last executing test programs: 12m6.471433341s ago: executing program 3 (id=3611): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) 12m3.451408401s ago: executing program 3 (id=3617): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x39000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000240), 0x40000000, 0x0) splice(r2, 0x0, r1, 0x0, 0x5, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 12m2.449504121s ago: executing program 3 (id=3618): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x8814) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x0) lstat(0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 12m1.039231553s ago: executing program 3 (id=3622): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) flock(0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(&(0x7f0000000040), 0x400, 0x39f282) 11m59.676235635s ago: executing program 3 (id=3623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) 11m59.205282306s ago: executing program 3 (id=3624): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000c0000000800000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="000000000000000100060020010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x35, 0x4, 0x0, 0x6, 0xf0, 0x65, 0x0, 0x9, 0x11, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0xbd, [@broadcast]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0xf, [{@broadcast, 0xe}, {@multicast2, 0x8}]}, @cipso={0x86, 0x2f, 0x2, [{0x7, 0xa, "6d91568104264d9e"}, {0x2, 0x3, "a5"}, {0x5, 0x8, "3cb627384c2f"}, {0x7, 0xa, "12a491da04c81319"}, {0x5, 0xa, "fcb51fe425336e9a"}]}, @timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x4, [{@broadcast, 0x8}, {@remote, 0x2}, {@loopback, 0x1}, {@empty, 0x5}, {@private=0xa010100}]}, @rr={0x7, 0x1b, 0xb4, [@local, @local, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @multicast1, @remote]}, @rr={0x7, 0xb, 0xe1, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0xc, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x2}, {@loopback, 0xfff}, {@local}]}]}}, {0x4e20, 0x4e21, 0x1c, 0x0, @opaque="8bfb15063d7796e3a1ec3cd6355613157977f5ba"}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) ioctl$TCSBRKP(r2, 0x5425, 0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 11m53.670759493s ago: executing program 32 (id=3607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000700)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m48.682950608s ago: executing program 33 (id=3616): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x1, 0x20, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x17, 0x7, 0x3}}) 11m46.153380265s ago: executing program 34 (id=3621): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c", 0x90}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15", 0xcb}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m43.686310405s ago: executing program 35 (id=3624): socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="050000000c0000000800000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="000000000000000100060020010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_emit_ethernet(0xfe, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x35, 0x4, 0x0, 0x6, 0xf0, 0x65, 0x0, 0x9, 0x11, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0xbd, [@broadcast]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0xf, [{@broadcast, 0xe}, {@multicast2, 0x8}]}, @cipso={0x86, 0x2f, 0x2, [{0x7, 0xa, "6d91568104264d9e"}, {0x2, 0x3, "a5"}, {0x5, 0x8, "3cb627384c2f"}, {0x7, 0xa, "12a491da04c81319"}, {0x5, 0xa, "fcb51fe425336e9a"}]}, @timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x4, [{@broadcast, 0x8}, {@remote, 0x2}, {@loopback, 0x1}, {@empty, 0x5}, {@private=0xa010100}]}, @rr={0x7, 0x1b, 0xb4, [@local, @local, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @multicast1, @remote]}, @rr={0x7, 0xb, 0xe1, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0xc, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x2}, {@loopback, 0xfff}, {@local}]}]}}, {0x4e20, 0x4e21, 0x1c, 0x0, @opaque="8bfb15063d7796e3a1ec3cd6355613157977f5ba"}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) ioctl$TCSBRKP(r2, 0x5425, 0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 10m26.945245402s ago: executing program 1 (id=3772): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee", 0x15}, {&(0x7f00000003c0)="4673c875ca4d9cb6", 0x8}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 10m26.135310708s ago: executing program 1 (id=3775): mq_open(0x0, 0x800, 0x1be, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x40000, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 10m22.31849524s ago: executing program 1 (id=3795): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 10m22.071400105s ago: executing program 1 (id=3800): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 10m21.793817502s ago: executing program 1 (id=3804): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)}, 0x20040890) 10m19.9035927s ago: executing program 1 (id=3824): unshare(0x2040400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) 10m19.48350075s ago: executing program 36 (id=3824): unshare(0x2040400) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) 3m3.130711335s ago: executing program 6 (id=6014): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 2m59.985869303s ago: executing program 6 (id=6023): socket$alg(0x26, 0x5, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.169816509s ago: executing program 8 (id=6033): socket$alg(0x26, 0x5, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m56.135465653s ago: executing program 6 (id=6034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 2m55.62178122s ago: executing program 6 (id=6036): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000906010800000000000000000200000408000940000000090900020073797a66e21515010007"], 0x34}}, 0x40010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m55.358509787s ago: executing program 6 (id=6037): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 2m54.973480452s ago: executing program 8 (id=6040): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 2m51.985027759s ago: executing program 8 (id=6043): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x62b8, 0x4) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000180)=0x1) 2m50.177312832s ago: executing program 5 (id=6048): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) mq_open(0x0, 0x8c2, 0x30, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x80800) getsockname$packet(r7, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) 2m48.993817147s ago: executing program 6 (id=6050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x4a, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m48.142620014s ago: executing program 5 (id=6051): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 2m47.965204025s ago: executing program 5 (id=6052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) 2m47.830481329s ago: executing program 5 (id=6053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 2m46.955597703s ago: executing program 5 (id=6054): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2m44.569611292s ago: executing program 5 (id=6056): socket$alg(0x26, 0x5, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.23184801s ago: executing program 8 (id=6058): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) 2m40.569763773s ago: executing program 8 (id=6059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) 2m28.992143592s ago: executing program 37 (id=6050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x4a, &(0x7f0000000200)=ANY=[], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m28.644188804s ago: executing program 38 (id=6056): socket$alg(0x26, 0x5, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.425048428s ago: executing program 39 (id=6059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) 12.049488983s ago: executing program 7 (id=6356): request_key(&(0x7f0000000480)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20050800) getpid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="1e6f0cc07826ed41ffc934f8d11edaaa088b", 0x12}, {&(0x7f0000000600)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360716db10d69eb69fbb37b4fe035bbb09587304851d9e210a48ab7f57e0bb22a9def8b589b7a78b3b6fd69f62fc40acf7772df3e5a5c865b64d854f7c56e8bdcc09fdf67e33877bf9e37c4f2a6d3dda4c2ba1bf16b5d3612ad5d71079a4e3752d0b0769d18e40fc724898caee2e3e3d1ce338d118a208aa9fa2f27e273ae80be929e182ea5f6c3543cc537681b397dbd688a7f45739198964ebe7563b3351f3410f1a6cacd134c799660d0b8e3a3daa34f6cce", 0xf3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c156", 0x7b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 10.834028135s ago: executing program 0 (id=6357): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xfff2) 10.557602977s ago: executing program 0 (id=6359): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 10.437383504s ago: executing program 7 (id=6361): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 10.333621459s ago: executing program 0 (id=6363): timer_create(0x3, 0x0, &(0x7f0000000300)) ptrace$setsig(0x4203, 0x0, 0xfffffa61, &(0x7f0000000000)={0x14, 0xc, 0x4}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xfff2) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 10.275821234s ago: executing program 7 (id=6365): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000004000f00000f80000e0000f0"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000854) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x20}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 6.190933715s ago: executing program 2 (id=6370): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f00000009c0)={0x40, 0x15, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) 5.48542284s ago: executing program 7 (id=6372): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(r2, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000140)='1', 0x1}], 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000140)=""/210) 5.359535698s ago: executing program 9 (id=6373): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, 0x0, 0x600) 5.207089768s ago: executing program 9 (id=6374): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 5.168683319s ago: executing program 0 (id=6375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) close(r6) 5.037321293s ago: executing program 9 (id=6376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) 4.326745776s ago: executing program 4 (id=6377): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x3, 0x1, 0x4, 0x1a, "518aba4d000000000000000000000000002000"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$TUNGETVNETLE(r5, 0x80086601, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f00000009c0)={0x40, 0x15, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0xfffffffffffffe76, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) 4.04473256s ago: executing program 9 (id=6378): mkdir(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x230) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x3c) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000002100)=0xfff00000, 0x4) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002140)={0x7}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000021c0)=""/85, 0x55}, {0x0}, {0x0}, {0x0}], 0x5}, 0x5}], 0x1, 0x10022, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 3.842112989s ago: executing program 2 (id=6379): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r1, 0x3) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000000)=ANY=[], 0x0) 3.760583663s ago: executing program 9 (id=6380): unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000070400000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x2c, r6, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.367508811s ago: executing program 0 (id=6381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.166040951s ago: executing program 0 (id=6382): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x1, &(0x7f0000000180)="c2"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.150017202s ago: executing program 2 (id=6383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001840)=ANY=[], 0x158c}}, 0xc000) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x9801) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x67) sendmmsg(r3, 0x0, 0x0, 0x48010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0xfffffffc, 0x100e, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_CORR={0x10, 0x1, {0x93, 0xc34c, 0xff}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040804) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x79}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) 2.493364588s ago: executing program 2 (id=6384): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40081208, 0x0, 0x3, 0x7, 0xa15, 0x0, 0x0, 0x40}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x20440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x1000000000000001, 0x0, 0x0, 0x800000000009, 0x0, 0x0, {0x1, 0x0, 0x7, 0x1000008, 0x8, 0x1a4143c, 0x1, 0x5, 0x40, 0x2000, 0xf3, 0x0, r2, 0x80000001, 0xffffffdf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0004}]}) 2.335420538s ago: executing program 7 (id=6385): socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) 2.252595819s ago: executing program 4 (id=6386): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) io_setup(0x1000, &(0x7f0000001d00)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = eventfd2(0x0, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) io_submit(r3, 0x5, &(0x7f0000000900)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x35, r2, 0x0, 0x0, 0x6, 0x0, 0x2, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="f19b06fe7fa7d9c360a18ebb8af37b151599d2cb39263ef78fad5942873720e971f470f17c4dd98210efbc7e42cea7925352ad02d07f5c417e89862d4b8d53edf920a4ec470491dcd204d31464c0bbe93ce0b1ae4a1feed2c98e5e56fa32d555eab7ffb0e39df01c6b0c62b86ae01382c93b8e43d80cb9b0cd511b8e3d920c65a31e63c874211a9766f91510e736e63d55ecb9e6e6f55fd7cd57bcc863a383436eae1a4d1c90ed1df506e71e771bfaa223bc15d3a7c5ad5c2c87d53b78f3695828a5b5fae5ec6688d326ed4d1a54d268fd11fe27fb2c108f3b728daeb44120ce8e", 0xe1, 0xca9, 0x0, 0x2, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x5bd, r6, &(0x7f0000000640)="720a5e0fc926eedfe3f5df7c6da22de5a19cabb662a66eea567243baf3e7785fc74b60d22d3228232086d44402a6df11e5d675a89630f63aec0505af642d975f03fd9cfca3f784ba38", 0x49, 0x5a, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x9e, r2, &(0x7f0000000700)="45ba4ed2135ecbc8ed8082a5be0d497ac5000d82ca6c6ebb5dfecdcf7274fb4ba70c5c678bb89221826f972593d6448c87cb29a4006c3ba9df8aa2703175e46b99b44d6fc6ce2336bc850e48ffcd7f7743e372a2d7", 0x55, 0x8000, 0x0, 0x1, r5}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x94b, r7, &(0x7f00000007c0)="48b4f1541d559b120622b5eb251f586bfc84f51fa1ee25731c1f8583e3db006cf6cec7473aa3481a5ef4c878112d13954ae51190eca20f0c71c547e3eb48da5f2ebcfe93ee34814101ac75f992c1e04de1cea186857eff4254a9d2011e0f6ce6782acaccff4a5d58f9d38d2becd710adf4b57e6015f82b80d2a3159df7d7ae5a2e79a522995810ad04bf677e1487c31d963065b022e64af7a1519d5a0bc9b0042c432119890385103f8001e4c4de7bd2c26092d4258f8a77fe588089a66e01f86aab1a701988feb254381b2b5877ce96", 0xd0, 0x7fff}]) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14cc0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xb}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.827727958s ago: executing program 9 (id=6387): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x1, &(0x7f0000000180)="c2"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.670471693s ago: executing program 4 (id=6388): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x1}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b20009058501"], 0x0) chdir(&(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) waitid(0x1, r3, 0x0, 0x8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}}}, 0x0) 1.407995268s ago: executing program 2 (id=6389): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14cc0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xb}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.235966642s ago: executing program 2 (id=6390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 4 (id=6391): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwrite64(r0, &(0x7f0000000400), 0x0, 0x9a) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) kernel console output (not intermixed with test programs): [T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 570 seconds [ 1288.331620][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 570 seconds [ 1288.331649][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 570 seconds [ 1288.331676][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 570 seconds [ 1289.212846][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1289.292956][T22355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.363240][T22355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.377652][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.377863][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.389351][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.389533][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.431209][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1289.433606][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.449637][ T10] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1289.449665][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.449684][ T10] usb 7-1: Product: syz [ 1289.449698][ T10] usb 7-1: Manufacturer: syz [ 1289.449711][ T10] usb 7-1: SerialNumber: syz [ 1289.513389][ T10] usb 7-1: config 0 descriptor?? [ 1289.519633][ T10] cdc_ether 7-1:0.0: missing cdc header descriptor [ 1289.532882][ T10] usb 7-1: unsupported MDLM descriptors [ 1289.779357][T22811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.779705][T22811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.809252][ T10] usb 7-1: USB disconnect, device number 23 [ 1290.511151][T16677] usb 9-1: USB disconnect, device number 3 [ 1291.261182][T12698] Bluetooth: hci1: command 0x0405 tx timeout [ 1291.481035][T16705] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1291.640905][T16705] usb 7-1: Using ep0 maxpacket: 32 [ 1291.643153][T16705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 1291.643186][T16705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25859, setting to 1024 [ 1291.643227][T16705] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1291.643249][T16705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.713284][T16705] usb 7-1: config 0 descriptor?? [ 1291.716978][T22851] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1292.152404][T16705] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 1292.152442][T16705] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 1292.336153][T16705] ft260 0003:0403:6030.0012: chip code: 0002 0000 [ 1292.446961][T22355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.536781][T16705] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1292.812456][T22882] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5839'. [ 1293.610602][T16705] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 1293.999446][T16705] ft260 0003:0403:6030.0012: failed to retrieve status: -71 [ 1293.999960][T16705] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 1294.982189][ T5732] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1295.077949][T16705] usb 7-1: USB disconnect, device number 24 [ 1295.152923][ T5732] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.152957][ T5732] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.152991][ T5732] usb 10-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1295.153011][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.406585][ T5732] usb 10-1: config 0 descriptor?? [ 1296.122811][ T37] kauditd_printk_skb: 459 callbacks suppressed [ 1296.122827][ T37] audit: type=1326 audit(2000000504.208:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.122869][ T37] audit: type=1326 audit(2000000504.208:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.128634][ T37] audit: type=1326 audit(2000000504.208:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129126][ T37] audit: type=1326 audit(2000000504.208:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129169][ T37] audit: type=1326 audit(2000000504.208:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129208][ T37] audit: type=1326 audit(2000000504.208:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129246][ T37] audit: type=1326 audit(2000000504.208:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129418][ T37] audit: type=1326 audit(2000000504.208:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129624][ T37] audit: type=1326 audit(2000000504.208:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1296.129663][ T37] audit: type=1326 audit(2000000504.208:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22885 comm="syz.9.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f113bd3ca6b code=0x7ffc0000 [ 1296.556976][ T5732] playstation 0003:054C:0BA0.0013: item fetching failed at offset 0/7 [ 1296.564591][ T5732] playstation 0003:054C:0BA0.0013: Parse failed [ 1296.564669][ T5732] playstation 0003:054C:0BA0.0013: probe with driver playstation failed with error -22 [ 1296.696886][T22886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.697223][T22886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.859632][ T819] usb 10-1: USB disconnect, device number 29 [ 1297.067608][T22355] veth0_vlan: entered promiscuous mode [ 1297.181369][T22355] veth1_vlan: entered promiscuous mode [ 1297.517641][T22908] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5846'. [ 1299.315582][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1299.366192][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1299.368361][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1299.402589][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1299.406904][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1300.004759][T22926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5849'. [ 1301.151654][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.151743][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.490334][ T5599] Bluetooth: hci2: command tx timeout [ 1301.504957][T22935] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5852'. [ 1301.582224][T22939] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1302.834402][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057e60800: rx timeout, send abort [ 1302.836950][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057e60800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1303.322657][ T819] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1303.322803][ T5789] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1303.475667][ T819] usb 6-1: config 0 has no interfaces? [ 1303.475704][ T819] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1303.475726][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.478462][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.478511][ T5789] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1303.478552][ T5789] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1303.478573][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.487381][ T5789] usb 7-1: config 0 descriptor?? [ 1303.495260][ T819] usb 6-1: config 0 descriptor?? [ 1303.509660][ T5789] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1303.581031][ T5599] Bluetooth: hci2: command tx timeout [ 1305.280190][T16705] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1305.466480][T16705] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.466514][T16705] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1305.466529][T16705] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.466551][T16705] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1305.466563][T16705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.576177][ T819] usb 6-1: USB disconnect, device number 12 [ 1305.634628][T16705] usb 10-1: config 0 descriptor?? [ 1305.650056][ T5599] Bluetooth: hci2: command tx timeout [ 1305.867155][T16705] usb 10-1: USB disconnect, device number 30 [ 1306.059041][ T5732] usb 7-1: USB disconnect, device number 25 [ 1306.510045][ T5732] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1307.063908][ T5732] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.063956][ T5732] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1307.063995][ T5732] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1307.064016][ T5732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.136426][ T5732] usb 7-1: config 0 descriptor?? [ 1307.636437][ T5789] usb 7-1: USB disconnect, device number 26 [ 1307.732961][ T5599] Bluetooth: hci2: command tx timeout [ 1308.569302][T23026] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5875'. [ 1309.847765][T23029] ptrace attach of "./syz-executor exec"[17407] was attempted by "./syz-executor exec"[23029] [ 1310.315009][T23047] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1310.479814][ T5789] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1310.631375][ T5789] usb 9-1: Using ep0 maxpacket: 32 [ 1310.689581][ T5789] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.698581][ T5789] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1310.698610][ T5789] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.698628][ T5789] usb 9-1: Product: syz [ 1310.698641][ T5789] usb 9-1: Manufacturer: syz [ 1310.698654][ T5789] usb 9-1: SerialNumber: syz [ 1310.706125][ T5789] usb 9-1: config 0 descriptor?? [ 1310.709580][ T5789] cdc_ether 9-1:0.0: missing cdc header descriptor [ 1310.711335][ T5789] usb 9-1: unsupported MDLM descriptors [ 1310.929058][T23045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.929435][T23045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.958990][T16705] usb 9-1: USB disconnect, device number 4 [ 1311.122769][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1311.122797][T23052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1311.123468][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1311.123485][T23052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1311.403498][T22913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.403717][T22913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.406949][T22913] bridge_slave_0: entered allmulticast mode [ 1311.433523][T22913] bridge_slave_0: entered promiscuous mode [ 1311.450757][T22913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.451174][T22913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.451402][T22913] bridge_slave_1: entered allmulticast mode [ 1311.454024][T22913] bridge_slave_1: entered promiscuous mode [ 1312.994883][T12698] Bluetooth: hci3: command 0x0405 tx timeout [ 1313.171915][T22913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.189678][T22913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.458212][T22913] team0: Port device team_slave_0 added [ 1315.507529][T22913] team0: Port device team_slave_1 added [ 1315.508867][T23077] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1315.534032][T16677] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1315.691859][T16677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.691913][T16677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1315.691940][T16677] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.691982][T16677] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1315.692005][T16677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.713775][T16677] usb 10-1: config 0 descriptor?? [ 1316.115599][ T5732] usb 10-1: USB disconnect, device number 31 [ 1316.132706][T22913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.132722][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.132747][T22913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.156397][T22913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.156413][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.156452][T22913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.825513][T18369] bridge_slave_1: left allmulticast mode [ 1316.825547][T18369] bridge_slave_1: left promiscuous mode [ 1316.825792][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.913065][T18369] bridge_slave_0: left allmulticast mode [ 1316.915321][T18369] bridge_slave_0: left promiscuous mode [ 1316.916307][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.046512][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1317.046534][T23098] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1317.047103][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1317.047120][T23098] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1317.962186][T23124] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1318.102585][T23127] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5902'. [ 1318.352143][T16677] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1318.426154][ T32] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 600 seconds [ 1318.426198][ T32] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 600 seconds [ 1318.426223][ T32] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 600 seconds [ 1318.426250][ T32] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 600 seconds [ 1318.686694][T16677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.686729][T16677] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1318.686821][T16677] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1318.686844][T16677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.034717][T16677] usb 10-1: config 0 descriptor?? [ 1320.446350][T18369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.735363][T18369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.774796][T18369] bond0 (unregistering): Released all slaves [ 1321.043729][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1321.071760][T16677] Bluetooth: Can't get state to change to load configuration err [ 1321.071777][T16677] Bluetooth: Loading sysconfig file failed [ 1321.071815][T16677] ath3k 10-1:0.0: probe with driver ath3k failed with error -16 [ 1321.084199][T16677] usb 10-1: USB disconnect, device number 32 [ 1321.177313][T22913] hsr_slave_0: entered promiscuous mode [ 1321.181125][T22913] hsr_slave_1: entered promiscuous mode [ 1321.182553][T22913] debugfs: 'hsr0' already exists in 'hsr' [ 1321.182577][T22913] Cannot create hsr debugfs directory [ 1321.735647][T18369] hsr_slave_0: left promiscuous mode [ 1321.749535][T18369] hsr_slave_1: left promiscuous mode [ 1321.750675][T18369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.807185][T18369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.921256][T18369] veth1_vlan: left promiscuous mode [ 1321.921443][T18369] veth0_vlan: left promiscuous mode [ 1321.945231][ T37] kauditd_printk_skb: 114 callbacks suppressed [ 1321.945248][ T37] audit: type=1326 audit(2000000530.029:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1321.945713][ T37] audit: type=1326 audit(2000000530.029:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1321.948692][ T37] audit: type=1326 audit(2000000530.029:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc21d7e159 code=0x7ffc0000 [ 1322.032483][ T37] audit: type=1326 audit(2000000530.119:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1322.035735][ T37] audit: type=1326 audit(2000000530.119:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1322.037774][ T37] audit: type=1326 audit(2000000530.119:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc21d7e159 code=0x7ffc0000 [ 1322.038202][ T37] audit: type=1326 audit(2000000530.119:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1322.039319][ T37] audit: type=1326 audit(2000000530.119:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1322.043251][ T37] audit: type=1326 audit(2000000530.129:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc21d7e159 code=0x7ffc0000 [ 1322.051301][ T37] audit: type=1326 audit(2000000530.139:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23152 comm="syz.8.