][T13459] 9p: Bad value for 'rfdno' [ 991.768998][T13461] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2169'. [ 991.769023][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2169'. [ 993.419627][ T59] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 994.067156][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.067222][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.605573][ T59] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 996.631276][T13505] 9p: Bad value for 'rfdno' [ 997.010857][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 997.010880][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2187'. [ 997.657835][ T31] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 998.036174][ T31] usb 5-1: config 0 has an invalid interface number: 159 but max is 0 [ 998.036202][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.036221][ T31] usb 5-1: config 0 has no interface number 0 [ 998.036248][ T31] usb 5-1: config 0 interface 159 has no altsetting 0 [ 998.036929][T13517] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2190'. [ 998.036948][T13517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2190'. [ 998.049795][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 998.049823][ T31] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 998.049842][ T31] usb 5-1: Product: syz [ 998.049855][ T31] usb 5-1: SerialNumber: syz [ 998.070843][ T31] usb 5-1: config 0 descriptor?? [ 1000.346268][T13529] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2195'. [ 1001.206200][T13533] fuse: Bad value for 'group_id' [ 1001.206220][T13533] fuse: Bad value for 'group_id' [ 1001.718228][ T5875] usb 5-1: USB disconnect, device number 24 [ 1007.594881][T13581] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1012.377790][ T5875] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1012.573133][ T5875] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1012.573162][ T5875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.573182][ T5875] usb 1-1: config 0 has no interface number 0 [ 1012.573223][ T5875] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.617976][ T5875] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1012.618016][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1012.618037][ T5875] usb 1-1: Product: syz [ 1012.618051][ T5875] usb 1-1: SerialNumber: syz [ 1012.666957][ T5875] usb 1-1: config 0 descriptor?? [ 1012.874460][T13619] overlayfs: missing 'lowerdir' [ 1012.972198][ T5875] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1012.996172][ T5875] usb 1-1: USB disconnect, device number 15 [ 1013.495436][T13628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1016.772156][ T59] Bluetooth: Frame is too long (len 16, expected len 4) [ 1017.297624][T13651] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1017.297640][T13651] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1018.067959][ T5896] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1018.357345][T13671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1018.870983][ T5896] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1018.871011][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.871030][ T5896] usb 2-1: config 0 has no interface number 0 [ 1018.871070][ T5896] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.129776][ T5896] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1019.129808][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1019.129827][ T5896] usb 2-1: Product: syz [ 1019.129839][ T5896] usb 2-1: SerialNumber: syz [ 1021.104239][ T5896] usb 2-1: config 0 descriptor?? [ 1021.213237][ T5896] usb 2-1: can't set config #0, error -71 [ 1021.220387][ T5896] usb 2-1: USB disconnect, device number 16 [ 1022.992388][T13692] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 1022.992480][T13692] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 1022.995190][T13692] netlink: 'syz.0.2242': attribute type 1 has an invalid length. [ 1024.685828][T13709] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2241'. [ 1024.685849][T13709] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2241'. [ 1025.959569][T13728] netlink: 'syz.7.2254': attribute type 2 has an invalid length. [ 1025.959613][T13728] netlink: 'syz.7.2254': attribute type 1 has an invalid length. [ 1025.962250][T13728] netlink: 'syz.7.2254': attribute type 1 has an invalid length. [ 1026.093453][T11761] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1026.503575][T11761] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1026.503603][T11761] usb 2-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 1026.503623][T11761] usb 2-1: config 0 has no interface number 0 [ 1026.503664][T11761] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.718395][T11761] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1026.718425][T11761] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1026.718445][T11761] usb 2-1: Product: syz [ 1026.718458][T11761] usb 2-1: SerialNumber: syz [ 1026.743045][T11761] usb 2-1: config 0 descriptor?? [ 1026.772574][T11761] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1029.221154][ T5810] usb 2-1: USB disconnect, device number 17 [ 1031.380863][T13757] No control pipe specified [ 1032.317903][ T5810] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1032.477395][ T5810] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1032.477426][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.477447][ T5810] usb 1-1: Product: syz [ 1032.477461][ T5810] usb 1-1: Manufacturer: syz [ 1032.477474][ T5810] usb 1-1: SerialNumber: syz [ 1032.492885][ T5810] usb 1-1: config 0 descriptor?? [ 1032.725265][ T5810] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1034.750854][ T5810] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1034.754371][ T5810] usb 1-1: USB disconnect, device number 16 [ 1050.731339][T13899] netlink: 'syz.0.2306': attribute type 2 has an invalid length. [ 1050.731427][T13899] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 1050.732232][T13899] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 1055.494938][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.495003][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.224856][ T5896] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1058.380028][ T5896] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1058.380065][ T5896] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1058.380093][ T5896] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1058.380135][ T5896] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1058.380157][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.448174][T13941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1058.681069][T13947] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2321'. [ 1058.681342][T13947] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2321'. [ 1058.950935][T13950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2322'. [ 1059.152764][ T5896] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1059.209310][ T5896] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input30 [ 1059.338388][ T5896] usb 5-1: USB disconnect, device number 25 [ 1059.338476][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1060.119099][ T59] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 1062.368569][T13976] hub 8-0:1.0: USB hub found [ 1062.380021][T13976] hub 8-0:1.0: 1 port detected [ 1065.705025][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 1066.463247][T14005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2335'. [ 1066.474170][T14005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2335'. [ 1066.518229][ T5883] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1067.183220][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1067.183239][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.183250][ T5883] usb 5-1: Product: syz [ 1067.183257][ T5883] usb 5-1: Manufacturer: syz [ 1067.183264][ T5883] usb 5-1: SerialNumber: syz [ 1067.226927][ T5883] usb 5-1: config 0 descriptor?? [ 1067.861039][ T5883] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1067.936233][ T59] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1072.522317][ T5883] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1072.845386][ T5883] usb 5-1: USB disconnect, device number 26 [ 1074.616410][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 1076.250823][T14053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1076.251408][T14053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1088.120370][T14132] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1094.979374][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1095.531570][T14182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1102.038606][T14228] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2400'. [ 1102.231496][T14225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1106.528946][T14259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2411'. [ 1107.166011][T14267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1108.368636][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1109.138379][ T31] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1109.138416][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1109.138442][ T31] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1109.139225][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1109.139375][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.289970][T14274] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1111.270753][ T31] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1111.272413][ T31] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input33 [ 1111.791259][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1111.793480][ T31] usb 5-1: USB disconnect, device number 27 [ 1112.061787][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2423'. [ 1113.544409][T14319] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1115.974432][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.974496][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.093425][T14356] 9p: Bad value for 'rfdno' [ 1120.084678][T14364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1129.062618][T14424] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1129.916255][ T36] audit: type=1326 audit(1776623015.082:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.916302][ T36] audit: type=1326 audit(1776623015.082:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.974577][ T36] audit: type=1326 audit(1776623015.082:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.974623][ T36] audit: type=1326 audit(1776623015.142:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.974659][ T36] audit: type=1326 audit(1776623015.142:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.997992][ T36] audit: type=1326 audit(1776623015.142:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.998045][ T36] audit: type=1326 audit(1776623015.142:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ef84c819 code=0x7ffc0000 [ 1129.999104][ T36] audit: type=1326 audit(1776623015.172:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ef80d04e code=0x7ffc0000 [ 1130.001900][ T36] audit: type=1326 audit(1776623015.172:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ef80d04e code=0x7ffc0000 [ 1130.004746][ T36] audit: type=1326 audit(1776623015.172:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14414 comm="syz.7.