last executing test programs: 11m44.828850242s ago: executing program 1 (id=57): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb, 0x224000) read$usbmon(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000c1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x84001) ioctl$BLKGETNRZONES(r6, 0x80041285, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000080)) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11m40.898659317s ago: executing program 1 (id=61): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0xad, 0x4) 11m37.128668593s ago: executing program 1 (id=63): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) 11m26.912326805s ago: executing program 1 (id=69): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil) 11m22.820888026s ago: executing program 1 (id=77): socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) utimensat(r5, 0x0, &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(0x0, &(0x7f00000001c0)='./file0\x00') setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 11m17.980449827s ago: executing program 1 (id=80): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @empty, 0x1, 0x6, [@local, @multicast1, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x700) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m1.405911503s ago: executing program 32 (id=80): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @empty, 0x1, 0x6, [@local, @multicast1, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x700) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10m55.989381981s ago: executing program 3 (id=107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xffffffffffffff4d, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x8000000, '\x00', 0x10c94}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x12}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x5, 0xfffffffffffffffa, 0x5, 0x40, 0xe, 0xc02e, 0x4, 0x4, 0x8000}) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[], 0x11a4}}, 0x8020) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x118, 0x50000089) 10m51.373264167s ago: executing program 3 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x7f, 0x101, 0x10, @mcast1, @empty, 0x8000, 0x80, 0x8, 0xe}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xffffffff, 0x8000, r3, 0x0, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x0, @value=r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = gettid() r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x2007}) ppoll(&(0x7f00000000c0)=[{r10, 0x61ea}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) get_mempolicy(0x0, &(0x7f0000000040), 0x1ff, &(0x7f0000400000/0xc00000)=nil, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000bc0)='./file2\x00', 0x4000f) sendmsg$IPCTNL_MSG_CT_DELETE(r11, 0x0, 0x4800) 10m49.546623607s ago: executing program 3 (id=114): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)) splice(r2, 0x0, r1, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ptrace(0x4208, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r0, 0x0, 0x7ffffffd) 10m47.315376965s ago: executing program 3 (id=119): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000700)=0x31) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x2, {0x0, 0xff}, 0xfe}, 0x18) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x1, 0x5}) r9 = socket(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 10m42.832389709s ago: executing program 3 (id=123): mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) syz_io_uring_setup(0x47a5, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r6, 0x10000000005, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) 10m34.552346586s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) move_pages(r1, 0x6, &(0x7f0000000040)=[&(0x7f00008e3000/0x1000)=nil, &(0x7f00009e5000/0x1000)=nil, &(0x7f0000225000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000004c000/0x2000)=nil, &(0x7f00002e7000/0x4000)=nil], &(0x7f0000000180)=[0x1ff, 0x8ce7, 0x2, 0x0, 0xa, 0xd4fa], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f000000f140), 0x2, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f000000f280)=@multiplanar_userptr={0x1, 0xa, 0x4, 0x10000, 0x1, {}, {0x2, 0x0, 0x5, 0x7, 0x8, 0x9, "525067fc"}, 0x79, 0x2, {0x0}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10m34.504317359s ago: executing program 3 (id=133): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a00000000000000", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock n'], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 10m32.169332435s ago: executing program 2 (id=136): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x234041}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x5b0, @dev, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) 10m25.692456578s ago: executing program 2 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0x9, 0x10001ff, 0x4, 0x3, 0x8000000000000001, 0x1, 0x8, 0x6000005, 0x8, 0x8, 0x1, 0x9, 0x1, 0x7c, 0x10, 0x1d, {0x7, 0xd}, 0x1, 0x9}}}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x4, 0x1ff, 0xc, 0x6e5}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) 10m22.272091462s ago: executing program 2 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x11}}], 0x1, 0x4000800) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000001d00)={0xbf9f, 0x23b4b4b239d825f2, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200", 