last executing test programs: 10m1.240675318s ago: executing program 1 (id=565): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000500)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) syz_open_dev$dvb_demux(0x0, 0x5, 0x2a4000) 9m59.909590866s ago: executing program 1 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000a16000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x7d, 0x6000, @fd=r0, 0xffffffffffff0b6c, &(0x7f0000000480)=""/4096, 0x1000, 0x10, 0x1, {0x0, r3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x20000) 9m51.66429527s ago: executing program 1 (id=588): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0xbb8}}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m51.166093714s ago: executing program 1 (id=589): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 9m50.684720787s ago: executing program 1 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') chdir(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x440, 0x0) 9m50.240444655s ago: executing program 1 (id=593): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000075, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x20004000) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0xfffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000200601020000000000000000000000000c00078008001240000000010500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) 9m33.141458601s ago: executing program 32 (id=593): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000075, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x20004000) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0xfffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000200601020000000000000000000000000c00078008001240000000010500010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) 9m31.415467172s ago: executing program 4 (id=621): socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004e200000100000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) 9m28.896291384s ago: executing program 4 (id=623): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x40, 0x0, 0xd, 0xfffffffd, 0x0, 0x1, 0xfffffffc], [0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, 0x800], [0x200000, 0x5, 0x0, 0x7, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{0x7}, {0x3}, {0xffffffff, 0xa40}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0x4}, {0x20004, 0x8}, {0x9, 0xe595}, {0x4, 0x200000}, {0x164, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setresuid(0xee00, 0x0, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9m26.413358353s ago: executing program 4 (id=630): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000000)={[0x3]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x14aa, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000400)={0x0, 0x7fff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') setns(r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) 9m25.329459858s ago: executing program 4 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, 0x0) 9m24.376799703s ago: executing program 4 (id=632): socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004e200000100000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) 9m22.769038114s ago: executing program 4 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000005000/0x1000)=nil) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) listen(0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r10, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 9m6.606377148s ago: executing program 33 (id=635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r6, 0x9000aecf, &(0x7f0000005000/0x1000)=nil) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) listen(0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r10, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) 1m2.264985806s ago: executing program 6 (id=1855): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb15, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x4, 0x3b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 57.298136144s ago: executing program 6 (id=1865): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x14b000) close(r8) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 52.68800322s ago: executing program 6 (id=1875): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb15, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x4, 0x3b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff}) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 48.051325028s ago: executing program 6 (id=1883): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.current\x00', 0x275a, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x222a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 46.907094979s ago: executing program 6 (id=1887): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x14b000) close(r8) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 45.626269111s ago: executing program 6 (id=1888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb10ea9bf7b14bf31d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) 29.695005015s ago: executing program 34 (id=1888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) connect$bt_rfcomm(r1, &(0x7f0000001040)={0x1f, @any, 0x47}, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x30, 0xffffffffffffffff, 0xd925000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FIONREAD(r3, 0x5453, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb10ea9bf7b14bf31d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) 13.233000295s ago: executing program 5 (id=1952): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4060}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x3f00000000000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) 12.348589533s ago: executing program 0 (id=1953): r0 = socket$isdn(0x22, 0x2, 0x3) r1 = socket$isdn(0x22, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {0x0}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], &(0x7f0000000d40)=[0x8, 0x5, 0x0, 0x6cac, 0xfffffffffffffffb, 0x8]}], 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) r3 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_clone3(0x0, 0x0) 11.449292562s ago: executing program 0 (id=1954): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000240)={0x6, 0x30}, 0x2) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd28, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x8000000000b400, 0x5, 0x7fff, 0x0, 0x0, 0xffffffffffffd9e5}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0x9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000327bd7000fedbdf256b00000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 10.773122971s ago: executing program 5 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.635243314s ago: executing program 0 (id=1957): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x1000, 0x9, 0x2, 0x3, 0x3, "5c71060f000000000100020000002000000400", 0x100, 0x3}) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0842, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) fchmod(r1, 0x2) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup(r5) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000440)={0x20, 0x30, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket(0x2, 0x3, 0x100000001) setsockopt(r7, 0xff, 0xfffffffe, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x21, 0x7c, {0x7c, 0x1, "c85bcfcb71db26477eb40706373afee3511af6f488a1a44747957124b19827e3b43bc32a046d63b17c6d8fb04903c9e56be917c1f75218db1046a03b37547841da6fa7d393f99669cca1fdc2c8373f934715a5cf4eeee83512425cea27fae38b5a5c1493ce918c9ff9b12ec97f1e618530ba4c1d4f9c0c2ca2f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 9.016499267s ago: executing program 3 (id=1959): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='memory.current\x00', 0x275a, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x222a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.233884163s ago: executing program 2 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000005280)=[{0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0}], 0x1) sendmsg$rds(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5f090930f70e0dd038e7ff7fc6e5539b324c078b089b32333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f347cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea56777e001cd34e5cb2f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf054135bbafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd731a0bfc1cb1a4c78f9ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b01979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e49336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba80900000000000000d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.233703994s ago: executing program 3 (id=1962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x407, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='\x00@', 0x2}, {&(0x7f0000000140)="8c889ff2e6fd4508d2c7e4f03e42", 0xe}], 0x2}, 0x4) 5.323852861s ago: executing program 2 (id=1963): r0 = socket$isdn(0x22, 0x2, 0x3) r1 = socket$isdn(0x22, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {0x0}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], 0x0}], 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) r3 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_clone3(0x0, 0x0) 5.310059803s ago: executing program 0 (id=1964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@ocfs2_parent={0x18, 0x2, {{0x3, 0x80, 0x3}, {0x48001, 0x8001, 0x8}}}, &(0x7f00000002c0), 0x1400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) io_uring_enter(0xffffffffffffffff, 0xe63, 0x0, 0x4, 0x0, 0x0) 5.23231066s ago: executing program 5 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f0000000280)=[{}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 5.081677593s ago: executing program 3 (id=1966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x2}, {0xe0000, 0xffffff81, 0x0, 0xa, 0xa, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) 4.7776044s ago: executing program 2 (id=1967): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x14aa, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 3.583403185s ago: executing program 2 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, 0x0) 3.522157541s ago: executing program 3 (id=1969): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_open_dev$dri(0x0, 0x3, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, 0x0) process_vm_readv(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x10, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5, 0x1, ','}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r11, 0x1, 0x4800, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.556751565s ago: executing program 2 (id=1970): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.471599713s ago: executing program 0 (id=1971): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x14b000) close(r8) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.471158263s ago: executing program 5 (id=1972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000005280)=[{0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0}], 0x1) sendmsg$rds(r3, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.378229931s ago: executing program 3 (id=1973): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) userfaultfd(0x80001) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.267671341s ago: executing program 2 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008844}, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.16071781s ago: executing program 3 (id=1975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40039}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.333372703s ago: executing program 5 (id=1976): r0 = socket$isdn(0x22, 0x2, 0x3) r1 = socket$isdn(0x22, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {0x0}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], 0x0}], 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) r3 = dup3(r1, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_clone3(0x0, 0x0) 110.822201ms ago: executing program 0 (id=1977): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x14aa, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') setns(r4, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=1978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xdc9b, 0x1, 0x2}, {0xe0000, 0xffffff81, 0x0, 0xa, 0xa, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) kernel console output (not intermixed with test programs): Cannot create hsr debugfs directory [ 350.349034][ T9] tipc: Left network mode [ 350.467452][ T6568] netlink: 112 bytes leftover after parsing attributes in process `syz.2.636'. [ 352.000213][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 352.271412][ T6505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.286986][ T6505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.363089][ T6505] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.397621][ T6505] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.600113][ T1108] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 353.784968][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.854812][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.872739][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.950746][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.025166][ T9] device hsr_slave_0 left promiscuous mode [ 354.040216][ T1108] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0xED, skipping [ 354.062457][ T9] device hsr_slave_1 left promiscuous mode [ 354.070125][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 354.093401][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.114833][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.161737][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.180098][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.200417][ T9] device bridge_slave_1 left promiscuous mode [ 354.208141][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.261344][ T1108] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 354.272519][ T9] device bridge_slave_0 left promiscuous mode [ 354.300324][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.307542][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 354.330077][ T1108] usb 4-1: Product: syz [ 354.340348][ T1108] usb 4-1: Manufacturer: syz [ 354.350242][ T1108] usb 4-1: SerialNumber: syz [ 354.378986][ T1108] usb 4-1: config 0 descriptor?? [ 354.407502][ T9] device veth1_macvtap left promiscuous mode [ 354.426234][ T9] device veth0_macvtap left promiscuous mode [ 354.454516][ T9] device veth1_vlan left promiscuous mode [ 354.480405][ T9] device veth0_vlan left promiscuous mode [ 354.499544][ T1108] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 354.553853][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.829338][ T1108] usb 4-1: USB disconnect, device number 15 [ 355.200254][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 356.861153][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.890819][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.016001][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.061592][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.089243][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.220549][ T23] usb 1-1: config 0 descriptor?? [ 357.440859][ T9] team0 (unregistering): Port device team_slave_1 removed [ 357.500796][ T9] team0 (unregistering): Port device team_slave_0 removed [ 