last executing test programs: 12m33.745014997s ago: executing program 1 (id=3474): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 12m33.174773787s ago: executing program 1 (id=3478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x1, 0xc0c0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 12m32.77876859s ago: executing program 1 (id=3482): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x4, 0x0) pipe(&(0x7f0000000400)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 12m32.589444618s ago: executing program 1 (id=3484): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone(0xb00b000, 0x0, 0x28, &(0x7f0000000040), 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 12m32.202834826s ago: executing program 1 (id=3486): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x17f4, 0x0, 0x0) 12m31.652092725s ago: executing program 1 (id=3489): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 12m30.373311643s ago: executing program 32 (id=3489): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m19.797008847s ago: executing program 4 (id=5061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1d, 0x0, 0x8, 0xfd, @tick=0x1, {}, {0x0, 0x8}, @result}], 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x48) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4130, 0x1022) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3m17.373408701s ago: executing program 4 (id=5065): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m17.338218546s ago: executing program 4 (id=5066): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = gettid() prlimit64(r9, 0xa, &(0x7f0000000100)={0x7319, 0x144d3d36}, &(0x7f0000000240)) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3m15.704169705s ago: executing program 4 (id=5069): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c00)) sendmmsg(r4, &(0x7f00000031c0), 0x0, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3m13.443558355s ago: executing program 4 (id=5072): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000300"/28], 0x48) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=r2, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) 3m9.830589093s ago: executing program 4 (id=5078): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 2m54.751257041s ago: executing program 33 (id=5078): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x4010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, &(0x7f00000001c0)=@abs, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_open_dev$usbfs(&(0x7f00000010c0), 0x1ff, 0x402) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xf7}, 0x6}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x5b75, 0x4000, 0x0, 0x0}], 0x1}) 17.043807311s ago: executing program 2 (id=5397): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064"]}, 0x113) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) 16.103051264s ago: executing program 0 (id=5399): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000001740)="a3", 0x1, 0x20000000, &(0x7f00000005c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000001bc0)=0x3ff, 0x4) r4 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000009109c43f52417f244933896539746037117571da764b1af52500ff2b156302e1427f82806d79ebc55aa43504c6917a9441a02a998ae8edfbf89f828273742d3b8b62c4d59fa79e9f6cfb8834fc4dc4a2446c", @ANYBLOB="00042bbd7000ffdbdf25620000000600b300030000000600b400e00d00000600b300010000000600b4001a0d00000600b400920d00000600b400040000000600b400f3120000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24008041) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 15.58569209s ago: executing program 3 (id=5401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x9, 0x8, 0xfffff038}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$ppp(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) listen(0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000180)=[{0x0}], 0x1) 14.324820319s ago: executing program 5 (id=5402): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$alg(0x26, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x70bd2d, 0x3, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x8}, [@NDA_IFINDEX={0x8, 0x8, r1}]}, 0x24}}, 0x0) 13.108567476s ago: executing program 5 (id=5403): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044014) socket(0x1d, 0x80000, 0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000510) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0xb0d65) sched_setattr(0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @broadcast}}}, 0x108) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x5f43, 0x12b143) fremovexattr(r4, &(0x7f0000000500)=@known='system.posix_acl_access\x00') r5 = syz_open_dev$video(&(0x7f00000000c0), 0x101, 0x481) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000100)={0x2, 0x4, 0xe1}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240), 0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) 13.075151033s ago: executing program 2 (id=5404): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000"]}, 0xb2) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) 12.955343679s ago: executing program 6 (id=5405): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x4, 0x1000008) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) openat2(r4, 0x0, &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010101, @in=@private=0xa010182, 0x4e23, 0x8, 0x4e22, 0x20, 0xa, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x33, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca7}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@empty, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 12.948482023s ago: executing program 0 (id=5406): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r6 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) ppoll(&(0x7f0000000000)=[{r1, 0x8108}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4a24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) 12.02661958s ago: executing program 3 (id=5407): socket(0x10, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='wg0\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000200)="9c", 0x1}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x10e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0xd8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x5}, @hopopts={0x33, 0x18, '\x00', [@pad1, @ra={0x5, 0x2, 0x268}, @generic={0xf, 0xb9, "614ccb56dd684a71816467683dafdf84e26d48a952d0a41b15a34cc14fc4afe6e6a7d5e12cfd9bd459c39cd719c23f6d598f7f64dd51c2ba4074512f221e2dd496cb58523bbdb9136a2bdb420018931dc265824cb6df54d732b7a865954f051df4c90941872bc4d0224431e01afd5e5545fa4f350b8ffa4c4ce0dbd58ee4fec61205d64ec94a1d8c649b2eac33cd561dfc5aa22cd70e0ce01025b7492cd77c6d449d192949646977d6b9b6af1e3d1970ac2bffc8fb620c602c"}]}]}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 10.604590158s ago: executing program 5 (id=5408): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048cc) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xd3, 0x0, 0xff, 0x4, 0x2, 0x3e, 0xb, 0x36f, 0x34, 0xaf, 0x7bffffff, 0x0, 0x20, 0x0, 0x4, 0x2, 0x7}}, 0x34) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xea}]}]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) eventfd(0x0) dup2(r4, r7) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r6) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) 10.389107018s ago: executing program 6 (id=5409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, r4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000240)) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000004000)={0x24, 0x0, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc47}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003340000003403"], 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) 10.020646237s ago: executing program 3 (id=5410): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) socket$netlink(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) 9.760582699s ago: executing program 2 (id=5411): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) openat$full(0xffffff9c, &(0x7f0000000000), 0x40c00, 0x0) 9.629349649s ago: executing program 0 (id=5412): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e07f50700000280004005f0000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9d5bb74f432ba1fa21b7b6fa7a9b857b7210967ea0af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc991194f19f1ec9acd8595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079000098cc07c09c1a72cb6d47cea7ad73827cccc21842599e0ae7b91f0b878b9267aa0b2874ffdea613e892f0f9ff940f905d6d985bf6e4155a9c479936c3e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd17782bd0362300400cbd21207e5263d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc58602162e31e4a43654a24cc9d9628e9377223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d0000a68945f230e8e4064074cec7567c47c0fbf5ac9260bcb70c000000000000000000000000000000003d5d51a158f2b007d2f5d46f8eba50277138af4ddded7074741638ff8fd5189c2a4b55d3a6ff1a80139e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064"]}, 0x113) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000"], 0x0) 8.286874874s ago: executing program 0 (id=5413): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd0e, 0x0}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) openat$dsp(0xffffff9c, &(0x7f0000000200), 0x800, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0xff, 0xf}, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffbd, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) sendmmsg(r5, &(0x7f0000002b00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast1, 0xfffffffc, 0x1}, 0x80, 0x0}, 0x5b4}], 0x8000000000000ea, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x2, 0x102) 8.215430018s ago: executing program 2 (id=5414): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064"]}, 0x113) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) 8.017153244s ago: executing program 3 (id=5415): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000020000008500000085000000b70000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000cc4e6de5eb74506703f8dde1901404000000000000007fee8416d9b330546f69363168ff2889c1ac3912997e2092755c161ce0a515951068c30ae5d54838d60fdf69eb06940eb12bac36edb8d1d4010000fe572aff95bb00c6ac9aeab80be7c181850eb10fc8a349437f9b1af4d16e11c2a0f153bb9034a0e2ad887e", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040000000000"], 0x34, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {0x0}, {&(0x7f00000001c0)="ee641681c41fd678a13a3a", 0xb}], 0x3) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x1b4, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x645}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x635}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f62}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffffff, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "d167af674e92b0e53b49d57262588a21742e25cd8335f8a825d136a2c446ccb8b545365940fcd9c1ac973503279de329d9c568340abfe87cf3497e2cebd25faddb31ee10102a53768c0ca0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40e}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "242bd0832461995a917d2b57ed7435dd8bd6af63d2c8bca175"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x225d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x47}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x800}, 0x4084) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x80000800, 0x1, 0xff, 0x1, 0x0, 0x7f}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x150, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x150}}, 0x4000) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) openat$vicodec1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) 7.499098807s ago: executing program 5 (id=5416): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064"]}, 0x113) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) 7.03577945s ago: executing program 6 (id=5417): socket(0x400000000010, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {}, @raw32={[0x2600]}}], 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r8, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 5.797729034s ago: executing program 3 (id=5418): r0 = epoll_create(0x6) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000000}) io_getevents(0x0, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) setpriority(0x2, r5, 0x8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x1, 0x6, 0x0, 0x2040, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x1}, 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, 0x0, 0x0}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8995, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) 5.188089886s ago: executing program 6 (id=5419): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x34) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x70, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0xa0402, 0xcf) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x120, 0x0, 0x3, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x3, 0x0, 0x6}]}, 0x8) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x10) 5.092560535s ago: executing program 0 (id=5420): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x10, 0x1, 0x1, [r3]}}, @rights={{0x10, 0x1, 0x1, [r3]}}], 0x20, 0x4000000}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) read$FUSE(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 4.577497946s ago: executing program 2 (id=5421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) unshare(0x60600) syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f00000001c0)='./cgroup\x00', 0x500082c) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000845, &(0x7f00000001c0)={0xa, 0x2, 0x9d5f, @empty, 0x98}, 0x1c) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101c000"]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340)) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000f8ff", @ANYRES16, @ANYBLOB="000229bd7000fbdbdf25180000000a0006000802110000010000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) fanotify_init(0x200, 0x0) r8 = getgid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, r8, 0x2, 0x3}, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, 0x0, &(0x7f0000000400)) keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) unshare(0x68040200) 3.866358202s ago: executing program 5 (id=5422): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a"]}, 0xe3) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) 2.825973226s ago: executing program 6 (id=5423): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r4, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064"]}, 0x113) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000"], 0x0) 2.647561623s ago: executing program 2 (id=5424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="42a1ee5b20dddd57a5", 0x9, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x57, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x44, 0x11, 0x43d, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe0}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x41}, {0x8, 0xb, 0x4fc}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r8, @ANYBLOB="80001e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 1.348059711s ago: executing program 3 (id=5425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1}], 0x1, 0x40800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x7, 0x2d, 0x8d, 0x6, {0xc, 0x9, 0x5, 0x749, 0x64, 0x4, 0xff01, 0x5, 0x6, 0x9, 0xb73b, 0x6, 0x9ba5, 0x5, "6de0243c4097eeef55aab2d5a3a682e548d04d9787030dbab4f228a29df96a28"}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000010000000000bec35e2ba0ef94870ea5ee14782a159cc6bc149e1b584640905c9c8bbae836e01e2b92d9136c864e80cb6f7caefc7112e23b5b35583743ba4fa45bacc224969871715c08d03950771cd963c3055fc2cb5d8ea3c84f4b6733e0b4f6807431d79add8577280d81740a44a9cecf178c323aab6f09f5b2dedc7f7b4d58b470a00726045b9aa12be6a066b93a3b2b06960ee6183318d47f462ddcac177e9c3b77a95af99d"], 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r8, &(0x7f0000000880)={0x2020}, 0x2020) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 975.114446ms ago: executing program 0 (id=5426): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="05310500"], 0x1, [{0x6f, &(0x7f0000000900)=ANY=[@ANYBLOB="6f03952bdc0d551aabb8ea7b54eacaab1cfdff3d746aeb64fac34ce90e4c691dfd879566af79d18c315da1b16657156d2916e97c07d325f9f09ba565387d211edc093782e20b365aa0c0a460d64d042a55bd5cc0aa97a4627632318ae1d30fb5d626b6f1f2ca1885b39b9fd2da4c40"]}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a6"]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0xc, &(0x7f0000000340)={0x20, 0x5, 0xa6, {0xa6, 0xf, "0883109d3da9872dfcee4af7c4af070c90caedfbe86d77055640d9f0d8b6c6166d5a535c889dd49d5e7fe514b094f0a9bc8fa4515b8313c9097bcbe2dc256ed3acdb2a7426b1f7a82007ebce009887850106805cb4f5c817a6ccf458fba0dade4e12179e0ea6d5f9ef58f0b25770ad2cf3f621a318d4d636d2de06997751c6591d2b49876622b66e6853d0664ef1e24dce929aebc2306914735a40099ce09880e95b36b5"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x40, 