0x0, 0x2}) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = syz_io_uring_setup(0x24fe, &(0x7f00000003c0)={0x0, 0x793, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r8, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000600)={0x29, 0x1, 0x3, "ff050000007eefad00000000ffffffff000000000000000000000900", 0x32314d4e}) 10m17.358951258s ago: executing program 33 (id=133): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a00000000000000", @ANYRES32=r3, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock n'], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 10m16.574736969s ago: executing program 2 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000085000000060000001853000006000000000000000000000018120000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x4000}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', r0, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ftruncate(r6, 0x8001) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r7, 0x80044944, &(0x7f0000001040)) gettid() 10m14.275789629s ago: executing program 2 (id=148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) gettid() tkill(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r5}, 0x65) sync() ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0x71, 0x51, ""/81}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) 9m56.467958595s ago: executing program 34 (id=148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) gettid() tkill(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r5}, 0x65) sync() ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0x71, 0x51, ""/81}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) 7m13.923795888s ago: executing program 0 (id=274): syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) shutdown(r3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8}) recvmmsg(r3, &(0x7f0000000840), 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$caif_stream(0x25, 0x1, 0x5) fcntl$setownex(r5, 0xf, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) close_range(r0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) 7m8.711033921s ago: executing program 0 (id=271): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000019300)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r9 = add_key(0x0, 0x0, 0x0, 0x0, r6) keyctl$link(0x8, r6, r9) r10 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x34]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r11, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r8, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) close_range(r7, 0xffffffffffffffff, 0x0) 7m5.272391445s ago: executing program 0 (id=275): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000800000002009b154ebd9e2902c81cd6bb7d58091100000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f14c01000000000000eeff0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() 6m56.773673585s ago: executing program 0 (id=280): r0 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) r7 = epoll_create(0x6) r8 = dup3(r6, r7, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[@ANYBLOB="180000000114010b0025bd7000fedbdf2508080100020000"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x181740, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040), 0x6) write(r10, &(0x7f0000000000)="2a000200010078", 0x7) 6m52.240335959s ago: executing program 0 (id=283): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000580)="15827cd29800469e13dedbadac9fb431f40a6190b2adde7bc7649dd3b7ba8517566da3d5d016a32cf7bd38201c27307bd27640350291cee68c968561880af4d9884f856e84c65080f1873ffa60278a", 0x4f}, {&(0x7f0000000600)}, {&(0x7f0000000880)="c7b187402937e6a04f646962cd6f95a8e1c16d949c818b9535132bd899057e181025c33ba636d7005c8b8d28671065786e25a8ca8d5aa48919ebab39ea27c273fdac3e91f10c760f802563944d3592cd9bd7cfe87cfd91cbadf1eef5b1650d3e1090fe6bfd29fc3fbebadde980669b377bf60408411d8500eaa84d2969d157d1073432a34fd8f8d9d3a80bd7f914c15491479263060fca7746e08d9d275ee72f52a532e865eed2f4b2f2e2bc", 0xac}], 0x3, &(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="000000001800000000"], 0x40, 0x20004001}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000800)="587aa5220e9b3894481f18e839f449a6883fd9305a32a67898e112d2303063149a24bba36a677c48902205c460e55b8d1fd6dda2699b3b0e3e6e", 0x3a}, {&(0x7f0000000a40)="7d20adeb3389e9c6e3eac546239d77edc10b836de2747239845d80a6d4a5b0cec1c1b671911fb13ed3a9d1df7b51e10d10942eac77a7d71af6d2e55defcd11b817eb14eaf2566013c453b31f4de23008050bfa722d0ab9527923f12ab14d1011ed0a579656e22250f8e4ac7122e5256f2d425b6216db9852721c8bfbdb7f902f52cad519b3298f9a4f6e4d921cb226a9d9e938a502c977a614fa7fbe11c82c8262ee3f76ad7758d1", 0xa8}, {&(0x7f0000000b00)="682be85a47332514947f47842b19e52f1ba4c44195353c21779a1106d2ddfde4c70c859c6f58837fd2e02287c9b982ed1f4f945b40cbaf3d7f9ac7f4eb468d3c1a29d9cd60c167f3c1a76a4c933c2c4102cfad1eb21f9cf3c2fdc6d562be77fb4a8cdf3c11cf02cb59ef97eade468fe4c6728bd33a278d7fa3f7143ba9520427943a31b2eb98d09551e30c55ee15501805a834", 0x93}, {&(0x7f0000000bc0)}], 0x4, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8, 0x80}}], 0x2, 0x4040010) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780), 0x80280, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x20040010) sendmsg$TIPC_NL_BEARER_DISABLE(r3, 0x0, 0x8000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xeeee0000, 0x10000, 