357.582674][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.854408][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.880670][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.888195][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.888364][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.888515][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.888704][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.888917][ T23] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 357.893507][ T23] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 358.140247][ T23] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.160048][ T23] usb 1-1: USB disconnect, device number 12 [ 358.280919][ T6638] kAFS: unable to lookup cell '(,c¾Ì' [ 358.446436][ T6636] fido_id[6636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 358.584440][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.381605][ T9] bond0 (unregistering): Released all slaves [ 359.622066][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.661269][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.681627][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.688718][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.727270][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.746583][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.775588][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.782727][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.807150][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.960374][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.969412][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 360.024766][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.081285][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.110679][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.157002][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.182254][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.229055][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.259201][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.299264][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.318507][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.346124][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.914699][ T6674] mmap: syz.2.653 (6674) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 361.702082][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.709587][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.750264][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.000847][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.020632][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.082685][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.103119][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.160704][ T6505] device veth0_vlan entered promiscuous mode [ 363.178453][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.237034][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.334117][ T6505] device veth1_vlan entered promiscuous mode [ 363.945741][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.955635][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.990574][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.065573][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.101224][ T6505] device veth0_macvtap entered promiscuous mode [ 364.111632][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.161477][ T6505] device veth1_macvtap entered promiscuous mode [ 364.226553][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.290099][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.320041][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.375751][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.396926][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.431562][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.573364][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.642192][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.709577][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.944902][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.961030][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.044921][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.075974][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.193239][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.224361][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.290184][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.550338][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.590114][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.637876][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.723986][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.778195][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.806856][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.865175][ T6505] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.881997][ T6505] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.900124][ T6505] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.940111][ T6505] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.475951][ T6738] lo speed is unknown, defaulting to 1000 [ 367.693690][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.713366][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.794360][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.855419][ T6748] kAFS: unable to lookup cell '(,c¾Ì' [ 367.996689][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.020249][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.525992][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.612242][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 368.800080][ T4206] Bluetooth: hci0: command 0x0409 tx timeout [ 370.508103][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.603800][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.747861][ T6738] device bridge_slave_0 entered promiscuous mode [ 370.973870][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.097466][ T4558] Bluetooth: hci0: command 0x041b tx timeout [ 371.109263][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.168344][ T6738] device bridge_slave_1 entered promiscuous mode [ 371.198899][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.211126][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.238496][ T6738] team0: Port device team_slave_0 added [ 371.246880][ T6738] team0: Port device team_slave_1 added [ 371.266205][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.275398][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.302375][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.332034][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.411098][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.456379][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.221542][ T6738] device hsr_slave_0 entered promiscuous mode [ 372.238616][ T6738] device hsr_slave_1 entered promiscuous mode [ 372.261075][ T6738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.309805][ T6738] Cannot create hsr debugfs directory [ 372.484016][ T4558] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 373.206968][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 373.324349][ T4558] usb 1-1: Using ep0 maxpacket: 16 [ 373.360142][ T13] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 373.450389][ T4558] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 373.472155][ T4558] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.514747][ T6738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.593716][ T6738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.653253][ T6738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.680573][ T4558] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.710245][ T4558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.721086][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 373.752486][ T13] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 373.761940][ T4558] usb 1-1: Product: syz [ 373.775860][ T4558] usb 1-1: Manufacturer: syz [ 373.805103][ T4558] usb 1-1: SerialNumber: syz [ 373.810285][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.849646][ T13] usb 6-1: config 0 descriptor?? [ 373.881965][ T6738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.890998][ T6783] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 374.070480][ T6776] smc: net device bond0 applied user defined pnetid SYZ2 [ 374.141743][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.162041][ T6776] netlink: 14 bytes leftover after parsing attributes in process `syz.0.671'. [ 374.380268][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 374.429944][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 374.489733][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 374.651270][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 374.825154][ T13] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 374.849264][ T13] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 374.948643][ T13] usb 6-1: USB disconnect, device number 2 [ 375.042359][ T6776] smc: removing net device bond0 with user defined pnetid SYZ2 [ 375.079571][ T6776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.111533][ T6776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.151430][ T6776] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 375.226533][ T6776] bond0 (unregistering): Released all slaves [ 375.270239][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 375.391468][ T6800] ip6gretap0: refused to change device tx_queue_len [ 375.409167][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.426179][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.676'. [ 376.395943][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.470376][ T4558] usb 1-1: 0:2 : does not exist [ 376.484592][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.650630][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 376.658414][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 377.752252][ T4558] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 378.313060][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.323025][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.500286][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 378.670800][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.699687][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.780661][ T21] usb 3-1: config 4 interface 0 has no altsetting 0 [ 378.800423][ T23] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.847960][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.074007][ T23] usb 6-1: Product: syz [ 379.100490][ T21] usb 3-1: string descriptor 0 read error: -22 [ 379.114461][ T21] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 379.195824][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.204872][ T23] usb 6-1: Manufacturer: syz [ 379.282277][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.346132][ T23] usb 6-1: SerialNumber: syz [ 379.384593][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.507565][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.570478][ T23] usb 6-1: can't set config #1, error -71 [ 379.637888][ T21] usb 3-1: can't set config #4, error -71 [ 379.651487][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.682924][ T23] usb 6-1: USB disconnect, device number 3 [ 379.696080][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.719787][ T21] usb 3-1: USB disconnect, device number 10 [ 379.720323][ T4558] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.431461][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.438593][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.446625][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.510822][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.519876][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.575716][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.582905][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.634611][ T9] tipc: Left network mode [ 380.634741][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.650169][ T4558] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.700846][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.722515][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.740504][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 380.770502][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.791543][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.850455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.871598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.930234][ T4558] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 380.980470][ T4558] usb 1-1: USB disconnect, device number 13 [ 380.996683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.043437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.052440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.061337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.071564][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.100060][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 381.176011][ T6876] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 381.390313][ T23] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 381.400079][ T23] usb 6-1: config 0 has no interface number 0 [ 381.406185][ T23] usb 6-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 381.510942][ T23] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 381.792792][ T23] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 381.823260][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.864982][ T23] usb 6-1: Product: syz [ 381.869228][ T23] usb 6-1: Manufacturer: syz [ 381.894468][ T23] usb 6-1: SerialNumber: syz [ 382.706976][ T23] usb 6-1: config 0 descriptor?? [ 382.733625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.750362][ T23] usb 6-1: can't set config #0, error -71 [ 382.750711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.799496][ T23] usb 6-1: USB disconnect, device number 4 [ 382.816041][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.932949][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 386.300282][ T9] device hsr_slave_0 left promiscuous mode [ 386.386136][ T9] device hsr_slave_1 left promiscuous mode [ 386.504622][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.540253][ T4206] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 386.573293][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.585011][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.592734][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.621794][ T9] device bridge_slave_1 left promiscuous mode [ 386.631549][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.660942][ T9] device bridge_slave_0 left promiscuous mode [ 386.680477][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.753842][ T9] device veth1_macvtap left promiscuous mode [ 386.767843][ T9] device veth0_macvtap left promiscuous mode [ 386.792039][ T9] device veth1_vlan left promiscuous mode [ 386.820207][ T9] device veth0_vlan left promiscuous mode [ 386.830355][ T4206] usb 1-1: Using ep0 maxpacket: 32 [ 386.960349][ T4206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.990229][ T4206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.020067][ T4206] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.040778][ T4206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.069679][ T4206] usb 1-1: config 0 descriptor?? [ 387.131214][ T4206] hub 1-1:0.0: USB hub found [ 387.340717][ T4206] hub 1-1:0.0: 1 port detected [ 387.590329][ T4206] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 387.600769][ T4206] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 388.890326][ T6949] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 389.731897][ T9] team0 (unregistering): Port device team_slave_1 removed [ 389.770320][ T4206] usbhid 1-1:0.0: can't add hid device: -71 [ 389.776573][ T4206] usbhid: probe of 1-1:0.0 failed with error -71 [ 389.783492][ T9] team0 (unregistering): Port device team_slave_0 removed [ 389.842141][ T4206] usb 1-1: USB disconnect, device number 14 [ 389.877618][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.164899][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.579722][ T9] bond0 (unregistering): Released all slaves [ 390.847134][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.865277][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.033428][ T6738] device veth0_vlan entered promiscuous mode [ 391.063648][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 391.400478][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.468610][ T6986] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 396.181129][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 396.197196][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 396.240521][ T6738] device veth1_vlan entered promiscuous mode [ 396.383172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.401665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.568630][ T6738] device veth0_macvtap entered promiscuous mode [ 396.705613][ T6738] device veth1_macvtap entered promiscuous mode [ 397.843541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.871515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.932394][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.004371][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.039033][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.069178][ T6999] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 398.082337][ T6999] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 398.091105][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.101060][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.270489][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.320079][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.370771][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.413323][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.427873][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.445662][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.465826][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.478467][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.491928][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.543334][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.588282][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.627296][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.661122][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.695041][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.731753][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.758651][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.785290][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.830880][ T6738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.858504][ T6738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.905092][ T6738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.030416][ T6738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.416135][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.456068][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.503456][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 400.595977][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.638227][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.688602][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 403.080448][ T4263] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 403.400185][ T4263] usb 7-1: Using ep0 maxpacket: 8 [ 403.550346][ T4263] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 403.574650][ T4263] usb 7-1: config 179 has no interface number 0 [ 403.601837][ T4263] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 403.652372][ T4263] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 403.690127][ T4263] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.742225][ T4263] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 403.794838][ T4263] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 403.909825][ T4263] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 403.970878][ T4263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.050345][ T7063] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 404.295603][ T4206] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input29 [ 404.796749][ T4263] usb 7-1: USB disconnect, device number 2 [ 404.820033][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 404.828349][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.340420][ T4263] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 407.546904][ T7096] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 407.554762][ T7096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.728'. [ 407.619232][ T7096] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.110357][ T4206] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 409.852975][ T4206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 410.078367][ T4206] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 410.087972][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.100074][ T4206] usb 3-1: config 0 descriptor?? [ 410.120568][ T7101] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 410.826842][ T4206] logitech-djreceiver 0003:046D:C52F.0005: unknown main item tag 0x0 [ 411.410189][ T4206] logitech-djreceiver 0003:046D:C52F.0005: item fetching failed at offset 3/5 [ 411.420652][ T4206] logitech-djreceiver 0003:046D:C52F.0005: logi_dj_probe: parse failed [ 411.428945][ T4206] logitech-djreceiver: probe of 0003:046D:C52F.0005 failed with error -22 [ 411.509566][ T4206] usb 3-1: USB disconnect, device number 11 [ 412.190230][ T1325] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 412.295923][ T7153] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 413.310093][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 414.270703][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.567698][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.767779][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.986538][ T1325] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 416.142095][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.404384][ T1325] usb 1-1: config 0 descriptor?? [ 416.530151][ T1325] usb 1-1: can't set config #0, error -71 [ 417.631192][ T1325] usb 1-1: USB disconnect, device number 15 [ 417.815377][ T7185] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 420.096988][ T7197] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 420.840074][ T4885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.490229][ T4885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.505905][ T4885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.523356][ T4885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.543943][ T4885] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.557833][ T4885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.576944][ T4885] usb 7-1: config 0 descriptor?? [ 422.068672][ T4885] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 422.113872][ T4885] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 422.333086][ T4885] usb 7-1: USB disconnect, device number 3 [ 422.457865][ T7214] fido_id[7214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 423.214204][ T7234] netlink: 112 bytes leftover after parsing attributes in process `syz.3.760'. [ 425.233425][ T7255] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 427.205269][ T7274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 428.890146][ T4225] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 429.620597][ T4225] usb 1-1: Using ep0 maxpacket: 8 [ 429.733111][ T7315] netlink: 112 bytes leftover after parsing attributes in process `syz.5.776'. [ 430.590088][ T4225] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 430.655023][ T7328] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 431.308697][ T4225] usb 1-1: config 179 has no interface number 0 [ 431.315076][ T4225] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 431.326466][ T4225] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 431.337916][ T4225] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.349185][ T4225] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 431.359327][ T4225] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.390045][ T4225] usb 1-1: config 179 interface 65 has no altsetting 0 [ 431.560024][ T4225] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 431.569105][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.630109][ T4225] usb 1-1: can't set config #179, error -71 [ 431.643214][ T4225] usb 1-1: USB disconnect, device number 16 [ 435.120118][ T7380] netlink: 112 bytes leftover after parsing attributes in process `syz.2.792'. [ 437.270373][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 437.820058][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 437.990360][ T13] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 438.780849][ T13] usb 3-1: config 179 has no interface number 0 [ 438.817782][ T13] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 438.879735][ T13] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 439.076342][ T13] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.251739][ T13] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 439.284991][ T13] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.347930][ T7444] netlink: 112 bytes leftover after parsing attributes in process `syz.5.807'. [ 439.696263][ T13] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 439.753008][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.759539][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.886762][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.476149][ T13] usb 3-1: can't set config #179, error -71 [ 441.236410][ T13] usb 3-1: USB disconnect, device number 12 [ 444.080031][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 444.370897][ T4260] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 444.473868][ T7515] kvm [7514]: vcpu1, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xffffffffffffffff [ 444.510668][ T21] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 444.540338][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.574828][ T21] usb 3-1: config 0 descriptor?? [ 444.670372][ T4260] usb 6-1: Using ep0 maxpacket: 32 [ 444.833593][ T4260] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.852705][ T4260] usb 6-1: config 0 has no interface number 0 [ 444.869033][ T4260] usb 6-1: config 0 interface 184 has no altsetting 0 [ 445.030223][ T4260] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.063179][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.093118][ T4260] usb 6-1: Product: syz [ 445.108386][ T4260] usb 6-1: Manufacturer: syz [ 445.127262][ T4260] usb 6-1: SerialNumber: syz [ 445.257109][ T4260] usb 6-1: config 0 descriptor?? [ 445.457272][ T4260] smsc75xx v1.0.0 [ 446.567763][ T4260] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 446.579108][ T4260] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 446.630509][ T21] usb 3-1: Cannot set autoneg [ 446.636430][ T7559] kAFS: unable to lookup cell '(,c¾Ì' [ 446.643148][ T21] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 446.699250][ T21] usb 3-1: USB disconnect, device number 13 [ 446.976649][ T7564] ubi: mtd0 is already attached to ubi0 [ 447.234531][ T7566] netlink: 112 bytes leftover after parsing attributes in process `syz.6.834'. [ 447.510221][ T4260] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 447.545371][ T4260] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 447.607669][ T4260] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 447.794157][ T4260] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 449.086544][ T1110] usb 6-1: USB disconnect, device number 5 [ 450.089793][ T7602] vivid-001: kernel_thread() failed [ 452.264316][ T7629] xt_hashlimit: size too large, truncated to 1048576 [ 452.272112][ T7626] kAFS: unable to lookup cell '(,c¾Ì' [ 452.440191][ T7631] netlink: 112 bytes leftover after parsing attributes in process `syz.3.847'. [ 452.473753][ T7626] ubi: mtd0 is already attached to ubi0 [ 454.043408][ T7655] overlayfs: missing 'workdir' [ 459.121948][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.861'. [ 459.721333][ T7721] input: syz0 as /devices/virtual/input/input30 [ 462.291333][ T7738] afs: Unknown parameter 'dy' [ 462.930243][ T4263] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.500325][ T4263] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.376319][ T4263] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.351423][ T4263] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 465.375842][ T4263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 465.384232][ T4263] usb 7-1: SerialNumber: syz [ 465.746852][ T4263] usb 7-1: 0:2 : does not exist [ 466.481152][ T4263] usb 7-1: USB disconnect, device number 4 [ 466.578484][ T6494] udevd[6494]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.430177][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 469.280155][ T4260] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 469.920207][ T4260] usb 7-1: Using ep0 maxpacket: 32 [ 470.040085][ T4260] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 470.049860][ T4260] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 470.235121][ T7839] device syzkaller0 entered promiscuous mode [ 470.260527][ T4260] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 470.288115][ T4260] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 470.350581][ T4260] usb 7-1: Product: syz [ 470.392831][ T4260] usb 7-1: Manufacturer: syz [ 470.483853][ T4260] usb 7-1: SerialNumber: syz [ 470.643320][ T4260] usb 7-1: config 0 descriptor?? [ 470.799856][ T4260] hub 7-1:0.0: bad descriptor, ignoring hub [ 470.894245][ T4260] hub: probe of 7-1:0.0 failed with error -5 [ 470.985583][ T4260] usb 7-1: USB disconnect, device number 5 [ 471.450050][ T4260] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 471.690115][ T4260] usb 7-1: Using ep0 maxpacket: 32 [ 472.370184][ T4260] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 472.377995][ T4260] usb 7-1: can't read configurations, error -71 [ 476.860934][ T7934] loop6: detected capacity change from 0 to 1024 [ 476.944612][ T7934] ======================================================= [ 476.944612][ T7934] WARNING: The mand mount option has been deprecated and [ 476.944612][ T7934] and is ignored by this kernel. Remove the mand [ 476.944612][ T7934] option from the mount to silence this warning. [ 476.944612][ T7934] ======================================================= [ 476.993864][ T7934] EXT4-fs (loop6): Ignoring removed orlov option [ 477.030162][ T7934] EXT4-fs (loop6): Ignoring removed bh option [ 477.090688][ T7934] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,grpjquota=,bh,nouid32,,errors=continue. Quota mode: writeback. [ 480.173471][ T7976] overlayfs: missing 'lowerdir' [ 481.944752][ T8000] device syzkaller0 entered promiscuous mode [ 484.183820][ T8024] overlayfs: missing 'lowerdir' [ 484.416051][ T8035] kAFS: unable to lookup cell '(,c¾Ì' [ 484.648240][ T8037] ubi: mtd0 is already