0x10, 0x30, "ca67af35bf6918bfa08ae29e61327a759169cd21a4d8cecd6c5d381c21a8be791769927f536dd58d0cdcd732d24c71dc"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x1, 0x200, 0x7fffffff, 0x1, 0x6, 0x8, 0x8000, 0xd46f, 0xd9, 0x81, 0x401, 0x799f}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xe}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x404}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x28802, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$inet(0x2, 0x2, 0x307fea7b) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000140)=[{0x8, 0x3, 0x6, 0xdd}, {0xb, 0x5, 0x0, 0x800}, {0x16cd, 0x5, 0xa, 0x5}, {0x5, 0x0, 0x0, 0x7}]}) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) ioctl$KDFONTOP_GET(r9, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x10001d, 0x18b, &(0x7f0000000440)}) r10 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r6, 0x8}, {r0, 0x80}, {r9, 0x2004}, {r10}, {r8, 0x3000}, {r4, 0x20}, {r7, 0x23}, {r8, 0x6025}, {r7, 0x80}, {r10, 0x288}], 0xa, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000686000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) 686.880706ms ago: executing program 6 (id=5427): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x6, [@var={0x7f, 0x0, 0x0, 0xe, 0x1}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x6}, {}, {0xc, 0x25}, {0x0, 0x3}, {0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x80000000}}, @float={0x1, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x9}}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000001500)=""/161, 0x9e, 0xa1, 0x1, 0xc}, 0x28) openat2(r4, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x40000, 0x48, 0x3}, 0x18) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010500000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0800a0009e09000008002600b414000008009f0003edff"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0xfffffff7, 0x1, 0x3}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x2a, 0x107, 0xfffffffd, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="6b54e1a6"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001840)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5, 0x4, 0x4, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], &(0x7f0000000140)='GPL\x00', 0x2, 0x44, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x1b, r6, 0x8, &(0x7f00000018c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0x3, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001c80)=[r5], &(0x7f0000001cc0)=[{0x3, 0x3, 0xf, 0x5}, {0x1, 0x1, 0x4}, {0x2, 0x3, 0xe, 0x4}, {0x3, 0x1, 0xd, 0x1}, {0x3, 0x4, 0xa, 0x1}], 0x10, 0x28}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) 0s ago: executing program 5 (id=5428): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$alg(0x26, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x70bd2d, 0x3, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x8}, [@NDA_IFINDEX={0x8, 0x8, r1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): command 0x0c1a tx timeout [ 1412.179491][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1412.390265][ T24] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1412.398518][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.418983][ T24] usb 3-1: config 0 has no interface number 0 [ 1412.437079][ T24] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1412.450025][ T24] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.467115][ T24] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1412.490743][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.501674][T23415] netlink: 'syz.3.4920': attribute type 2 has an invalid length. [ 1412.534724][T23415] : entered promiscuous mode [ 1412.755554][ T24] usb 3-1: Product: syz [ 1412.764010][ T24] usb 3-1: Manufacturer: syz [ 1412.771226][ T24] usb 3-1: SerialNumber: syz [ 1413.038302][ T24] usb 3-1: config 0 descriptor?? [ 1413.090685][T23407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1413.099862][ T24] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1413.110684][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1413.289614][T20995] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1413.302775][T23407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.327491][T23407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.329006][T20995] usb 6-1: USB disconnect, device number 53 [ 1413.405029][ T24] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1414.507094][T23437] netlink: 'syz.5.4924': attribute type 12 has an invalid length. [ 1414.515167][T23437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1415.578763][T23444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1415.597714][T23444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1415.606676][T23444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1416.236921][ T24] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1416.256062][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4928'. [ 1416.833447][T20995] usb 3-1: USB disconnect, device number 4 [ 1416.851266][T20995] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1416.882302][T20995] cyberjack 3-1:0.69: device disconnected [ 1416.893381][ T24] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1416.901767][ T24] usb 5-1: config 0 has no interface number 0 [ 1417.242362][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1417.252241][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.301727][ T24] usb 5-1: Product: syz [ 1417.314090][ T24] usb 5-1: Manufacturer: syz [ 1417.360095][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1417.375319][ T24] usb 5-1: SerialNumber: syz [ 1417.434090][ T24] usb 5-1: config 0 descriptor?? [ 1417.696867][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1417.703065][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1418.312918][T23477] hub 1-0:1.0: USB hub found [ 1418.321371][T23477] hub 1-0:1.0: 1 port detected [ 1418.606887][T23472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1418.617009][T23472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1418.630596][T23472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1419.536576][T20995] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1419.657595][ T24] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1419.688983][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1419.699427][T20995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.747376][T20995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.757380][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1419.776843][T20995] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1419.790282][ T24] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1419.828872][ T24] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1419.837520][T20995] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1419.868439][T20995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.876686][ T24] usb 5-1: USB disconnect, device number 22 [ 1419.897751][ T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1419.909902][T20995] usb 1-1: config 0 descriptor?? [ 1419.937819][ T24] keyspan 5-1:0.133: device disconnected [ 1420.464408][T23493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1420.470862][T23493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1420.477314][T23493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1421.623118][T20995] usbhid 1-1:0.0: can't add hid device: -71 [ 1421.638773][T20995] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1421.773028][T20995] usb 1-1: USB disconnect, device number 18 [ 1422.061324][T23509] netlink: 'syz.3.4937': attribute type 4 has an invalid length. [ 1422.396967][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1422.606916][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1422.613109][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1423.639547][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.646276][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.259769][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1426.273669][T23549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1426.609544][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4945'. [ 1427.667803][T23560] netlink: 'syz.3.4947': attribute type 1 has an invalid length. [ 1427.910315][T23560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1428.258943][T23568] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1428.289463][T23568] bond0: (slave netdevsim0): Releasing backup interface [ 1428.313436][T23568] bond3: (slave netdevsim0): Enslaving as an active interface with a down link [ 1428.429129][T23573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1428.936742][T10370] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1429.126261][T10370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.138138][T10370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.153094][T10370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1429.172330][T10370] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1429.182379][T10370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.199654][T10370] usb 3-1: config 0 descriptor?? [ 1429.599183][T23589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1429.606950][T23589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1429.614429][T23589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1429.648949][T10370] plantronics 0003:047F:FFFF.009B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1431.096676][T10370] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 1431.416267][T23604] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1431.416267][T23604] program syz.4.4951 not setting count and/or reply_len properly [ 1431.456376][T23604] kernel profiling enabled (shift: 6) [ 1431.603711][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1431.803446][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1431.809627][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1432.096119][T23612] delete_channel: no stack [ 1432.114029][T20995] usb 3-1: USB disconnect, device number 5 [ 1432.626625][T20995] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1432.860143][T20995] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1432.886669][T20995] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1432.930787][T20995] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1432.953975][T20995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.762581][T23612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1433.978572][T20995] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1434.303477][T23612] veth1_to_team: entered promiscuous mode [ 1434.312100][T23612] bridge0: entered promiscuous mode [ 1434.391955][T23612] debugfs: 'hsr1' already exists in 'hsr' [ 1434.398296][T23612] Cannot create hsr debugfs directory [ 1434.404137][T23612] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1434.415089][T23612] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 1434.502562][T23612] hsr1: entered allmulticast mode [ 1434.507786][T23612] veth1_to_team: entered allmulticast mode [ 1434.521222][T23612] bridge0: entered allmulticast mode [ 1435.836888][T16356] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1436.439013][T23648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1436.447527][T23648] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1436.456187][T23648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.550945][T16356] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1436.573305][T16356] usb 4-1: config 8 has an invalid interface number: 92 but max is 0 [ 1436.588982][T16356] usb 4-1: config 8 has no interface number 0 [ 1436.596423][T16356] usb 4-1: config 8 interface 92 has no altsetting 0 [ 1436.823266][T16356] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 1436.836592][T16356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.866416][T16356] usb 4-1: Product: syz [ 1436.894498][T16356] usb 4-1: Manufacturer: syz [ 1437.084447][T16356] usb 4-1: SerialNumber: syz [ 1437.123358][T20995] usb 3-1: USB disconnect, device number 6 [ 1438.374632][T16356] gspca_main: etoms-2.14.0 probing 102c:6251 [ 1438.459150][T16356] usb 4-1: USB disconnect, device number 18 [ 1438.476880][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1438.482940][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1438.489058][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1439.826605][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1440.075424][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.094184][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1440.406740][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1440.505496][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.548025][ T24] usb 4-1: config 0 descriptor?? [ 1440.675823][T23690] tipc: Bearer : already 2 bearers with priority 0 [ 1440.684007][T23690] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1440.695047][T23690] syzkaller0: entered promiscuous mode [ 1441.118771][T23690] syzkaller0: entered allmulticast mode [ 1441.206722][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1441.728975][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1442.404333][ T24] usb 4-1: USB disconnect, device number 19 [ 1444.447898][T23715] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1444.458316][T23715] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1444.480760][T23715] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1444.914426][ T6420] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1445.180844][ T6420] usb 6-1: Using ep0 maxpacket: 32 [ 1445.518651][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1445.835517][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1446.318534][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.406981][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1446.459058][ T6420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.476671][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1446.482756][ T6420] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1446.492182][ T6420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.548030][ T6420] usb 6-1: config 0 descriptor?? [ 1446.556657][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1446.564213][ T6420] hub 6-1:0.0: USB hub found [ 1448.017092][ T6420] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1448.028395][ T6420] usbhid 6-1:0.0: can't add hid device: -71 [ 1448.034719][ T6420] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1448.158341][ T6420] usb 6-1: USB disconnect, device number 54 [ 1449.126643][T10370] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1449.316661][T10370] usb 6-1: Using ep0 maxpacket: 8 [ 1449.373572][T10370] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1449.382877][T10370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.391221][T10370] usb 6-1: Product: syz [ 1449.395454][T10370] usb 6-1: Manufacturer: syz [ 1449.400319][T10370] usb 6-1: SerialNumber: syz [ 1449.419057][T10370] usb 6-1: config 0 descriptor?? [ 1449.427922][T10370] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1449.439798][T10370] usb 6-1: setting power ON [ 1449.444395][T10370] dvb-usb: bulk message failed: -22 (2/0) [ 1449.501352][T10370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1450.274063][T10370] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1450.286736][T10370] usb 6-1: media controller created [ 1450.301326][ T30] audit: type=1326 audit(1762666894.865:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.403207][T10370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1450.405806][ T30] audit: type=1326 audit(1762666894.895:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.434150][ T6420] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1450.444805][ T30] audit: type=1326 audit(1762666894.895:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.509097][ T30] audit: type=1326 audit(1762666894.895:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.597123][ T6420] usb 1-1: Using ep0 maxpacket: 16 [ 1450.607469][ T6420] usb 1-1: config 0 has no interfaces? [ 1450.616035][ T6420] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1450.639596][ T6420] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1450.680070][ T6420] usb 1-1: Manufacturer: syz [ 1450.701749][ T30] audit: type=1326 audit(1762666894.895:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.770845][ T6420] usb 1-1: config 0 descriptor?? [ 1450.779283][T10370] usb 6-1: selecting invalid altsetting 6 [ 1450.785049][T10370] usb 6-1: digital interface selection failed (-22) [ 1450.902141][T10370] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1450.921343][ T30] audit: type=1326 audit(1762666894.895:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1450.926115][T10370] usb 6-1: setting power OFF [ 1451.346981][T23797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1451.359108][T23797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1451.367198][T23797] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1451.407058][ T30] audit: type=1326 audit(1762666894.895:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1451.446614][ T30] audit: type=1326 audit(1762666894.895:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1451.491649][ T30] audit: type=1326 audit(1762666894.895:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1451.823386][T23795] can: request_module (can-proto-3) failed. [ 1451.884359][T10370] dvb-usb: bulk message failed: -22 (2/0) [ 1451.907033][T10370] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1451.916391][T10370] (NULL device *): no alternate interface [ 1452.037760][ T30] audit: type=1326 audit(1762666894.895:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23780 comm="syz.2.4986" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1452.104228][T23784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.152394][T10370] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1452.183438][T23784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.192839][T10370] usb 6-1: USB disconnect, device number 55 [ 1453.467389][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1453.473569][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1453.479827][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1454.399010][T23833] misc userio: No port type given on /dev/userio [ 1454.416311][T10370] usb 1-1: USB disconnect, device number 19 [ 1454.426258][T23833] misc userio: The device must be registered before sending interrupts [ 1454.546611][ T6420] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1454.830475][ T6420] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 1454.865870][ T6420] usb 4-1: config 0 has no interface number 0 [ 1454.894077][ T6420] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1454.904698][ T6420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.913902][ T6420] usb 4-1: Product: syz [ 1454.920650][ T6420] usb 4-1: Manufacturer: syz [ 1454.925531][ T6420] usb 4-1: SerialNumber: syz [ 1454.950037][ T6420] usb 4-1: config 0 descriptor?? [ 1456.974775][ T6420] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 1456.976865][T10370] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1456.984848][ T6420] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 1457.128370][ T6420] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 1457.273129][T10370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.290631][T10370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.301882][ T6420] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 1457.321322][T10370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1457.335889][ T6420] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1457.590013][T23858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1457.607032][T23858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1457.625879][T23858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1457.736833][T10370] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1457.756362][T10370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.874952][T10370] usb 5-1: config 0 descriptor?? [ 1457.899651][ T6420] usb 4-1: USB disconnect, device number 20 [ 1457.942496][ T6420] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1458.647491][ T6420] keyspan 4-1:0.133: device disconnected [ 1458.904965][T10370] plantronics 0003:047F:FFFF.009C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1459.284793][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1459.682154][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1459.756717][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1460.226639][T10370] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 1460.617855][T23884] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1460.624014][T23884] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1460.709335][T23884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1461.172561][T20995] usb 5-1: USB disconnect, device number 23 [ 1461.919667][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1462.176976][T23891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1462.665160][T23915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1462.731384][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1462.796800][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1462.802921][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1462.967015][ T6420] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1463.113477][T23916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1463.147427][ T6420] usb 3-1: Using ep0 maxpacket: 8 [ 1463.158832][ T6420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1463.182092][ T6420] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1463.226040][ T6420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.255464][ T6420] usb 3-1: Product: syz [ 1463.264211][ T6420] usb 3-1: Manufacturer: syz [ 1463.370190][T23916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1463.378089][T23916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1463.436332][ T6420] usb 3-1: SerialNumber: syz [ 1463.495036][ T6420] usb 3-1: config 0 descriptor?? [ 1463.642963][T23922] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5011'. [ 1464.333751][T23927] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 1464.342309][T23927] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 1464.522177][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1464.522197][ T30] audit: type=1800 audit(1762666909.065:1130): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5012" name="nullb0" dev="devtmpfs" ino=2982 res=0 errno=0 [ 1465.047037][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1465.436379][T23944] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5014'. [ 1465.448503][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1465.454567][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1466.165671][ T6420] usb 3-1: USB disconnect, device number 7 [ 1466.761801][T23953] fuse: Bad value for 'fd' [ 1466.910105][T23944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.942634][T23944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.967902][T23944] bond0 (unregistering): Released all slaves [ 1467.733856][T23945] syzkaller1: entered promiscuous mode [ 1467.742169][T23945] syzkaller1: entered allmulticast mode [ 1467.811565][T23943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1467.822511][T23943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1467.834270][T23943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1468.257341][T10370] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1468.623008][T10370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.748135][T10370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.867124][T10370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1468.979193][T10370] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1468.989827][T10370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.016272][T10370] usb 5-1: config 0 descriptor?? [ 1469.067026][ T5902] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1469.586833][ T5902] usb 1-1: device descriptor read/64, error -71 [ 1469.752448][T10370] plantronics 0003:047F:FFFF.009D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1469.856633][ T5902] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1469.965740][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1469.971875][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1469.977922][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1470.131368][ T5902] usb 1-1: device descriptor read/64, error -71 [ 1470.291239][ T5902] usb usb1-port1: attempt power cycle [ 1470.936704][T10370] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1470.958391][ T5902] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1470.966792][T20995] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1471.009177][ T5902] usb 1-1: device descriptor read/8, error -71 [ 1471.087007][ T30] audit: type=1326 audit(1762666915.675:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1471.200952][ T30] audit: type=1326 audit(1762666915.675:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1471.300823][ T30] audit: type=1326 audit(1762666915.675:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1471.507014][T20995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.524605][T10370] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.556322][T20995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.589501][T10370] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1471.630317][ T30] audit: type=1326 audit(1762666915.675:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1471.653124][ T5902] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1471.653263][T20995] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1471.673909][T10370] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1471.747747][T10370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.766760][T20995] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1471.788423][ T30] audit: type=1326 audit(1762666915.675:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1471.789253][T10370] usb 3-1: config 0 descriptor?? [ 1471.810551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.833571][T20995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.850026][T16356] usb 5-1: USB disconnect, device number 24 [ 1471.892948][T20995] usb 6-1: config 0 descriptor?? [ 1471.968880][T10370] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1471.972951][ T30] audit: type=1326 audit(1762666915.675:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1472.040494][ T5902] usb 1-1: device descriptor read/8, error -71 [ 1472.408852][ T5902] usb usb1-port1: unable to enumerate USB device [ 1472.423226][ T30] audit: type=1326 audit(1762666915.675:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1472.445324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.560565][T24007] misc userio: No port type given on /dev/userio [ 1472.648710][T24007] misc userio: The device must be registered before sending interrupts [ 1473.062571][T20995] plantronics 0003:047F:FFFF.009E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1473.085331][ T30] audit: type=1326 audit(1762666915.675:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1473.346267][ T30] audit: type=1326 audit(1762666915.675:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1473.568312][ T30] audit: type=1326 audit(1762666915.855:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1473.944330][T10370] usb 3-1: USB disconnect, device number 8 [ 1474.790078][T24024] netlink: 'syz.5.5029': attribute type 10 has an invalid length. [ 1474.816437][T24024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.908435][T24024] team0: entered promiscuous mode [ 1475.171352][T24024] team_slave_0: entered promiscuous mode [ 1475.200664][T24024] team_slave_1: entered promiscuous mode [ 1475.273799][T24024] netdevsim netdevsim5 : entered promiscuous mode [ 1475.506414][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1475.527270][T24024] bond0: (slave team0): Enslaving as an active interface with an up link [ 1475.536788][T10370] usb 6-1: USB disconnect, device number 56 [ 1475.596979][T24015] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1475.699012][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1476.245484][T24044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5031'. [ 1476.262438][T24044] : left promiscuous mode [ 1476.406244][T24015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1476.412811][T24015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1477.714143][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1477.753935][T24070] fuse: Bad value for 'fd' [ 1478.479198][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1479.130978][T24061] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1479.206717][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1479.699354][T24061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1479.705667][T24061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1480.075308][T24094] netlink: 'syz.2.5038': attribute type 27 has an invalid length. [ 1480.207437][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.284733][T24100] netlink: 'syz.4.5042': attribute type 10 has an invalid length. [ 1480.302788][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.310982][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.318933][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.326864][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.334771][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.342761][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.350727][T24101] netlink: 'syz.0.5040': attribute type 3 has an invalid length. [ 1480.858688][T24100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.206881][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1481.756699][ T9234] Bluetooth: hci3: command 0x0c1a tx timeout [ 1482.188207][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1482.188227][ T30] audit: type=1800 audit(1762666926.775:1142): pid=24120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5046" name="bus" dev="ramfs" ino=77957 res=0 errno=0 [ 1483.417352][T24129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1483.426752][T24129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1483.435376][T24129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1484.561497][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.567999][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.790764][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1485.324763][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1485.391970][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.413567][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1485.521173][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1485.521196][ T9234] Bluetooth: hci4: command 0x0c1a tx timeout [ 1485.527514][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1485.737672][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1485.865462][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1486.081362][ T24] usb 3-1: Manufacturer: syz [ 1486.317673][T24164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1486.332063][T24164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1486.346282][T24164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1486.799088][ T24] usb 3-1: config 0 descriptor?? [ 1487.249233][T24177] [U]  [ 1488.179879][T24181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1488.217227][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1488.235321][T20995] usb 3-1: USB disconnect, device number 9 [ 1488.400163][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1488.400163][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1488.946257][T24190] validate_nla: 8 callbacks suppressed [ 1488.946270][T24190] netlink: 'syz.2.5055': attribute type 10 has an invalid length. [ 1488.961319][T24190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.978418][T24190] bond0: (slave team0): Enslaving as an active interface with an up link [ 1489.214122][T24196] bridge1: entered promiscuous mode [ 1490.250855][T20995] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1490.458360][T20995] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 1490.486666][T20995] usb 1-1: config 0 has no interface number 0 [ 1490.628680][T20995] usb 1-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 1490.744879][T20995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.758040][T24212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5060'. [ 1490.806897][T20995] usb 1-1: config 0 descriptor?? [ 1490.824373][T20995] usb-storage 1-1:0.125: USB Mass Storage device detected [ 1491.281525][T24224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1491.293204][T24224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1491.336861][T24224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1492.608322][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5063'. [ 1492.950201][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1493.036872][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1493.356712][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1493.436838][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1494.425226][T16356] usb 1-1: USB disconnect, device number 24 [ 1494.676614][T20995] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1495.052991][T20995] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1495.118083][T20995] usb 