0x3}) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000600)="9834ddeff7bf55dcc03b4d7062da2785abab036460f580abf9012c6735c339cb73208931c636187fc913945c0c3bc90fd39b717b353dd77d6e33c8b975a9f3ceaf3f4e12b8828231cfc3e78a926671707d10742fcd3615c6ff11ca7fce1bef8b52946402f7d8b43e8580708a30fd5e30f34d1658920705beb3e6f240640ccb6fb8a3ed22b9045cc3caa0b5742aa7076147c461f0ef8e9bf8c287df0be569591f70afc00741c1e9ffd1203f885ecbb3d703d5c4fd831ffd", &(0x7f0000000480)="d9c8b33faa42ace971b90e7dd4e9a1c20ea78d245b"}}, &(0x7f0000000700)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m48.135776504s ago: executing program 0 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) flock(r0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000180)=0x400000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = dup(r6) syz_open_dev$loop(&(0x7f00000000c0), 0xd03b, 0x410000) write$6lowpan_enable(r7, 0x0, 0x0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r7, &(0x7f0000003780)={0x2020}, 0x2020) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x894b, &(0x7f0000000040)) 6m32.771011033s ago: executing program 35 (id=288): r0 = socket$nl_generic(0x10, 0x3, 0x10) flock(r0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000180)=0x400000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = dup(r6) syz_open_dev$loop(&(0x7f00000000c0), 0xd03b, 0x410000) write$6lowpan_enable(r7, 0x0, 0x0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r7, &(0x7f0000003780)={0x2020}, 0x2020) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x894b, &(0x7f0000000040)) 1m11.329325593s ago: executing program 6 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 1m10.756671481s ago: executing program 7 (id=1067): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101}, 0xc) 1m10.552259353s ago: executing program 6 (id=1068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x70bd2b, 0xffffffff, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0xffffa3ad, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x4, &(0x7f0000000180)={0x80, 0xc7}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x70) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x16, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x5}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x14000000, 0x0, 0x7fff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 1m10.353896277s ago: executing program 7 (id=1070): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 1m10.259070586s ago: executing program 8 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x24020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 1m9.729401711s ago: executing program 5 (id=1073): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) fcntl$lock(r2, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd3909f059ecb35d483c16a17000fedbdf254100000030a7b2faead7d4bbba55572a94bd9ede44c4f330e2cf2b4c20592dd727dd4d202f44079962d297569affc9bd4c53ffccb973191737bf1e815c576bc96990b0761b32f20fe4e0aae3573ffe3dba8ca89275831f27332ce65287acd730ef2071270c656ace91827de739e9a7dcef21e60f98528fba0e6102ad5d2d54e6e11e76ab905468af800b3fb2a0c6c953978e7a29bb316950d87067b4a68ecd0000974af2e83191c836"], 0x14}, 0x1, 0x0, 0x0, 0x24040041}, 0x20044000) socketpair(0x26, 0x800, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000040)=0x4) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="3b000100010000", 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_icmp(0x2, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) 1m9.662283003s ago: executing program 7 (id=1074): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1m9.07855719s ago: executing program 8 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2c) 1m8.619095819s ago: executing program 7 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m7.892051645s ago: executing program 8 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000500)={0x38, r1, 0x1, 0x11, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x307ada8b}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m7.806189099s ago: executing program 8 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x0, 0x40004}) 1m7.683245575s ago: executing program 7 (id=1080): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000240), 0x3c000000000, 0x200000) mq_notify(r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000500)={0x0}) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 1m7.616879761s ago: executing program 4 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m6.736404904s ago: executing program 5 (id=1082): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1m6.688852775s ago: executing program 4 (id=1083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x6c, r1, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0xc818}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xdf1, @local, 0x400000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m6.651252969s ago: executing program 8 (id=1084): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x9, "c0adafa1"}, @main=@item_4={0x3, 0x0, 0xa, "202ca9f5"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) 1m6.466568707s ago: executing program 5 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r11 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m6.347324428s ago: executing program 4 (id=1086): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m6.174506462s ago: executing program 5 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180800002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1m5.593102696s