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1ef80d04e code=0x7ffc0000 [ 1134.711811][T14470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1136.223332][T14488] [U] ù [ 1139.412883][ T6008] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1140.680624][ T6008] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1140.680655][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.680674][ T6008] usb 2-1: Product: syz [ 1140.680689][ T6008] usb 2-1: Manufacturer: syz [ 1140.680702][ T6008] usb 2-1: SerialNumber: syz [ 1141.151668][ T6008] usb 2-1: config 0 descriptor?? [ 1141.459924][ T6008] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1141.956128][T14535] netlink: 'syz.4.2486': attribute type 2 has an invalid length. [ 1141.956149][T14535] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 1141.956178][T14535] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 1144.451994][ T6008] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1144.501694][ T6008] usb 2-1: USB disconnect, device number 18 [ 1146.687841][T14569] netlink: 'syz.6.2497': attribute type 2 has an invalid length. [ 1146.687865][T14569] netlink: 'syz.6.2497': attribute type 1 has an invalid length. [ 1146.687894][T14569] netlink: 'syz.6.2497': attribute type 1 has an invalid length. [ 1147.638847][T14461] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1147.638895][T14461] CPU: 1 UID: 0 PID: 14461 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1147.638924][T14461] Tainted: [L]=SOFTLOCKUP [ 1147.638931][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1147.638945][T14461] Workqueue: hci5 hci_rx_work [ 1147.639150][T14461] Call Trace: [ 1147.639159][T14461] [ 1147.639168][T14461] dump_stack_lvl+0xe8/0x150 [ 1147.639244][T14461] sysfs_create_dir_ns+0x271/0x2a0 [ 1147.639350][T14461] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1147.639430][T14461] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1147.639459][T14461] ? rt_spin_unlock+0x160/0x200 [ 1147.639482][T14461] kobject_add_internal+0x631/0xd10 [ 1147.639572][T14461] kobject_add+0x163/0x240 [ 1147.639607][T14461] ? __pfx_kobject_add+0x10/0x10 [ 1147.639643][T14461] ? get_device_parent+0x370/0x3a0 [ 1147.639752][T14461] device_add+0x408/0xb80 [ 1147.639787][T14461] hci_conn_add_sysfs+0xd5/0x210 [ 1147.639842][T14461] le_conn_complete_evt+0x10e6/0x16b0 [ 1147.639897][T14461] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1147.639920][T14461] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1147.639947][T14461] ? lockdep_hardirqs_on+0x7a/0x110 [ 1147.639997][T14461] ? skb_pull_data+0xfb/0x200 [ 1147.640099][T14461] hci_le_conn_complete_evt+0x187/0x470 [ 1147.640162][T14461] hci_event_packet+0x659/0xef0 [ 1147.640198][T14461] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1147.640217][T14461] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1147.640247][T14461] ? __pfx_hci_event_packet+0x10/0x10 [ 1147.640274][T14461] ? rt_spin_unlock+0x14f/0x200 [ 1147.640303][T14461] ? hci_send_to_monitor+0xe2/0x590 [ 1147.640329][T14461] hci_rx_work+0x3ee/0x1040 [ 1147.640364][T14461] ? process_scheduled_works+0xa70/0x1860 [ 1147.640457][T14461] process_scheduled_works+0xb5d/0x1860 [ 1147.640521][T14461] ? __pfx_process_scheduled_works+0x10/0x10 [ 1147.640560][T14461] ? assign_work+0x3d5/0x5e0 [ 1147.640595][T14461] worker_thread+0xa53/0xfc0 [ 1147.640642][T14461] kthread+0x388/0x470 [ 1147.640689][T14461] ? __pfx_worker_thread+0x10/0x10 [ 1147.640707][T14461] ? __pfx_kthread+0x10/0x10 [ 1147.640733][T14461] ret_from_fork+0x514/0xb70 [ 1147.640826][T14461] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.640858][T14461] ? __switch_to+0xc79/0x1410 [ 1147.640931][T14461] ? __pfx_kthread+0x10/0x10 [ 1147.640957][T14461] ret_from_fork_asm+0x1a/0x30 [ 1147.640997][T14461] [ 1147.641118][T14461] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1147.641158][T14461] Bluetooth: hci5: failed to register connection device [ 1153.584988][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2513'. [ 1154.107784][ T6008] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1154.483692][ T6008] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1154.483723][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.483744][ T6008] usb 1-1: Product: syz [ 1154.483759][ T6008] usb 1-1: Manufacturer: syz [ 1154.483773][ T6008] usb 1-1: SerialNumber: syz [ 1154.494241][ T6008] usb 1-1: config 0 descriptor?? [ 1154.853135][ T6008] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1156.003931][T14645] 9p: Bad value for 'rfdno' [ 1157.135947][ T6008] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1157.147067][ T6008] usb 1-1: USB disconnect, device number 17 [ 1157.402841][T14659] blktrace: Concurrent blktraces are not allowed on loop12 [ 1158.551210][T14668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 1159.277768][ T6008] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1159.628052][T14680] 9p: Bad value for 'rfdno' [ 1159.738919][ T6008] usb 2-1: Using ep0 maxpacket: 32 [ 1159.756441][ T6008] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1159.780717][ T6008] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1159.780756][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1159.780777][ T6008] usb 2-1: Product: syz [ 1159.780790][ T6008] usb 2-1: Manufacturer: syz [ 1159.780805][ T6008] usb 2-1: SerialNumber: syz [ 1159.841159][ T6008] usb 2-1: config 0 descriptor?? [ 1159.846503][T14677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1161.861138][T14705] ubi: mtd0 is already attached to ubi16 [ 1162.559759][ T5883] usb 2-1: USB disconnect, device number 19 [ 1162.624894][T14707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'. [ 1163.851168][T14728] 9p: Bad value for 'rfdno' [ 1165.335458][T14746] blktrace: Concurrent blktraces are not allowed on loop8 [ 1166.402279][T14753] netlink: 'syz.4.2553': attribute type 2 has an invalid length. [ 1166.402299][T14753] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 1166.402327][T14753] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 1166.637816][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1166.807784][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 1166.812912][ T31] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1166.812949][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.812966][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1166.851709][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1166.851736][ T31] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1166.851754][ T31] usb 2-1: Product: syz [ 1166.851767][ T31] usb 2-1: Manufacturer: syz [ 1166.851778][ T31] usb 2-1: SerialNumber: syz [ 1166.892173][ T31] usb 2-1: config 0 descriptor?? [ 1167.107799][ T31] usb 2-1: USB disconnect, device number 20 [ 1169.902322][T14794] blktrace: Concurrent blktraces are not allowed on loop14 [ 1171.041826][T14791] ubi: mtd0 is already attached to ubi16 [ 1173.003375][T11761] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1173.147938][T11761] usb 2-1: Using ep0 maxpacket: 32 [ 1173.154075][T11761] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1173.154104][T11761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.154123][T11761] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1173.159961][T11761] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1173.159991][T11761] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1173.160012][T11761] usb 2-1: Product: syz [ 1173.160026][T11761] usb 2-1: Manufacturer: syz [ 1173.160098][T11761] usb 2-1: SerialNumber: syz [ 1173.365248][T11761] usb 2-1: config 0 descriptor?? [ 1173.412978][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1173.575955][T11761] usb 2-1: USB disconnect, device number 21 [ 1174.583606][T14850] blktrace: Concurrent blktraces are not allowed on loop14 [ 1175.469774][T14844] ubi: mtd0 is already attached to ubi16 [ 1177.818417][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.818484][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.230610][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1178.646690][T14888] blktrace: Concurrent blktraces are not allowed on loop8 [ 1179.021613][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1179.347804][ T814] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1179.548864][ T814] usb 7-1: Using ep0 maxpacket: 32 [ 1179.665165][ T814] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1179.665546][ T814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.665738][ T814] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1180.006243][ T814] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1180.006276][ T814] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1180.006296][ T814] usb 7-1: Product: syz [ 1180.006311][ T814] usb 7-1: Manufacturer: syz [ 1180.006325][ T814] usb 7-1: SerialNumber: syz [ 1180.056421][ T814] usb 7-1: config 0 descriptor?? [ 1180.348246][ T31] usb 7-1: USB disconnect, device number 8 [ 1183.286764][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1183.987773][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1184.137952][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1184.139761][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1184.142579][ T43] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1184.142605][ T43] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1184.142634][ T43] usb 7-1: Product: syz [ 1184.142648][ T43] usb 7-1: Manufacturer: syz [ 1184.142662][ T43] usb 7-1: SerialNumber: syz [ 1184.275319][ T43] usb 7-1: config 0 descriptor?? [ 1184.276366][T14930] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1184.304126][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 1184.377261][T11761] hid_parser_main: 12 callbacks suppressed [ 1184.377286][T11761] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1184.502984][ T43] usb 7-1: USB disconnect, device number 9 [ 1184.517236][T11761] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1185.841597][T14950] fido_id[14950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1186.867850][T11761] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1186.974221][T14975] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2618'. [ 1186.998288][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.001112][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.019928][T11761] usb 2-1: Using ep0 maxpacket: 8 [ 1187.026293][T11761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1187.027603][T11761] usb 2-1: config 8 has an invalid interface number: 197 but max is 1 [ 1187.027813][T11761] usb 2-1: config 8 has an invalid interface number: 3 but max is 1 [ 1187.027835][T11761] usb 2-1: config 8 has no interface number 0 [ 1187.027852][T11761] usb 2-1: config 8 has no interface number 1 [ 1187.027909][T11761] usb 2-1: config 8 interface 3 altsetting 5 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1187.027936][T11761] usb 2-1: config 8 interface 3 has no altsetting 0 [ 1187.033225][T11761] usb 2-1: New USB device found, idVendor=057c, idProduct=8501, bcdDevice=c3.80 [ 1187.033255][T11761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.033275][T11761] usb 2-1: Product: syz [ 1187.033289][T11761] usb 2-1: Manufacturer: syz [ 1187.033303][T11761] usb 2-1: SerialNumber: syz [ 1187.040863][T14976] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2618'. [ 1188.319601][T11761] usb 2-1: USB disconnect, device number 22 [ 1188.440237][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 1189.328605][T11761] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1190.197863][T11761] usb 7-1: Using ep0 maxpacket: 32 [ 1190.200025][T11761] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1190.224323][T11761] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1190.224352][T11761] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1190.224385][T11761] usb 7-1: Product: syz [ 1190.224399][T11761] usb 7-1: Manufacturer: syz [ 1190.224414][T11761] usb 7-1: SerialNumber: syz [ 1190.268554][T11761] usb 7-1: config 0 descriptor?? [ 1190.269592][T14990] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1192.625496][ T5896] usb 7-1: USB disconnect, device number 10 [ 1192.800033][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2633'. [ 1195.147762][ T5896] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1195.297889][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 1195.299596][ T5896] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1195.299621][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.299640][ T5896] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1195.301629][ T5896] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1195.301651][ T5896] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1195.301662][ T5896] usb 1-1: Product: syz [ 1195.301670][ T5896] usb 1-1: Manufacturer: syz [ 1195.301678][ T5896] usb 1-1: SerialNumber: syz [ 1195.353192][ T5896] usb 1-1: config 0 descriptor?? [ 1195.568462][ T5896] usb 1-1: USB disconnect, device number 18 [ 1195.818327][ T5883] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1196.607571][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1196.607603][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.609328][ T5883] usb 2-1: Product: syz [ 1196.609344][ T5883] usb 2-1: Manufacturer: syz [ 1196.609359][ T5883] usb 2-1: SerialNumber: syz [ 1196.667056][ T5883] usb 2-1: config 0 descriptor?? [ 1197.075705][ T5883] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1197.093467][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 1198.996349][ T5883] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1199.073756][ T5883] usb 2-1: USB disconnect, device number 23 [ 1202.768250][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2658'. [ 1202.861276][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1203.128126][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1204.154834][ T31] usb 1-1: device descriptor read/all, error -71 [ 1205.894857][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1205.894874][ T36] audit: type=1326 audit(1776623347.062:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.895145][ T36] audit: type=1326 audit(1776623347.062:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.897362][ T36] audit: type=1326 audit(1776623347.062:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.971802][ T36] audit: type=1326 audit(1776623347.062:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.988714][ T36] audit: type=1326 audit(1776623347.142:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.988766][ T36] audit: type=1326 audit(1776623347.152:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1205.988805][ T36] audit: type=1326 audit(1776623347.152:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15145 comm="syz.4.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837b84c819 code=0x7ffc0000 [ 1206.101210][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 1208.416674][T15177] syzkaller1: entered promiscuous mode [ 1208.416699][T15177] syzkaller1: entered allmulticast mode [ 1209.279397][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1209.437701][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 1209.442693][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1209.445655][ T31] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1209.445671][ T31] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1209.445682][ T31] usb 2-1: Product: syz [ 1209.445690][ T31] usb 2-1: Manufacturer: syz [ 1209.445697][ T31] usb 2-1: SerialNumber: syz [ 1209.460786][ T31] usb 2-1: config 0 descriptor?? [ 1209.461721][T15174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1210.009574][ T5883] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 1210.646284][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.662211][ T5883] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1210.662241][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.662261][ T5883] usb 8-1: Product: syz [ 1210.662274][ T5883] usb 8-1: Manufacturer: syz [ 1210.662289][ T5883] usb 8-1: SerialNumber: syz [ 1210.745471][ T5883] usb 8-1: config 0 descriptor?? [ 1210.770707][ T5883] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1210.971537][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1211.022658][ T5883] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1211.023188][ T5883] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1211.323515][ T5802] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1211.333802][ T5883] usb 8-1: USB disconnect, device number 12 [ 1213.619936][ T5896] usb 2-1: USB disconnect, device number 24 [ 1214.655408][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1220.447845][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1220.698978][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1220.735261][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1220.748322][ T43] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1220.748351][ T43] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1220.748371][ T43] usb 7-1: Product: syz [ 1220.748385][ T43] usb 7-1: Manufacturer: syz [ 1220.748399][ T43] usb 7-1: SerialNumber: syz [ 1220.757026][ T43] usb 7-1: config 0 descriptor?? [ 1220.799501][T15270] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1222.720189][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1223.734426][T14982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1223.762503][T14982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1223.765327][T14982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1223.976349][T14982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1224.024889][T14982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1224.585977][ T6008] usb 7-1: USB disconnect, device number 11 [ 1225.973503][T15296] lo speed is unknown, defaulting to 1000 [ 1226.767736][ T5802] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 1227.708207][T14982] Bluetooth: hci0: command tx timeout [ 1228.076411][ T36] audit: type=1326 audit(1776623369.242:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.076940][ T36] audit: type=1326 audit(1776623369.242:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.076983][ T36] audit: type=1326 audit(1776623369.242:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.077209][ T36] audit: type=1326 audit(1776623369.242:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.293321][ T36] audit: type=1326 audit(1776623369.402:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.703033][ T36] audit: type=1326 audit(1776623369.492:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1a37ed04e code=0x7ffc0000 [ 1228.836601][ T36] audit: type=1326 audit(1776623369.552:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.836651][ T36] audit: type=1326 audit(1776623370.002:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.836690][ T36] audit: type=1326 audit(1776623370.002:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1228.920134][ T36] audit: type=1326 audit(1776623370.082:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15337 comm="syz.6.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a382c819 code=0x7ffc0000 [ 1229.026607][T15296] chnl_net:caif_netlink_parms(): no params data found [ 1230.148472][T14982] Bluetooth: hci0: command tx timeout [ 1230.942171][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.942237][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.942401][T15296] bridge_slave_0: entered allmulticast mode [ 1230.973106][T15296] bridge_slave_0: entered promiscuous mode [ 1230.989863][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.991564][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.991805][T15296] bridge_slave_1: entered allmulticast mode [ 1231.089693][T15296] bridge_slave_1: entered promiscuous mode [ 1232.233010][T14982] Bluetooth: hci0: command tx timeout [ 1234.278666][T14982] Bluetooth: hci0: command tx timeout [ 1234.908962][T15401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1234.908979][T15401] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1235.072259][T15403] vhci_hcd: connection closed [ 1235.231437][T11968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.232632][T15401] vhci_hcd vhci_hcd.0: Device attached [ 1235.703031][ T107] vhci_hcd vhci_hcd.1: stop threads [ 1235.704037][ T107] vhci_hcd vhci_hcd.1: release socket [ 1235.704154][ T107] vhci_hcd vhci_hcd.1: disconnect device [ 1235.773949][T14982] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 1236.448055][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1236.481849][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.460558][T15296] team0: Port device team_slave_0 added [ 1239.037060][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.037127][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.436195][T11968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.567070][T15296] team0: Port device team_slave_1 added [ 1240.162803][T11968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.222753][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.222769][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.222791][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.265869][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.265887][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.265911][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.908879][T11968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.686178][T15296] hsr_slave_0: entered promiscuous mode [ 1243.702258][T15296] hsr_slave_1: entered promiscuous mode [ 1246.514660][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1246.514677][ T36] audit: type=1326 audit(1776623387.682:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.514938][ T36] audit: type=1326 audit(1776623387.682:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.515260][ T36] audit: type=1326 audit(1776623387.682:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.515499][ T36] audit: type=1326 audit(1776623387.682:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.515815][ T36] audit: type=1326 audit(1776623387.682:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.516050][ T36] audit: type=1326 audit(1776623387.682:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.618612][ T36] audit: type=1326 audit(1776623387.682:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00b2f1d04e code=0x7ffc0000 [ 1246.618661][ T36] audit: type=1326 audit(1776623387.782:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.667852][ T36] audit: type=1326 audit(1776623387.812:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1246.687950][ T36] audit: type=1326 audit(1776623387.862:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15504 comm="syz.0.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1249.663739][T15533] random: crng reseeded on system resumption [ 1250.388247][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1250.808845][ T5882] usb 2-1: config 6 has an invalid interface number: 230 but max is 0 [ 1250.808874][ T5882] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1250.808893][ T5882] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1250.808911][ T5882] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.808930][ T5882] usb 2-1: config 6 has no interface number 0 [ 1250.808990][ T5882] usb 2-1: config 6 interface 230 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1250.809013][ T5882] usb 2-1: config 6 interface 230 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1250.809053][ T5882] usb 2-1: config 6 interface 230 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1250.809075][ T5882] usb 2-1: config 6 interface 230 altsetting 6 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 1250.809101][ T5882] usb 2-1: config 6 interface 230 has no altsetting 0 [ 1250.812279][ T5882] usb 2-1: New USB device found, idVendor=0e66, idProduct=000b, bcdDevice=62.33 [ 1250.812307][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.812328][ T5882] usb 2-1: Product: syz [ 1250.812342][ T5882] usb 2-1: Manufacturer: syz [ 1250.812355][ T5882] usb 2-1: SerialNumber: syz [ 1251.360057][T11968] bridge_slave_1: left allmulticast mode [ 1251.360084][T11968] bridge_slave_1: left promiscuous mode [ 1251.361123][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.456288][T11968] bridge_slave_0: left allmulticast mode [ 1251.456314][T11968] bridge_slave_0: left promiscuous mode [ 1251.456551][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.727369][ T5882] usb 2-1: USB disconnect, device number 25 [ 1260.121562][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.282141][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.373243][T11968] bond0 (unregistering): Released all slaves [ 1260.557772][T11761] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1260.670405][ T5462] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1260.711838][T11761] usb 1-1: Using ep0 maxpacket: 16 [ 1261.578118][T11761] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1261.578150][T11761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1261.585878][T11761] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1261.585907][T11761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.585927][T11761] usb 1-1: Product: syz [ 1261.585941][T11761] usb 1-1: Manufacturer: syz [ 1261.585955][T11761] usb 1-1: SerialNumber: syz [ 1261.715214][T11761] usb 1-1: config 0 descriptor?? [ 1263.252276][T11761] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39 [ 1263.687759][T11761] rc_core: IR keymap rc-imon-pad not found [ 1263.687781][T11761] Registered IR keymap rc-empty [ 1263.687936][T11761] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1263.687956][T11761] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1263.823554][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1263.827181][T11761] imon:send_packet: packet tx failed (-71) [ 1263.837840][T11761] imon 1-1:0.0: remote input dev register failed [ 1263.837993][T11761] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1264.847795][ T5896] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1264.855417][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1265.077738][ T5896] usb 7-1: device descriptor read/64, error -32 [ 1265.301366][T11761] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1265.301390][T11761] imon:imon_probe: failed to initialize context! [ 1265.301402][T11761] imon 1-1:0.0: unable to register, err -19 [ 1265.330950][ T5896] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1265.333138][T11761] usb 1-1: USB disconnect, device number 21 [ 1265.498784][ T5896] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1265.498816][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.498835][ T5896] usb 7-1: Product: syz [ 1265.498857][ T5896] usb 7-1: Manufacturer: syz [ 1265.498879][ T5896] usb 7-1: SerialNumber: syz [ 1265.704722][ T5896] usb 7-1: config 0 descriptor?? [ 1266.022931][ T5896] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1268.175391][ T5896] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1268.223919][ T5896] usb 7-1: USB disconnect, device number 13 [ 1274.996654][T15735] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2828'. [ 1275.332582][T15734] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1276.267709][T15734] usb 7-1: Using ep0 maxpacket: 8 [ 1276.271369][T15734] usb 7-1: config 0 has an invalid interface number: 33 but max is 1 [ 1276.271396][T15734] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.271415][T15734] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1276.271436][T15734] usb 7-1: config 0 has no interface number 0 [ 1276.271477][T15734] usb 7-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1276.274756][T15734] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1276.274782][T15734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.274802][T15734] usb 7-1: Product: syz [ 1276.274816][T15734] usb 7-1: Manufacturer: syz [ 1276.274831][T15734] usb 7-1: SerialNumber: syz [ 1276.362428][T15734] usb 7-1: config 0 descriptor?? [ 1276.379954][T15734] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1276.644435][ T2374] pvrusb2: Invalid write control endpoint [ 1277.568093][ T5882] usb 7-1: USB disconnect, device number 14 [ 1277.778996][ T2374] usb 7-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1277.779019][ T2374] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1284.161121][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1284.215289][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1284.239190][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1284.322559][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1284.324918][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1285.664194][T15831] 9p: Bad value for 'rfdno' [ 1285.706359][ T814] IPVS: starting estimator thread 0... [ 1286.511226][ T5802] Bluetooth: hci2: command tx timeout [ 1286.812334][T15834] IPVS: using max 16 ests per chain, 38400 per kthread [ 1288.212210][ T5883] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1288.225156][T15816] lo speed is unknown, defaulting to 1000 [ 1288.407727][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 1288.423264][ T5883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1288.423299][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1288.423324][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1288.423348][ T5883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.423387][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1288.423410][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.589148][T14982] Bluetooth: hci2: command tx timeout [ 1289.315849][ T5883] usb 2-1: GET_CAPABILITIES returned 0 [ 1289.315898][ T5883] usbtmc 2-1:16.0: can't read capabilities [ 1289.827758][T12321] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1289.977700][T12321] usb 8-1: Using ep0 maxpacket: 32 [ 1289.979982][T12321] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1289.980011][T12321] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.985675][T12321] usb 8-1: config 0 descriptor?? [ 1290.069388][T12321] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1290.630061][T12321] gspca_sunplus: reg_w_riv err -110 [ 1290.630169][T12321] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 1290.840775][ T5802] Bluetooth: hci2: command tx timeout [ 1291.184180][ T814] usb 2-1: USB disconnect, device number 26 [ 1293.151062][ T814] usb 8-1: USB disconnect, device number 13 [ 1293.241939][ T5802] Bluetooth: hci2: command tx timeout [ 1294.808579][ T814] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1294.998653][ T814] usb 1-1: Using ep0 maxpacket: 8 [ 1295.001245][ T814] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 1295.001270][ T814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.001289][ T814] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1295.001309][ T814] usb 1-1: config 0 has no interface number 0 [ 1295.001352][ T814] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1295.067272][ T814] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1295.067303][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.067324][ T814] usb 1-1: Product: syz [ 1295.067338][ T814] usb 1-1: Manufacturer: syz [ 1295.067352][ T814] usb 1-1: SerialNumber: syz [ 1295.106961][ T814] usb 1-1: config 0 descriptor?? [ 1295.120597][ T814] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1296.353438][ T814] usb 1-1: USB disconnect, device number 22 [ 1296.373989][ T814] pvrusb2: Device being rendered inoperable [ 1296.793648][T11968] hsr_slave_0: left promiscuous mode [ 1296.997874][T11968] hsr_slave_1: left promiscuous mode [ 1296.998900][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.998925][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.789470][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.789498][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.750975][T11968] veth1_macvtap: left promiscuous mode [ 1298.751041][T11968] veth0_macvtap: left promiscuous mode [ 1298.751208][T11968] veth1_vlan: left promiscuous mode [ 1298.751303][T11968] veth0_vlan: left promiscuous mode [ 1300.129575][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.129642][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.472372][T15972] loop2: detected capacity change from 0 to 7 [ 1302.729922][T15972] Dev loop2: unable to read RDB block 7 [ 1302.729965][T15972] loop2: AHDI p2 p3 [ 1302.729994][T15972] loop2: partition table partially beyond EOD, truncated [ 1302.730261][T15972] loop2: p3 start 335544320 is beyond EOD, truncated [ 1315.175212][T14982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1315.244781][T14982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1315.263815][T14982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1315.273705][T14982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1315.274994][T14982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1315.396590][T12321] lo speed is unknown, defaulting to 1000 [ 1315.396720][T12321] syz0: Port: 1 Link DOWN [ 1315.703176][T13154] smbdirect: ib_dev[syz0] removed [ 1316.687050][T15816] chnl_net:caif_netlink_parms(): no params data found [ 1317.486963][T14982] Bluetooth: hci0: command tx timeout [ 1319.985859][T14982] Bluetooth: hci0: command tx timeout [ 1320.159728][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.161512][T15816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.210373][T15816] bridge_slave_0: entered allmulticast mode [ 1320.213501][T15816] bridge_slave_0: entered promiscuous mode [ 1320.230528][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.230640][T15816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.230829][T15816] bridge_slave_1: entered allmulticast mode [ 1320.232917][T15816] bridge_slave_1: entered promiscuous mode [ 1320.598632][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.623842][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.925225][T15816] team0: Port device team_slave_0 added [ 1320.967160][T15816] team0: Port device team_slave_1 added [ 1322.040239][T14982] Bluetooth: hci0: command tx timeout [ 1322.536666][T15816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.536812][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.536839][T15816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.700411][T15816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.700427][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.700453][T15816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.596829][T15816] hsr_slave_0: entered promiscuous mode [ 1323.598692][T15816] hsr_slave_1: entered promiscuous mode [ 1323.599666][T15816] debugfs: 'hsr0' already exists in 'hsr' [ 1323.599689][T15816] Cannot create hsr debugfs directory [ 1323.600707][T16071] chnl_net:caif_netlink_parms(): no params data found [ 1323.905196][T16131] ubi: mtd0 is already attached to ubi16 [ 1324.116275][T14982] Bluetooth: hci0: command tx timeout [ 1326.258417][T11968] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.517738][T11761] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1326.670102][T11761] usb 1-1: Using ep0 maxpacket: 32 [ 1326.681292][T11761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1326.741204][T11761] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1326.741235][T11761] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1326.741254][T11761] usb 1-1: Product: syz [ 1326.741265][T11761] usb 1-1: Manufacturer: syz [ 1326.741279][T11761] usb 1-1: SerialNumber: syz [ 1326.761106][T11761] usb 1-1: config 0 descriptor?? [ 1326.768387][T16162] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1327.015676][T16071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.015802][T16071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.015989][T16071] bridge_slave_0: entered allmulticast mode [ 1327.049485][T16071] bridge_slave_0: entered promiscuous mode [ 1327.768192][T16071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.768309][T16071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.768556][T16071] bridge_slave_1: entered allmulticast mode [ 1327.772689][T16071] bridge_slave_1: entered promiscuous mode [ 1328.228229][T16176] ubi: mtd0 is already attached to ubi16 [ 1328.568991][T16071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.746185][ T5883] usb 1-1: USB disconnect, device number 23 [ 1329.038938][T11968] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.295360][T16071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.744322][T11968] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.757719][T12321] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1329.874257][T16071] team0: Port device team_slave_0 