attached to ubi0 [ 485.843179][ T4228] kworker/dying (4228) used greatest stack depth: 21040 bytes left [ 486.810144][ T1325] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 487.070151][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 487.190419][ T1325] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 487.261802][ T1325] usb 1-1: config 0 has no interface number 0 [ 487.316430][ T1325] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.331350][ T1325] usb 1-1: config 0 interface 85 has no altsetting 0 [ 487.498003][ T8059] device syzkaller0 entered promiscuous mode [ 487.540226][ T1325] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 487.560129][ T1325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.584333][ T1325] usb 1-1: Product: syz [ 487.596558][ T1325] usb 1-1: Manufacturer: syz [ 487.611331][ T1325] usb 1-1: SerialNumber: syz [ 487.629054][ T1325] usb 1-1: config 0 descriptor?? [ 489.160290][ T1325] appletouch 1-1:0.85: Geyser mode initialized. [ 489.188332][ T1325] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input31 [ 489.210562][ T8084] kAFS: unable to lookup cell '(,c¾Ì' [ 489.390027][ C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 489.649722][ T8089] ubi: mtd0 is already attached to ubi0 [ 489.848773][ T8091] overlayfs: missing 'lowerdir' [ 490.333503][ T4225] usb 1-1: USB disconnect, device number 17 [ 490.416867][ T4225] appletouch 1-1:0.85: input: appletouch disconnected [ 491.941306][ T8081] overlayfs: failed to clone upperpath [ 492.721382][ T8139] kAFS: unable to lookup cell '(,c¾Ì' [ 493.383169][ T8143] ubi: mtd0 is already attached to ubi0 [ 493.806806][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 495.472693][ T8166] loop6: detected capacity change from 0 to 32768 [ 496.144707][ T8166] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 496.244156][ T8166] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 496.363382][ T8166] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 496.402930][ T4885] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 496.416774][ T4885] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 496.535772][ T8209] lo speed is unknown, defaulting to 1000 [ 496.540193][ T21] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 496.617839][ T4885] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 201ms [ 496.654369][ T4885] gfs2: fsid=syz:syz.0: jid=0: Done [ 496.671118][ T8166] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 496.960420][ T21] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 496.975440][ T21] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 497.006037][ T21] usb 6-1: config 8 has no interface number 0 [ 497.023875][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.968'. [ 497.034047][ T21] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 497.065840][ T21] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 497.200634][ T21] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 497.219981][ T21] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 497.266553][ T21] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 497.320053][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.391005][ T21] usb 6-1: NFC: intf ffff88801fd30000 id ffffffff8cb52500 [ 498.773757][ T8258] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 499.670486][ T1325] usb 6-1: USB disconnect, device number 6 [ 501.199110][ T8320] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 501.260887][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.268086][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.861747][ T8325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.984'. [ 504.180981][ T8333] loop2: detected capacity change from 0 to 40427 [ 504.265431][ T8333] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 504.318243][ T8333] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x724 [ 504.424323][ T8333] F2FS-fs (loop2): invalid crc value [ 504.492300][ T8333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 504.626076][ T8333] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 504.788138][ T8333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 504.882275][ T8333] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6a4/0x1dc0 [ 505.026908][ T8333] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 505.217354][ T8333] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8f0 [ 506.636995][ T8408] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 507.272084][ T4191] attempt to access beyond end of device [ 507.272084][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 508.143879][ T4558] libceph: connect (1)[c::]:6789 error -101 [ 508.151526][ T4558] libceph: mon0 (1)[c::]:6789 connect error [ 508.180665][ T4558] libceph: connect (1)[c::]:6789 error -101 [ 508.186889][ T4558] libceph: mon0 (1)[c::]:6789 connect error [ 508.194924][ T8412] ceph: No mds server is up or the cluster is laggy [ 508.254058][ T8421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1000'. [ 508.893473][ T4885] libceph: connect (1)[c::]:6789 error -101 [ 508.900019][ T4885] libceph: mon0 (1)[c::]:6789 connect error [ 509.782454][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 512.292897][ T8458] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 513.763008][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1014'. [ 514.036559][ T8464] vivid-001: kernel_thread() failed [ 514.867536][ T8456] loop6: detected capacity change from 0 to 32768 [ 515.080113][ T8456] (syz.6.1013,8456,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 515.105942][ T8456] (syz.6.1013,8456,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 516.743858][ T8499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 516.752827][ T8499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.994458][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 518.312747][ T8512] vivid-001: kernel_thread() failed [ 519.060133][ T8511] block device autoloading is deprecated and will be removed. [ 519.068345][ T8517] netlink: set zone limit has 8 unknown bytes [ 521.225465][ T8555] overlayfs: missing 'lowerdir' [ 522.529592][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 525.990424][ T8600] overlayfs: missing 'lowerdir' [ 527.825900][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1053'. [ 529.338980][ T8647] overlayfs: missing 'lowerdir' [ 531.053157][ T8655] device syzkaller0 entered promiscuous mode [ 532.830100][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1069'. [ 533.114996][ T8686] overlayfs: missing 'workdir' [ 534.527588][ T8708] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 534.535711][ T8708] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 537.705282][ T8730] overlayfs: missing 'workdir' [ 538.444246][ T8734] tipc: Started in network mode [ 538.449169][ T8734] tipc: Node identity 02f6a2653d73, cluster identity 4711 [ 538.537683][ T8734] tipc: Enabled bearer , priority 0 [ 538.602142][ T8734] tipc: Resetting bearer [ 538.683592][ T8733] tipc: Disabling bearer [ 538.950854][ T8746] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1087'. [ 539.008475][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 539.873638][ T8753] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 539.881486][ T8753] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 541.202106][ T8758] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 541.209082][ T8758] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.310367][ T8758] vhci_hcd vhci_hcd.0: Device attached [ 541.569983][ T4260] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 544.227277][ T8759] vhci_hcd: connection reset by peer [ 544.237318][ T144] vhci_hcd: stop threads [ 544.242107][ T144] vhci_hcd: release socket [ 544.269971][ T144] vhci_hcd: disconnect device [ 544.485883][ T8794] tipc: Started in network mode [ 544.502340][ T8794] tipc: Node identity aa4daa4781db, cluster identity 4711 [ 544.550365][ T8794] tipc: Enabled bearer , priority 0 [ 544.594120][ T8799] tipc: Resetting bearer [ 544.681599][ T8793] tipc: Disabling bearer [ 546.710105][ T4260] vhci_hcd: vhci_device speed not set [ 547.167322][ T8833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1108'. [ 562.661683][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.668185][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.930080][ T4206] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 566.440422][ T4206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 566.580676][ T4206] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 566.599874][ T4206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.824067][ T4206] usb 1-1: config 0 descriptor?? [ 566.906036][ T8994] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 567.772673][ T4206] logitech-djreceiver 0003:046D:C52F.0007: unknown main item tag 0x0 [ 567.797318][ T4206] logitech-djreceiver 0003:046D:C52F.0007: item fetching failed at offset 3/5 [ 567.858023][ T4206] logitech-djreceiver 0003:046D:C52F.0007: logi_dj_probe: parse failed [ 567.876943][ T4206] logitech-djreceiver: probe of 0003:046D:C52F.0007 failed with error -22 [ 567.985975][ T7] usb 1-1: USB disconnect, device number 18 [ 572.476880][ T9074] overlayfs: failed to clone upperpath [ 576.429955][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 576.793633][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 578.010034][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 578.025076][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.055592][ T7] usb 6-1: config 0 descriptor?? [ 578.130344][ T9095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 579.833094][ T7] logitech-djreceiver 0003:046D:C52F.0008: unknown main item tag 0x0 [ 579.900010][ T7] logitech-djreceiver 0003:046D:C52F.0008: item fetching failed at offset 3/5 [ 579.909439][ T7] logitech-djreceiver 0003:046D:C52F.0008: logi_dj_probe: parse failed [ 580.112987][ T7] logitech-djreceiver: probe of 0003:046D:C52F.0008 failed with error -22 [ 580.132668][ T7] usb 6-1: USB disconnect, device number 7 [ 587.131559][ T9163] tipc: Enabling of bearer rejected, failed to enable media [ 587.374814][ T4558] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 588.458137][ T4558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 588.508704][ T4558] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 588.527611][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.564090][ T4558] usb 6-1: config 0 descriptor?? [ 588.601082][ T9160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 589.124413][ T4558] logitech-djreceiver 0003:046D:C52F.0009: unknown main item tag 0x0 [ 589.150359][ T4558] logitech-djreceiver 0003:046D:C52F.0009: item fetching failed at offset 3/5 [ 589.851199][ T4558] logitech-djreceiver 0003:046D:C52F.0009: logi_dj_probe: parse failed [ 589.859466][ T4558] logitech-djreceiver: probe of 0003:046D:C52F.0009 failed with error -22 [ 589.935810][ T4558] usb 6-1: USB disconnect, device number 8 [ 595.872667][ T9228] device syzkaller0 entered promiscuous mode [ 599.110209][ T4558] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 599.480087][ T4558] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 599.508466][ T4558] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 600.030090][ T4558] usb 6-1: config 8 has no interface number 0 [ 600.180008][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 600.988409][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 601.008759][ T4558] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 601.049279][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 601.069664][ T4558] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 601.100034][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.190773][ T4558] usb 6-1: NFC: intf ffff88805f955000 id ffffffff8cb52500 [ 603.530602][ T9276] device syzkaller0 entered promiscuous mode [ 603.559472][ T4558] usb 6-1: USB disconnect, device number 9 [ 607.160983][ T9317] tipc: Enabling of bearer rejected, failed to enable media [ 609.453340][ T9341] device syzkaller0 entered promiscuous mode [ 615.108643][ T9399] loop2: detected capacity change from 0 to 256 [ 615.427871][ T9399] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 615.870157][ T9427] vivid-001: kernel_thread() failed [ 617.781240][ T9464] overlayfs: failed to clone upperpath [ 619.324638][ T9489] loop6: detected capacity change from 0 to 256 [ 620.544041][ T9489] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 623.856731][ T9535] device syzkaller0 entered promiscuous mode [ 624.072857][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.079171][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.486573][ T9551] device syzkaller0 entered promiscuous mode [ 635.700174][ T7] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 636.060021][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 636.160303][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 636.398478][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.419151][ T7] usb 1-1: config 0 descriptor?? [ 636.460338][ T9642] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 637.141555][ T7] logitech-djreceiver 0003:046D:C52F.000A: unknown main item tag 0x0 [ 637.149827][ T7] logitech-djreceiver 0003:046D:C52F.000A: item fetching failed at offset 3/5 [ 637.207053][ T7] logitech-djreceiver 0003:046D:C52F.000A: logi_dj_probe: parse failed [ 637.262772][ T7] logitech-djreceiver: probe of 0003:046D:C52F.000A failed with error -22 [ 637.363202][ T7] usb 1-1: USB disconnect, device number 19 [ 646.040055][ T4226] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 647.030000][ T4226] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 647.109086][ T4226] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 648.506623][ T4226] usb 3-1: config 8 has no interface number 0 [ 648.549049][ T4226] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 648.630319][ T4226] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 648.718357][ T4226] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 648.817032][ T4226] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 648.956498][ T4226] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 649.069664][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.290021][ T4226] usb 3-1: can't set config #8, error -71 [ 649.322229][ T4226] usb 3-1: USB disconnect, device number 14 [ 649.854835][ T9735] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 650.160054][ T9108] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 650.319936][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 650.409937][ T9108] usb 7-1: Using ep0 maxpacket: 16 [ 650.579951][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 650.760005][ T9108] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.796324][ T9108] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.860510][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 651.040108][ T7] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 651.049184][ T7] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 651.090582][ T9108] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.124621][ T9108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.243512][ T9108] usb 7-1: Product: syz [ 651.279288][ T9751] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 651.294750][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.315657][ T9108] usb 7-1: Manufacturer: syz [ 651.382736][ T9108] usb 7-1: SerialNumber: syz [ 651.822668][ T9737] smc: net device bond0 applied user defined pnetid SYZ2 [ 651.952888][ T9737] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1338'. [ 652.283382][ T9761] udc-core: couldn't find an available UDC or it's busy [ 652.373528][ T7] usb 6-1: Product: syz [ 652.377744][ T7] usb 6-1: Manufacturer: syz [ 652.389957][ T7] usb 6-1: SerialNumber: syz [ 652.398645][ T7] usb 6-1: config 0 descriptor?? [ 652.430076][ T7] usb 6-1: can't set config #0, error -71 [ 652.436024][ T9761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 652.460087][ T7] usb 6-1: USB disconnect, device number 10 [ 652.530855][ T9761] udc-core: couldn't find an available UDC or it's busy [ 652.601658][ T9737] smc: removing net device bond0 with user defined pnetid SYZ2 [ 652.651055][ T9761] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 652.661497][ T9737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.766205][ T9737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.838925][ T9737] bond0 (unregistering): Released all slaves [ 652.897654][ T9757] ip6gretap0: refused to change device tx_queue_len [ 652.910263][ T9759] device syzkaller0 entered promiscuous mode [ 653.040079][ T9108] usb 7-1: 0:2 : does not exist [ 653.084587][ T9108] usb 7-1: USB disconnect, device number 8 [ 653.138774][ T9708] udevd[9708]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.670405][ T9832] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 657.769923][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 658.609942][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 658.730214][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 658.828541][ T9846] device syzkaller0 entered promiscuous mode [ 658.980111][ T7] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 659.608045][ T7] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 659.748012][ T7] usb 6-1: Product: syz [ 659.941545][ T7] usb 6-1: Manufacturer: syz [ 660.261846][ T7] usb 6-1: SerialNumber: syz [ 660.337856][ T7] usb 6-1: config 0 descriptor?? [ 660.370211][ T7] usb 6-1: can't set config #0, error -71 [ 660.402925][ T7] usb 6-1: USB disconnect, device number 11 [ 660.649970][ T13] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 661.582431][ T13] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 661.655245][ T13] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 661.689946][ T13] usb 7-1: config 8 has no interface number 0 [ 661.719960][ T13] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 661.760073][ T13] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 661.787559][ T13] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 661.804697][ T13] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 661.818151][ T13] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 661.827844][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.890017][ T13] usb 7-1: can't set config #8, error -71 [ 661.913974][ T13] usb 7-1: USB disconnect, device number 9 [ 662.910116][ T9899] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 663.309951][ T13] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 663.560005][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 663.680241][ T13] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 663.860195][ T13] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 663.882673][ T13] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 663.917572][ T13] usb 7-1: Product: syz [ 663.933723][ T13] usb 7-1: Manufacturer: syz [ 663.938350][ T13] usb 7-1: SerialNumber: syz [ 663.974025][ T13] usb 7-1: config 0 descriptor?? [ 664.010279][ T9904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 664.030680][ T13] hub 7-1:0.0: bad descriptor, ignoring hub [ 664.041709][ T13] hub: probe of 7-1:0.0 failed with error -5 [ 664.390476][ T13] usb 7-1: USB disconnect, device number 10 [ 668.757619][ T9952] device syzkaller0 entered promiscuous mode [ 669.042316][ T9961] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 670.391243][ T9108] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 671.030010][ T9108] usb 6-1: Using ep0 maxpacket: 32 [ 671.230713][ T9108] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 671.510536][ T9108] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 671.520367][ T9108] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 671.550062][ T9108] usb 6-1: Product: syz [ 671.569942][ T9108] usb 6-1: Manufacturer: syz [ 671.885973][ T9108] usb 6-1: SerialNumber: syz [ 671.897789][ T9108] usb 6-1: config 0 descriptor?? [ 671.920546][ T9961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 671.950737][ T9108] hub 6-1:0.0: bad descriptor, ignoring hub [ 671.956673][ T9108] hub: probe of 6-1:0.0 failed with error -5 [ 672.181083][ T9108] usb 6-1: USB disconnect, device number 12 [ 672.440068][ T4231] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 672.880080][ T4231] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 672.892869][ T4231] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 672.913977][T10011] device syzkaller0 entered promiscuous mode [ 672.925977][ T4231] usb 7-1: config 8 has no interface number 0 [ 672.964940][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 673.097675][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 673.128990][ T4231] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 673.169503][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 673.223561][ T4231] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 673.282315][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.360828][ T4231] usb 7-1: NFC: intf ffff888076e1b000 id ffffffff8cb52500 [ 673.466238][T10023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1405'. [ 673.658034][ T13] usb 7-1: USB disconnect, device number 11 [ 674.792975][T10056] ubi: mtd0 is already attached to ubi0 [ 676.659675][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1419'. [ 678.520108][ T4231] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 678.538011][T10104] ubi: mtd0 is already attached to ubi0 [ 678.930132][ T4231] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 679.239964][ T4231] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 679.443278][ T4231] usb 7-1: config 8 has no interface number 0 [ 679.490942][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 679.503923][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 679.515154][ T4231] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 679.525681][ T4231] usb 7-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 679.789370][ T4231] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 679.798493][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.850674][ T4231] usb 7-1: NFC: intf ffff888062417000 id ffffffff8cb52500 [ 680.055066][ T4206] usb 7-1: USB disconnect, device number 12 [ 682.161378][T10141] device syzkaller0 entered promiscuous mode [ 682.496311][T10146] ubi: mtd0 is already attached to ubi0 [ 685.512861][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.519178][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.870019][ T1110] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 686.650199][ T1110] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 686.668518][ T1110] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 686.701283][ T1110] usb 6-1: config 8 has no interface number 0 [ 686.708126][ T1110] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 686.737710][ T1110] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 686.777292][ T1110] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 686.799925][ T1110] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 686.849930][ T1110] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 686.870010][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.940754][ T1110] usb 6-1: NFC: intf ffff888079e0a000 id ffffffff8cb52500 [ 687.143484][ T1110] usb 6-1: USB disconnect, device number 13 [ 687.345367][T10188] ubi: mtd0 is already attached to ubi0 [ 689.357447][T10213] netlink: 'syz.2.1460': attribute type 3 has an invalid length. [ 689.374929][T10213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.250438][T10233] ubi: mtd0 is already attached to ubi0 [ 691.830033][ T4227] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 692.240112][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 692.240163][ T4206] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 692.270200][ T4227] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 692.299524][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.323667][ T4227] usb 6-1: config 0 descriptor?? [ 692.340232][T10229] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 692.650256][ T4206] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 692.669545][ T4206] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 692.710083][ T4206] usb 3-1: config 8 has no interface number 0 [ 692.726481][ T4206] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 692.757680][ T4206] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 692.788724][ T4206] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 692.812863][ T4206] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 692.846251][ T4206] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 692.860006][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.930761][ T4206] usb 3-1: NFC: intf ffff888076e1e000 id ffffffff8cb52500 [ 693.022381][ T4227] logitech-djreceiver 0003:046D:C52F.000B: unknown main item tag 0x0 [ 693.039448][ T4227] logitech-djreceiver 0003:046D:C52F.000B: item fetching failed at offset 3/5 [ 693.064766][ T4227] logitech-djreceiver 0003:046D:C52F.000B: logi_dj_probe: parse failed [ 693.083695][ T4227] logitech-djreceiver: probe of 0003:046D:C52F.000B failed with error -22 [ 693.134858][ T4206] usb 3-1: USB disconnect, device number 15 [ 693.227695][ T4227] usb 6-1: USB disconnect, device number 14 [ 693.939019][T10266] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 698.160794][T10314] kAFS: unable to lookup cell '(,c¾Ì' [ 700.896436][T10349] loop5: detected capacity change from 0 to 256 [ 700.990030][ T21] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 701.228607][T10349] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 701.310065][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 701.490060][ T21] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 701.529964][ T21] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 701.579365][ T21] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 701.593739][T10354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1500'. [ 702.167896][T10362] lo speed is unknown, defaulting to 1000 [ 703.374308][T10366] kAFS: unable to lookup cell '(,c¾Ì' [ 704.311558][ T21] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 704.608498][T10365] device syzkaller0 entered promiscuous mode [ 705.189285][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.197531][ T21] usb 7-1: Product: syz [ 705.201732][ T21] usb 7-1: Manufacturer: syz [ 705.206346][ T21] usb 7-1: SerialNumber: syz [ 705.239960][ T21] usb 7-1: can't set config #155, error -71 [ 705.250677][ T21] usb 7-1: USB disconnect, device number 13 [ 705.614676][T10376] loop2: detected capacity change from 0 to 65536 [ 705.990806][T10386] ptrace attach of "./syz-executor exec"[4196] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  ‹  /dev/cpu/#/msr"[10386] [ 706.092867][T10376] XFS (loop2): Mounting V5 Filesystem [ 706.166312][T10376] XFS (loop2): Ending clean mount [ 707.758407][ T4191] XFS (loop2): Unmounting Filesystem [ 707.887323][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1513'. [ 708.718982][T10429] kAFS: unable to lookup cell '(,c¾Ì' [ 708.944083][T10433] ubi: mtd0 is already attached to ubi0 [ 711.038639][T10459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1526'. [ 712.269347][T10471] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1528'. [ 712.279988][T10471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 713.370399][T10483] kAFS: unable to lookup cell '(,c¾Ì' [ 713.590123][T10485] ubi: mtd0 is already attached to ubi0 [ 716.030131][T10497] syz.3.1534 sent an empty control message without MSG_MORE. [ 717.138651][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 717.157843][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 718.660785][T10526] kAFS: unable to lookup cell '(,c¾Ì' [ 718.824060][ T1325] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 719.230323][ T1325] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 719.274183][ T1325] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 719.436817][ T1325] usb 3-1: config 8 has no interface number 0 [ 719.554331][ T1325] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 719.619982][ T1325] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 719.660285][ T1325] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 719.701084][ T1325] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 719.789949][ T1325] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 719.859938][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.400624][ T1325] usb 3-1: NFC: intf ffff88801be40000 id ffffffff8cb52500 [ 721.538020][ T4206] usb 3-1: USB disconnect, device number 16 [ 722.351063][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1548'. [ 722.527991][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 724.911587][T10572] syz.6.1552 (10572) used greatest stack depth: 21008 bytes left [ 726.362094][T10594] fuse: Unknown parameter 'user_id00000000000000000000' [ 726.443846][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 726.560150][ T4558] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 726.628434][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 726.940494][ T4558] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 726.984450][ T4558] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 727.154323][ T4558] usb 6-1: config 8 has no interface number 0 [ 727.259167][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 727.342305][T10610] device syzkaller0 entered promiscuous mode [ 727.428795][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 727.470009][ T4558] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 727.510156][ T4558] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 727.575989][T10618] kAFS: unable to lookup cell '(,c¾Ì' [ 727.592423][ T4558] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 727.602306][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.690818][ T4558] usb 6-1: NFC: intf ffff888061c78000 id ffffffff8cb52500 [ 727.903601][ T4231] usb 6-1: USB disconnect, device number 15 [ 730.358795][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1574'. [ 730.428700][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 730.922747][T10669] kAFS: unable to lookup cell '(,c¾Ì' [ 731.085824][T10669] ubi: mtd0 is already attached to ubi0 [ 732.809917][ T4558] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 733.659909][ T4558] usb 1-1: Using ep0 maxpacket: 16 [ 733.780042][ T4558] usb 1-1: config 0 has no interfaces? [ 733.887612][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1589'. [ 733.909114][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'. [ 733.940095][ T4558] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 733.957048][ T4558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.983123][ T4558] usb 1-1: Product: syz [ 733.998052][ T4558] usb 1-1: Manufacturer: syz [ 734.013291][ T4558] usb 1-1: SerialNumber: syz [ 734.037466][ T4558] usb 1-1: config 0 descriptor?? [ 734.148813][T10723] kAFS: unable to lookup cell '(,c¾Ì' [ 734.306569][T10723] ubi: mtd0 is already attached to ubi0 [ 734.377898][ T4885] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 734.416198][ T1325] usb 1-1: USB disconnect, device number 20 [ 734.721740][ T4885] usb 3-1: Using ep0 maxpacket: 16 [ 734.948999][T10733] netlink: 'syz.3.1594': attribute type 3 has an invalid length. [ 734.983930][T10733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.990663][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.016169][ T4885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.036790][ T4885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.050087][ T4885] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 735.065529][ T4885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.084745][ T4885] usb 3-1: config 0 descriptor?? [ 736.341311][ T4885] microsoft 0003:045E:07DA.000C: unknown main item tag 0xd [ 736.368971][ T4885] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 736.376655][ T4885] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 736.384430][ T4885] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 736.399624][ T4885] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 736.411426][ T4885] microsoft 0003:045E:07DA.000C: no inputs found [ 736.418033][ T4885] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 737.158601][ T4885] usb 3-1: USB disconnect, device number 17 [ 737.258370][T10748] fido_id[10748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 737.760769][T10762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1602'. [ 737.801743][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 738.403782][T10771] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 738.454464][T10771] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1600'. [ 740.322438][T10763] loop2: detected capacity change from 0 to 65536 [ 743.746888][T10818] fuse: Bad value for 'fd' [ 744.880498][ T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 745.400006][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 745.817644][ T23] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 746.184614][ T23] usb 7-1: config 0 has no interface number 0 [ 746.295131][ T23] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 746.332909][ T23] usb 7-1: config 0 interface 85 has no altsetting 0 [ 746.722099][ T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 746.735739][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.744239][ T23] usb 7-1: Product: syz [ 746.748459][ T23] usb 7-1: Manufacturer: syz [ 746.753469][ T23] usb 7-1: SerialNumber: syz [ 746.786863][ T23] usb 7-1: config 0 descriptor?? [ 746.961797][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.968131][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.354124][T10860] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 747.410011][ T1325] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 747.470916][ T23] appletouch 7-1:0.85: Geyser mode initialized. [ 747.487496][ T23] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input32 [ 747.703361][ T23] usb 7-1: USB disconnect, device number 14 [ 747.734083][ T23] appletouch 7-1:0.85: input: appletouch disconnected [ 747.760274][ T9108] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 747.780059][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 747.818615][ T1325] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 747.860267][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.887722][ T1325] usb 1-1: config 0 descriptor?? [ 747.910252][T10858] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 748.604775][ T1325] logitech-djreceiver 0003:046D:C52F.000D: unknown main item tag 0x0 [ 748.715374][ T1325] logitech-djreceiver 0003:046D:C52F.000D: item fetching failed at offset 3/5 [ 748.869992][ T9108] usb 3-1: Using ep0 maxpacket: 32 [ 749.145644][ T1325] logitech-djreceiver 0003:046D:C52F.000D: logi_dj_probe: parse failed [ 749.154136][ T1325] logitech-djreceiver: probe of 0003:046D:C52F.000D failed with error -22 [ 749.166311][ T1325] usb 1-1: USB disconnect, device number 21 [ 749.230479][ T9108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 749.703311][ T9108] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 749.719938][ T9108] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 749.734241][ T9108] usb 3-1: Product: syz [ 750.376542][ T9108] usb 3-1: Manufacturer: syz [ 750.446023][ T9108] usb 3-1: SerialNumber: syz [ 750.477842][T10891] device syzkaller0 entered promiscuous mode [ 750.495654][ T9108] usb 3-1: config 0 descriptor?? [ 750.573123][ T9108] usb 3-1: can't set config #0, error -71 [ 750.622527][ T9108] usb 3-1: USB disconnect, device number 18 [ 751.705257][ T9108] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 752.170055][ T9108] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 752.205764][ T9108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.269141][ T9108] usb 3-1: config 0 descriptor?? [ 752.351029][ T9108] cp210x 3-1:0.0: cp210x converter detected [ 752.930313][ T9108] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 753.080659][ T9108] usb 3-1: cp210x converter now attached to ttyUSB0 [ 753.826089][ T9108] usb 3-1: USB disconnect, device number 19 [ 753.849548][ T9108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 754.058744][ T9108] cp210x 3-1:0.0: device disconnected [ 757.898266][T10942] tmpfs: Unknown parameter 'usrquota' [ 761.282201][ T4885] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 762.079958][ T4885] usb 3-1: Using ep0 maxpacket: 32 [ 762.860088][ T4885] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 762.874577][ T4885] usb 3-1: can't read configurations, error -71 [ 764.010016][ T4558] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 765.096706][ T4558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 765.147973][ T4558] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 765.167874][ T4558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.194097][ T4558] usb 6-1: config 0 descriptor?? [ 765.220156][T10982] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 765.359966][ T4885] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 765.902552][ T4885] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 765.918811][ T4558] logitech-djreceiver 0003:046D:C52F.000E: unknown main item tag 0x0 [ 765.946649][ T4885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.971552][ T4558] logitech-djreceiver 0003:046D:C52F.000E: item fetching failed at offset 3/5 [ 766.026283][ T4885] usb 7-1: Product: syz [ 766.043340][ T4558] logitech-djreceiver 0003:046D:C52F.000E: logi_dj_probe: parse failed [ 766.087348][ T4885] usb 7-1: Manufacturer: syz [ 766.136278][ T4885] usb 7-1: SerialNumber: syz [ 766.158518][ T4558] logitech-djreceiver: probe of 0003:046D:C52F.000E failed with error -22 [ 766.231859][ T4558] usb 6-1: USB disconnect, device number 16 [ 766.680096][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 767.123583][T11029] device syzkaller0 entered promiscuous mode [ 767.594458][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 768.371785][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 768.570020][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.607478][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.610342][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 768.655227][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 768.691835][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.729928][ T23] usb 3-1: config 0 descriptor?? [ 769.293396][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 769.376341][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.045592][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -71 [ 770.062482][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.073652][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.093381][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.140105][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 770.169610][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.180225][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 770.309201][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 770.320215][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 770.339203][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.138863][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.181189][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.199958][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.213682][T11061] overlayfs: failed to clone upperpath [ 771.235826][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.270066][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.304579][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.330139][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 771.330969][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.385504][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.408238][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.430916][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.517040][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 771.529955][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 771.554366][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.014647][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.108738][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.177414][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.240660][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 772.270058][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 772.295490][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.309955][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 772.326010][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.339939][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 772.352419][ T4885] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 772.360252][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.390501][ T4885] lan78xx: probe of 7-1:1.0 failed with error -71 [ 772.398781][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.439289][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.449406][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.460106][ T4885] usb 7-1: USB disconnect, device number 15 [ 772.489948][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.497109][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.535111][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.565501][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.590038][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.619962][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.627247][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.685318][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.705566][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.725862][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.746147][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.769939][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.799948][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.807095][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.844863][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.869997][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.887381][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.897505][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.919948][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.927194][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.954937][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 772.979900][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.006964][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.017818][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.045355][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.052792][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.067477][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.074892][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.082300][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.089639][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.097068][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.104538][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.112950][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.129924][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.147450][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.157558][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.177771][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.187884][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.208801][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.219466][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.230155][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.237490][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.245252][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.252656][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.260647][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.271115][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.279191][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.290017][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.313542][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.324960][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.336349][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.346602][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.356265][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.365504][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.375161][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.384958][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.394499][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.404002][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.413789][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.426898][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.436915][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.447021][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.456796][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.466463][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.475273][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.485090][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.500323][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.508379][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.519984][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.527344][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.537858][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.547759][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.557352][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.566305][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.575854][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.585293][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.594473][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.604360][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.613840][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.623649][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.633524][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.642553][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.650264][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.657596][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.664955][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.672345][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.679865][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.687170