ago: executing program 5 (id=1088): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 1m5.199105758s ago: executing program 4 (id=1089): r0 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 1m4.823780393s ago: executing program 4 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xdfce}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000006c0)=""/36, 0x24}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x7ffffffd}], 0x4, 0x4022, 0x0) 1m4.540291849s ago: executing program 8 (id=1091): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x3c000000000, 0x200000) mq_notify(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x44, 0x48, 0x1, 0x0, 0x25dfdbff, {}, [@IFAL_ADDRESS={0xd, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0xff}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008001}, 0x20048000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000500)={0x0}) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 1m4.369193136s ago: executing program 4 (id=1092): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x7, 0x1, {0x0, 0x1}, {0x60, 0x2}, @const={0x3, {0x1, 0xf801, 0x4, 0x1}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m3.759336804s ago: executing program 6 (id=1093): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x2020) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) 1m3.225863504s ago: executing program 5 (id=1094): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) fcntl$lock(r2, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd3909f059ecb35d483c16a17000fedbdf254100000030a7b2faead7d4bbba55572a94bd9ede44c4f330e2cf2b4c20592dd727dd4d202f44079962d297569affc9bd4c53ffccb973191737bf1e815c576bc96990b0761b32f20fe4e0aae3573ffe3dba8ca89275831f27332ce65287acd730ef2071270c656ace91827de739e9a7dcef21e60f98528fba0e6102ad5d2d54e6e11e76ab905468af800b3fb2a0c6c953978e7a29bb316950d87067b4a68ecd0000974af2e83191c836"], 0x14}, 0x1, 0x0, 0x0, 0x24040041}, 0x20044000) socketpair(0x26, 0x800, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000040)=0x4) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="3b000100010000", 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_icmp(0x2, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) 1m3.066997297s ago: executing program 6 (id=1095): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0xfffffffd) 59.143870341s ago: executing program 6 (id=1096): setuid(0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x891a, &(0x7f0000000180)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e60, @rand_addr=0x64010100}}) 58.397967818s ago: executing program 6 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x24020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 55.84364155s ago: executing program 7 (id=1098): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.392682662s ago: executing program 36 (id=1091): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240), 0x3c000000000, 0x200000) mq_notify(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x44, 0x48, 0x1, 0x0, 0x25dfdbff, {}, [@IFAL_ADDRESS={0xd, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0xff}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008001}, 0x20048000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000500)={0x0}) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000010) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) 1.701553698s ago: executing program 37 (id=1094): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) fcntl$lock(r2, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd3909f059ecb35d483c16a17000fedbdf254100000030a7b2faead7d4bbba55572a94bd9ede44c4f330e2cf2b4c20592dd727dd4d202f44079962d297569affc9bd4c53ffccb973191737bf1e815c576bc96990b0761b32f20fe4e0aae3573ffe3dba8ca89275831f27332ce65287acd730ef2071270c656ace91827de739e9a7dcef21e60f98528fba0e6102ad5d2d54e6e11e76ab905468af800b3fb2a0c6c953978e7a29bb316950d87067b4a68ecd0000974af2e83191c836"], 0x14}, 0x1, 0x0, 0x0, 0x24040041}, 0x20044000) socketpair(0x26, 0x800, 0x5, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000040)=0x4) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="3b000100010000", 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x20}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_icmp(0x2, 0x2, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) 1.217789938s ago: executing program 38 (id=1098): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 484.014971ms ago: executing program 39 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x24020400) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 0s ago: executing program 40 (id=1092): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x7, 0x1, {0x0, 0x1}, {0x60, 0x2}, @const={0x3, {0x1, 0xf801, 0x4, 0x1}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 7-1: SerialNumber: syz [ 453.673016][ T7513] usb 7-1: config 0 descriptor?? [ 453.689745][ T7513] usb 7-1: selecting invalid altsetting 2 [ 454.235607][ C1] usb 7-1: async_complete: urb error -71 [ 454.236635][ C1] usb 7-1: async_complete: urb error -71 [ 454.236717][ C1] usb 7-1: async_complete: urb error -71 [ 454.236794][ C1] usb 7-1: async_complete: urb error -71 [ 454.263118][ T5856] Bluetooth: hci2: command tx timeout [ 454.301000][ T7513] get_1284_register: usb error -71 [ 454.301148][ T7513] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 