added [ 1329.883930][T16071] team0: Port device team_slave_1 added [ 1329.948039][T12321] usb 2-1: Using ep0 maxpacket: 32 [ 1329.953221][T12321] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1329.953246][T12321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.953264][T12321] usb 2-1: Product: syz [ 1329.953277][T12321] usb 2-1: Manufacturer: syz [ 1329.953289][T12321] usb 2-1: SerialNumber: syz [ 1329.988039][T12321] usb 2-1: config 0 descriptor?? [ 1330.006925][T12321] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1330.039002][T12321] dvb-usb: bulk message failed: -22 (4/0) [ 1330.039026][T12321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1330.039152][T12321] dvb-usb: bulk message failed: -22 (5/0) [ 1330.039167][T12321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1330.267885][T12321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1330.270558][T12321] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1330.270657][T12321] usb 2-1: media controller created [ 1330.472035][T12321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1330.506439][T11968] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.736595][T12321] usb 2-1: selecting invalid altsetting 3 [ 1330.736615][T12321] ttusb2: set interface to alts=3 failed [ 1330.797882][ T31] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1330.897394][T12321] DVB: Unable to find symbol tda10086_attach() [ 1330.897408][T12321] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1330.898318][T12321] dvb-usb: bulk message failed: -22 (4/0) [ 1330.898335][T12321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1330.898453][T12321] dvb-usb: bulk message failed: -22 (5/0) [ 1330.898466][T12321] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1330.898529][T12321] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1330.905925][T12321] usb 2-1: USB disconnect, device number 27 [ 1331.841079][T16206] ubi: mtd0 is already attached to ubi16 [ 1332.282286][ T31] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1332.282317][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.282336][ T31] usb 8-1: Product: syz [ 1332.282349][ T31] usb 8-1: Manufacturer: syz [ 1332.282363][ T31] usb 8-1: SerialNumber: syz [ 1332.331580][ T31] usb 8-1: config 0 descriptor?? [ 1332.349006][T16071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.349017][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.349032][T16071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.580867][ T31] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1332.732488][T12321] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1332.759120][T16071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.759135][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1332.759155][T16071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.812330][ T5883] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1332.981986][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 1333.006104][ T5883] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1333.036880][ T5883] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1333.036927][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1333.036967][ T5883] usb 1-1: Product: syz [ 1333.037048][ T5883] usb 1-1: Manufacturer: syz [ 1333.037079][ T5883] usb 1-1: SerialNumber: syz [ 1333.153550][ T5883] usb 1-1: config 0 descriptor?? [ 1333.154552][T16209] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1333.380355][T16071] hsr_slave_0: entered promiscuous mode [ 1333.382172][T16071] hsr_slave_1: entered promiscuous mode [ 1333.383349][T16071] debugfs: 'hsr0' already exists in 'hsr' [ 1333.383372][T16071] Cannot create hsr debugfs directory [ 1335.553252][ T31] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1335.596013][T12321] usb 8-1: USB disconnect, device number 14 [ 1337.092359][T11761] usb 1-1: USB disconnect, device number 24 [ 1337.927948][T11968] bridge_slave_1: left allmulticast mode [ 1337.927977][T11968] bridge_slave_1: left promiscuous mode [ 1337.928210][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.031144][T11968] bridge_slave_0: left allmulticast mode [ 1338.031174][T11968] bridge_slave_0: left promiscuous mode [ 1338.031421][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.327824][T11968] bridge_slave_1: left allmulticast mode [ 1338.327851][T11968] bridge_slave_1: left promiscuous mode [ 1338.328062][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.429472][T11968] bridge_slave_0: left allmulticast mode [ 1338.445356][T11968] bridge_slave_0: left promiscuous mode [ 1338.445591][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.974460][T16272] ubi: mtd0 is already attached to ubi16 [ 1339.452213][T16272] overlayfs: failed to resolve './file0': -2 [ 1339.487756][T11761] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1339.643340][T11761] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1339.643370][T11761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.643389][T11761] usb 1-1: Product: syz [ 1339.643402][T11761] usb 1-1: Manufacturer: syz [ 1339.643416][T11761] usb 1-1: SerialNumber: syz [ 1339.692958][T11761] usb 1-1: config 0 descriptor?? [ 1340.721585][T11761] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1341.096764][ T2374] pvrusb2: request_firmware fatal error with code=-110 [ 1341.096796][ T2374] pvrusb2: Failure uploading firmware1 [ 1341.096806][ T2374] pvrusb2: Device initialization was not successful. [ 1341.096813][ T2374] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1341.096820][ T2374] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1341.096946][ T5882] pvrusb2: Device being rendered inoperable [ 1341.194018][T14982] Bluetooth: hci4: unexpected event for opcode 0x0413 [ 1341.950028][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1342.090465][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1342.145161][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1342.146774][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1342.163591][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1342.178155][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1342.219355][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.350225][T11968] bond0 (unregistering): Released all slaves [ 1342.723287][T11761] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1342.741937][T11761] usb 1-1: USB disconnect, device number 25 [ 1342.818536][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.229158][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1343.289529][T11968] bond0 (unregistering): Released all slaves [ 1343.451551][ T5462] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1344.779121][T14982] Bluetooth: hci5: command tx timeout [ 1347.283669][T14982] Bluetooth: hci5: command tx timeout [ 1347.966187][T16071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1348.045622][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.147682][ T5882] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1348.175768][T16071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1348.314946][ T5882] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1348.314976][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.314995][ T5882] usb 8-1: Product: syz [ 1348.315009][ T5882] usb 8-1: Manufacturer: syz [ 1348.315023][ T5882] usb 8-1: SerialNumber: syz [ 1348.356894][ T5882] usb 8-1: config 0 descriptor?? [ 1348.447227][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1348.461496][T16071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1348.611062][ T5882] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1348.656509][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1349.083183][T16071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1349.626561][T14982] Bluetooth: hci5: command tx timeout [ 1349.985648][T16071] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1350.136622][ T5462] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1351.787692][T14982] Bluetooth: hci5: command tx timeout [ 1351.856494][ T5882] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1351.875459][ T5882] usb 8-1: USB disconnect, device number 15 [ 1353.928996][T16389] program syz.0.2990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.579398][T11968] hsr_slave_0: left promiscuous mode [ 1356.617735][T11968] hsr_slave_1: left promiscuous mode [ 1356.618788][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.618811][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.678824][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.678850][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.887695][T11968] hsr_slave_0: left promiscuous mode [ 1356.927792][T11968] hsr_slave_1: left promiscuous mode [ 1356.928995][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.978715][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.148223][T11968] veth1_macvtap: left promiscuous mode [ 1357.148324][T11968] veth0_macvtap: left promiscuous mode [ 1357.148562][T11968] veth1_vlan: left promiscuous mode [ 1357.148723][T11968] veth0_vlan: left promiscuous mode [ 1359.049094][T11968] team0 (unregistering): Port device team_slave_1 removed [ 1359.074885][T11968] team0 (unregistering): Port device team_slave_0 removed [ 1360.108496][T11968] team0 (unregistering): Port device team_slave_1 removed [ 1360.160350][T11968] team0 (unregistering): Port device team_slave_0 removed [ 1360.378091][ T5462] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1360.417215][T16287] chnl_net:caif_netlink_parms(): no params data found [ 1360.746952][T16287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.747113][T16287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.762320][T16287] bridge_slave_0: entered allmulticast mode [ 1360.765327][T16287] bridge_slave_0: entered promiscuous mode [ 1360.795141][T16287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.795259][T16287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.803044][T16287] bridge_slave_1: entered allmulticast mode [ 1360.814016][T16287] bridge_slave_1: entered promiscuous mode [ 1361.003257][T16287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.016289][T16071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.020924][T16287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.115050][T16287] team0: Port device team_slave_0 added [ 1361.120185][T16287] team0: Port device team_slave_1 added [ 1361.544140][T16287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.544157][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.544181][T16287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.565421][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.565485][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.723446][T16287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.723463][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.723487][T16287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.831019][T16481] openvswitch: netlink: Flow actions attr not present in new flow. [ 1362.736944][T16071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.369637][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.369758][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.589198][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.589415][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.597479][T16287] hsr_slave_0: entered promiscuous mode [ 1363.599107][T16287] hsr_slave_1: entered promiscuous mode [ 1363.951304][ T5462] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1365.322897][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1365.322913][ T36] audit: type=1326 audit(1776623506.482:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.322956][ T36] audit: type=1326 audit(1776623506.492:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.322994][ T36] audit: type=1326 audit(1776623506.492:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.323061][ T36] audit: type=1326 audit(1776623506.492:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.323100][ T36] audit: type=1326 audit(1776623506.492:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.323150][ T36] audit: type=1326 audit(1776623506.492:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.323188][ T36] audit: type=1326 audit(1776623506.492:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956c83c819 code=0x7ffc0000 [ 1365.323227][ T36] audit: type=1326 audit(1776623506.492:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f956c7fd04e code=0x7ffc0000 [ 1365.323274][ T36] audit: type=1326 audit(1776623506.492:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f956c7fd04e code=0x7ffc0000 [ 1365.323317][ T36] audit: type=1326 audit(1776623506.492:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16519 comm="syz.1.