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1322.069257][T16677] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1322.221528][T16677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.221559][T16677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.221610][T16677] usb 7-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1322.221632][T16677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.241265][T16677] usb 7-1: config 0 descriptor?? [ 1322.682620][ T818] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1322.875237][T16677] playstation 0003:054C:0BA0.0014: item fetching failed at offset 0/7 [ 1322.877459][T16677] playstation 0003:054C:0BA0.0014: Parse failed [ 1322.877503][T16677] playstation 0003:054C:0BA0.0014: probe with driver playstation failed with error -22 [ 1323.083613][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.093621][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.516536][T16677] usb 7-1: USB disconnect, device number 27 [ 1327.657204][ T37] kauditd_printk_skb: 551 callbacks suppressed [ 1327.657216][ T37] audit: type=1326 audit(2000000535.740:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23184 comm="syz.8.5922" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x0 [ 1329.026567][T18369] team0 (unregistering): Port device team_slave_1 removed [ 1329.119856][T18369] team0 (unregistering): Port device team_slave_0 removed [ 1330.091977][T23185] tipc: Started in network mode [ 1330.092008][T23185] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 1330.131392][T23185] tipc: Enabled bearer , priority 10 [ 1330.688712][T12698] Bluetooth: hci2: command 0x0405 tx timeout [ 1330.922564][ T37] audit: type=1326 audit(2000000539.010:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc21d7e159 code=0x7ffc0000 [ 1330.938759][ T37] audit: type=1326 audit(2000000539.010:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938809][ T37] audit: type=1326 audit(2000000539.010:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938848][ T37] audit: type=1326 audit(2000000539.020:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938882][ T37] audit: type=1326 audit(2000000539.020:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938917][ T37] audit: type=1326 audit(2000000539.020:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938959][ T37] audit: type=1326 audit(2000000539.020:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.938996][ T37] audit: type=1326 audit(2000000539.020:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x7ffc0000 [ 1330.939031][ T37] audit: type=1326 audit(2000000539.020:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23210 comm="syz.8.5930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc21d7e159 code=0x7ffc0000 [ 1331.201949][ T5732] tipc: Node number set to 9349802 [ 1333.305990][ T5910] IPVS: starting estimator thread 0... [ 1333.508784][T23250] IPVS: using max 15 ests per chain, 36000 per kthread [ 1334.863079][ T37] kauditd_printk_skb: 138 callbacks suppressed [ 1334.863091][ T37] audit: type=1326 audit(2000000542.950:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23257 comm="syz.8.5939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc21ddcdd9 code=0x0 [ 1335.090390][T23258] tipc: Enabling of bearer rejected, already enabled [ 1335.108715][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1337.300187][ T818] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1337.448419][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1337.492620][ T818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.492647][ T818] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1337.492696][ T818] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1337.492720][ T818] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.534040][ T818] usb 9-1: config 0 descriptor?? [ 1337.792037][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.792064][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1337.792117][ T10] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1337.792194][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.866929][ T10] usb 7-1: config 0 descriptor?? [ 1338.622953][ T10] Bluetooth: Can't get state to change to load configuration err [ 1338.622972][ T10] Bluetooth: Loading sysconfig file failed [ 1338.623066][ T10] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 1338.623824][ T818] Bluetooth: Can't get state to change to load configuration err [ 1338.623837][ T818] Bluetooth: Loading sysconfig file failed [ 1338.623868][ T818] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 1338.634598][ T818] usb 9-1: USB disconnect, device number 6 [ 1338.637491][ T10] usb 7-1: USB disconnect, device number 28 [ 1342.067193][ T5599] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1345.245508][T23356] bridge_slave_0: default FDB implementation only supports local addresses [ 1346.281573][T22913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1346.450117][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1346.887435][T22913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1346.944386][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1346.947466][T22913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1347.093772][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1347.162806][T22913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1347.190427][T22913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1347.888898][T22913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.027369][T22913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.091401][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.091554][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.125089][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.125163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.488417][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 630 seconds [ 1348.488461][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 630 seconds [ 1348.488494][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 630 seconds [ 1348.488522][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 630 seconds [ 1350.549807][T22913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.588174][ T5732] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1353.364211][ T5732] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.364267][ T5732] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1353.364294][ T5732] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.364336][ T5732] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1353.364358][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.465235][ T5732] usb 10-1: config 0 descriptor?? [ 1353.946326][ T5732] usb 10-1: USB disconnect, device number 33 [ 1354.359909][T22913] veth0_vlan: entered promiscuous mode [ 1354.394539][T22913] veth1_vlan: entered promiscuous mode [ 1354.625016][T22913] veth0_macvtap: entered promiscuous mode [ 1354.631505][T22913] veth1_macvtap: entered promiscuous mode [ 1357.064871][T23531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5995'. [ 1357.077276][T22913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.094495][T22913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.136276][ T3819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.168338][ T3819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.189973][ T3851] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.203511][T23517] can: request_module (can-proto-4) failed. [ 1357.230403][ T3851] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.680511][T12698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1358.737345][ T5732] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1358.743695][T12698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1358.745376][T12698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1358.766107][T12698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1358.768790][T12698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1358.925334][ T5732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.925389][ T5732] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1358.925432][ T5732] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1358.925455][ T5732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.979516][ T5732] usb 6-1: config 0 descriptor?? [ 1359.003242][ T5732] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1360.221812][T23565] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6005'. [ 1360.304360][ T819] usb 6-1: USB disconnect, device number 13 [ 1360.399454][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6006'. [ 1361.088759][ T5599] Bluetooth: hci1: command tx timeout [ 1361.705784][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.705853][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.167405][T23572] team0: Port device team_slave_0 removed [ 1362.929383][ T819] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1363.173863][ T5599] Bluetooth: hci1: command tx timeout [ 1363.272850][ T819] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.272884][ T819] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1363.272908][ T819] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1363.272920][ T819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.275763][ T819] usb 9-1: config 0 descriptor?? [ 1363.343194][ T819] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1363.646633][T18371] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.106876][ T5910] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1364.338200][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.338217][ T5910] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1364.338245][ T5910] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1364.338258][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.361097][ T5910] usb 10-1: config 0 descriptor?? [ 1364.625051][ T5910] Bluetooth: Can't get state to change to load ram patch err [ 1364.625076][ T5910] Bluetooth: Loading patch file failed [ 1364.625101][ T5910] ath3k 10-1:0.0: probe with driver ath3k failed with error -71 [ 1364.651529][ T5910] usb 10-1: USB disconnect, device number 34 [ 1365.051848][T18371] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.246774][T12698] Bluetooth: hci1: command tx timeout [ 1365.668535][ T5865] usb 9-1: USB disconnect, device number 7 [ 1365.746101][T18371] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.319716][ T103] Bluetooth: hci2: Frame reassembly failed (-84) [ 1367.327149][T16588] Bluetooth: hci1: command 0x0419 tx timeout [ 1367.441955][T23640] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1367.723799][T18371] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.942883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025352c00: rx timeout, send abort [ 1368.943072][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025352c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1369.330465][T12698] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1369.486189][T12698] Bluetooth: hci1: command 0x0419 tx timeout [ 1370.039812][T18371] bridge_slave_1: left allmulticast mode [ 1370.039846][T18371] bridge_slave_1: left promiscuous mode [ 1370.040250][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.124525][T18371] bridge_slave_0: left allmulticast mode [ 1370.124549][T18371] bridge_slave_0: left promiscuous mode [ 1370.124715][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.462181][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1371.185068][ T5732] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1371.376571][ T5732] usb 6-1: Using ep0 maxpacket: 16 [ 1371.378164][ T5732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.378194][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1371.378209][ T5732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1371.378220][ T5732] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1371.378232][ T5732] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1371.379231][ T5732] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1371.379245][ T5732] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1371.379256][ T5732] usb 6-1: Manufacturer: syz [ 1371.385978][ T5732] usb 6-1: config 0 descriptor?? [ 1371.818809][ T5732] rc_core: IR keymap rc-hauppauge not found [ 1371.818827][ T5732] Registered IR keymap rc-empty [ 1371.819012][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1371.859756][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1371.888552][ T5732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1371.890323][ T5732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 1371.956743][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1371.976386][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1371.997047][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.016389][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.036552][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.058214][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.086370][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.106420][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.138287][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.156350][ T5732] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1372.200658][ T5732] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1372.201702][ T5732] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1372.399057][T18371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.537830][T18371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.616270][T18371] bond0 (unregistering): Released all slaves [ 1372.860469][T23687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6037'. [ 1373.201921][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1373.984316][T23552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.984531][T23552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.985001][T23552] bridge_slave_0: entered allmulticast mode [ 1374.037730][T23552] bridge_slave_0: entered promiscuous mode [ 1374.471927][T18371] hsr_slave_0: left promiscuous mode [ 1374.519284][T18371] hsr_slave_1: left promiscuous mode [ 1374.523966][T18371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.523985][T18371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.086920][T18371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.087000][T18371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.969288][T18371] veth1_macvtap: left promiscuous mode [ 1376.970050][T18371] veth0_macvtap: left promiscuous mode [ 1376.971395][T18371] veth1_vlan: left promiscuous mode [ 1377.039470][T18371] veth0_vlan: left promiscuous mode [ 1377.187019][T23745] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1378.566184][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 660 seconds [ 1378.566228][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 660 seconds [ 1378.566257][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 660 seconds [ 1378.566284][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 660 seconds [ 1381.183021][T18371] team0 (unregistering): Port device team_slave_1 removed [ 1381.289317][T18371] team0 (unregistering): Port device team_slave_0 removed [ 1382.080895][T23552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.081010][T23552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.081285][T23552] bridge_slave_1: entered allmulticast mode [ 1382.122149][T23552] bridge_slave_1: entered promiscuous mode [ 1382.656924][T23552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.721535][T23552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.982911][T23552] team0: Port device team_slave_0 added [ 1382.992127][T23552] team0: Port device team_slave_1 added [ 