4-1: config 0 has no interface number 0 [ 1495.190738][T20995] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1495.380388][T20995] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1495.657763][T20995] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1495.762391][T24264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1495.774538][T24264] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1495.785528][T24264] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1495.809580][T20995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.826670][T20995] usb 4-1: Product: syz [ 1495.850292][T20995] usb 4-1: Manufacturer: syz [ 1495.973080][T20995] usb 4-1: SerialNumber: syz [ 1496.134617][T20995] usb 4-1: config 0 descriptor?? [ 1496.141058][T24251] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1496.188470][T20995] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1496.207969][T20995] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1496.406894][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1496.998029][T24273] fuse: Unknown parameter '0xffffffffffffffff' [ 1497.014976][T24273] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1497.141381][T24277] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5073'. [ 1497.306703][T20995] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1497.496813][T20995] usb 5-1: Using ep0 maxpacket: 16 [ 1497.505196][T20995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.533182][T20995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1497.560035][T20995] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1497.599811][T20995] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1497.640468][T20995] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1497.778673][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1497.836631][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1497.842677][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1498.108448][T20995] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1498.118011][T20995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1498.126104][T20995] usb 5-1: SerialNumber: syz [ 1498.157979][T24273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1498.168534][T20995] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1498.179830][T20995] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1498.904663][T24295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5074'. [ 1500.145151][T20995] usb 4-1: USB disconnect, device number 21 [ 1500.154495][T20995] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1500.168178][ T5902] usb 5-1: USB disconnect, device number 25 [ 1500.182248][T20995] cyberjack 4-1:0.69: device disconnected [ 1500.276618][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1500.457141][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1500.494818][ T24] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1500.504125][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.672283][T24316] netlink: 'syz.4.5078': attribute type 4 has an invalid length. [ 1500.707916][ T5902] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1500.873212][ T24] usb 1-1: Product: syz [ 1500.973185][ T24] usb 1-1: Manufacturer: syz [ 1500.986689][ T24] usb 1-1: SerialNumber: syz [ 1500.997308][ T24] usb 1-1: config 0 descriptor?? [ 1501.011183][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1501.102271][ T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1501.110758][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1501.158815][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1501.173544][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1501.187241][ T24] usb 1-1: media controller created [ 1501.305162][T24307] openvswitch: netlink: Actions may not be safe on all matching packets [ 1501.331954][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.716744][T24311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1501.725846][T24311] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1501.734291][T24311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1501.879387][T24322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.001279][T24322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.006699][T10370] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1502.246641][T10370] usb 5-1: Using ep0 maxpacket: 8 [ 1502.298160][T10370] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1502.321857][T10370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.408985][T10370] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1502.420251][T10370] pvrusb2: ********** [ 1502.424615][T10370] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1502.464345][T10370] pvrusb2: Important functionality might not be entirely working. [ 1502.533948][T10370] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1502.569804][T10370] pvrusb2: ********** [ 1502.624394][ T2348] pvrusb2: Invalid write control endpoint [ 1502.768743][ T2348] pvrusb2: Invalid write control endpoint [ 1502.782103][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1502.797304][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1502.862983][T24316] dvb-usb: bulk message failed: -22 (3/0) [ 1502.873546][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1502.889888][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1502.915746][ T2348] pvrusb2: Device being rendered inoperable [ 1502.927696][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1502.948926][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1502.998053][ T2348] pvrusb2: Attached sub-driver cx25840 [ 1503.012900][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1503.058121][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1503.102385][ T24] cxusb: set interface failed [ 1503.133914][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1503.400975][ T24] DVB: Unable to find symbol mt352_attach() [ 1503.419094][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1503.556735][ T24] rc_core: IR keymap rc-dvico-portable not found [ 1503.563466][ T24] Registered IR keymap rc-empty [ 1503.601442][ T24] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1503.634494][ T24] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input121 [ 1503.701998][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 1503.758311][ T24] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1503.778578][ T24] usb 1-1: USB disconnect, device number 25 [ 1503.786587][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1503.792674][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1503.931209][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1503.978910][ T5902] usb 6-1: no configurations [ 1503.991010][ T5902] usb 6-1: can't read configurations, error -22 [ 1505.395993][T24347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1505.406232][T24347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1505.416577][T24347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1506.066391][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1506.886601][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1507.446679][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1507.452800][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1509.582399][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1509.598399][T24373] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1510.160275][T24373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1510.166894][T24373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1510.182288][T24403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1510.197300][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1510.486602][T20995] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1510.873110][T20995] usb 3-1: unable to read config index 0 descriptor/all [ 1510.880417][T20995] usb 3-1: can't read configurations, error -71 [ 1511.678462][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1512.238305][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1512.633864][T24426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5100'. [ 1513.102254][T24422] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1513.111888][T24422] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1513.122399][T24422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1514.726874][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1515.200266][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1515.206299][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1515.285910][ T30] audit: type=1326 audit(1762666959.825:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1515.377975][ T30] audit: type=1326 audit(1762666959.825:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1515.563274][ T30] audit: type=1326 audit(1762666959.825:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1515.585515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.926649][ T30] audit: type=1326 audit(1762666959.825:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.157773][ T30] audit: type=1326 audit(1762666959.825:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.316720][ T30] audit: type=1326 audit(1762666959.825:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.450835][ T30] audit: type=1326 audit(1762666959.825:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.504178][ T30] audit: type=1326 audit(1762666960.235:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.826775][ T30] audit: type=1326 audit(1762666960.235:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.856799][ T30] audit: type=1326 audit(1762666960.305:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24445 comm="syz.0.5104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1516.857326][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1516.931376][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1516.944668][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1516.953033][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1516.961756][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1518.047266][T24462] chnl_net:caif_netlink_parms(): no params data found [ 1518.280024][T24462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.311925][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1518.357009][T24462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.358128][T24462] bridge_slave_0: entered allmulticast mode [ 1518.360515][T24462] bridge_slave_0: entered promiscuous mode [ 1518.362499][T24462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.362588][T24462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.362685][T24462] bridge_slave_1: entered allmulticast mode [ 1518.363796][T24462] bridge_slave_1: entered promiscuous mode [ 1518.656339][T24462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.689208][T24462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.945112][T24487] usb usb7: usbfs: process 24487 (syz.5.5111) did not claim interface 0 before use [ 1519.041290][T24462] team0: Port device team_slave_0 added [ 1519.078684][T22164] Bluetooth: hci5: command tx timeout [ 1519.098359][T24462] team0: Port device team_slave_1 added [ 1519.282462][T10666] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1519.350445][T24462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.386613][ T5902] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1519.456715][T24462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.489915][T10666] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.499952][T10666] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.517084][T10666] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.589497][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.618359][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.653431][T10666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.661609][T24462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.662063][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.678601][T24462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.759736][T10666] usb 6-1: config 0 descriptor?? [ 1519.771040][T10666] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1519.780977][T24462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.808592][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.827618][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.840399][ T5902] usb 4-1: config 0 descriptor?? [ 1520.027943][T24462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.227778][T24462] hsr_slave_0: entered promiscuous mode [ 1520.234500][T24462] hsr_slave_1: entered promiscuous mode [ 1520.260459][T24462] debugfs: 'hsr0' already exists in 'hsr' [ 1520.404994][T24462] Cannot create hsr debugfs directory [ 1521.171774][T22164] Bluetooth: hci5: command tx timeout [ 1521.666751][T16356] usb 6-1: USB disconnect, device number 59 [ 1521.686031][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 1521.731975][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1521.800542][ T5902] usb 4-1: USB disconnect, device number 22 [ 1521.820627][T24506] hub 9-0:1.0: USB hub found [ 1521.857152][T24506] hub 9-0:1.0: 1 port detected [ 1522.052702][T24462] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1522.149399][T24462] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1522.191906][T24462] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1522.291160][T24462] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1522.922932][T24525] binder: 24511:24525 ioctl c0306201 0 returned -14 [ 1523.056260][T24462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.071753][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1523.207066][T10370] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1523.213972][T24462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.229604][T22164] Bluetooth: hci5: command tx timeout [ 1523.241086][T17992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.248265][T17992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.319649][T24462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1523.349847][T24462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.407203][T10370] usb 6-1: Using ep0 maxpacket: 16 [ 1523.408968][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.419547][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.449730][T10370] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1523.468352][T10370] usb 6-1: config 0 has no interface number 0 [ 1523.479354][T10370] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1523.499528][T10370] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1523.547771][T10370] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1523.557035][T10370] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1523.565469][T10370] usb 6-1: Product: syz [ 1523.570364][T10370] usb 6-1: SerialNumber: syz [ 1523.589810][T10370] usb 6-1: config 0 descriptor?? [ 1523.616238][T10370] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input122 [ 1523.623547][T24462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.179497][T24462] veth0_vlan: entered promiscuous mode [ 1524.215016][T24462] veth1_vlan: entered promiscuous mode [ 1524.268184][T24462] veth0_macvtap: entered promiscuous mode [ 1524.416801][T24462] veth1_macvtap: entered promiscuous mode [ 1524.587887][T24462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.743304][T24462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.771130][ T6420] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1524.822889][T24543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1524.829393][T24543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1524.835794][T24543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1524.842116][T24543] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1524.848260][T24543] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1524.898179][T24543] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1524.932984][ T3569] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.944348][ T3569] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.965981][ T3569] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.996930][ T3569] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.110288][ T6420] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1525.164530][ T6420] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1525.182478][ T6420] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1525.192607][ T6420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.228930][T24540] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1525.240595][ T6420] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1525.471262][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.487042][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.494242][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.501469][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.508630][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.515755][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.523291][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.530644][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.537936][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.545096][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.552325][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1525.643284][T24546] usb 6-1: USB disconnect, device number 60 [ 1525.643339][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1525.664232][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.689499][T24546] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1525.988005][T24537] veth1_to_team: entered promiscuous mode [ 1525.994795][T24537] bridge0: entered promiscuous mode [ 1526.222769][T24537] bridge0: left promiscuous mode [ 1526.242501][T24537] veth1_to_team: left promiscuous mode [ 1526.279006][T17992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.292180][T17992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.877616][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1526.888984][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1526.895189][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1526.903334][ T9234] Bluetooth: hci2: command 0x0c1a tx timeout [ 1526.982608][T10666] IPVS: starting estimator thread 0... [ 1527.176836][T24559] IPVS: using max 34 ests per chain, 81600 per kthread [ 1527.637407][T24534] delete_channel: no stack [ 1527.651337][T10370] usb 4-1: USB disconnect, device number 23 [ 1527.924297][T24568] input: syz0 as /devices/virtual/input/input123 [ 1528.088465][T24576] netlink: 'syz.2.5123': attribute type 3 has an invalid length. [ 1528.958939][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1529.017896][T10370] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1529.466619][T16356] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1529.629082][T16356] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1529.637413][T16356] usb 6-1: config 0 has no interface number 0 [ 1529.643917][T16356] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1529.753678][T16356] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1529.875059][T24592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1530.104360][T16356] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1530.114495][T16356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.161729][T16356] usb 6-1: Product: syz [ 1530.166396][T16356] usb 6-1: Manufacturer: syz [ 1530.172680][T16356] usb 6-1: SerialNumber: syz [ 1530.294432][T16356] usb 6-1: config 0 descriptor?? [ 1530.326110][T24587] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1530.335665][T16356] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1530.356400][T16356] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1530.956904][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1531.036631][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1533.049822][T24613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1533.061841][T24613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1533.074350][T24613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1533.086698][T24613] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1533.899451][T20995] usb 6-1: USB disconnect, device number 61 [ 1533.927284][T20995] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1533.996995][T20995] cyberjack 6-1:0.69: device disconnected [ 1535.117561][T24619] Bluetooth: hci2: command 0x0c1a tx timeout [ 1535.121026][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1535.124134][T24619] Bluetooth: hci5: command 0x0c1a tx timeout [ 1535.133826][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1538.396403][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1538.396420][ T30] audit: type=1326 audit(1762666982.975:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1538.454580][ T30] audit: type=1326 audit(1762666982.975:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1538.484505][ T30] audit: type=1326 audit(1762666982.975:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1538.725581][ T30] audit: type=1326 audit(1762666982.975:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1538.765528][ T30] audit: type=1326 audit(1762666982.975:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1538.977071][ T30] audit: type=1326 audit(1762666982.975:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1539.006651][ T30] audit: type=1326 audit(1762666982.975:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1539.389504][ T30] audit: type=1326 audit(1762666982.975:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1539.496596][ T30] audit: type=1326 audit(1762666982.975:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1539.609208][ T30] audit: type=1326 audit(1762666982.985:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24679 comm="syz.6.5142" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f02539 code=0x7ffc0000 [ 1540.292034][T20995] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1540.542831][T20995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.553892][T20995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.574557][T20995] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1540.604160][T20995] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1540.626731][T20995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.927908][T20995] usb 4-1: config 0 descriptor?? [ 1541.373273][T20995] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1542.083047][T24711] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5145'. [ 1542.380737][T24711] libceph: resolve '0..' (ret=-3): failed [ 1543.416626][T10666] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 1544.184448][T24724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1544.193028][T24724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1544.204005][T24724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1544.211247][T24724] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1544.626729][T24546] usb 4-1: USB disconnect, device number 25 [ 1546.002968][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.009631][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.237952][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1546.244227][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1546.250819][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1546.257953][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1546.813011][T24748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1546.908824][T24753] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1546.915382][T24753] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1546.929949][T24753] vhci_hcd vhci_hcd.0: Device attached [ 1546.954490][T24753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5154'. [ 1547.162881][T24754] vhci_hcd: connection closed [ 1547.173333][ T36] vhci_hcd: stop threads [ 1547.188240][ T36] vhci_hcd: release socket [ 1547.236724][T10370] usb 38-1: SetAddress Request (2) to port 0 [ 1547.242768][T10370] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1547.660140][ T36] vhci_hcd: disconnect device [ 1551.270863][T24795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5164'. [ 1551.289970][T24795] libceph: resolve '0..' (ret=-3): failed [ 1552.726679][T10370] usb 38-1: device descriptor read/8, error -110 [ 1553.147973][T10370] usb usb38-port1: attempt power cycle [ 1553.566867][T24816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1553.575123][T24816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1553.581797][T24816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1553.606916][T24816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1553.897740][T10370] usb usb38-port1: unable to enumerate USB device [ 1554.251837][T24827] tipc: Started in network mode [ 1554.257023][T24827] tipc: Node identity e0000002, cluster identity 4711 [ 1554.264205][T24827] tipc: Enabling of bearer rejected, failed to enable media [ 1554.866710][T10666] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1555.532233][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1555.609403][T10666] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1555.618070][T10666] usb 4-1: config 0 has no interface number 0 [ 1555.639124][T10666] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1555.679822][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1555.694697][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1555.694694][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1555.720027][T10666] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1555.761651][T10666] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1555.818838][T10666] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1555.829997][T10666] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1555.840863][T10666] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1555.904366][T10666] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1555.931256][T10666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.005958][T10666] usb 4-1: config 0 descriptor?? [ 1556.037166][T24833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1556.044594][T24833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1556.064626][T10666] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1557.398602][ T55] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1557.590749][ T55] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1557.603860][ T55] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1557.764510][ T55] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1557.801663][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.906755][ T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1557.972467][ T55] usb 3-1: invalid MIDI out EP 0 [ 1558.081337][ T55] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1558.086703][T24546] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1558.857134][T24546] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1558.915381][T24300] udevd[24300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1559.116851][T24546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.124965][T24546] usb 6-1: Product: syz [ 1559.320299][T24546] usb 6-1: Manufacturer: syz [ 1559.344264][T24546] usb 6-1: SerialNumber: syz [ 1559.918842][T10666] usb 3-1: USB disconnect, device number 12 [ 1560.037790][T24546] rtl8150 6-1:1.0: couldn't reset the device [ 1560.075429][T24546] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1560.129983][ T55] usb 4-1: USB disconnect, device number 26 [ 1560.133514][T24546] usb 6-1: USB disconnect, device number 62 [ 1560.179625][ T55] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1560.327690][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1560.327710][ T30] audit: type=1326 audit(1762667004.835:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1560.361482][ T30] audit: type=1326 audit(1762667004.835:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1560.575192][ T30] audit: type=1326 audit(1762667004.835:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1560.692197][ T30] audit: type=1326 audit(1762667004.835:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1560.814804][ T30] audit: type=1326 audit(1762667004.835:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.059147][ T30] audit: type=1326 audit(1762667004.835:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.146683][ T30] audit: type=1326 audit(1762667004.835:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.289446][ T30] audit: type=1326 audit(1762667006.645:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.674329][ T30] audit: type=1326 audit(1762667006.645:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.825391][ T30] audit: type=1326 audit(1762667007.035:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24867 comm="syz.2.5178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1562.967702][T24899] binder: 24893:24899 ioctl c0306201 0 returned -14 [ 1562.975586][T24899] binder: 24893:24899 ioctl c0306201 0 returned -14 [ 1563.748889][T24903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1563.756230][T24903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1563.763369][T24903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1563.773399][T24903] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1564.940783][T24922] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5187'. [ 1565.306687][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1565.326393][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1565.356118][T24932] netlink: 34 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1565.534606][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1565.837040][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1565.843220][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1565.849518][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1567.164587][T24941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1567.171042][T24941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1567.177862][T24941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1567.184499][T24941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1569.044031][T17790] Bluetooth: hci2: command 0x0c1a tx timeout [ 1569.278484][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1569.278506][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1569.278552][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1569.450629][T24973] input: syz0 as /devices/virtual/input/input124 [ 1570.728747][T24981] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1570.740741][T24981] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1572.054254][T25002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1573.297290][T25008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1573.315605][T25008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1573.326740][T25008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1573.335620][T25008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1573.710394][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1573.710414][ T30] audit: type=1326 audit(1762667018.175:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1573.738774][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.964362][ T30] audit: type=1326 audit(1762667018.185:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1573.988731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.064620][ T30] audit: type=1326 audit(1762667018.185:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.086763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.139896][ T30] audit: type=1326 audit(1762667018.185:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.290148][ T30] audit: type=1326 audit(1762667018.185:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.321503][ T30] audit: type=1326 audit(1762667018.185:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.344720][ T30] audit: type=1326 audit(1762667018.185:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.368249][ T30] audit: type=1326 audit(1762667018.185:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.390331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1574.406661][ T30] audit: type=1326 audit(1762667018.185:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.472343][ T30] audit: type=1326 audit(1762667018.185:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24988 comm="syz.2.5210" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1574.849221][T25027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1575.381457][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1575.396643][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1575.416599][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1575.446904][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1575.510521][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1575.519628][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1576.372955][T25038] x_tables: duplicate underflow at hook 3 [ 1576.496609][ T5201] udevd[5201]: worker [24149] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1578.782768][T25062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1578.790553][T25062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1578.822376][T25062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1578.862486][T25062] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1578.994943][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1578.994961][ T30] audit: type=1326 audit(1762667023.475:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1579.203044][ T30] audit: type=1326 