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f956c7fd04e code=0x7ffc0000 [ 1365.392048][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1367.467669][T14982] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.159465][T16554] blktrace: Concurrent blktraces are not allowed on loop2 [ 1370.475085][T11968] IPVS: stop unused estimator thread 0... [ 1370.800688][T16071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.667709][T12321] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1372.817856][T12321] usb 1-1: Using ep0 maxpacket: 32 [ 1372.913228][T12321] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1372.915532][T12321] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1372.915560][T12321] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1372.915580][T12321] usb 1-1: Product: syz [ 1372.915595][T12321] usb 1-1: Manufacturer: syz [ 1372.915608][T12321] usb 1-1: SerialNumber: syz [ 1372.940958][T12321] usb 1-1: config 0 descriptor?? [ 1372.966158][T16585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1373.011155][T16071] veth0_vlan: entered promiscuous mode [ 1373.150926][T16071] veth1_vlan: entered promiscuous mode [ 1373.400749][T16071] veth0_macvtap: entered promiscuous mode [ 1373.463042][T16071] veth1_macvtap: entered promiscuous mode [ 1373.683184][T16071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.145198][T11968] bridge_slave_1: left allmulticast mode [ 1374.145227][T11968] bridge_slave_1: left promiscuous mode [ 1374.145465][T11968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.694354][T16602] blktrace: Concurrent blktraces are not allowed on loop14 [ 1375.545468][T11968] bridge_slave_0: left allmulticast mode [ 1375.545495][T11968] bridge_slave_0: left promiscuous mode [ 1375.545878][T11968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.719048][ T5896] usb 1-1: USB disconnect, device number 26 [ 1376.153105][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1376.234921][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1376.260938][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1376.266184][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1376.280823][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.681368][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.800817][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.083672][T11968] bond0 (unregistering): Released all slaves [ 1378.592500][T14982] Bluetooth: hci2: command tx timeout [ 1378.631143][T11968] hsr_slave_0: left promiscuous mode [ 1378.650118][T11968] hsr_slave_1: left promiscuous mode [ 1378.652642][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.704025][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.877664][ T5883] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1379.027660][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 1379.029799][ T5883] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1379.032173][ T5883] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1379.032199][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1379.032218][ T5883] usb 2-1: Product: syz [ 1379.032232][ T5883] usb 2-1: Manufacturer: syz [ 1379.032245][ T5883] usb 2-1: SerialNumber: syz [ 1379.058291][ T5883] usb 2-1: config 0 descriptor?? [ 1379.059235][T16637] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1379.939309][T11968] team0 (unregistering): Port device team_slave_1 removed [ 1380.018335][T11968] team0 (unregistering): Port device team_slave_0 removed [ 1380.635436][ T5883] usb 2-1: USB disconnect, device number 28 [ 1380.670213][T14982] Bluetooth: hci2: command tx timeout [ 1382.748952][T14982] Bluetooth: hci2: command tx timeout [ 1384.907658][T14982] Bluetooth: hci2: command tx timeout [ 1385.293768][T16287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1385.518326][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1386.249317][T16287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1386.593615][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1386.596171][T16287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1386.657327][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1386.666618][T16287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1386.760793][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1386.857721][ T5896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1387.054971][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 1387.490712][ T5896] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1387.490742][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.490762][ T5896] usb 2-1: Product: syz [ 1387.490776][ T5896] usb 2-1: Manufacturer: syz [ 1387.490790][ T5896] usb 2-1: SerialNumber: syz [ 1387.532430][ T5896] usb 2-1: config 0 descriptor?? [ 1387.548115][ T5896] gspca_main: se401-2.14.0 probing 047d:5003 [ 1387.966591][ T5896] gspca_se401: Wrong descriptor type [ 1388.261875][ T5896] usb 2-1: USB disconnect, device number 29 [ 1389.927925][T16609] chnl_net:caif_netlink_parms(): no params data found [ 1390.308126][ T5883] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1390.794726][ T5883] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1390.794809][ T5883] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1390.794879][ T5883] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1390.795215][ T5883] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1390.795282][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.993561][T16782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1392.380781][ T5883] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1392.387382][ T5883] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input42 [ 1392.537269][ T5883] usb 2-1: USB disconnect, device number 30 [ 1392.537347][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1392.713258][T16812] kvm: kvm [16810]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x50d4 [ 1392.713347][T16812] kvm: kvm [16810]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1392.713957][T16812] kvm: kvm [16810]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x185a [ 1392.716122][T16812] kvm: kvm [16810]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x187 [ 1392.719014][T16812] kvm: kvm [16810]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x119c [ 1394.264658][T16825] blktrace: Concurrent blktraces are not allowed on loop2 [ 1395.731793][T16609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.732169][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.732339][T16609] bridge_slave_0: entered allmulticast mode [ 1395.735543][T16609] bridge_slave_0: entered promiscuous mode [ 1395.746552][T16609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.746733][T16609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.746928][T16609] bridge_slave_1: entered allmulticast mode [ 1395.750482][T16609] bridge_slave_1: entered promiscuous mode [ 1396.046725][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.052621][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.197127][T16287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.291753][T16609] team0: Port device team_slave_0 added [ 1396.309518][T16609] team0: Port device team_slave_1 added [ 1396.868859][T16853] openvswitch: netlink: Flow actions attr not present in new flow. [ 1397.677480][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.677492][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.677506][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.709193][T16287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.739404][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.739419][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.739439][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.179889][T16863] blktrace: Concurrent blktraces are not allowed on loop14 [ 1399.116015][T13154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.116282][T13154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.392995][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.393122][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.450113][T16609] hsr_slave_0: entered promiscuous mode [ 1399.452866][T16609] hsr_slave_1: entered promiscuous mode [ 1399.454930][T16609] debugfs: 'hsr0' already exists in 'hsr' [ 1399.454954][T16609] Cannot create hsr debugfs directory [ 1402.480923][ T107] bridge_slave_1: left allmulticast mode [ 1402.480952][ T107] bridge_slave_1: left promiscuous mode [ 1402.481195][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.583327][ T107] bridge_slave_0: left allmulticast mode [ 1402.583357][ T107] bridge_slave_0: left promiscuous mode [ 1402.583592][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.683779][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1402.769863][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1402.776263][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1402.787707][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1402.790532][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1403.762015][T16899] openvswitch: netlink: Flow key attr not present in new flow. [ 1405.243270][T14982] Bluetooth: hci0: command tx timeout [ 1406.658279][T16904] blktrace: Concurrent blktraces are not allowed on loop14 [ 1407.309999][ T5802] Bluetooth: hci0: command tx timeout [ 1408.723140][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.788654][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.810322][ T107] bond0 (unregistering): Released all slaves [ 1409.667819][ T5802] Bluetooth: hci0: command tx timeout [ 1411.473676][T16927] dummy0: entered promiscuous mode [ 1411.473872][T16927] vlan2: entered promiscuous mode [ 1411.788353][ T5802] Bluetooth: hci0: command tx timeout [ 1411.827825][ T107] hsr_slave_0: left promiscuous mode [ 1411.854511][ T107] hsr_slave_1: left promiscuous mode [ 1411.856652][ T107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.856687][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.908660][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.041669][ T107] veth1_macvtap: left promiscuous mode [ 1412.041774][ T107] veth0_macvtap: left promiscuous mode [ 1412.042008][ T107] veth1_vlan: left promiscuous mode [ 1412.042172][ T107] veth0_vlan: left promiscuous mode [ 1413.844225][T16952] openvswitch: netlink: Flow key attr not present in new flow. [ 1415.048347][ T107] team0 (unregistering): Port device team_slave_1 removed [ 1415.108441][ T107] team0 (unregistering): Port device team_slave_0 removed [ 1418.333681][ T5462] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1418.840476][T17009] openvswitch: netlink: Flow key attr not present in new flow. [ 1420.657437][T16886] chnl_net:caif_netlink_parms(): no params data found [ 1421.330190][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.330328][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.330571][T16886] bridge_slave_0: entered allmulticast mode [ 1421.333577][T16886] bridge_slave_0: entered promiscuous mode [ 1422.977901][T16886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.978020][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.978253][T16886] bridge_slave_1: entered allmulticast mode [ 1422.980859][T16886] bridge_slave_1: entered promiscuous mode [ 1423.140864][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.140928][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.249041][T17044] openvswitch: netlink: Flow actions attr not present in new flow. [ 1424.056067][T16886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.502549][T16886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.592905][T16886] team0: Port device team_slave_0 added [ 1424.620068][T16886] team0: Port device team_slave_1 added [ 1424.687649][ T5875] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1424.867762][ T5875] usb 1-1: device descriptor read/64, error -71 [ 1424.882392][T16609] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1425.121177][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1425.167801][ T5875] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1425.209439][T16609] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1425.240612][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1425.324660][ T5875] usb 1-1: device descriptor read/64, error -71 [ 1425.428011][ T5875] usb usb1-port1: attempt power cycle [ 1425.782903][T16886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.782920][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.782945][T16886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.783682][T16609] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1425.810441][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1425.893203][ T5875] usb 1-1: device descriptor read/8, error -71 [ 1426.618306][ T5875] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1426.640333][ T5875] usb 1-1: device descriptor read/8, error -71 [ 1426.664553][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1426.665870][T16886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.665883][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.665909][T16886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.667244][T16609] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1426.749367][ T5875] usb usb1-port1: unable to enumerate USB device [ 1426.752639][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1426.964115][T16886] hsr_slave_0: entered promiscuous mode [ 1426.965116][T16886] hsr_slave_1: entered promiscuous mode [ 1426.965834][T16886] debugfs: 'hsr0' already exists in 'hsr' [ 1426.965854][T16886] Cannot create hsr debugfs directory [ 1428.584682][T17102] openvswitch: netlink: Flow actions attr not present in new flow. [ 1429.689646][ T107] bridge_slave_1: left allmulticast mode [ 1429.689665][ T107] bridge_slave_1: left promiscuous mode [ 1429.689832][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.959448][ T107] bridge_slave_0: left allmulticast mode [ 1429.959478][ T107] bridge_slave_0: left promiscuous mode [ 1429.959612][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.227742][ T5883] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1430.448077][ T5883] usb 2-1: device descriptor read/64, error -71 [ 1430.737842][ T5883] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1431.298305][ T5883] usb 2-1: device descriptor read/64, error -71 [ 1431.472257][ T5883] usb usb2-port1: attempt power cycle [ 1431.867660][ T5883] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1431.929501][ T5883] usb 2-1: device descriptor read/8, error -71 [ 1431.964652][T17126] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1431.964702][T17126] netlink: 'syz.7.3168': attribute type 7 has an invalid length. [ 1431.964715][T17126] netlink: 'syz.7.3168': attribute type 8 has an invalid length. [ 1431.964729][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3168'. [ 1432.167645][ T5883] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1432.188200][ T5883] usb 2-1: device descriptor read/8, error -71 [ 1432.209278][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.278561][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.299780][ T5883] usb usb2-port1: unable to enumerate USB device [ 1432.315880][ T107] bond0 (unregistering): Released all slaves [ 1433.020988][T17138] openvswitch: netlink: Flow actions attr not present in new flow. [ 1433.891461][ T107] hsr_slave_0: left promiscuous mode [ 1433.918802][ T107] hsr_slave_1: left promiscuous mode [ 1433.919761][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.941983][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.016938][T14982] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1435.068006][T14982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1435.069851][T14982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1435.073282][T14982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1435.074317][T14982] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1435.779890][ T107] team0 (unregistering): Port device team_slave_1 removed [ 1435.830656][ T107] team0 (unregistering): Port device team_slave_0 removed [ 1437.395776][T14982] Bluetooth: hci5: command tx timeout [ 1439.660213][T14982] Bluetooth: hci5: command tx timeout [ 1439.884036][ T6008] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1440.004681][T17203] openvswitch: netlink: Flow actions attr not present in new flow. [ 1441.366076][ T6008] usb 2-1: device descriptor read/64, error -71 [ 1441.718064][T14982] Bluetooth: hci5: command tx timeout [ 1441.747716][ T6008] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1441.877748][ T6008] usb 2-1: device descriptor read/64, error -71 [ 1441.991106][ T6008] usb usb2-port1: attempt power cycle [ 1442.345320][T17146] chnl_net:caif_netlink_parms(): no params data found [ 1442.347876][ T6008] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1442.368515][ T6008] usb 2-1: device descriptor read/8, error -71 [ 1442.617759][ T6008] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1442.637875][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1442.638005][ T6008] usb 2-1: device descriptor read/8, error -32 [ 1442.748074][ T6008] usb usb2-port1: unable to enumerate USB device [ 1443.797673][T14982] Bluetooth: hci5: command tx timeout [ 1445.562590][T17146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.562923][T17146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.563129][T17146] bridge_slave_0: entered allmulticast mode [ 1445.565833][T17146] bridge_slave_0: entered promiscuous mode [ 1445.597423][T17146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.598310][T17146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.598485][T17146] bridge_slave_1: entered allmulticast mode [ 1445.601599][T17146] bridge_slave_1: entered promiscuous mode [ 1445.670141][T16886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1446.093673][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1446.182917][T16886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1446.305219][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1446.322575][T17146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.473597][ T5896] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1446.495046][T16886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1446.616669][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1447.304096][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1447.307394][T17146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.307845][ T5896] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1447.447696][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1447.566086][ T5896] usb usb2-port1: attempt power cycle [ 1447.917800][ T5896] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1447.938403][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1448.153281][T16886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1448.177713][ T5896] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1448.192485][T16886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1448.206184][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1448.308480][ T5896] usb usb2-port1: unable to enumerate USB device [ 1448.491436][T17146] team0: Port device team_slave_0 added [ 1448.510366][T17146] team0: Port device team_slave_1 added [ 1448.648825][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 1448.648842][ T36] audit: type=1326 audit(1776623589.802:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.649107][ T36] audit: type=1326 audit(1776623589.802:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.649397][ T36] audit: type=1326 audit(1776623589.802:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.649624][ T36] audit: type=1326 audit(1776623589.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.649832][ T36] audit: type=1326 audit(1776623589.802:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.650087][ T36] audit: type=1326 audit(1776623589.802:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.650304][ T36] audit: type=1326 audit(1776623589.802:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b2f5c819 code=0x7ffc0000 [ 1448.653151][ T36] audit: type=1326 audit(1776623589.802:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00b2f1d04e code=0x7ffc0000 [ 1448.654531][ T36] audit: type=1326 audit(1776623589.802:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00b2f1d04e code=0x7ffc0000 [ 1448.655913][ T36] audit: type=1326 audit(1776623589.802:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.0.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f00b2f1d04e code=0x7ffc0000 [ 1448.956708][T17146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.956725][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.956750][T17146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.040217][T17146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.040234][T17146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.040257][T17146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.196910][T17146] hsr_slave_0: entered promiscuous mode [ 1449.201744][T17146] hsr_slave_1: entered promiscuous mode [ 1451.618016][T16215] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1451.733502][T16886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.750772][T16215] usb 1-1: device descriptor read/64, error -71 [ 1451.867203][T16886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.911689][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.912207][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.935644][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.935774][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.005616][T16215] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1452.140908][T16215] usb 1-1: device descriptor read/64, error -71 [ 1452.179945][T17308] ================================================================== [ 1452.179960][T17308] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1452.179987][T17308] Read of size 1 at addr ffff888087400200 by task syz.7.3215/17308 [ 1452.180002][T17308] [ 1452.180015][T17308] CPU: 0 UID: 0 PID: 17308 Comm: syz.7.3215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1452.180038][T17308] Tainted: [L]=SOFTLOCKUP [ 1452.180044][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1452.180055][T17308] Call Trace: [ 1452.180062][T17308] [ 1452.180070][T17308] dump_stack_lvl+0xe8/0x150 [ 1452.180101][T17308] print_address_description+0x55/0x1e0 [ 1452.180146][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.180161][T17308] print_report+0x58/0x70 [ 1452.180191][T17308] kasan_report+0x117/0x150 [ 1452.180355][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.180371][T17308] ? __wake_up_common_lock+0x2f/0x1e0 [ 1452.180415][T17308] __kasan_check_byte+0x2a/0x40 [ 1452.180437][T17308] lock_acquire+0x84/0x350 [ 1452.180499][T17308] rt_spin_lock+0x83/0x400 [ 1452.180513][T17308] ? __wake_up_common_lock+0x2f/0x1e0 [ 1452.180528][T17308] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1452.180543][T17308] ? __pfx_rt_spin_lock+0x10/0x10 [ 1452.180556][T17308] ? rt_spin_unlock+0x14f/0x200 [ 1452.180571][T17308] ? rt_spin_unlock+0x160/0x200 [ 1452.180585][T17308] __wake_up_common_lock+0x2f/0x1e0 [ 1452.180603][T17308] snd_pcm_stop+0x428/0x550 [ 1452.180680][T17308] loopback_trigger+0x11ff/0x1cf0 [ 1452.180760][T17308] snd_pcm_start+0x43d/0x5d0 [ 