][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.694541][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.701875][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.709232][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.716603][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.723963][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.731585][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.738923][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.746322][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.753787][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.761160][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.768499][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.775905][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.783296][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.790660][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.797970][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.805359][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.812730][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.820104][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.827430][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.834808][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.842227][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.849562][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.857065][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.864494][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.871787][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.879196][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.886569][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.893916][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.901288][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.908631][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.916031][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.923378][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.930753][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.938086][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.945469][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.952885][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.960413][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.967836][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.975240][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.982652][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.990059][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 773.997372][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.004745][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.012235][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.019599][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.026994][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.034350][ T23] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 774.079415][ T23] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 774.138127][ T23] usb 3-1: USB disconnect, device number 22 [ 774.583255][T11086] netlink: 'syz.3.1688': attribute type 3 has an invalid length. [ 774.629886][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 774.640437][T11088] loop6: detected capacity change from 0 to 256 [ 774.657355][T11086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.694880][T11081] fido_id[11081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 774.848935][T11088] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 775.029958][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 775.150200][ T23] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 775.167503][ T23] usb 3-1: config 1 has no interface number 0 [ 775.199085][ T23] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 775.660419][ T1325] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 775.715423][ T23] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 775.741199][ T23] usb 3-1: config 1 interface 105 has no altsetting 0 [ 775.753126][T11102] loop2: detected capacity change from 0 to 1024 [ 775.790850][ T23] usb 3-1: string descriptor 0 read error: -71 [ 775.797091][ T23] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 775.812553][ T23] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 775.832956][T11102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 775.860662][ T23] usb 3-1: can't set config #1, error -71 [ 775.883974][T11102] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 775.895867][ T23] usb 3-1: USB disconnect, device number 23 [ 775.905749][T11102] System zones: 0-1, 4-36, 102-102 [ 775.942871][T11102] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 776.140035][ T1325] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 776.154007][ T1325] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 776.703477][ T1325] usb 6-1: config 8 has no interface number 0 [ 776.710726][ T1325] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 776.721606][ T1325] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 776.732324][ T1325] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 776.742146][ T1325] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 776.742206][ T1325] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 776.765729][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.950776][ T1325] usb 6-1: NFC: intf ffff888062d5e000 id ffffffff8cb52500 [ 777.658837][ T1325] usb 6-1: USB disconnect, device number 17 [ 779.588420][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1701'. [ 781.480092][ T1325] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 782.669979][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 782.699984][ T1325] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 782.720294][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.740672][ T1325] usb 1-1: config 0 descriptor?? [ 782.780270][T11151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 782.861995][T11165] tipc: Started in network mode [ 782.878909][T11165] tipc: Node identity ac14140f, cluster identity 4711 [ 783.461873][ T1325] logitech-djreceiver 0003:046D:C52F.0010: unknown main item tag 0x0 [ 784.017611][ T1325] logitech-djreceiver 0003:046D:C52F.0010: item fetching failed at offset 3/5 [ 784.025729][T11165] tipc: New replicast peer: 255.255.255.255 [ 784.029065][ T1325] logitech-djreceiver 0003:046D:C52F.0010: logi_dj_probe: parse failed [ 784.042822][ T1325] logitech-djreceiver: probe of 0003:046D:C52F.0010 failed with error -22 [ 784.056291][ T1325] usb 1-1: USB disconnect, device number 22 [ 784.103294][T11165] tipc: Enabled bearer , priority 10 [ 785.130408][ T4260] tipc: Node number set to 2886997007 [ 785.441305][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'. [ 786.749890][ T4263] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 787.280032][ T4263] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 787.319763][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.349889][ T4263] usb 1-1: Product: syz [ 787.354267][ T4263] usb 1-1: Manufacturer: syz [ 787.358889][ T4263] usb 1-1: SerialNumber: syz [ 787.388025][ T4263] usb 1-1: config 0 descriptor?? [ 789.245546][ T4263] usb 1-1: USB disconnect, device number 23 [ 789.896053][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'. [ 801.159908][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 801.560708][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 801.849947][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 802.909960][ T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 802.952673][ T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 802.998194][ T7] usb 1-1: Product: syz [ 803.064015][ T7] usb 1-1: Manufacturer: syz [ 803.068647][ T7] usb 1-1: SerialNumber: syz [ 803.260413][ T7] usb 1-1: config 0 descriptor?? [ 803.280218][T11334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 804.696684][ T7] usb 1-1: USB disconnect, device number 24 [ 804.802907][T11377] netlink: 'syz.3.1763': attribute type 3 has an invalid length. [ 804.812814][T11377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.481280][T11392] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 806.488803][T11392] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 808.470908][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.529944][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.202998][T11420] netlink: 'syz.6.1776': attribute type 3 has an invalid length. [ 809.219052][T11420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.868429][T11419] vivid-003: kernel_thread() failed [ 818.423989][T11499] vivid-001: kernel_thread() failed [ 819.722446][T11511] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 820.124189][T11520] kAFS: unable to lookup cell '(,c¾Ì' [ 820.233241][ T4260] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 821.209903][ T4260] usb 7-1: Using ep0 maxpacket: 32 [ 821.340091][ T4260] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 821.590079][ T4260] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 821.671782][ T4260] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 821.722074][ T4260] usb 7-1: Product: syz [ 821.746746][ T4260] usb 7-1: Manufacturer: syz [ 821.769743][ T4260] usb 7-1: SerialNumber: syz [ 821.820791][ T4260] usb 7-1: config 0 descriptor?? [ 821.880179][T11515] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 821.900643][ T4260] hub 7-1:0.0: bad descriptor, ignoring hub [ 821.908004][ T4260] hub: probe of 7-1:0.0 failed with error -5 [ 821.959895][ T4225] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 822.300503][ T23] usb 7-1: USB disconnect, device number 16 [ 822.349986][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 822.369882][ T4225] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 822.409676][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.450852][ T4225] usb 3-1: config 0 descriptor?? [ 822.470953][T11528] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 823.335043][ T4225] logitech-djreceiver 0003:046D:C52F.0011: unknown main item tag 0x0 [ 823.505730][ T4225] logitech-djreceiver 0003:046D:C52F.0011: item fetching failed at offset 3/5 [ 823.536531][ T4225] logitech-djreceiver 0003:046D:C52F.0011: logi_dj_probe: parse failed [ 823.554947][T11548] loop6: detected capacity change from 0 to 256 [ 823.598395][ T4225] logitech-djreceiver: probe of 0003:046D:C52F.0011 failed with error -22 [ 823.637324][T11548] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 823.681661][ T4225] usb 3-1: USB disconnect, device number 24 [ 824.145964][T11557] fuse: Bad value for 'group_id' [ 826.873633][T11567] kAFS: unable to lookup cell '(,c¾Ì' [ 828.383718][T11575] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 828.391286][T11575] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 828.558205][T11582] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 829.090586][ T21] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 829.600599][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 829.760795][ T21] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 830.030088][ T21] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 830.061733][ T21] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 830.110819][ T21] usb 6-1: Product: syz [ 830.115185][ T21] usb 6-1: Manufacturer: syz [ 830.129952][ T21] usb 6-1: SerialNumber: syz [ 830.171208][ T21] usb 6-1: config 0 descriptor?? [ 830.201305][T11582] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 830.220540][ T21] hub 6-1:0.0: bad descriptor, ignoring hub [ 830.226477][ T21] hub: probe of 6-1:0.0 failed with error -5 [ 830.259947][T11570] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 830.560108][ T21] usb 6-1: USB disconnect, device number 18 [ 830.630133][T11570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 830.651850][T11570] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 830.710310][T11570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.749304][T11570] usb 1-1: config 0 descriptor?? [ 830.757145][T11605] loop2: detected capacity change from 0 to 256 [ 830.790937][T11599] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 830.832391][T11605] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 831.240198][T11612] fuse: Bad value for 'group_id' [ 831.957813][T11570] logitech-djreceiver 0003:046D:C52F.0012: unknown main item tag 0x0 [ 831.991397][T11570] logitech-djreceiver 0003:046D:C52F.0012: item fetching failed at offset 3/5 [ 832.036448][T11570] logitech-djreceiver 0003:046D:C52F.0012: logi_dj_probe: parse failed [ 832.070074][T11570] logitech-djreceiver: probe of 0003:046D:C52F.0012 failed with error -22 [ 832.154044][ T23] usb 1-1: USB disconnect, device number 25 [ 832.819749][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'. [ 835.171709][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 835.171725][ T26] audit: type=1326 audit(1771869300.509:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9d0f629 code=0x7ffc0000 [ 835.458149][ T26] audit: type=1326 audit(1771869300.549:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf9d0f629 code=0x7ffc0000 [ 835.513560][T11643] nvme_fabrics: missing parameter 'transport=%s' [ 835.520473][T11643] nvme_fabrics: missing parameter 'nqn=%s' [ 836.664773][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1830'. [ 836.705370][ T26] audit: type=1326 audit(1771869300.549:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11638 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fadf9d0f629 code=0x7ffc0000 [ 837.829522][T11659] fuse: Bad value for 'group_id' [ 838.755245][T11666] kAFS: unable to lookup cell '(,c¾Ì' [ 844.759864][T11698] vivid-000: kernel_thread() failed [ 846.648384][T11711] kAFS: unable to lookup cell '(,c¾Ì' [ 849.840659][T11745] vivid-003: kernel_thread() failed [ 866.689949][ T4260] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 866.899910][ T4260] usb 3-1: device descriptor read/64, error -71 [ 867.014323][T11901] device syzkaller0 entered promiscuous mode [ 867.929917][ T4260] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 868.125294][T11911] device syzkaller0 entered promiscuous mode [ 869.831990][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.838384][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.199979][T11931] vivid-000: kernel_thread() failed [ 877.099884][ T4231] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 878.659976][ T4231] usb 6-1: device descriptor read/64, error -71 [ 878.959851][ T4231] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 881.673991][T12003] vivid-001: kernel_thread() failed [ 883.153469][T12014] device syzkaller0 entered promiscuous mode [ 883.470661][T12026] fuse: Unknown parameter 'grou00000000000000000000' [ 885.901496][T12044] lo speed is unknown, defaulting to 1000 [ 887.400744][T12064] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1928'. [ 887.816482][T12044] chnl_net:caif_netlink_parms(): no params data found [ 888.165724][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 888.305548][T12076] device syzkaller0 entered promiscuous mode [ 888.329365][ T4384] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.349936][T11945] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 888.994279][ T4384] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.117245][ T4384] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.350245][T11945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 890.321592][T11945] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 