audit(1762667023.475:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1579.329670][ T30] audit: type=1326 audit(1762667023.485:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1579.475649][ T30] audit: type=1326 audit(1762667023.485:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1579.808378][ T30] audit: type=1326 audit(1762667023.485:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1579.997437][ T30] audit: type=1326 audit(1762667023.485:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1580.055915][ T30] audit: type=1326 audit(1762667023.485:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1580.435629][T25081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1580.863815][ T30] audit: type=1326 audit(1762667023.485:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1580.903974][ T30] audit: type=1326 audit(1762667023.485:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1580.904095][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1580.935283][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1580.941490][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1580.947534][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1581.098959][ T30] audit: type=1326 audit(1762667023.485:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25065 comm="syz.5.5214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1582.118527][T25091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1582.129475][T25091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1582.137826][T25091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1582.148455][T25091] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1582.547493][T16356] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1582.686995][T24546] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1582.716676][T16356] usb 3-1: Using ep0 maxpacket: 32 [ 1582.725734][T16356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.759835][T16356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.797217][T16356] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1582.806410][T16356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.983873][T24546] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1582.992114][T24546] usb 4-1: config 0 has no interface number 0 [ 1583.002872][T24546] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1583.070053][T16356] usb 3-1: config 0 descriptor?? [ 1583.096602][T24546] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1583.129985][T24546] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1583.139206][T24546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.147580][T24546] usb 4-1: Product: syz [ 1583.151957][T24546] usb 4-1: Manufacturer: syz [ 1583.157378][T24546] usb 4-1: SerialNumber: syz [ 1583.171360][T24546] usb 4-1: config 0 descriptor?? [ 1583.178006][T25104] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1583.187040][T24546] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1583.203860][T24546] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1583.400377][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1583.486996][T16356] koneplus 0003:1E7D:2D51.00A0: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 1584.070148][T25100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.081093][T25100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.120941][T16356] usb 3-1: USB disconnect, device number 13 [ 1584.240027][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1584.246995][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1584.253243][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1584.254929][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1586.465563][T16356] usb 4-1: USB disconnect, device number 27 [ 1586.474435][T16356] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1586.489023][T16356] cyberjack 4-1:0.69: device disconnected [ 1586.795483][T25150] delete_channel: no stack [ 1587.859790][ T55] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1588.106656][ T55] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1588.124809][ T55] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1588.169551][ T55] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1588.216696][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.335231][T25153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1588.346997][ T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1588.466988][T25158] ptrace attach of "./syz-executor exec"[24462] was attempted by "./syz-executor exec"[25158] [ 1588.805477][T25166] EXT4-fs: Conflicting test_dummy_encryption options [ 1588.928884][T25153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.940648][T25153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.757626][T10666] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1591.165829][T10370] usb 3-1: USB disconnect, device number 14 [ 1591.272057][T10666] usb 6-1: Using ep0 maxpacket: 8 [ 1591.287024][T10666] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1591.492895][T10666] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 1591.504095][T10666] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1591.583298][T10666] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1591.612900][T10666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.661574][T10666] usb 6-1: Product: syz [ 1591.777136][T10666] usb 6-1: Manufacturer: syz [ 1591.816678][T10666] usb 6-1: SerialNumber: syz [ 1592.094182][T10666] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1592.117153][T10666] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1592.197868][T10666] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1592.724916][T10666] usb 6-1: USB disconnect, device number 63 [ 1592.806996][T25184] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1592.824459][T24619] Bluetooth: hci2: command 0x0c1a tx timeout [ 1593.309995][T25184] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1593.316736][T25184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1593.326397][T25184] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1594.442652][T25207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1594.450088][T25207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1594.456913][T25207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1594.463745][T25207] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1595.825574][T25225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5245'. [ 1595.840863][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'. [ 1596.396733][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1596.556871][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1596.563129][T24619] Bluetooth: hci3: command 0x0c1a tx timeout [ 1596.563145][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1600.838850][T25278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.849495][T25278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1600.859040][T25278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1600.898638][T25278] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1602.556831][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1602.961493][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1602.967731][T24619] Bluetooth: hci3: command 0x0c1a tx timeout [ 1602.973958][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1603.622566][T25321] delete_channel: no stack [ 1604.384102][T25337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1604.896850][T25339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5266'. [ 1605.795315][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1605.795327][ T30] audit: type=1326 audit(1762667050.385:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1605.955364][ T30] audit: type=1326 audit(1762667050.385:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.050379][ T30] audit: type=1326 audit(1762667050.395:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.102326][ T30] audit: type=1326 audit(1762667050.395:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.124891][ T30] audit: type=1326 audit(1762667050.395:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.147480][ T30] audit: type=1326 audit(1762667050.395:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.175212][ T30] audit: type=1326 audit(1762667050.395:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.198947][ T30] audit: type=1326 audit(1762667050.395:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.221433][ T30] audit: type=1326 audit(1762667050.395:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.247215][ T30] audit: type=1326 audit(1762667050.395:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25345 comm="syz.0.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1606.416742][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1606.870301][T25356] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1607.449296][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.455605][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.349761][T25371] netlink: 320 bytes leftover after parsing attributes in process `syz.3.5271'. [ 1611.277197][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1611.283591][T25382] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1611.692456][T25382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1611.713481][T25382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1611.719917][T25382] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1612.056589][T25411] delete_channel: no stack [ 1612.265101][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1612.265463][ T30] audit: type=1326 audit(1762667056.735:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.458706][ T30] audit: type=1326 audit(1762667056.735:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.522770][ T30] audit: type=1326 audit(1762667056.735:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.545829][T25352] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1612.716934][ T30] audit: type=1326 audit(1762667056.735:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.731254][ T30] audit: type=1326 audit(1762667056.735:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.731298][ T30] audit: type=1326 audit(1762667056.745:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.749353][T25352] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1612.749375][T25352] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1612.749399][T25352] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1612.749411][T25352] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.754635][T25411] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1612.764439][T25352] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1612.770995][ T30] audit: type=1326 audit(1762667056.745:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.771043][ T30] audit: type=1326 audit(1762667056.745:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.771082][ T30] audit: type=1326 audit(1762667056.745:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1612.771121][ T30] audit: type=1326 audit(1762667056.745:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25409 comm="syz.3.5278" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1613.264142][T25420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.264672][T25420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.358224][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1613.826201][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1613.832323][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1615.197116][T16356] usb 6-1: USB disconnect, device number 64 [ 1618.871166][T25476] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1618.884016][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1619.039654][T25474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1619.049491][T25474] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1619.092282][T25474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1619.112488][T25474] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1619.371717][T25490] fuse: Unknown parameter 'grou00000000000000000000' [ 1621.117745][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1621.118879][T24619] Bluetooth: hci3: command 0x0c1a tx timeout [ 1621.123919][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1621.130710][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1621.246742][T10666] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1621.396663][T10666] usb 6-1: Using ep0 maxpacket: 16 [ 1621.416027][T10666] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1621.429892][T10666] usb 6-1: config 128 has an invalid interface number: 147 but max is 0 [ 1621.440934][T10666] usb 6-1: config 128 has no interface number 0 [ 1621.452056][T10666] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=9f.d1 [ 1621.467024][T10666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.606129][T10666] usb 6-1: Product: syz [ 1621.635588][T10666] usb 6-1: Manufacturer: syz [ 1621.667013][T10666] usb 6-1: SerialNumber: syz [ 1621.857390][T16356] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1622.434168][T16356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.455323][T16356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1622.464990][T16356] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1622.618143][T16356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.877101][T16356] usb 4-1: config 0 descriptor?? [ 1622.885299][T16356] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1622.894322][T16356] dvb-usb: bulk message failed: -22 (3/0) [ 1622.906046][T16356] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1622.918759][T16356] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1622.926841][T16356] usb 4-1: media controller created [ 1622.940926][T16356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1622.961870][T16356] dvb-usb: bulk message failed: -22 (6/0) [ 1622.976680][T16356] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1622.988593][T16356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input125 [ 1623.002047][T16356] dvb-usb: schedule remote query interval to 150 msecs. [ 1623.009492][T16356] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1623.136735][T25510] netlink: 'syz.3.5300': attribute type 6 has an invalid length. [ 1623.148616][T16356] usb 4-1: USB disconnect, device number 28 [ 1623.249429][T16356] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1623.892759][T16356] usb 6-1: USB disconnect, device number 65 [ 1623.912078][T16356] f81534a_ctrl 6-1:128.147: failed to set register 0x116: -19 [ 1623.923272][T16356] f81534a_ctrl 6-1:128.147: failed to enable ports: -19 [ 1624.278311][T25549] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5304'. [ 1625.646158][T25552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'. [ 1625.787199][T25553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1625.823990][T25553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1626.006902][T25553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1626.037062][T25553] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1627.502399][T25574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1627.518110][T25574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1627.527441][T25574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1627.534838][T25574] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1629.283402][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1629.597427][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1629.603490][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1629.609948][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1629.615947][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1630.762528][T20995] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1630.996784][T20995] usb 4-1: device descriptor read/64, error -71 [ 1631.256705][T20995] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1631.264401][T25352] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1631.406746][T20995] usb 4-1: device descriptor read/64, error -71 [ 1631.426659][T25352] usb 3-1: Using ep0 maxpacket: 32 [ 1631.435224][T25352] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1631.444767][T25352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.454331][T25352] usb 3-1: Product: syz [ 1631.458639][T25352] usb 3-1: Manufacturer: syz [ 1631.463227][T25352] usb 3-1: SerialNumber: syz [ 1631.473776][T25352] usb 3-1: config 0 descriptor?? [ 1631.516959][T20995] usb usb4-port1: attempt power cycle [ 1631.856663][T20995] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1631.877282][T20995] usb 4-1: device descriptor read/8, error -71 [ 1632.104776][T25352] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1632.115383][T25352] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1632.122510][T20995] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1632.156064][T25352] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1632.190713][T20995] usb 