1452.180779][T17308] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1452.180825][T17308] ? __pfx_interleaved_copy+0x10/0x10 [ 1452.180847][T17308] ? __pfx_default_write_copy+0x10/0x10 [ 1452.180870][T17308] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1452.180890][T17308] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1452.180910][T17308] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1452.180924][T17308] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1452.180940][T17308] ? snd_pcm_oss_write3+0x191/0x300 [ 1452.180999][T17308] snd_pcm_oss_write3+0x1ab/0x300 [ 1452.181021][T17308] snd_pcm_oss_write2+0x2c2/0x440 [ 1452.181043][T17308] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1452.181063][T17308] ? rt_spin_unlock+0x14f/0x200 [ 1452.181078][T17308] ? rt_spin_unlock+0x160/0x200 [ 1452.181092][T17308] snd_pcm_oss_sync1+0x180/0x520 [ 1452.181109][T17308] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1452.181123][T17308] ? __pfx_default_wake_function+0x10/0x10 [ 1452.181169][T17308] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1452.181188][T17308] ? __asan_memset+0x22/0x50 [ 1452.181206][T17308] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1452.181222][T17308] snd_pcm_oss_sync+0xab2/0xfc0 [ 1452.181245][T17308] snd_pcm_oss_release+0x102/0x250 [ 1452.181266][T17308] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1452.181287][T17308] __fput+0x461/0xa70 [ 1452.181337][T17308] task_work_run+0x1d9/0x270 [ 1452.181357][T17308] ? __pfx_task_work_run+0x10/0x10 [ 1452.181377][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.181407][T17308] exit_to_user_mode_loop+0xed/0x480 [ 1452.181448][T17308] ? rcu_is_watching+0x15/0xb0 [ 1452.181492][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.181507][T17308] do_syscall_64+0x33e/0xf80 [ 1452.181549][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.181564][T17308] ? clear_bhb_loop+0x40/0x90 [ 1452.181580][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.181599][T17308] RIP: 0033:0x7fb1ef84c819 [ 1452.181616][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.181630][T17308] RSP: 002b:00007fffc3a53e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1452.181647][T17308] RAX: 0000000000000000 RBX: 00007fb1efac7da0 RCX: 00007fb1ef84c819 [ 1452.181658][T17308] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1452.181667][T17308] RBP: 00007fb1efac7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1452.181677][T17308] R10: 00007fb1efac7cb0 R11: 0000000000000246 R12: 00000000001627d1 [ 1452.181687][T17308] R13: 00007fb1efac609c R14: 000000000016257d R15: 00007fb1efac6090 [ 1452.181710][T17308] [ 1452.181715][T17308] [ 1452.181722][T17308] Allocated by task 17310: [ 1452.181729][T17308] kasan_save_track+0x3e/0x80 [ 1452.181751][T17308] __kasan_kmalloc+0x93/0xb0 [ 1452.181770][T17308] __kmalloc_cache_noprof+0x3a6/0x690 [ 1452.181836][T17308] snd_pcm_attach_substream+0x5b7/0xb20 [ 1452.181850][T17308] snd_pcm_open_substream+0xbd/0x2420 [ 1452.181866][T17308] snd_pcm_oss_open+0xf90/0x1c20 [ 1452.181884][T17308] chrdev_open+0x4d0/0x5f0 [ 1452.181918][T17308] do_dentry_open+0x83d/0x13e0 [ 1452.181955][T17308] vfs_open+0x3b/0x350 [ 1452.181969][T17308] path_openat+0x2e43/0x38a0 [ 1452.182010][T17308] do_file_open+0x23e/0x4a0 [ 1452.182028][T17308] do_sys_openat2+0x113/0x200 [ 1452.182043][T17308] __x64_sys_openat+0x138/0x170 [ 1452.182059][T17308] do_syscall_64+0x15f/0xf80 [ 1452.182075][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.182088][T17308] [ 1452.182091][T17308] Freed by task 17310: [ 1452.182098][T17308] kasan_save_track+0x3e/0x80 [ 1452.182115][T17308] kasan_save_free_info+0x46/0x50 [ 1452.182130][T17308] __kasan_slab_free+0x5c/0x80 [ 1452.182148][T17308] kfree+0x1c5/0x6c0 [ 1452.182165][T17308] snd_pcm_detach_substream+0x1c8/0x270 [ 1452.182178][T17308] snd_pcm_oss_release+0x184/0x250 [ 1452.182195][T17308] __fput+0x461/0xa70 [ 1452.182210][T17308] task_work_run+0x1d9/0x270 [ 1452.182226][T17308] exit_to_user_mode_loop+0xed/0x480 [ 1452.182239][T17308] do_syscall_64+0x33e/0xf80 [ 1452.182255][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.182268][T17308] [ 1452.182271][T17308] The buggy address belongs to the object at ffff888087400000 [ 1452.182271][T17308] which belongs to the cache kmalloc-2k of size 2048 [ 1452.182284][T17308] The buggy address is located 512 bytes inside of [ 1452.182284][T17308] freed 2048-byte region [ffff888087400000, ffff888087400800) [ 1452.182299][T17308] [ 1452.182303][T17308] The buggy address belongs to the physical page: [ 1452.182317][T17308] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x87400 [ 1452.182332][T17308] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1452.182344][T17308] flags: 0x80000000000040(head|node=0|zone=1) [ 1452.182359][T17308] page_type: f5(slab) [ 1452.182373][T17308] raw: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 1452.182385][T17308] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1452.182398][T17308] head: 0080000000000040 ffff88801a024000 dead000000000100 dead000000000122 [ 1452.182410][T17308] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 1452.182423][T17308] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1452.182435][T17308] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1452.182442][T17308] page dumped because: kasan: bad access detected [ 1452.182449][T17308] page_owner tracks the page as allocated [ 1452.182454][T17308] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17310, tgid 17308 (syz.7.3215), ts 1451342912438, free_ts 1451230567419 [ 1452.182484][T17308] post_alloc_hook+0x231/0x280 [ 1452.182543][T17308] get_page_from_freelist+0x27c8/0x2840 [ 1452.182558][T17308] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1452.182572][T17308] allocate_slab+0x77/0x660 [ 1452.182641][T17308] refill_objects+0x33c/0x3d0 [ 1452.182655][T17308] __pcs_replace_empty_main+0x373/0x720 [ 1452.182671][T17308] __kmalloc_cache_noprof+0x44e/0x690 [ 1452.182691][T17308] snd_pcm_attach_substream+0x5b7/0xb20 [ 1452.182709][T17308] snd_pcm_open_substream+0xbd/0x2420 [ 1452.182725][T17308] snd_pcm_oss_open+0xf90/0x1c20 [ 1452.182743][T17308] chrdev_open+0x4d0/0x5f0 [ 1452.182756][T17308] do_dentry_open+0x83d/0x13e0 [ 1452.182770][T17308] vfs_open+0x3b/0x350 [ 1452.182783][T17308] path_openat+0x2e43/0x38a0 [ 1452.182801][T17308] do_file_open+0x23e/0x4a0 [ 1452.182819][T17308] do_sys_openat2+0x113/0x200 [ 1452.182834][T17308] page last free pid 5799 tgid 5799 stack trace: [ 1452.182843][T17308] __free_frozen_pages+0xfa6/0x10f0 [ 1452.182863][T17308] __slab_free+0x252/0x2a0 [ 1452.182873][T17308] qlist_free_all+0x99/0x100 [ 1452.182890][T17308] kasan_quarantine_reduce+0x148/0x160 [ 1452.182908][T17308] __kasan_slab_alloc+0x22/0x80 [ 1452.182926][T17308] kmem_cache_alloc_noprof+0x33b/0x680 [ 1452.182945][T17308] do_getname+0x2e/0x250 [ 1452.182959][T17308] __se_sys_unlink+0x1e/0x140 [ 1452.182972][T17308] do_syscall_64+0x15f/0xf80 [ 1452.182987][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.183001][T17308] [ 1452.183004][T17308] Memory state around the buggy address: [ 1452.183012][T17308] ffff888087400100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.183022][T17308] ffff888087400180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.183032][T17308] >ffff888087400200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.183039][T17308] ^ [ 1452.183046][T17308] ffff888087400280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.183055][T17308] ffff888087400300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1452.183062][T17308] ================================================================== [ 1452.183097][T17308] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1452.183113][T17308] CPU: 0 UID: 0 PID: 17308 Comm: syz.7.3215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1452.183137][T17308] Tainted: [L]=SOFTLOCKUP [ 1452.183144][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1452.183154][T17308] Call Trace: [ 1452.183162][T17308] [ 1452.183169][T17308] vpanic+0x56c/0xa60 [ 1452.183190][T17308] ? __pfx_vpanic+0x10/0x10 [ 1452.183206][T17308] ? __pfx___schedule+0x10/0x10 [ 1452.183257][T17308] panic+0xc5/0xd0 [ 1452.183274][T17308] ? __pfx_panic+0x10/0x10 [ 1452.183292][T17308] ? preempt_schedule_common+0x82/0xd0 [ 1452.183315][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.183331][T17308] check_panic_on_warn+0x89/0xb0 [ 1452.183403][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.183419][T17308] end_report+0x73/0x170 [ 1452.183445][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.183460][T17308] kasan_report+0x128/0x150 [ 1452.183488][T17308] ? rt_spin_lock+0x83/0x400 [ 1452.183507][T17308] ? __wake_up_common_lock+0x2f/0x1e0 [ 1452.183526][T17308] __kasan_check_byte+0x2a/0x40 [ 1452.183553][T17308] lock_acquire+0x84/0x350 [ 1452.183577][T17308] rt_spin_lock+0x83/0x400 [ 1452.183594][T17308] ? __wake_up_common_lock+0x2f/0x1e0 [ 1452.183613][T17308] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1452.183631][T17308] ? __pfx_rt_spin_lock+0x10/0x10 [ 1452.183647][T17308] ? rt_spin_unlock+0x14f/0x200 [ 1452.183666][T17308] ? rt_spin_unlock+0x160/0x200 [ 1452.183684][T17308] __wake_up_common_lock+0x2f/0x1e0 [ 1452.183712][T17308] snd_pcm_stop+0x428/0x550 [ 1452.183735][T17308] loopback_trigger+0x11ff/0x1cf0 [ 1452.183767][T17308] snd_pcm_start+0x43d/0x5d0 [ 1452.183791][T17308] __snd_pcm_lib_xfer+0x175a/0x1d10 [ 1452.183822][T17308] ? __pfx_interleaved_copy+0x10/0x10 [ 1452.183849][T17308] ? __pfx_default_write_copy+0x10/0x10 [ 1452.183877][T17308] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1452.183901][T17308] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1452.183927][T17308] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1452.183944][T17308] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1452.183964][T17308] ? snd_pcm_oss_write3+0x191/0x300 [ 1452.183991][T17308] snd_pcm_oss_write3+0x1ab/0x300 [ 1452.184017][T17308] snd_pcm_oss_write2+0x2c2/0x440 [ 1452.184044][T17308] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1452.184069][T17308] ? rt_spin_unlock+0x14f/0x200 [ 1452.184088][T17308] ? rt_spin_unlock+0x160/0x200 [ 1452.184107][T17308] snd_pcm_oss_sync1+0x180/0x520 [ 1452.184127][T17308] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1452.184145][T17308] ? __pfx_default_wake_function+0x10/0x10 [ 1452.184170][T17308] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1452.184194][T17308] ? __asan_memset+0x22/0x50 [ 1452.184215][T17308] ? snd_pcm_format_set_silence+0x11c/0x2d0 [ 1452.184236][T17308] snd_pcm_oss_sync+0xab2/0xfc0 [ 1452.184265][T17308] snd_pcm_oss_release+0x102/0x250 [ 1452.184290][T17308] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1452.184315][T17308] __fput+0x461/0xa70 [ 1452.184341][T17308] task_work_run+0x1d9/0x270 [ 1452.184364][T17308] ? __pfx_task_work_run+0x10/0x10 [ 1452.184396][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.184415][T17308] exit_to_user_mode_loop+0xed/0x480 [ 1452.184434][T17308] ? rcu_is_watching+0x15/0xb0 [ 1452.184456][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.184474][T17308] do_syscall_64+0x33e/0xf80 [ 1452.184496][T17308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.184514][T17308] ? clear_bhb_loop+0x40/0x90 [ 1452.184534][T17308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.184552][T17308] RIP: 0033:0x7fb1ef84c819 [ 1452.184567][T17308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.184583][T17308] RSP: 002b:00007fffc3a53e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1452.184602][T17308] RAX: 0000000000000000 RBX: 00007fb1efac7da0 RCX: 00007fb1ef84c819 [ 1452.184615][T17308] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1452.184627][T17308] RBP: 00007fb1efac7da0 R08: 0000000000000006 R09: 0000000000000000 [ 1452.184639][T17308] R10: 00007fb1efac7cb0 R11: 0000000000000246 R12: 00000000001627d1 [ 1452.184652][T17308] R13: 00007fb1efac609c R14: 000000000016257d R15: 00007fb1efac6090 [ 1452.184673][T17308] [ 1452.185246][T17308] Kernel Offset: disabled