454.347325][ T7513] usb 7-1: USB disconnect, device number 5 [ 455.949230][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.283256][ T44] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 458.062913][ T5856] Bluetooth: hci2: command tx timeout [ 458.508692][ T7744] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 459.243984][ T7744] orangefs_mount: mount request failed with -4 [ 460.064915][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.106589][ T5856] Bluetooth: hci2: command tx timeout [ 460.482220][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.657526][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.310397][ T5856] Bluetooth: hci2: command tx timeout [ 463.088517][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803a0c9400: rx timeout, send abort [ 463.285935][ T7766] net_ratelimit: 10 callbacks suppressed [ 463.285993][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.685593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803a0c9400: abort rx timeout. Force session deactivation [ 467.040630][ T148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.022642][ T7803] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 473.266153][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.272536][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.280232][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.290957][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.293377][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.539819][ T148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.740133][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.7.316'. [ 475.238043][ T7823] 9pnet: Could not find request transport: fd0x0000000000000003 [ 476.100618][ T5856] Bluetooth: hci5: command tx timeout [ 477.122898][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.155179][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.392158][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.734496][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.793604][ T7846] netlink: 32 bytes leftover after parsing attributes in process `syz.6.318'. [ 477.824642][ T148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.938385][ T7851] nbd: must specify an index to disconnect [ 478.103069][ T5856] Bluetooth: hci5: command tx timeout [ 478.644218][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.749144][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.878746][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.065247][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.364504][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.637505][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.085731][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.663457][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.743274][ T5856] Bluetooth: hci5: command tx timeout [ 481.345209][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.807409][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.611743][ T148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.082340][ T5856] Bluetooth: hci5: command tx timeout [ 483.284259][ T7886] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 484.860783][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 490.533244][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 490.882426][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.928270][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.159351][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.581763][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.253954][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.295433][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.087246][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.202213][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 493.484743][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.446955][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.896964][ C1] vkms_vblank_simulate: vblank timer overrun [ 494.934007][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.358970][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.359123][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.359390][ T7696] bridge_slave_0: entered allmulticast mode [ 495.398232][ T7696] bridge_slave_0: entered promiscuous mode [ 495.428055][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.428720][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.430420][ T7696] bridge_slave_1: entered allmulticast mode [ 495.463574][ T7696] bridge_slave_1: entered promiscuous mode [ 496.139079][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.337752][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.437191][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.625701][ T7976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.654633][ T148] bridge_slave_1: left allmulticast mode [ 496.654669][ T148] bridge_slave_1: left promiscuous mode [ 496.654952][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.785139][ T148] bridge_slave_0: left allmulticast mode [ 496.785175][ T148] bridge_slave_0: left promiscuous mode [ 496.785563][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.612002][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.666416][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.788596][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.226628][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.269994][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.383198][ T5856] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 499.547967][ T5856] Bluetooth: Unexpected continuation frame (len 4) [ 499.744217][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.896374][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.118279][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.682515][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.114339][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.313236][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.123406][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.057357][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.462967][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 506.521495][ T5856] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 506.890007][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.890088][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.122086][ T8050] Bluetooth: MGMT ver 1.23 [ 508.168476][ T8050] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14) [ 508.168671][ T8050] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 509.065213][ T8050] vhci_hcd vhci_hcd.0: Device attached [ 509.093089][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 509.123315][ T8052] vhci_hcd: connection closed [ 509.216304][ T1129] vhci_hcd: stop threads [ 509.216326][ T1129] vhci_hcd: release socket [ 509.216367][ T1129] vhci_hcd: disconnect device [ 509.363966][ T59] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 509.400977][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.416677][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.419477][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.475164][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.480506][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.802364][ T5856] Bluetooth: hci4: Malformed Event: 0x13 [ 511.836912][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.889700][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.497126][ T5856] Bluetooth: hci1: command tx timeout [ 512.502538][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.345235][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.477147][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.953345][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.297595][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.910017][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.983625][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.271776][ T5856] Bluetooth: hci1: command tx timeout [ 515.508789][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.753672][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.231869][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.460559][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.757247][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.848614][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.954153][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.223010][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.303170][ T5856] Bluetooth: hci1: command tx timeout [ 517.455093][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.826156][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.649473][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.931219][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.165027][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.485102][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.905018][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.338058][ T5856] Bluetooth: hci1: command tx timeout [ 520.384805][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.681563][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.500827][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.696932][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.191517][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.193953][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.197805][ T8170] 9pnet: Could not find request transport: fd0x0000000000000003 [ 526.367999][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.370864][ T8178] ======================================================= [ 526.370864][ T8178] WARNING: The mand mount option has been deprecated and [ 526.370864][ T8178] and is ignored by this kernel. Remove the mand [ 526.370864][ T8178] option from the mount to silence this warning. [ 526.370864][ T8178] ======================================================= [ 526.371232][ T8178] 9pnet_fd: Insufficient options for proto=fd [ 527.332719][ T148] bond0 (unregistering): Released all slaves [ 529.184380][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.196853][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 529.350231][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 529.360021][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.361843][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.184442][ T5856] Bluetooth: hci6: command tx timeout [ 534.200777][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.221875][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.665198][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.666750][ T5856] Bluetooth: hci6: command tx timeout [ 