4-1: device descriptor read/8, error -71 [ 1632.294682][T25352] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1632.305195][T25613] netlink: 1164 bytes leftover after parsing attributes in process `syz.2.5318'. [ 1632.325515][T20995] usb usb4-port1: unable to enumerate USB device [ 1632.353688][T25613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.380434][T25613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.495508][T24546] usb 3-1: USB disconnect, device number 15 [ 1633.364959][T25631] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1633.372780][T25631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1633.617310][T25631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1633.623438][T25631] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1634.510371][T25650] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5324'. [ 1634.877619][T17790] Bluetooth: hci2: command 0x0c1a tx timeout [ 1635.442317][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1635.676703][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1635.682928][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1636.693467][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5324'. [ 1636.820173][T25649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1636.947293][T25649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1636.958017][T25649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1637.189620][T25649] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1638.896698][T17790] Bluetooth: hci2: command 0x0c1a tx timeout [ 1638.961082][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1639.037032][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1639.174681][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1639.174702][ T30] audit: type=1326 audit(1762667083.765:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1639.296599][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1639.366113][ T30] audit: type=1326 audit(1762667083.785:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1639.456742][T25680] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1639.465460][T25680] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1639.476809][T25680] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1639.485231][T25680] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1639.524209][ T30] audit: type=1326 audit(1762667083.785:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.096941][ T30] audit: type=1326 audit(1762667083.785:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.137181][ T30] audit: type=1326 audit(1762667083.785:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.246933][ T30] audit: type=1326 audit(1762667083.785:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.291907][ T30] audit: type=1326 audit(1762667083.785:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.349311][ T30] audit: type=1326 audit(1762667083.785:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.405319][ T30] audit: type=1326 audit(1762667083.785:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1640.448856][ T30] audit: type=1326 audit(1762667083.785:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25681 comm="syz.3.5342" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1641.306939][T17790] Bluetooth: hci2: command 0x0c1a tx timeout [ 1641.531066][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1641.538723][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1641.544798][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1643.037004][T24546] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1643.287517][T10666] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1643.436631][T24546] usb 4-1: device descriptor read/64, error -71 [ 1643.600936][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1643.731088][T24546] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1643.868155][T10666] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1643.880100][T10666] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1643.890366][T10666] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1643.914038][T10666] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.085573][T24546] usb 4-1: device descriptor read/64, error -71 [ 1644.277395][T24546] usb usb4-port1: attempt power cycle [ 1644.301475][T25729] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1644.339006][T10666] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1644.683790][T25739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1644.684527][T25739] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1644.684713][T25739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1644.684897][T25739] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1644.701441][T24546] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1644.760201][T24546] usb 4-1: device descriptor read/8, error -71 [ 1644.996670][T24546] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1645.018426][T24546] usb 4-1: device descriptor read/8, error -71 [ 1645.228428][T24546] usb usb4-port1: unable to enumerate USB device [ 1646.476754][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1646.740457][T17790] Bluetooth: hci3: command 0x0c1a tx timeout [ 1646.742058][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1646.747310][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1647.208723][T24546] usb 6-1: USB disconnect, device number 66 [ 1648.932203][T25789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1648.946098][T25789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'. [ 1649.446866][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1649.446892][T25771] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1649.733989][T25796] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5354'. [ 1649.743465][T25796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5354'. [ 1649.839704][T25771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1649.847249][T25771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1649.853467][T25771] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1650.106727][T24546] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1650.306745][T24546] usb 6-1: Using ep0 maxpacket: 32 [ 1650.454933][T24546] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1650.616796][T24546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.783725][T24546] usb 6-1: Product: syz [ 1650.793197][T24546] usb 6-1: Manufacturer: syz [ 1650.798123][T24546] usb 6-1: SerialNumber: syz [ 1650.893226][T24546] usb 6-1: config 0 descriptor?? [ 1650.902929][T24546] usb 6-1: can't set config #0, error -71 [ 1650.906932][T24546] usb 6-1: USB disconnect, device number 67 [ 1651.526847][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1651.918689][T22164] Bluetooth: hci5: command 0x0c1a tx timeout [ 1651.924844][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1653.786771][T25352] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1653.834715][T25837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5363'. [ 1654.070137][T25352] usb 4-1: config 0 has no interfaces? [ 1654.133612][T25352] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1654.399773][T25352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.746027][T25352] usb 4-1: Product: syz [ 1654.760351][T25352] usb 4-1: Manufacturer: syz [ 1654.789015][T25352] usb 4-1: SerialNumber: syz [ 1654.859011][T25352] usb 4-1: config 0 descriptor?? [ 1654.969464][T25846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1654.976406][T25846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1654.985573][T25846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1654.992907][T25846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1656.036654][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1656.036668][ T30] audit: type=1800 audit(1762667100.595:1427): pid=25854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5366" name="nullb0" dev="devtmpfs" ino=2982 res=0 errno=0 [ 1656.744651][T24546] usb 4-1: USB disconnect, device number 37 [ 1656.796715][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1657.036862][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1657.042965][T22164] Bluetooth: hci3: command 0x0c1a tx timeout [ 1657.051046][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1657.299644][T25844] delete_channel: no stack [ 1658.686910][T25880] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1658.774689][T25884] netlink: 'syz.5.5371': attribute type 1 has an invalid length. [ 1658.783935][T25884] netlink: 'syz.5.5371': attribute type 1 has an invalid length. [ 1658.806748][T25884] netlink: 'syz.5.5371': attribute type 1 has an invalid length. [ 1658.895355][T25880] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1658.901725][T25880] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1658.909288][T25880] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1660.716788][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1660.826636][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1660.860029][T25903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.872431][T25903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.977580][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1660.983934][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1661.275608][T25903] dummy0: left promiscuous mode [ 1661.431237][T25903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1661.748403][T25913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1661.758614][T25913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1661.767687][T25913] netlink: 'syz.0.5376': attribute type 3 has an invalid length. [ 1661.775436][T25913] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5376'. [ 1662.038500][T25915] : renamed from bridge_slave_0 [ 1663.887666][T25928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1663.893912][T25928] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1663.901186][T25928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1663.908074][T25928] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1664.766062][ T30] audit: type=1326 audit(1762667109.165:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.835893][ T30] audit: type=1326 audit(1762667109.165:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.861937][ T30] audit: type=1326 audit(1762667109.165:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.885706][ T30] audit: type=1326 audit(1762667109.165:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.911464][ T30] audit: type=1326 audit(1762667109.165:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.934189][ T30] audit: type=1326 audit(1762667109.165:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1664.957533][ T30] audit: type=1326 audit(1762667109.165:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1665.007052][ T30] audit: type=1326 audit(1762667109.165:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1665.596647][ T30] audit: type=1326 audit(1762667109.165:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1665.948750][T17790] Bluetooth: hci5: command 0x0c1a tx timeout [ 1665.948784][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1665.954867][T17790] Bluetooth: hci4: command 0x0c1a tx timeout [ 1665.961957][T22164] Bluetooth: hci2: command 0x0c1a tx timeout [ 1665.986789][ T30] audit: type=1326 audit(1762667109.165:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25933 comm="syz.5.5380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1666.008794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.035599][T25956] input: syz1 as /devices/virtual/input/input126 [ 1667.066360][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5384'. [ 1668.043520][T25969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1668.053571][T25969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1668.146760][T10499] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1668.387003][T25969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1668.397258][T25969] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1668.407454][T10499] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1668.449547][T10499] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1668.462317][T10499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.473300][T10499] usb 6-1: config 0 descriptor?? [ 1668.566351][T25982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5388'. [ 1668.882119][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.888607][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.890498][T10499] hid (null): report_id 0 is invalid [ 1668.985580][T10499] creative-sb0540 0003:041E:3100.00A1: report_id 0 is invalid [ 1669.012595][T10499] creative-sb0540 0003:041E:3100.00A1: item 0 0 1 8 parsing failed [ 1669.153086][T10499] creative-sb0540 0003:041E:3100.00A1: parse failed [ 1669.162706][T10499] creative-sb0540 0003:041E:3100.00A1: probe with driver creative-sb0540 failed with error -22 [ 1669.267143][T25989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.280377][T25989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.346840][T25988] binder: BINDER_SET_CONTEXT_MGR already set [ 1669.352942][T25988] binder: 25984:25988 ioctl 4018620d 80000040 returned -16 [ 1669.467711][T25982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.496319][T25982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.565267][T25982] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1669.607709][T25982] bond0 (unregistering): Released all slaves [ 1669.836611][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1670.106975][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 1670.396786][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1670.476885][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1670.722049][T20995] usb 6-1: USB disconnect, device number 68 [ 1670.939768][T26000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.948549][T26000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.566906][T10499] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1671.606872][T20995] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1671.736642][T10499] usb 6-1: Using ep0 maxpacket: 8 [ 1671.789901][T20995] usb 4-1: Using ep0 maxpacket: 16 [ 1671.815006][T20995] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 1671.921481][T10499] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1671.977285][T20995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.985945][T10499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.999012][T20995] usb 4-1: Product: syz [ 1672.005412][T20995] usb 4-1: Manufacturer: syz [ 1672.011468][T10499] usb 6-1: Product: syz [ 1672.018870][T20995] usb 4-1: SerialNumber: syz [ 1672.023751][T10499] usb 6-1: Manufacturer: syz [ 1672.035227][T10499] usb 6-1: SerialNumber: syz [ 1672.149119][T20995] usb 4-1: config 0 descriptor?? [ 1672.348631][T20995] usb 4-1: bad CDC descriptors [ 1672.356919][T10499] usb 6-1: config 0 descriptor?? [ 1672.491165][T10499] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 1672.593490][T26008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.605304][T26008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.743082][T26010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.755643][T26010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.847966][T26008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.858087][T26008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.848442][T26025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.861626][T26025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1673.871878][T26025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.881609][T26025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1674.155025][T10499] usb 6-1: USB disconnect, device number 69 [ 1674.421009][T10499] usb 4-1: USB disconnect, device number 38 [ 1675.406658][T20995] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1675.646899][T20995] usb 4-1: Using ep0 maxpacket: 32 [ 1675.686939][T24619] Bluetooth: hci2: command 0x0c1a tx timeout [ 1675.729139][T20995] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1675.737367][T20995] usb 4-1: config 0 has no interface number 0 [ 1675.751804][T20995] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1675.763214][T20995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.778317][T20995] usb 4-1: Product: syz [ 1675.784593][T20995] usb 4-1: Manufacturer: syz [ 1675.790582][T20995] usb 4-1: SerialNumber: syz [ 1675.946605][T24619] Bluetooth: hci5: command 0x0c1a tx timeout [ 1675.948417][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1675.952673][T24619] Bluetooth: hci4: command 0x0c1a tx timeout [ 