1385.433162][T23552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.433174][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.433190][T23552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.440355][T23552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.440371][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.440396][T23552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.659655][T23552] hsr_slave_0: entered promiscuous mode [ 1396.699147][T23552] hsr_slave_1: entered promiscuous mode [ 1396.714337][T23552] debugfs: 'hsr0' already exists in 'hsr' [ 1396.714364][T23552] Cannot create hsr debugfs directory [ 1397.748324][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1398.421543][T16588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1398.480290][T16588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1398.494080][T16588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1398.523994][T16588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1398.539555][T16588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1399.150271][T12698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1399.159862][T12698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1399.192820][T12698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1399.261355][T12698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1399.314511][T12698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1400.858644][T16588] Bluetooth: hci2: command tx timeout [ 1401.284676][ T5732] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1401.564319][T12698] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1401.572778][ T5732] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1401.572804][ T5732] usb 10-1: config 0 has no interface number 0 [ 1401.572832][ T5732] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1401.572914][ T5732] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1401.572937][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.599783][ T5732] usb 10-1: config 0 descriptor?? [ 1401.732969][T12698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1401.811955][ T5732] usb 10-1: selecting invalid altsetting 1 [ 1401.817016][T12698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1401.852281][T12698] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1401.858931][T12698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1401.978378][T12698] Bluetooth: hci4: command tx timeout [ 1402.421567][ T5732] dvb_ttusb_budget: ttusb_init_controller: error [ 1402.422985][ T5732] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1402.925886][T16588] Bluetooth: hci2: command tx timeout [ 1403.716981][ T5732] DVB: Unable to find symbol cx22700_attach() [ 1403.815209][ T5732] DVB: Unable to find symbol tda10046_attach() [ 1403.815278][ T5732] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1403.822490][ T5732] usb 10-1: USB disconnect, device number 35 [ 1404.069475][T16588] Bluetooth: hci4: command tx timeout [ 1404.081485][ T5865] usb 6-1: USB disconnect, device number 14 [ 1404.248624][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1404.450163][T16588] Bluetooth: hci5: command tx timeout [ 1405.001698][T18369] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.004487][T16588] Bluetooth: hci2: command tx timeout [ 1406.634449][T12698] Bluetooth: hci4: command tx timeout [ 1406.634484][T12698] Bluetooth: hci5: command tx timeout [ 1407.084517][ T5599] Bluetooth: hci2: command tx timeout [ 1407.209602][T18369] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.606076][T23857] vlan2: entered promiscuous mode [ 1407.606091][T23857] bond0: entered promiscuous mode [ 1407.606099][T23857] bond_slave_0: entered promiscuous mode [ 1407.606229][T23857] bond_slave_1: entered promiscuous mode [ 1407.892274][T18369] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.257101][T18369] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.646947][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 690 seconds [ 1408.646990][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 690 seconds [ 1408.647018][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 690 seconds [ 1408.647044][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 690 seconds [ 1408.695745][T12698] Bluetooth: hci4: command tx timeout [ 1408.695807][ T5599] Bluetooth: hci5: command 0x040f tx timeout [ 1409.362716][T23552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1409.388806][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.553724][T23552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1409.602461][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1409.622822][T23552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1409.660363][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1409.849737][T23552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1409.948850][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1410.646045][T18369] bridge_slave_1: left allmulticast mode [ 1410.646079][T18369] bridge_slave_1: left promiscuous mode [ 1410.646319][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.748200][T18369] bridge_slave_0: left allmulticast mode [ 1410.748223][T18369] bridge_slave_0: left promiscuous mode [ 1410.748402][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.765597][ T5599] Bluetooth: hci5: command 0x040f tx timeout [ 1411.774657][T18369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.835244][T18369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.877837][T18369] bond0 (unregistering): Released all slaves [ 1412.311164][T23797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.311268][T23797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.311432][T23797] bridge_slave_0: entered allmulticast mode [ 1412.319179][T23797] bridge_slave_0: entered promiscuous mode [ 1413.307482][ T5599] Bluetooth: hci5: command 0x040f tx timeout [ 1413.307673][ T4965] udevd[4965]: worker [5597] /devices/virtual/block/nbd3 timeout; kill it [ 1413.307766][ T4965] udevd[4965]: seq 18298 '/devices/virtual/block/nbd3' killed [ 1413.602959][T23796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.603026][T23796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.603217][T23796] bridge_slave_0: entered allmulticast mode [ 1413.626583][T23796] bridge_slave_0: entered promiscuous mode [ 1413.630037][T23797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.630147][T23797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.630345][T23797] bridge_slave_1: entered allmulticast mode [ 1413.632977][T23797] bridge_slave_1: entered promiscuous mode [ 1413.680600][T23796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.680683][T23796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.680882][T23796] bridge_slave_1: entered allmulticast mode [ 1413.726022][T23796] bridge_slave_1: entered promiscuous mode [ 1413.975566][T23797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.258675][T23796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.286100][T23797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.315300][T23820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.315520][T23820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.423717][T23820] bridge_slave_0: entered allmulticast mode [ 1414.432928][T23820] bridge_slave_0: entered promiscuous mode [ 1414.456794][T23796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.474443][T23820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.474556][T23820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.474741][T23820] bridge_slave_1: entered allmulticast mode [ 1414.476886][T23820] bridge_slave_1: entered promiscuous mode [ 1414.704142][T18369] hsr_slave_0: left promiscuous mode [ 1414.725492][T18369] hsr_slave_1: left promiscuous mode [ 1414.727760][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.727786][T18369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.776126][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.776154][T18369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.871954][T18369] veth1_macvtap: left promiscuous mode [ 1414.872061][T18369] veth0_macvtap: left promiscuous mode [ 1414.872310][T18369] veth1_vlan: left promiscuous mode [ 1414.895166][T18369] veth0_vlan: left promiscuous mode [ 1415.454826][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6078'. [ 1415.454878][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6078'. [ 1415.944480][T18369] team0 (unregistering): Port device team_slave_1 removed [ 1416.237502][T23797] team0: Port device team_slave_0 added [ 1416.279008][T23796] team0: Port device team_slave_0 added [ 1416.496521][T23797] team0: Port device team_slave_1 added [ 1416.508735][T23820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.521212][T23796] team0: Port device team_slave_1 added [ 1416.588829][T23820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.814375][T23797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.814392][T23797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.814416][T23797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.897564][T23796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.897575][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.897590][T23796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.898822][T23797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.898835][T23797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.898859][T23797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.915026][T23820] team0: Port device team_slave_0 added [ 1416.916087][T23796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.916100][T23796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.916125][T23796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.137817][T23820] team0: Port device team_slave_1 added [ 1417.412003][T23820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.412019][T23820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.412044][T23820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.723454][T23820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.723470][T23820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.723494][T23820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.863367][T23797] hsr_slave_0: entered promiscuous mode [ 1417.939087][T23797] hsr_slave_1: entered promiscuous mode [ 1417.943141][T23797] debugfs: 'hsr0' already exists in 'hsr' [ 1417.943167][T23797] Cannot create hsr debugfs directory [ 1418.014981][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1418.019798][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1418.072916][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1418.091106][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1418.100616][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1418.105492][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1418.251852][T23796] hsr_slave_0: entered promiscuous mode [ 1418.260202][T23796] hsr_slave_1: entered promiscuous mode [ 1418.261147][T23796] debugfs: 'hsr0' already exists in 'hsr' [ 1418.261170][T23796] Cannot create hsr debugfs directory [ 1418.554092][T23820] hsr_slave_0: entered promiscuous mode [ 1418.555480][T23820] hsr_slave_1: entered promiscuous mode [ 1418.556490][T23820] debugfs: 'hsr0' already exists in 'hsr' [ 1418.556512][T23820] Cannot create hsr debugfs directory [ 1418.965428][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038a6a800: rx timeout, send abort [ 1418.965666][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888038a6a800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1419.502020][T18369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.012007][T18369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.283669][ T5599] Bluetooth: hci3: command tx timeout [ 1421.906174][T18369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.098733][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1422.363576][ T5599] Bluetooth: hci3: command tx timeout [ 1422.369058][T18369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.691032][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.691076][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.741184][T23796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.445534][T23796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.563805][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1423.727289][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.727315][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1423.727366][ T10] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1423.727390][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.770344][ T10] usb 10-1: config 0 descriptor?? [ 1423.926189][T23796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.141589][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1424.245094][ T10] Bluetooth: Can't get state to change to load configuration err [ 1424.245113][ T10] Bluetooth: Loading sysconfig file failed [ 1424.245151][ T10] ath3k 10-1:0.0: probe with driver ath3k failed with error -16 [ 1424.283603][ T10] usb 10-1: USB disconnect, device number 36 [ 1424.397896][T23796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.453596][ T5599] Bluetooth: hci3: command tx timeout [ 1424.654790][T23985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.654958][T23985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.655169][T23985] bridge_slave_0: entered allmulticast mode [ 1424.658332][T23985] bridge_slave_0: entered promiscuous mode [ 1424.747165][T23985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.747354][T23985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.748891][T23985] bridge_slave_1: entered allmulticast mode [ 1424.752205][T23985] bridge_slave_1: entered promiscuous mode [ 1425.393775][T18369] bridge_slave_1: left allmulticast mode [ 1425.393811][T18369] bridge_slave_1: left promiscuous mode [ 1425.394063][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.454300][T18369] bridge_slave_0: left allmulticast mode [ 1425.454324][T18369] bridge_slave_0: left promiscuous mode [ 1425.454475][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.253889][T18369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.335108][T18369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.355354][T18369] bond0 (unregistering): Released all slaves [ 1426.523347][ T5599] Bluetooth: hci3: command tx timeout [ 1426.837568][T23985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.838645][T18369] tipc: Disabling bearer [ 1426.903705][T18369] tipc: Left network mode [ 1426.909453][T23985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.510907][T23985] team0: Port device team_slave_0 added [ 1427.786349][T23985] team0: Port device team_slave_1 added [ 1427.787823][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1428.384556][T23985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.384573][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.384597][T23985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.418680][T23985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.418696][T23985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.418723][T23985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.659742][T18369] hsr_slave_0: left promiscuous mode [ 1428.694130][T18369] hsr_slave_1: left promiscuous mode [ 1428.694886][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.694902][T18369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.744449][T18369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.744469][T18369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.870489][T24079] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6091'. [ 1429.043712][T18369] veth1_macvtap: left promiscuous mode [ 1429.045893][T18369] veth0_macvtap: left promiscuous mode [ 1429.048835][T18369] veth1_vlan: left promiscuous mode [ 1429.049725][T18369] veth0_vlan: left promiscuous mode [ 1430.356158][T18369] team0 (unregistering): Port device team_slave_1 removed [ 1430.413725][T18369] team0 (unregistering): Port device team_slave_0 removed [ 1431.014123][T23820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.619069][T23985] hsr_slave_0: entered promiscuous mode [ 