890.339863][T11945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.353308][T11945] usb 3-1: config 0 descriptor?? [ 890.371120][T12069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 890.430273][T11945] usb 3-1: can't set config #0, error -71 [ 890.440784][T11945] usb 3-1: USB disconnect, device number 27 [ 890.717752][ T4206] Bluetooth: hci1: command 0x041b tx timeout [ 890.931712][ T4384] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.072219][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.087748][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.599993][ T4206] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 891.637466][T12044] device bridge_slave_0 entered promiscuous mode [ 892.633624][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.643741][T12044] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.660183][T12044] device bridge_slave_1 entered promiscuous mode [ 892.870064][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 892.902595][T12044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.920114][ T4206] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 892.928309][ T4206] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 892.961230][ T4206] usb 3-1: config 8 has no interface number 0 [ 892.973742][ T4206] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 892.987187][ T4206] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 892.995806][T12044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.996685][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.080668][ T4206] usb 3-1: NFC: intf ffff88807b5f3000 id ffffffff8cb52500 [ 893.089223][ T4384] tipc: Left network mode [ 893.287477][ T4206] usb 3-1: USB disconnect, device number 28 [ 893.366650][T12044] team0: Port device team_slave_0 added [ 893.392728][T12044] team0: Port device team_slave_1 added [ 893.478844][T12123] fuse: Unknown parameter 'grou00000000000000000000' [ 894.084259][T12044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.134920][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.197432][T12044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.222330][T12044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.231932][T12044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.298858][T12044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.382364][T12044] device hsr_slave_0 entered promiscuous mode [ 894.410536][T12044] device hsr_slave_1 entered promiscuous mode [ 894.674573][T12044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.711265][T12044] Cannot create hsr debugfs directory [ 894.967989][ T4206] Bluetooth: hci1: command 0x0419 tx timeout [ 895.200463][T12131] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1941'. [ 896.482617][T12156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.228793][T12165] vivid-001: kernel_thread() failed [ 899.270394][T12176] fuse: Unknown parameter 'grou00000000000000000000' [ 901.492362][ T4384] device hsr_slave_0 left promiscuous mode [ 901.508374][ T4384] device hsr_slave_1 left promiscuous mode [ 901.537280][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.550182][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.588853][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.619074][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.660292][ T4384] device bridge_slave_1 left promiscuous mode [ 901.688849][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.723296][ T4384] device bridge_slave_0 left promiscuous mode [ 901.729499][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.019913][ T4206] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 902.254778][ T4384] device veth1_macvtap left promiscuous mode [ 902.335036][ T4384] device veth0_macvtap left promiscuous mode [ 902.345244][ T4384] device veth1_vlan left promiscuous mode [ 902.365524][ T4384] device veth0_vlan left promiscuous mode [ 903.193838][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 903.310129][ T4206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 903.329859][ T4206] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 903.349346][ T4206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.360440][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 903.410617][ T4206] usb 1-1: config 0 descriptor?? [ 903.430398][T12207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 903.606460][T12191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1955'. [ 903.619410][T12201] device syzkaller0 entered promiscuous mode [ 903.653730][T12044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 903.673417][T12044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 904.091171][T12044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 904.578688][T12227] vivid-000: kernel_thread() failed [ 905.012718][ T4206] logitech-djreceiver 0003:046D:C52F.0013: unknown main item tag 0x0 [ 905.044757][ T4206] logitech-djreceiver 0003:046D:C52F.0013: item fetching failed at offset 3/5 [ 905.209344][ T4206] logitech-djreceiver 0003:046D:C52F.0013: logi_dj_probe: parse failed [ 905.220766][ T4206] logitech-djreceiver: probe of 0003:046D:C52F.0013 failed with error -22 [ 905.250272][ T4206] usb 1-1: USB disconnect, device number 26 [ 906.891659][T12044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 908.570076][T12044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.718039][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.738886][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.873259][T12044] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.435523][T12282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1969'. [ 909.782686][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 909.801063][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 909.845451][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.852601][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.031421][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 910.040562][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.604239][T12305] vivid-001: kernel_thread() failed [ 912.128622][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.135748][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.591934][T12322] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 912.601176][T12322] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12322, name: syz.3.1975 [ 912.610483][T12322] 7 locks held by syz.3.1975/12322: [ 912.615693][T12322] #0: ffffffff8d4463e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 912.625089][T12322] #1: ffffffff8d4462a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 912.635539][T12322] #2: ffff888026081698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 912.646333][T12322] #3: ffffffff8d520288 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 912.656726][T12322] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 912.666195][T12322] #5: ffffc900018f0f00 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 912.676425][T12322] #6: ffff888063b068a0 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 912.686518][T12322] Preemption disabled at: [ 912.686529][T12322] [<0000000000000000>] 0x0 [ 912.695330][T12322] CPU: 1 PID: 12322 Comm: syz.3.1975 Not tainted syzkaller #0 [ 912.702806][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.712891][T12322] Call Trace: [ 912.716214][T12322] [ 912.719161][T12322] dump_stack_lvl+0x188/0x250 [ 912.723874][T12322] ? show_regs_print_info+0x20/0x20 [ 912.729091][T12322] ? load_image+0x400/0x400 [ 912.733616][T12322] ? __local_bh_enable_ip+0x136/0x1c0 [ 912.739022][T12322] ___might_sleep+0x493/0x610 [ 912.743715][T12322] ? __might_sleep+0xf0/0xf0 [ 912.748313][T12322] ? nla_put+0x130/0x1e0 [ 912.752590][T12322] ? read_lock_is_recursive+0x10/0x10 [ 912.757994][T12322] ? sock_diag_put_meminfo+0xc6/0x120 [ 912.763385][T12322] ? sock_diag_save_cookie+0xc0/0xc0 [ 912.768694][T12322] __lock_sock_fast+0x2f/0xe0 [ 912.773388][T12322] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 912.778600][T12322] mptcp_diag_get_info+0x1fe/0x9e0 [ 912.783729][T12322] inet_sk_diag_fill+0xf5e/0x1ca0 [ 912.788782][T12322] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 912.794521][T12322] ? lockdep_hardirqs_on+0x94/0x140 [ 912.799753][T12322] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 912.805451][T12322] ? inet_diag_bc_sk+0x18b/0x1120 [ 912.810500][T12322] mptcp_diag_dump+0xce6/0x12b0 [ 912.815385][T12322] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 912.822003][T12322] __inet_diag_dump+0x1f6/0x380 [ 912.826903][T12322] inet_diag_dump_compat+0x17e/0x220 [ 912.832219][T12322] ? inet_diag_dump_start_compat+0x20/0x20 [ 912.838064][T12322] ? __alloc_skb+0x473/0x750 [ 912.842678][T12322] netlink_dump+0x694/0xcf0 [ 912.847202][T12322] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 912.852889][T12322] ? netlink_lookup+0x1d0/0x1d0 [ 912.857767][T12322] ? __inet_diag_dump_start+0x805/0x970 [ 912.863337][T12322] __netlink_dump_start+0x523/0x700 [ 912.868585][T12322] inet_diag_rcv_msg_compat+0x207/0x420 [ 912.874154][T12322] ? inet_diag_unregister+0xb0/0xb0 [ 912.879381][T12322] ? __mutex_trylock_common+0x155/0x260 [ 912.884954][T12322] ? mutex_lock_io_nested+0x60/0x60 [ 912.890233][T12322] ? __inet_diag_dump+0x380/0x380 [ 912.895281][T12322] ? inet_diag_dump_start_compat+0x20/0x20 [ 912.901110][T12322] ? inet_diag_dump+0x50/0x50 [ 912.905814][T12322] ? inet_diag_unregister+0xb0/0xb0 [ 912.911023][T12322] sock_diag_rcv_msg+0x164/0x3e0 [ 912.915978][T12322] netlink_rcv_skb+0x1f5/0x440 [ 912.920756][T12322] ? sock_diag_bind+0xa0/0xa0 [ 912.925443][T12322] ? netlink_ack+0xb50/0xb50 [ 912.930048][T12322] ? __lock_acquire+0x7d10/0x7d10 [ 912.935104][T12322] sock_diag_rcv+0x26/0x40 [ 912.939530][T12322] netlink_unicast+0x774/0x920 [ 912.944322][T12322] netlink_sendmsg+0x8ba/0xbe0 [ 912.949113][T12322] ? netlink_getsockopt+0x570/0x570 [ 912.954334][T12322] ? aa_sock_msg_perm+0x94/0x150 [ 912.959298][T12322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 912.964600][T12322] ? security_socket_sendmsg+0x7c/0xa0 [ 912.970070][T12322] ? netlink_getsockopt+0x570/0x570 [ 912.975277][T12322] ____sys_sendmsg+0x5b7/0x8f0 [ 912.980062][T12322] ? __sys_sendmsg_sock+0x30/0x30 [ 912.985112][T12322] ? import_iovec+0x6f/0xa0 [ 912.989636][T12322] ___sys_sendmsg+0x236/0x2e0 [ 912.994338][T12322] ? __sys_sendmsg+0x2a0/0x2a0 [ 912.999155][T12322] __se_sys_sendmsg+0x1af/0x290 [ 913.004023][T12322] ? __x64_sys_sendmsg+0x80/0x80 [ 913.008984][T12322] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 913.015002][T12322] ? lockdep_hardirqs_on+0x94/0x140 [ 913.020222][T12322] do_syscall_64+0x4c/0xa0 [ 913.024652][T12322] ? clear_bhb_loop+0x30/0x80 [ 913.029339][T12322] ? clear_bhb_loop+0x30/0x80 [ 913.034038][T12322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 913.039949][T12322] RIP: 0033:0x7f7b1cedb629 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 913.044377][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.064226][T12322] RSP: 002b:00007f7b1b0f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.072664][T12322] RAX: ffffffffffffffda RBX: 00007f7b1d155180 RCX: 00007f7b1cedb629 [ 913.080660][T12322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 913.088653][T12322] RBP: 00007f7b1cf71b39 R08: 0000000000000000 R09: 0000000000000000 [ 913.096635][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.104620][T12322] R13: 00007f7b1d155218 R14: 00007f7b1d155180 R15: 00007ffe3297d2a8 [ 913.112636][T12322] [ 913.823759][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.482064][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.520668][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.560568][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.600411][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.640058][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.693224][T12317] device syzkaller0 entered promiscuous mode [ 916.890948][ T4384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.947169][ T4384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.025245][ T4384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.095458][ T4384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.234247][ T4384] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.325563][ T4384] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.426122][ T4384] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.506100][ T4384] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.003797][ T4384] device hsr_slave_0 left promiscuous mode [ 919.021523][ T4384] device hsr_slave_1 left promiscuous mode [ 919.031890][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.039308][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.061038][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.068578][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.095153][ T4384] device bridge_slave_1 left promiscuous mode [ 919.102639][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.125405][ T4384] device hsr_slave_0 left promiscuous mode [ 919.135937][ T4384] device hsr_slave_1 left promiscuous mode [ 919.144138][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.153145][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.161059][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.168482][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.176606][ T4384] device bridge_slave_1 left promiscuous mode [ 919.195344][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.203900][ T4384] device bridge_slave_0 left promiscuous mode [ 919.220963][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.242610][ T4384] device hsr_slave_0 left promiscuous mode [ 919.250144][ T4384] device hsr_slave_1 left promiscuous mode [ 919.270374][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.277944][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.300438][ T4384] device bridge_slave_1 left promiscuous mode [ 919.306612][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.328442][ T4384] device bridge_slave_0 left promiscuous mode [ 919.334733][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.350571][ T4384] device veth1_macvtap left promiscuous mode [ 919.356684][ T4384] device veth0_macvtap left promiscuous mode [ 919.363464][ T4384] device veth1_vlan left promiscuous mode [ 919.369337][ T4384] device veth0_vlan left promiscuous mode [ 919.378463][ T4384] device veth1_macvtap left promiscuous mode [ 919.384599][ T4384] device veth0_macvtap left promiscuous mode [ 919.391145][ T4384] device veth1_vlan left promiscuous mode [ 919.396922][ T4384] device veth0_vlan left promiscuous mode [ 919.696380][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 919.711510][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 919.726721][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.741978][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.812240][ T4384] bond0 (unregistering): Released all slaves [ 919.967899][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 919.982591][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 919.997134][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.013435][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.084515][ T4384] bond0 (unregistering): Released all slaves [ 920.217601][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 920.234472][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 920.247449][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.262918][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.331813][ T4384] bond0 (unregistering): Released all slaves