1676.558853][T20995] usb 4-1: config 0 descriptor?? [ 1676.567517][T20995] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1676.577688][T20995] usb 4-1: selecting invalid altsetting 1 [ 1676.583574][T20995] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1676.595685][T20995] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1676.629919][T20995] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1676.650188][T20995] usb 4-1: media controller created [ 1676.787848][T26041] tipc: Enabled bearer , priority 0 [ 1676.795831][T26041] syzkaller0: entered promiscuous mode [ 1676.801459][T26041] syzkaller0: entered allmulticast mode [ 1676.812564][T26041] tipc: Resetting bearer [ 1676.824408][T26040] tipc: Resetting bearer [ 1676.861384][T20995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1676.875494][T26040] tipc: Disabling bearer [ 1676.968155][T20995] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1676.991157][T20995] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1677.000894][T20995] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1677.228490][T20995] usb 4-1: USB disconnect, device number 39 [ 1677.655536][T26064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1677.673481][T26064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1677.684528][T26064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1677.695691][T26064] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1678.986473][T26079] pim6reg: entered allmulticast mode [ 1679.273644][T26076] pim6reg: left allmulticast mode [ 1679.436903][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1679.789807][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1679.795981][T24619] Bluetooth: hci3: command 0x0c1a tx timeout [ 1679.795995][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1679.861016][T26087] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1679.926736][T20995] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1680.176834][T20995] usb 6-1: Using ep0 maxpacket: 8 [ 1680.188340][T20995] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1680.210191][T20995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1680.230381][T20995] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1680.241341][T20995] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1680.257011][T20995] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1680.276790][T20995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.886284][T20995] usb 6-1: GET_CAPABILITIES returned 0 [ 1680.896819][T20995] usbtmc 6-1:16.0: can't read capabilities [ 1681.049950][T10666] usb 6-1: USB disconnect, device number 70 [ 1681.335832][T26102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1681.345564][T26102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1681.355573][T26102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1681.372583][T26102] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1681.446336][T26107] tipc: New replicast peer: 255.255.255.255 [ 1681.461102][T26107] tipc: Enabled bearer , priority 10 [ 1682.367342][T26119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1682.378243][T26119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1682.388655][T26119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1682.396891][T26119] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1684.156764][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1684.476926][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1684.483387][T24619] Bluetooth: hci3: command 0x0c1a tx timeout [ 1684.489467][T24619] Bluetooth: hci4: command 0x0c1a tx timeout [ 1685.306622][T10499] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1685.485031][T26157] overlayfs: missing 'lowerdir' [ 1685.588469][T10499] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.599607][T10499] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1685.878114][T10499] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1686.007190][T10499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.700933][T26167] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1687.714806][T26167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1687.729705][T26167] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1687.748259][T26167] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1687.794271][T26177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1687.815733][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5424'. [ 1688.674058][T10370] usb 4-1: USB disconnect, device number 40 [ 1688.684645][T26142] delete_channel: no stack [ 1689.447303][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 1689.906969][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 1689.913071][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 1689.919563][T22164] Bluetooth: hci4: command 0x0c1a tx timeout [ 1690.706705][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 1690.931103][ T31] Not tainted syzkaller #0 [ 1690.936177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1690.950904][ T31] task:kworker/1:0 state:D stack:19352 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1690.987910][ T31] Workqueue: usb_hub_wq hub_event [ 1691.005544][ T31] Call Trace: [ 1691.018134][ T31] [ 1691.047819][ T31] __schedule+0x1798/0x4cc0 [ 1691.076642][ T31] ? __pfx___schedule+0x10/0x10 [ 1691.088130][ T31] ? schedule+0x91/0x360 [ 1691.092809][ T31] schedule+0x165/0x360 [ 1691.099486][ T31] schedule_timeout+0x9a/0x270 [ 1691.104380][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1691.110607][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1691.115934][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1691.121610][ T31] ? wait_for_completion+0x267/0x5d0 [ 1691.127406][ T31] wait_for_completion+0x2bf/0x5d0 [ 1691.147616][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1691.153625][ T31] i2c_del_adapter+0x581/0x6e0 [ 1691.159038][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1691.164635][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1691.170514][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1691.175997][ T31] ? kfree+0x4d/0x6d0 [ 1691.180393][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1691.185306][ T31] dvb_usb_device_exit+0x1be/0x350 [ 1691.191282][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1691.197058][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1691.202975][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1691.209545][ T31] ? usb_disable_interface+0x31d/0x350 [ 1691.215318][ T31] usb_unbind_interface+0x26e/0x910 [ 1691.220981][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1691.234695][ T31] device_release_driver_internal+0x4d9/0x800 [ 1691.243428][ T31] bus_remove_device+0x34d/0x410 [ 1691.251143][ T31] device_del+0x511/0x8e0 [ 1691.260259][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 1691.268066][ T31] ? __pfx_device_del+0x10/0x10 [ 1691.275254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1691.280855][ T31] usb_disable_device+0x3e9/0x8a0 [ 1691.286049][ T31] usb_disconnect+0x330/0x950 [ 1691.291657][ T31] hub_event+0x1cf5/0x4a20 [ 1691.296364][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1691.302027][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1691.307486][ T31] ? register_lock_class+0x51/0x320 [ 1691.314059][ T31] ? __pfx_hub_event+0x10/0x10 [ 1691.319137][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1691.326323][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1691.332120][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1691.338252][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1691.345291][ T31] process_scheduled_works+0xae1/0x17b0 [ 1691.352104][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1691.358667][ T31] worker_thread+0x8a0/0xda0 [ 1691.364540][ T31] kthread+0x711/0x8a0 [ 1691.370724][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1691.376075][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.381019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1691.386869][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1691.392226][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.401949][ T31] ret_from_fork+0x4bc/0x870 [ 1691.407045][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1691.416828][ T31] ? __switch_to_asm+0x39/0x70 [ 1691.421803][ T31] ? __switch_to_asm+0x33/0x70 [ 1691.427109][ T31] ? __pfx_kthread+0x10/0x10 [ 1691.431939][ T31] ret_from_fork_asm+0x1a/0x30 [ 1691.440904][ T31] [ 1691.445345][ T31] INFO: task syz.4.5078:24310 blocked for more than 144 seconds. [ 1691.453679][ T31] Not tainted syzkaller #0 [ 1691.460057][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1691.472661][ T31] task:syz.4.5078 state:D stack:26824 pid:24310 tgid:24304 ppid:5850 task_flags:0x400140 flags:0x10080002 [ 1691.486753][ T31] Call Trace: [ 1691.490143][ T31] [ 1691.494281][ T31] __schedule+0x1798/0x4cc0 [ 1691.504001][ T31] ? __pfx___schedule+0x10/0x10 [ 1691.509485][ T31] ? schedule+0x91/0x360 [ 1691.513926][ T31] schedule+0x165/0x360 [ 1691.518439][ T31] schedule_preempt_disabled+0x13/0x30 [ 1691.524114][ T31] __mutex_lock+0x7e6/0x1350 [ 1691.529075][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1691.533870][ T31] ? usbdev_open+0x16e/0x760 [ 1691.538603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1691.543666][ T31] ? bus_find_device+0x273/0x2b0 [ 1691.548913][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1691.554224][ T31] usbdev_open+0x16e/0x760 [ 1691.558728][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1691.563699][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1691.569390][ T31] chrdev_open+0x4cc/0x5e0 [ 1691.573851][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1691.579071][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1691.585444][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1691.591197][ T31] do_dentry_open+0x953/0x13f0 [ 1691.596016][ T31] vfs_open+0x3b/0x340 [ 1691.600456][ T31] ? path_openat+0x2ecd/0x3830 [ 1691.605271][ T31] path_openat+0x2ee5/0x3830 [ 1691.611544][ T31] ? __pfx_path_openat+0x10/0x10 [ 1691.616544][ T31] do_filp_open+0x1fa/0x410 [ 1691.621060][ T31] ? __lock_acquire+0xab9/0xd20 [ 1691.625909][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1691.631256][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1691.636139][ T31] ? alloc_fd+0x64c/0x6c0 [ 1691.640563][ T31] do_sys_openat2+0x121/0x1c0 [ 1691.645336][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 1691.652111][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1691.659083][ T31] ? rcu_is_watching+0x15/0xb0 [ 1691.680144][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1691.685770][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 1691.691465][ T31] do_fast_syscall_32+0x34/0x80 [ 1691.696371][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1691.703300][ T31] RIP: 0023:0xf7fb5539 [ 1691.707690][ T31] RSP: 002b:00000000f5464100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1691.716146][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5464150 [ 1691.724273][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 00000000f7446ff4 [ 1691.732555][ T31] RBP: 0000000000000402 R08: 0000000000000000 R09: 0000000000000000 [ 1691.740788][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1691.748994][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.757372][ T31] [ 1691.764580][ T31] [ 1691.764580][ T31] Showing all locks held in the system: [ 1691.772635][ T31] 5 locks held by kworker/1:0/24: [ 1691.777837][ T31] #0: ffff888144691948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1691.790593][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1691.803630][ T31] #2: ffff888027a13198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1691.813123][ T31] #3: ffff888032e5b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1691.823345][ T31] #4: ffff888047117160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1691.834192][ T31] 1 lock held by khungtaskd/31: [ 1691.839144][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1691.849274][ T31] 2 locks held by getty/5594: [ 1691.853991][ T31] #0: ffff888032ead0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1691.864030][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1691.875025][ T31] 1 lock held by syz-executor/5819: [ 1691.880598][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1691.890704][ T31] 5 locks held by kworker/1:7/5931: [ 1691.895942][ T31] #0: ffff888144691948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1691.907855][ T31] #1: ffffc9000533fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1691.921595][ T31] #2: ffff8881467bd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1691.930654][ T31] #3: ffff8881467d0518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 1691.940763][ T31] #4: ffff88814677a368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 1691.950829][ T31] 4 locks held by udevd/24149: [ 1691.955631][ T31] #0: ffff888054958418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1691.964617][ T31] #1: ffff88805552a488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1691.974271][ T31] #2: ffff88807594f0f8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1691.984161][ T31] #3: ffff888032e5b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1691.993673][ T31] 1 lock held by syz.4.5078/24310: [ 1691.999248][ T31] #0: ffff888027a13198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1692.008581][ T31] [ 1692.010945][ T31] ============================================= [ 1692.010945][ T31] [ 1692.020571][ T31] NMI backtrace for cpu 0 [ 1692.020588][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1692.020607][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1692.020618][ T31] Call Trace: [ 1692.020625][ T31] [ 1692.020632][ T31] dump_stack_lvl+0x189/0x250 [ 1692.020662][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1692.020683][ T31] ? __pfx__printk+0x10/0x10 [ 1692.020712][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1692.020734][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1692.020754][ T31] ? __pfx__printk+0x10/0x10 [ 1692.020772][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1692.020798][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1692.020819][ T31] watchdog+0xf60/0xfa0 [ 1692.020841][ T31] ? watchdog+0x1e2/0xfa0 [ 1692.020864][ T31] kthread+0x711/0x8a0 [ 1692.020889][ T31] ? __pfx_watchdog+0x10/0x10 [ 1692.020905][ T31] ? __pfx_kthread+0x10/0x10 [ 1692.020926][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1692.020947][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1692.020968][ T31] ? __pfx_kthread+0x10/0x10 [ 1692.020991][ T31] ret_from_fork+0x4bc/0x870 [ 1692.021010][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1692.021035][ T31] ? __switch_to_asm+0x39/0x70 [ 1692.021047][ T31] ? __switch_to_asm+0x33/0x70 [ 1692.021060][ T31] ? __pfx_kthread+0x10/0x10 [ 1692.021081][ T31] ret_from_fork_asm+0x1a/0x30 [ 1692.021111][ T31] [ 1692.021119][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1692.170269][ C1] NMI backtrace for cpu 1 [ 1692.170286][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1692.170303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1692.170312][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1692.170336][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1692.170350][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1692.170365][ C1] RAX: 4b9c0d856aa2f400 RBX: ffffffff81968b47 RCX: 4b9c0d856aa2f400 [ 1692.170377][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db74 RDI: ffffffff8bbf0760 [ 1692.170388][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1692.170399][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce370 [ 1692.170411][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1692.170421][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 1692.170434][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1692.170444][ C1] CR2: 000055ea8852b5f0 CR3: 0000000071e46000 CR4: 00000000003526f0 [ 1692.170458][ C1] Call Trace: [ 1692.170466][ C1] [ 1692.170472][ C1] default_idle+0x13/0x20 [ 1692.170487][ C1] default_idle_call+0x73/0xb0 [ 1692.170502][ C1] do_idle+0x1e7/0x510 [ 1692.170522][ C1] ? __pfx_do_idle+0x10/0x10 [ 1692.170549][ C1] cpu_startup_entry+0x44/0x60 [ 1692.170565][ C1] start_secondary+0x101/0x110 [ 1692.170585][ C1] common_startup_64+0x13e/0x147 [ 1692.170610][ C1] [ 1692.335794][ C1] vkms_vblank_simulate: vblank timer overrun [ 1695.364473][ T5201] udevd[5201]: worker [24149] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 1695.376031][ T5201] udevd[5201]: seq 32981 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 1695.387143][ T5201] udevd[5201]: worker [24149] terminated by signal 9 (Killed) [ 1695.394725][ T5201] udevd[5201]: worker [24149] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1'