1431.632161][T23985] hsr_slave_1: entered promiscuous mode [ 1431.656110][T23985] debugfs: 'hsr0' already exists in 'hsr' [ 1431.656143][T23985] Cannot create hsr debugfs directory [ 1432.301236][T23820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.105346][T23820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.296624][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1433.333596][T18369] IPVS: stop unused estimator thread 0... [ 1433.560608][T23820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.310506][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1435.134249][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1435.183084][T23796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1435.227459][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.423028][T23796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1435.465458][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1435.492987][T23796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1435.522567][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1435.531980][T23796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1435.566636][T23796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1435.852853][ T5910] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1436.005991][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1436.008165][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1436.010645][ T5910] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1436.010671][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.010692][ T5910] usb 10-1: Product: syz [ 1436.010713][ T5910] usb 10-1: Manufacturer: syz [ 1436.010727][ T5910] usb 10-1: SerialNumber: syz [ 1436.019592][ T5910] usb 10-1: config 0 descriptor?? [ 1436.038305][ T5910] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1436.038338][ T5910] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1436.445761][T23797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1436.485556][T23797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1436.522128][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1436.533764][T23797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1436.560066][T23797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1436.638065][ T5910] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1436.661091][T23797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1436.727650][T23797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1436.745470][T23796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.750662][T23797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1436.789128][T23797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1437.065221][ T5910] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1437.065252][ T5910] em28xx 10-1:0.0: board has no eeprom [ 1437.286833][T18369] bridge_slave_1: left allmulticast mode [ 1437.286863][T18369] bridge_slave_1: left promiscuous mode [ 1437.287073][T18369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.374351][T18369] bridge_slave_0: left allmulticast mode [ 1437.374383][T18369] bridge_slave_0: left promiscuous mode [ 1437.382856][T18369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.005803][T18369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.129312][T18369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.165083][T24138] em28xx 10-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 1438.202668][ T5910] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1438.202697][ T5910] em28xx 10-1:0.0: dvb set to bulk mode. [ 1438.202748][ T819] em28xx 10-1:0.0: Binding DVB extension [ 1438.220992][ T5910] usb 10-1: USB disconnect, device number 37 [ 1438.226594][ T5910] em28xx 10-1:0.0: Disconnecting em28xx [ 1438.264178][T18369] bond0 (unregistering): Released all slaves [ 1438.327180][ T819] em28xx 10-1:0.0: Registering input extension [ 1438.329090][ T5910] em28xx 10-1:0.0: Closing input extension [ 1438.447657][T23796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.530302][ T5910] em28xx 10-1:0.0: Freeing device [ 1438.770466][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 720 seconds [ 1438.770519][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 720 seconds [ 1438.770548][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 720 seconds [ 1438.770576][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 720 seconds [ 1439.962998][T18369] hsr_slave_0: left promiscuous mode [ 1439.982588][T18369] hsr_slave_1: left promiscuous mode [ 1439.983195][T18369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1440.013555][T18369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1440.303214][T18369] team0 (unregistering): Port device team_slave_1 removed [ 1440.343059][T18369] team0 (unregistering): Port device team_slave_0 removed [ 1440.521964][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.530590][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.286958][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.287118][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.250597][T23797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.469713][T23797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.561610][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.561705][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.619737][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.619811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.074107][T23797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1444.287050][T23820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1445.543935][T23820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1445.578450][T23820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1445.883424][T23820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1445.910158][T23820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1445.990173][T23820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1446.026633][T23796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.029266][T23820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1446.109253][T23820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.679137][T23797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.681937][T23985] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1446.727129][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1446.739679][T23985] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1446.768831][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1446.771887][T23796] veth0_vlan: entered promiscuous mode [ 1446.786450][T23985] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1446.817927][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1446.850954][T23985] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1446.876826][T23985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.961132][T23796] veth1_vlan: entered promiscuous mode [ 1447.147604][T23797] veth0_vlan: entered promiscuous mode [ 1447.195581][T23820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.277142][T23796] veth0_macvtap: entered promiscuous mode [ 1447.365837][T23797] veth1_vlan: entered promiscuous mode [ 1447.393254][T23796] veth1_macvtap: entered promiscuous mode [ 1447.628486][T23820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.697445][T23796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1447.705771][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.706563][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.760132][T23796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1447.771316][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.771421][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.835972][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.845943][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.854606][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.921625][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.929374][T23985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.985131][T23797] veth0_macvtap: entered promiscuous mode [ 1448.226091][T23797] veth1_macvtap: entered promiscuous mode [ 1448.506282][T23985] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.862270][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.865045][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.017344][T23797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.079759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.080366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.494874][T23797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.572054][T21424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.572074][T21424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.665023][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.696794][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.731314][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.767451][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.205600][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.205619][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.150384][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.150404][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.501198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.501236][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.540088][ T37] audit: type=1326 audit(2000000660.627:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.540553][ T37] audit: type=1326 audit(2000000660.627:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.541511][ T37] audit: type=1326 audit(2000000660.627:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe72cae159 code=0x7ffc0000 [ 1452.558346][ T37] audit: type=1326 audit(2000000660.637:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe72cae159 code=0x7ffc0000 [ 1452.558403][ T37] audit: type=1326 audit(2000000660.637:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.638507][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6108'. [ 1452.638524][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6108'. [ 1452.872128][ T37] audit: type=1326 audit(2000000660.937:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.911163][ T37] audit: type=1326 audit(2000000660.967:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.927195][ T37] audit: type=1326 audit(2000000661.017:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1452.962500][ T37] audit: type=1326 audit(2000000661.057:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe72cae159 code=0x7ffc0000 [ 1452.977272][ T37] audit: type=1326 audit(2000000661.067:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24382 comm="syz.2.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe72cae159 code=0x7ffc0000 [ 1454.048758][T23820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.006419][T23985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.085245][T23820] veth0_vlan: entered promiscuous mode [ 1456.137551][T23820] veth1_vlan: entered promiscuous mode [ 1456.297542][T23820] veth0_macvtap: entered promiscuous mode [ 1456.329075][T23820] veth1_macvtap: entered promiscuous mode [ 1456.366009][T23820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.425393][T23820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.455802][ T4381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.459338][ T4381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.463494][ T4381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.466229][T18371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.061982][T11870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.062003][T11870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.247720][T23985] veth0_vlan: entered promiscuous mode [ 1458.283761][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.283782][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.356506][T23985] veth1_vlan: entered promiscuous mode [ 1459.470545][T23985] veth0_macvtap: entered promiscuous mode [ 1459.530516][T23985] veth1_macvtap: entered promiscuous mode [ 1459.723698][T23985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.772553][T23985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.836198][T16874] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.837050][T16874] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.837259][T16874] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.837295][T16874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.951431][ T5718] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1460.113064][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.113081][ T5718] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1460.113109][ T5718] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1460.113122][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.173824][ T5718] usb 5-1: config 0 descriptor?? [ 1460.675186][ T5718] Bluetooth: Can't get state to change to load ram patch err [ 1460.675205][ T5718] Bluetooth: Loading patch file failed [ 1460.675243][ T5718] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1460.740844][ T5718] usb 5-1: USB disconnect, device number 53 [ 1462.786941][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.786955][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.131201][ T818] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1463.217185][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.217206][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.284200][ T818] usb 3-1: Using ep0 maxpacket: 16 [ 1463.290977][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1463.295691][ T818] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1463.295719][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.295739][ T818] usb 3-1: Product: syz [ 1463.295753][ T818] usb 3-1: Manufacturer: syz [ 1463.295767][ T818] usb 3-1: SerialNumber: syz [ 1463.335456][ T818] usb 3-1: config 0 descriptor?? [ 1463.378984][ T818] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1463.379006][ T818] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1464.057636][ T818] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1464.093241][T24521] binder_alloc: 24520: binder_alloc_buf, no vma [ 1464.387321][ T10] IPVS: starting estimator thread 0... [ 1464.471251][T24533] IPVS: using max 9 ests per chain, 21600 per kthread [ 1464.495840][ T818] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1464.495873][ T818] em28xx 3-1:0.0: board has no eeprom [ 1464.691152][T22824] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1465.812434][T22824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.812462][T22824] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1465.812514][T22824] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1465.812538][T22824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.841065][T22824] usb 8-1: config 0 descriptor?? [ 1465.971063][ T818] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1465.971092][ T818] em28xx 3-1:0.0: dvb set to bulk mode. [ 1465.972342][ T5732] em28xx 3-1:0.0: Binding DVB extension [ 1466.129358][ T10] usb 3-1: USB disconnect, device number 39 [ 1466.138315][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 1466.278904][T22824] Bluetooth: Can't get state to change to load configuration err [ 1466.278917][T22824] Bluetooth: Loading sysconfig file failed [ 1466.278943][T22824] ath3k 8-1:0.0: probe with driver ath3k failed with error -16 [ 1466.288509][T22824] usb 8-1: USB disconnect, device number 2 [ 1466.529151][ T5732] em28xx 3-1:0.0: Registering input extension [ 1466.529375][ T10] em28xx 3-1:0.0: Closing input extension [ 1466.951703][ T10] em28xx 3-1:0.0: Freeing device [ 1468.440950][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1468.642361][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1469.216751][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.246727][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1469.246757][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.246776][ T10] usb 3-1: Product: syz [ 1469.246791][ T10] usb 3-1: Manufacturer: syz [ 1469.246804][ T10] usb 3-1: SerialNumber: syz [ 1469.308302][ T10] usb 3-1: config 0 descriptor?? [ 1469.337764][ T10] cdc_ether 3-1:0.0: missing cdc header ether descriptor [ 1469.348206][ T10] usb 3-1: unsupported MDLM descriptors [ 1469.914167][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 750 seconds [ 1469.914212][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 750 seconds [ 1469.914240][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 750 seconds [ 1469.914266][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 750 seconds [ 1470.049317][ T5718] usb 3-1: USB disconnect, device number 40 [ 1470.911395][ T5718] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1470.911670][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1471.040808][ T5718] usb 10-1: device descriptor read/64, error -32 [ 1472.149580][ T5718] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1472.153175][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1472.284199][ T5718] usb 10-1: device descriptor read/64, error -32 [ 1472.392932][ T5718] usb usb10-port1: attempt power cycle [ 1472.800764][ T5718] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1472.837979][ T5718] usb 10-1: Using ep0 maxpacket: 16 [ 1472.841014][ T5718] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1472.841038][ T5718] usb 10-1: config 0 has no interface number 0 [ 1472.841081][ T5718] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1472.841105][ T5718] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1472.913068][ T5718] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1472.913087][ T5718] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1472.913098][ T5718] usb 10-1: Product: syz [ 1472.913106][ T5718] usb 10-1: SerialNumber: syz [ 1472.944803][ T5718] usb 10-1: config 0 descriptor?? [ 1473.003962][ T5718] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 1473.052656][ T5718] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input19 [ 1473.180772][ T818] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1473.253793][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.261738][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.262216][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.262433][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.262669][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.262890][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.263109][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.263331][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.263558][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.263787][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1473.330726][T16839] usb 10-1: USB disconnect, device number 40 [ 1473.330774][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1473.450921][ T818] usb 1-1: Using ep0 maxpacket: 32 [ 1473.467487][ T818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.562217][ T818] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1473.562248][ T818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.562267][ T818] usb 1-1: Product: syz [ 1473.562295][ T818] usb 1-1: Manufacturer: syz [ 1473.562310][ T818] usb 1-1: SerialNumber: syz [ 1473.666623][ T818] usb 1-1: config 0 descriptor?? [ 1473.727238][T16839] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1474.006715][T24639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.022704][T24639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.337860][ T818] cdc_ether 1-1:0.0: missing cdc header ether descriptor [ 1474.429178][ T818] usb 1-1: unsupported MDLM descriptors [ 1474.594284][ T818] usb 1-1: USB disconnect, device number 50 [ 1479.480878][T24692] kAFS: unable to lookup cell '(,c¾Ì' [ 1481.220219][T16839] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1481.260321][T24330] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1481.371129][T16839] usb 5-1: Using ep0 maxpacket: 16 [ 1481.374084][T16839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1481.379702][T16839] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1481.379719][T16839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.379730][T16839] usb 5-1: Product: syz [ 1481.379737][T16839] usb 5-1: Manufacturer: syz [ 1481.379745][T16839] usb 5-1: SerialNumber: syz [ 1481.388232][T16839] usb 5-1: config 0 descriptor?? [ 1481.398434][ T36] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1481.437657][T24330] usb 1-1: Using ep0 maxpacket: 32 [ 1481.451240][T24330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.458782][T24330] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1481.458800][T24330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.458814][T24330] usb 1-1: Product: syz [ 1481.458821][T24330] usb 1-1: Manufacturer: syz [ 1481.458829][T24330] usb 1-1: SerialNumber: syz [ 1481.525737][T24330] usb 1-1: config 0 descriptor?? [ 1481.553548][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 1481.555657][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 1481.555689][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25859, setting to 1024 [ 1481.555731][ T36] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1481.555755][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.600569][T16839] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1481.600724][T16839] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1481.631774][ T36] usb 8-1: config 0 descriptor?? [ 1481.632855][T24709] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1481.679565][T24330] cdc_ether 1-1:0.0: missing cdc header ether descriptor [ 1481.692989][T24330] usb 1-1: unsupported MDLM descriptors [ 1481.907593][T24717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.918034][T24717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.659082][T24330] usb 1-1: USB disconnect, device number 51 [ 1482.673152][T16839] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1483.386657][ T36] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 1483.386694][ T36] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 1483.488038][ T36] ft260 0003:0403:6030.0015: chip code: 0006 0000 [ 1483.571418][ T36] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1483.599479][T16839] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1483.640294][T16839] em28xx 5-1:0.0: board has no eeprom [ 1483.769479][ T36] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 1483.772790][ T36] ft260 0003:0403:6030.0015: failed to retrieve status: -5 [ 1484.125534][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.125606][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.151420][T16839] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1484.151448][T16839] em28xx 5-1:0.0: dvb set to bulk mode. [ 1484.151756][T24569] em28xx 5-1:0.0: Binding DVB extension [ 1484.345834][T16839] usb 5-1: USB disconnect, device number 54 [ 1484.353766][T16839] em28xx 5-1:0.0: Disconnecting em28xx [ 1484.390071][ T5865] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1484.433567][ T36] usb 8-1: USB disconnect, device number 3 [ 1485.602436][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.602481][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1485.602506][ T5865] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1485.602518][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.605404][ T5865] usb 3-1: config 0 descriptor?? [ 1485.630111][T24569] em28xx 5-1:0.0: Registering input extension [ 1485.633293][T16839] em28xx 5-1:0.0: Closing input extension [ 1485.968272][T24750] binder_alloc: 24749: binder_alloc_buf, no vma [ 1485.969448][ T5865] usb 3-1: USB disconnect, device number 41 [ 1485.988088][T16839] em28xx 5-1:0.0: Freeing device [ 1486.404556][T16839] IPVS: starting estimator thread 0... [ 1486.501085][T24759] IPVS: using max 9 ests per chain, 21600 per kthread [ 1487.469922][T24781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1487.974259][ T37] kauditd_printk_skb: 326 callbacks suppressed [ 1487.974276][ T37] audit: type=1326 audit(2000000696.069:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24788 comm="syz.2.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1487.978275][ T37] audit: type=1326 audit(2000000696.069:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24788 comm="syz.2.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1487.984951][ T37] audit: type=1326 audit(2000000696.069:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24788 comm="syz.2.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1488.035458][ T37] audit: type=1326 audit(2000000696.129:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24788 comm="syz.2.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x7ffc0000 [ 1488.357074][ T37] audit: type=1326 audit(2000000696.449:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1488.358145][ T37] audit: type=1326 audit(2000000696.449:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1488.359036][ T37] audit: type=1326 audit(2000000696.449:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f113bcde159 code=0x7ffc0000 [ 1488.365409][ T37] audit: type=1326 audit(2000000696.449:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1488.369983][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1488.374607][ T37] audit: type=1326 audit(2000000696.469:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1488.384607][ T37] audit: type=1326 audit(2000000696.479:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.9.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x7ffc0000 [ 1488.390374][ T36] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1488.557660][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1488.568453][ T36] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 1488.568479][ T36] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 1488.568500][ T36] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1488.569014][ T36] usb 3-1: config 129 has no interface number 0 [ 1488.569034][ T36] usb 3-1: config 129 has no interface number 1 [ 1488.569567][ T36] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1488.569598][ T36] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1488.570013][ T36] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1488.570042][ T36] usb 3-1: config 129 interface 135 has no altsetting 0 [ 1488.570061][ T36] usb 3-1: config 129 interface 5 has no altsetting 0 [ 1488.581725][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1488.581739][ T10] usb 8-1: config 0 has no interface number 0 [ 1488.581757][ T10] usb 8-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 1488.581792][ T10] usb 8-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1488.581820][ T10] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1488.581851][ T10] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1488.581874][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.610610][ T36] usb 3-1: string descriptor 0 read error: -22 [ 1488.610758][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1488.610781][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.757525][ T10] usb 8-1: config 0 descriptor?? [ 1488.810096][ T36] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1488.810172][ T36] usb 3-1: MIDIStreaming interface descriptor not found [ 1488.835114][ T10] usb 8-1: selecting invalid altsetting 1 [ 1488.835291][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1488.835306][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1489.371990][ T10] DVB: Unable to find symbol cx22700_attach() [ 1489.509787][T16839] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1489.807551][ T10] DVB: Unable to find symbol tda10046_attach() [ 1489.807567][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1490.739002][ T10] usb 8-1: USB disconnect, device number 4 [ 1492.407294][ T36] usb 3-1: USB disconnect, device number 42 [ 1493.899595][T16839] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1494.049426][T16839] usb 5-1: Using ep0 maxpacket: 16 [ 1494.055134][T16839] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1494.055159][T16839] usb 5-1: config 0 has no interface number 0 [ 1494.055202][T16839] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1494.055228][T16839] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1494.059695][T24578] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1494.087001][T16839] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1494.087030][T16839] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1494.087063][T16839] usb 5-1: Product: syz [ 1494.087076][T16839] usb 5-1: SerialNumber: syz [ 1494.191637][T16839] usb 5-1: config 0 descriptor?? [ 1494.251621][T24578] usb 10-1: Using ep0 maxpacket: 16 [ 1494.262850][T24578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1494.273203][T24578] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1494.273232][T24578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.273251][T24578] usb 10-1: Product: syz [ 1494.273265][T24578] usb 10-1: Manufacturer: syz [ 1494.273280][T24578] usb 10-1: SerialNumber: syz [ 1494.409231][T16839] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1494.425466][T24578] usb 10-1: config 0 descriptor?? [ 1494.427356][T16839] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 1494.525489][T24578] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1494.525513][T24578] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1495.108993][T24578] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1495.479612][T24578] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1495.479633][T24578] em28xx 10-1:0.0: board has no eeprom [ 1495.708979][T24578] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1495.709008][T24578] em28xx 10-1:0.0: dvb set to bulk mode. [ 1495.711677][T16839] em28xx 10-1:0.0: Binding DVB extension [ 1496.118409][T24578] usb 10-1: USB disconnect, device number 42 [ 1496.127551][T24578] em28xx 10-1:0.0: Disconnecting em28xx [ 1496.695897][T24897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6217'. [ 1496.774585][ C1] cm109_urb_ctl_callback: 274 callbacks suppressed [ 1496.774612][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.774971][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.775179][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.775372][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.775566][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.775751][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.775934][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.776118][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.776308][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.776515][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1496.887311][T24577] usb 5-1: USB disconnect, device number 55 [ 1496.887416][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1496.962431][T16839] em28xx 10-1:0.0: Registering input extension [ 1496.975407][T24578] em28xx 10-1:0.0: Closing input extension [ 1497.140170][T24577] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1497.794083][T24913] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1498.018370][T24578] em28xx 10-1:0.0: Freeing device [ 1500.573725][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 780 seconds [ 1500.573770][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 780 seconds [ 1500.573799][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 780 seconds [ 1500.573827][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 780 seconds [ 1501.039090][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1501.190173][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1501.198335][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1501.223407][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1501.223437][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.223458][ T10] usb 5-1: Product: syz [ 1501.223472][ T10] usb 5-1: Manufacturer: syz [ 1501.223495][ T10] usb 5-1: SerialNumber: syz [ 1501.297160][ T10] usb 5-1: config 0 descriptor?? [ 1501.313082][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1501.313117][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1501.383283][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1501.734378][T24955] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6231'. [ 1502.493615][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1502.936535][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1502.936567][ T10] em28xx 5-1:0.0: board has no eeprom [ 1504.059722][T24944] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1504.118924][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1504.118953][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 1504.119289][T24330] em28xx 5-1:0.0: Binding DVB extension [ 1504.166011][ T10] usb 5-1: USB disconnect, device number 56 [ 1504.179756][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 1504.574467][T24330] em28xx 5-1:0.0: Registering input extension [ 1504.588938][ T10] em28xx 5-1:0.0: Closing input extension [ 1504.839718][ T10] em28xx 5-1:0.0: Freeing device [ 1506.391756][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1506.549291][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.549319][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1506.549373][ T10] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1506.549397][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.599292][ T10] usb 5-1: config 0 descriptor?? [ 1507.096169][ T10] Bluetooth: Can't get state to change to load ram patch err [ 1507.096189][ T10] Bluetooth: Loading patch file failed [ 1507.096227][ T10] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1507.121678][ T10] usb 5-1: USB disconnect, device number 57 [ 1507.393767][T25016] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6243'. [ 1508.315784][T25029] netlink: 185452 bytes leftover after parsing attributes in process `syz.2.6245'. [ 1510.368191][T25062] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1510.597429][T25069] tipc: Started in network mode [ 1510.597460][T25069] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 1510.597623][T25069] tipc: Enabled bearer , priority 10 [ 1510.811717][ T37] kauditd_printk_skb: 456 callbacks suppressed [ 1510.811745][ T37] audit: type=1326 audit(2000000718.850:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25068 comm="syz.2.6256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe72d0cdd9 code=0x0 [ 1511.612979][T25094] netlink: 'syz.7.6260': attribute type 1 has an invalid length. [ 1511.649758][ T5732] tipc: Node number set to 9349802 [ 1512.554929][T25120] netlink: 80 bytes leftover after parsing attributes in process `syz.9.6267'. [ 1514.748476][T24578] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1514.903036][T24578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.903093][T24578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1514.903118][T24578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.903161][T24578] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1514.903194][T24578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.926102][T24578] usb 3-1: config 0 descriptor?? [ 1515.222201][T24578] usb 3-1: USB disconnect, device number 43 [ 1516.320444][T25153] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1517.608152][ T818] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1517.781385][ T818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.781467][ T818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1517.781570][ T818] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1517.781593][ T818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.844445][ T818] usb 5-1: config 0 descriptor?? [ 1518.333222][ T818] Bluetooth: Can't get state to change to load configuration err [ 1518.333242][ T818] Bluetooth: Loading sysconfig file failed [ 1518.333278][ T818] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 1518.338325][T16839] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1518.409857][ T818] usb 5-1: USB disconnect, device number 58 [ 1518.490263][T16839] usb 1-1: Using ep0 maxpacket: 16 [ 1518.496077][T16839] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1518.496587][T16839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.496610][T16839] usb 1-1: Product: syz [ 1518.496625][T16839] usb 1-1: Manufacturer: syz [ 1518.496639][T16839] usb 1-1: SerialNumber: syz [ 1518.563689][T16839] usb 1-1: config 0 descriptor?? [ 1519.102668][T25176] netlink: 'syz.0.6287': attribute type 1 has an invalid length. [ 1519.408443][T16839] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1519.500098][T25176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1519.572059][T25177] bond1: (slave ip6gretap1): making interface the new active one [ 1519.621397][T25177] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1519.829065][T25190] veth3: entered promiscuous mode [ 1519.847805][T25190] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1519.870906][T25195] netlink: 185452 bytes leftover after parsing attributes in process `syz.7.6292'. [ 1520.201598][ T5732] usb 1-1: USB disconnect, device number 52 [ 1520.887982][ T5865] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1521.045084][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 1521.067430][ T5865] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1521.067462][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.067483][ T5865] usb 5-1: Product: syz [ 1521.067497][ T5865] usb 5-1: Manufacturer: syz [ 1521.067513][ T5865] usb 5-1: SerialNumber: syz [ 1521.097392][ T5865] usb 5-1: config 0 descriptor?? [ 1521.524544][T25201] netlink: 'syz.4.6293': attribute type 1 has an invalid length. [ 1521.953591][ T5865] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1522.182054][T25199] Bluetooth: hci4: command 0x0406 tx timeout [ 1522.202452][T25199] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.691096][T25220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6303'. [ 1522.761297][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 1522.761323][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 1522.815543][T25201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1523.022673][T25225] bond1: (slave ip6gretap1): making interface the new active one [ 1523.025870][T25225] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1523.119530][ T818] usb 5-1: USB disconnect, device number 59 [ 1523.385852][T25239] tipc: Enabling of bearer rejected, already enabled [ 1523.481402][ T37] audit: type=1326 audit(2000000731.580:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25238 comm="syz.9.6307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f113bd3cdd9 code=0x0 [ 1524.770802][T25267] can: request_module (can-proto-4) failed. [ 1526.048077][ T818] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1526.360750][ T818] usb 5-1: Using ep0 maxpacket: 16 [ 1526.638125][ T818] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1526.638156][ T818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.638176][ T818] usb 5-1: Product: syz [ 1526.638199][ T818] usb 5-1: Manufacturer: syz [ 1526.638213][ T818] usb 5-1: SerialNumber: syz [ 1526.722759][ T818] usb 5-1: config 0 descriptor?? [ 1527.157658][ T5599] Bluetooth: hci5: command 0x040f tx timeout [ 1527.177136][ T818] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1527.197776][T25308] tipc: Started in network mode [ 1527.197806][T25308] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 1527.197960][T25308] tipc: Enabled bearer , priority 10 [ 1527.201548][ T818] usb 5-1: USB disconnect, device number 60 [ 1527.374691][ T37] audit: type=1326 audit(2000000735.471:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25306 comm="syz.7.6328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fcf9dcdd9 code=0x0 [ 1527.828079][T25314] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6329'. [ 1528.288465][T24577] tipc: Node number set to 9349802 [ 1528.407661][ T5732] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1528.563834][ T5732] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.563851][ T5732] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1528.563882][ T5732] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1528.563894][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.618332][ T5732] usb 10-1: config 0 descriptor?? [ 1528.815089][T25338] kAFS: unable to lookup cell 'ÿ' [ 1528.821649][T25341] kAFS: unable to lookup cell '(,c¾Ì' [ 1528.886931][ T5865] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1529.048693][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 1529.074182][ T5732] Bluetooth: Can't get state to change to load configuration err [ 1529.074195][ T5732] Bluetooth: Loading sysconfig file failed [ 1529.074219][ T5732] ath3k 10-1:0.0: probe with driver ath3k failed with error -16 [ 1529.089941][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.096158][ T5865] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1529.096186][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.096204][ T5865] usb 1-1: Product: syz [ 1529.096219][ T5865] usb 1-1: Manufacturer: syz [ 1529.096232][ T5865] usb 1-1: SerialNumber: syz [ 1529.159483][ T5732] usb 10-1: USB disconnect, device number 43 [ 1529.194258][ T5865] usb 1-1: config 0 descriptor?? [ 1529.217264][ T5865] cdc_ether 1-1:0.0: skipping garbage [ 1529.217276][ T5865] cdc_ether 1-1:0.0: missing cdc header ether descriptor [ 1529.224617][ T5865] usb 1-1: unsupported MDLM descriptors [ 1529.405959][T25337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.406315][T25337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.408330][ T5865] usb 1-1: USB disconnect, device number 53 [ 1530.225694][T25356] tipc: Started in network mode [ 1530.225725][T25356] tipc: Node identity aaaaaaaaaa24, cluster identity 4711 [ 1530.225895][T25356] tipc: Enabled bearer , priority 10 [ 1530.486579][ T37] audit: type=1326 audit(2000000738.581:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25355 comm="syz.0.6342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90976cdd9 code=0x0 [ 1530.877428][T19596] block nbd3: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 810 seconds [ 1530.877473][T19596] block nbd3: Possible stuck request ffff8880266d01c0: control (read@1024,1024B). Runtime 810 seconds [ 1530.877499][T19596] block nbd3: Possible stuck request ffff8880266d0380: control (read@2048,1024B). Runtime 810 seconds [ 1530.878019][T19596] block nbd3: Possible stuck request ffff8880266d0540: control (read@3072,1024B). Runtime 810 seconds [ 1531.335206][T24330] tipc: Node number set to 9349802 [ 1532.095882][T25371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1534.997701][T24577] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1535.364407][T24577] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.364462][T24577] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1535.364512][T24577] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1535.364536][T24577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.750021][T24577] usb 3-1: config 0 descriptor?? [ 1535.764394][T24577] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1535.797139][ T818] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1535.947035][ T818] usb 10-1: Using ep0 maxpacket: 16 [ 1535.967279][T24330] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1536.025972][ T818] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1536.025996][ T818] usb 10-1: config 0 has no interface number 0 [ 1536.026035][ T818] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1536.026060][ T818] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1536.906147][ T818] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1536.906167][ T818] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1536.906178][ T818] usb 10-1: Product: syz [ 1536.906185][ T818] usb 10-1: SerialNumber: syz [ 1536.961219][ T818] usb 10-1: config 0 descriptor?? [ 1536.974299][ T818] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 1536.983791][T24330] usb 1-1: Using ep0 maxpacket: 16 [ 1536.997106][T24330] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1536.997134][T24330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.997154][T24330] usb 1-1: Product: syz [ 1536.997167][T24330] usb 1-1: Manufacturer: syz [ 1536.997181][T24330] usb 1-1: SerialNumber: syz [ 1537.005951][ T818] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input24 [ 1537.047351][T24577] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1537.110034][T24330] usb 1-1: config 0 descriptor?? [ 1537.189763][T16839] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1537.207040][T24577] usb 8-1: Using ep0 maxpacket: 16 [ 1537.211624][T24577] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1537.214411][T24577] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1537.214437][T24577] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.214458][T24577] usb 8-1: Product: syz [ 1537.214472][T24577] usb 8-1: Manufacturer: syz [ 1537.214486][T24577] usb 8-1: SerialNumber: syz [ 1537.300405][T24577] usb 8-1: config 0 descriptor?? [ 1537.324751][T24577] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1537.324784][T24577] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1537.564257][T25415] netlink: 'syz.0.6363': attribute type 1 has an invalid length. [ 1537.584831][T16839] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1537.850062][T24330] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1537.945432][T24577] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1538.236134][T25415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1538.413370][T24577] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1538.413403][T24577] em28xx 8-1:0.0: board has no eeprom [ 1538.630251][T25434] veth5: entered promiscuous mode [ 1538.653979][T16839] usb 1-1: USB disconnect, device number 54 [ 1538.686929][T24577] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1538.686947][T24577] em28xx 8-1:0.0: dvb set to bulk mode. [ 1538.688218][ T5865] em28xx 8-1:0.0: Binding DVB extension [ 1538.765942][T24577] usb 8-1: USB disconnect, device number 5 [ 1538.783909][T24577] em28xx 8-1:0.0: Disconnecting em28xx [ 1538.887032][ C0] cm109_urb_ctl_callback: 458 callbacks suppressed [ 1538.887058][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.887301][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.887572][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.887965][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.888175][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.888483][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.888693][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.888781][T24330] usb 3-1: USB disconnect, device number 44 [ 1538.888883][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.889675][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1538.889906][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1539.051403][ T819] usb 10-1: USB disconnect, device number 44 [ 1539.051515][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1539.071302][ T5865] em28xx 8-1:0.0: Registering input extension [ 1539.080781][T24577] em28xx 8-1:0.0: Closing input extension [ 1539.423838][ T819] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1539.872103][T25437] netlink: 'syz.4.6369': attribute type 3 has an invalid length. [ 1539.872123][T25437] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1539.907670][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6369'. [ 1539.933442][T24577] em28xx 8-1:0.0: Freeing device [ 1539.996891][T16677] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1540.161161][T16677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.161187][T16677] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1540.161235][T16677] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1540.161257][T16677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.315308][T24577] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1540.351240][T16677] usb 3-1: config 0 descriptor?? [ 1540.457123][T24577] usb 8-1: device descriptor read/64, error -71 [ 1540.564790][T25459] kAFS: unable to lookup cell 'ÿ' [ 1540.696872][T24577] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1540.781192][T16677] Bluetooth: Can't get state to change to load configuration err [ 1540.781211][T16677] Bluetooth: Loading sysconfig file failed [ 1540.781249][T16677] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 1540.810721][T16677] usb 3-1: USB disconnect, device number 45 [ 1540.837213][T24577] usb 8-1: device descriptor read/64, error -71 [ 1540.955889][T24577] usb usb8-port1: attempt power cycle [ 1541.297016][T24577] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1541.316777][ T818] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1541.319238][T24577] usb 8-1: device descriptor read/8, error -71 [ 1541.482715][ T818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.482732][ T818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1541.482763][ T818] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1541.482776][ T818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.485863][ T818] usb 5-1: config 0 descriptor?? [ 1541.618346][T24577] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1541.640430][T24577] usb 8-1: device descriptor read/8, error -71 [ 1541.749673][T24577] usb usb8-port1: unable to enumerate USB device [ 1541.957849][ T818] Bluetooth: Can't get state to change to load configuration err [ 1541.957867][ T818] Bluetooth: Loading sysconfig file failed [ 1541.957906][ T818] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 1541.994961][ T818] usb 5-1: USB disconnect, device number 61 [ 1542.596780][T16588] Bluetooth: hci3: command 0x0406 tx timeout [ 1542.836756][ T5732] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1542.890351][T25484] loop4: detected capacity change from 0 to 7 [ 1542.978501][T25484] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1542.978529][T25484] loop4: partition table partially beyond EOD, truncated [ 1542.978729][T25484] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1543.011909][ T5732] usb 1-1: Using ep0 maxpacket: 16 [ 1543.016484][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1543.041911][ T5732] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1543.041934][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.041945][ T5732] usb 1-1: Product: syz [ 1543.041952][ T5732] usb 1-1: Manufacturer: syz [ 1543.041960][ T5732] usb 1-1: SerialNumber: syz [ 1543.078917][ T5732] usb 1-1: config 0 descriptor?? [ 1543.095601][ T5732] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1543.095636][ T5732] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1543.715807][ T5732] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1543.737186][T16677] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1543.908447][T16677] usb 10-1: Using ep0 maxpacket: 16 [ 1543.913888][T16677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1543.935366][T16677] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1543.935394][T16677] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.935413][T16677] usb 10-1: Product: syz [ 1543.935426][T16677] usb 10-1: Manufacturer: syz [ 1543.935442][T16677] usb 10-1: SerialNumber: syz [ 1543.976668][T24577] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1543.981617][T16677] usb 10-1: config 0 descriptor?? [ 1544.006651][ T819] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1544.015088][T16677] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1544.015122][T16677] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1544.131560][T24577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.131616][T24577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1544.131637][T24577] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1544.131660][T24577] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1544.131673][T24577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.144973][T24577] usb 5-1: config 0 descriptor?? [ 1544.176785][ T819] usb 8-1: Using ep0 maxpacket: 8 [ 1544.179541][ T819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.179578][ T819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1544.179617][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.179644][ T819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.179669][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.179694][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.179720][ T819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1544.179747][ T819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1544.181892][ T819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.181927][ T819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1544.181973][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.182001][ T819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.182025][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.182058][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.182082][ T819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1544.182107][ T819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1544.185660][ T819] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.185697][ T819] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1544.185734][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.185761][ T819] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.185785][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.185810][ T819] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.185836][ T819] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1544.185863][ T819] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1544.196397][ T819] usb 8-1: string descriptor 0 read error: -22 [ 1544.196954][ T819] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1544.196980][ T819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.577892][ T5732] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1544.577912][ T5732] em28xx 1-1:0.0: board has no eeprom [ 1544.637612][T24577] usb 5-1: USB disconnect, device number 62 [ 1544.718423][ T819] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1544.876650][ T5732] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1544.876678][ T5732] em28xx 1-1:0.0: dvb set to bulk mode. [ 1544.919996][ T10] em28xx 1-1:0.0: Binding DVB extension [ 1544.967037][T16677] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1544.984839][ T5732] usb 1-1: USB disconnect, device number 55 [ 1544.997277][ T5732] em28xx 1-1:0.0: Disconnecting em28xx [ 1545.310089][ T10] em28xx 1-1:0.0: Registering input extension [ 1545.310877][ T5732] em28xx 1-1:0.0: Closing input extension [ 1545.397168][ T819] usb 8-1: USB disconnect, device number 10 [ 1545.430444][T16677] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1545.430478][T16677] em28xx 10-1:0.0: board has no eeprom [ 1545.575146][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.575225][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.614955][T25492] ------------[ cut here ]------------ [ 1545.614970][T25492] refcount_t: addition on 0; use-after-free. [ 1545.614985][T25492] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#1: syz.9.6387/25492 [ 1545.615157][T25492] Modules linked in: [ 1545.615182][T25492] CPU: 1 UID: 0 PID: 25492 Comm: syz.9.6387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1545.615211][T25492] Tainted: [L]=SOFTLOCKUP [ 1545.615219][T25492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.615239][T25492] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 1545.615264][T25492] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 2b 18 23 fd 48 8d 3d 74 c8 f1 0a 67 48 0f b9 3a eb 4a e8 18 18 23 fd 48 8d 3d 71 c8 f1 0a <67> 48 0f b9 3a eb 37 e8 05 18 23 fd 48 8d 3d 6e c8 f1 0a 67 48 0f [ 1545.615283][T25492] RSP: 0018:ffffc9000dd576d8 EFLAGS: 00010287 [ 1545.615300][T25492] RAX: ffffffff84a15928 RBX: 0000000000000002 RCX: 0000000000080000 [ 1545.615316][T25492] RDX: ffffc9000ee9a000 RSI: 0000000000000526 RDI: ffffffff8f9321a0 [ 1545.615331][T25492] RBP: 0000000000000000 R08: ffff888028231ec0 R09: 0000000000000005 [ 1545.615345][T25492] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c05d208 [ 1545.615359][T25492] R13: dffffc0000000000 R14: ffff88804deccc68 R15: dffffc0000000000 [ 1545.615376][T25492] FS: 00007f1139f966c0(0000) GS:ffff88812627c000(0000) knlGS:0000000000000000 [ 1545.615394][T25492] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1545.615409][T25492] CR2: 00007f46f9dca4c0 CR3: 000000005a304000 CR4: 00000000003526f0 [ 1545.615427][T25492] Call Trace: [ 1545.615434][T25492] [ 1545.615445][T25492] kobject_get+0xfa/0x120 [ 1545.615561][T25492] i2c_get_adapter+0x6d/0xa0 [ 1545.615677][T25492] i2cdev_open+0x48/0x190 [ 1545.615727][T25492] chrdev_open+0x4d0/0x5f0 [ 1545.615806][T25492] ? __pfx_chrdev_open+0x10/0x10 [ 1545.615832][T25492] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1545.615989][T25492] ? __pfx_chrdev_open+0x10/0x10 [ 1545.616015][T25492] do_dentry_open+0x83d/0x13e0 [ 1545.616119][T25492] vfs_open+0x3b/0x350 [ 1545.616144][T25492] ? path_openat+0x2e2b/0x38a0 [ 1545.616193][T25492] path_openat+0x2e43/0x38a0 [ 1545.616246][T25492] ? __pfx_path_openat+0x10/0x10 [ 1545.616271][T25492] ? kasan_save_track+0x4f/0x80 [ 1545.616331][T25492] ? kasan_save_track+0x3e/0x80 [ 1545.616348][T25492] ? __kasan_slab_alloc+0x6c/0x80 [ 1545.616368][T25492] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1545.619501][T25492] ? do_raw_spin_lock+0x12b/0x2f0 [ 1545.619616][T25492] do_file_open+0x23e/0x4a0 [ 1545.619639][T25492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1545.619699][T25492] ? __pfx_do_file_open+0x10/0x10 [ 1545.619721][T25492] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1545.619799][T25492] ? alloc_fd+0x64e/0x6c0 [ 1545.619907][T25492] do_sys_openat2+0x113/0x200 [ 1545.619940][T25492] ? __se_sys_futex+0x3a8/0x450 [ 1545.620032][T25492] ? __pfx_do_sys_openat2+0x10/0x10 [ 1545.620065][T25492] ? rcu_is_watching+0x15/0xb0 [ 1545.620154][T25492] __x64_sys_openat+0x138/0x170 [ 1545.620186][T25492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.620229][T25492] do_syscall_64+0x15f/0xf80 [ 1545.620287][T25492] ? trace_irq_disable+0x3b/0x140 [ 1545.620345][T25492] ? clear_bhb_loop+0x40/0x90 [ 1545.620371][T25492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.620391][T25492] RIP: 0033:0x7f113bcfd60e [ 1545.620416][T25492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1545.620435][T25492] RSP: 002b:00007f1139f95b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1545.620458][T25492] RAX: ffffffffffffffda RBX: 00007f1139f966c0 RCX: 00007f113bcfd60e [ 1545.620473][T25492] RDX: 0000000000000001 RSI: 00007f1139f95c00 RDI: ffffffffffffff9c [ 1545.620488][T25492] RBP: 00007f1139f95c00 R08: 0000000000000000 R09: 0000000000000000 [ 1545.620502][T25492] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1545.620516][T25492] R13: 00007f113bfb6038 R14: 00007f113bfb5fa0 R15: 00007ffc30ed57b8 [ 1545.620549][T25492] [ 1545.620561][T25492] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1545.620587][T25492] CPU: 1 UID: 0 PID: 25492 Comm: syz.9.6387 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1545.620618][T25492] Tainted: [L]=SOFTLOCKUP [ 1545.620627][T25492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.620638][T25492] Call Trace: [ 1545.620645][T25492] [ 1545.620654][T25492] vpanic+0x56c/0xa60 [ 1545.620698][T25492] ? __pfx__printk+0x10/0x10 [ 1545.620725][T25492] ? __pfx_vpanic+0x10/0x10 [ 1545.620747][T25492] ? is_bpf_text_address+0x292/0x2b0 [ 1545.620812][T25492] ? is_bpf_text_address+0x26/0x2b0 [ 1545.620843][T25492] panic+0xc5/0xd0 [ 1545.620866][T25492] ? __pfx_panic+0x10/0x10 [ 1545.620905][T25492] __warn+0x315/0x4c0 [ 1545.620940][T25492] ? refcount_warn_saturate+0x9f/0x110 [ 1545.620965][T25492] ? refcount_warn_saturate+0x9f/0x110 [ 1545.620991][T25492] __report_bug+0x29a/0x540 [ 1545.621068][T25492] ? rt_mutex_slowlock_block+0x56c/0x680 [ 1545.621095][T25492] ? refcount_warn_saturate+0x9f/0x110 [ 1545.621117][T25492] ? __pfx___report_bug+0x10/0x10 [ 1545.621153][T25492] ? rt_mutex_slowlock+0x420/0x780 [ 1545.621181][T25492] ? rt_mutex_slowlock+0x1fd/0x780 [ 1545.621210][T25492] report_bug_entry+0x19a/0x290 [ 1545.621241][T25492] ? refcount_warn_saturate+0x9f/0x110 [ 1545.621262][T25492] ? refcount_warn_saturate+0xa4/0x110 [ 1545.621282][T25492] handle_bug+0xce/0x200 [ 1545.621307][T25492] exc_invalid_op+0x1a/0x50 [ 1545.621331][T25492] asm_exc_invalid_op+0x1a/0x20 [ 1545.621352][T25492] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 1545.621375][T25492] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 2b 18 23 fd 48 8d 3d 74 c8 f1 0a 67 48 0f b9 3a eb 4a e8 18 18 23 fd 48 8d 3d 71 c8 f1 0a <67> 48 0f b9 3a eb 37 e8 05 18 23 fd 48 8d 3d 6e c8 f1 0a 67 48 0f [ 1545.621395][T25492] RSP: 0018:ffffc9000dd576d8 EFLAGS: 00010287 [ 1545.621412][T25492] RAX: ffffffff84a15928 RBX: 0000000000000002 RCX: 0000000000080000 [ 1545.621426][T25492] RDX: ffffc9000ee9a000 RSI: 0000000000000526 RDI: ffffffff8f9321a0 [ 1545.621440][T25492] RBP: 0000000000000000 R08: ffff888028231ec0 R09: 0000000000000005 [ 1545.621454][T25492] R10: 0000000000000100 R11: 0000000000000004 R12: ffffffff8c05d208 [ 1545.621468][T25492] R13: dffffc0000000000 R14: ffff88804deccc68 R15: dffffc0000000000 [ 1545.621492][T25492] ? refcount_warn_saturate+0x98/0x110 [ 1545.621520][T25492] ? refcount_warn_saturate+0x98/0x110 [ 1545.621542][T25492] kobject_get+0xfa/0x120 [ 1545.621567][T25492] i2c_get_adapter+0x6d/0xa0 [ 1545.621597][T25492] i2cdev_open+0x48/0x190 [ 1545.621628][T25492] chrdev_open+0x4d0/0x5f0 [ 1545.621656][T25492] ? __pfx_chrdev_open+0x10/0x10 [ 1545.621682][T25492] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 1545.621711][T25492] ? __pfx_chrdev_open+0x10/0x10 [ 1545.621737][T25492] do_dentry_open+0x83d/0x13e0 [ 1545.621781][T25492] vfs_open+0x3b/0x350 [ 1545.621808][T25492] ? path_openat+0x2e2b/0x38a0 [ 1545.621836][T25492] path_openat+0x2e43/0x38a0 [ 1545.621887][T25492] ? __pfx_path_openat+0x10/0x10 [ 1545.621912][T25492] ? kasan_save_track+0x4f/0x80 [ 1545.621941][T25492] ? kasan_save_track+0x3e/0x80 [ 1545.621961][T25492] ? __kasan_slab_alloc+0x6c/0x80 [ 1545.621980][T25492] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 1545.622009][T25492] ? do_raw_spin_lock+0x12b/0x2f0 [ 1545.622044][T25492] do_file_open+0x23e/0x4a0 [ 1545.622066][T25492] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1545.622090][T25492] ? __pfx_do_file_open+0x10/0x10 [ 1545.622109][T25492] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1545.622151][T25492] ? alloc_fd+0x64e/0x6c0 [ 1545.622189][T25492] do_sys_openat2+0x113/0x200 [ 1545.622219][T25492] ? __se_sys_futex+0x3a8/0x450 [ 1545.622249][T25492] ? __pfx_do_sys_openat2+0x10/0x10 [ 1545.622284][T25492] ? rcu_is_watching+0x15/0xb0 [ 1545.622318][T25492] __x64_sys_openat+0x138/0x170 [ 1545.622351][T25492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.622374][T25492] do_syscall_64+0x15f/0xf80 [ 1545.622396][T25492] ? trace_irq_disable+0x3b/0x140 [ 1545.622420][T25492] ? clear_bhb_loop+0x40/0x90 [ 1545.622443][T25492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.622462][T25492] RIP: 0033:0x7f113bcfd60e [ 1545.622480][T25492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1545.622499][T25492] RSP: 002b:00007f1139f95b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1545.622519][T25492] RAX: ffffffffffffffda RBX: 00007f1139f966c0 RCX: 00007f113bcfd60e [ 1545.622535][T25492] RDX: 0000000000000001 RSI: 00007f1139f95c00 RDI: ffffffffffffff9c [ 1545.622550][T25492] RBP: 00007f1139f95c00 R08: 0000000000000000 R09: 0000000000000000 [ 1545.622564][T25492] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1545.622578][T25492] R13: 00007f113bfb6038 R14: 00007f113bfb5fa0 R15: 00007ffc30ed57b8 [ 1545.622610][T25492] [ 1545.625930][T25492] Kernel Offset: disabled