535.171813][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.522480][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.759563][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.909889][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.557958][ T5856] Bluetooth: hci6: command tx timeout [ 537.682458][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.842877][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.086317][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.419272][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.554609][ T8255] vivid-004: disconnect [ 538.556837][ T8255] Bluetooth: MGMT ver 1.23 [ 539.077491][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.764930][ T5856] Bluetooth: hci6: command tx timeout [ 539.962315][ T8258] vivid-004: reconnect [ 541.733028][ T6438] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 541.797157][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 541.903106][ T6438] usb 5-1: Using ep0 maxpacket: 16 [ 541.912278][ T6438] usb 5-1: config 0 has no interfaces? [ 541.924737][ T6438] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.924769][ T6438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.924790][ T6438] usb 5-1: Product: syz [ 541.924805][ T6438] usb 5-1: Manufacturer: syz [ 541.924820][ T6438] usb 5-1: SerialNumber: syz [ 541.981707][ T6438] usb 5-1: config 0 descriptor?? [ 542.093027][ T6803] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 542.210108][ T31] usb 5-1: USB disconnect, device number 6 [ 542.304697][ T6803] usb 8-1: Using ep0 maxpacket: 8 [ 542.312404][ T6803] usb 8-1: unable to get BOS descriptor or descriptor too short [ 542.319999][ T6803] usb 8-1: config 9 has an invalid interface number: 112 but max is 0 [ 542.320035][ T6803] usb 8-1: config 9 has no interface number 0 [ 542.320074][ T6803] usb 8-1: config 9 interface 112 has no altsetting 0 [ 542.324345][ T6803] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3 [ 542.324382][ T6803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.324407][ T6803] usb 8-1: Product: syz [ 542.324424][ T6803] usb 8-1: Manufacturer: syz [ 542.324441][ T6803] usb 8-1: SerialNumber: syz [ 542.361990][ T6803] r8152-cfgselector 8-1: Unknown version 0x0000 [ 542.851515][ T6803] r8152 8-1:9.112: Expected endpoints are not found [ 542.859064][ T6803] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 543.952276][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 545.050980][ T148] hsr_slave_0: left promiscuous mode [ 545.287793][ T148] hsr_slave_1: left promiscuous mode [ 545.290876][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.290914][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.392748][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.392798][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.403103][ T59] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 548.121198][ T148] veth1_macvtap: left promiscuous mode [ 548.121327][ T148] veth0_macvtap: left promiscuous mode [ 548.124243][ T148] veth1_vlan: left promiscuous mode [ 548.124480][ T148] veth0_vlan: left promiscuous mode [ 550.066890][ T8346] vivid-004: disconnect [ 550.149447][ T8352] 9pnet: Could not find request transport: fd0x0000000000000003 [ 553.902475][ T8353] vivid-004: reconnect [ 558.602575][ T8395] netlink: 36 bytes leftover after parsing attributes in process `syz.7.446'. [ 558.683048][ T6438] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 558.876425][ T8393] 9pnet: Could not find request transport: fd0x0000000000000003 [ 559.785440][ T6438] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 559.785471][ T6438] usb 5-1: config 0 has no interface number 0 [ 559.785530][ T6438] usb 5-1: config 0 interface 185 has no altsetting 0 [ 559.788661][ T6438] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=ce.fc [ 559.788692][ T6438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.788714][ T6438] usb 5-1: Product: syz [ 559.788730][ T6438] usb 5-1: Manufacturer: syz [ 559.788745][ T6438] usb 5-1: SerialNumber: syz [ 559.860407][ T6438] usb 5-1: config 0 descriptor?? [ 559.901117][ T6438] em28xx 5-1:0.185: audio device (eb1a:50a6): interface 185, class 1 [ 560.088045][ T6015] usb 5-1: USB disconnect, device number 7 [ 560.122302][ T8409] vivid-000: disconnect [ 560.752232][ T5856] Bluetooth: hci0: unexpected cc 0x0c20 length: 4 > 1 [ 560.752271][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 560.839119][ T8413] vivid-000: reconnect [ 562.714060][ T8429] 9pnet: Could not find request transport: fd0x0000000000000003 [ 562.746595][ T8429] netlink: 36 bytes leftover after parsing attributes in process `syz.7.458'. [ 564.376872][ T8441] vivid-000: disconnect [ 564.543438][ T5856] Bluetooth: hci4: unexpected cc 0x0c7a length: 5 > 1 [ 564.543515][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 565.196525][ T5856] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 565.316068][ T8445] vivid-000: reconnect [ 568.032229][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.032336][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.353201][ T5856] Bluetooth: hci0: unexpected event for opcode 0x200f [ 569.134082][ T8474] 9pnet: Could not find request transport: fd0x0000000000000003 [ 569.139188][ T8470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.471'. [ 569.193134][ T5860] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 569.374482][ T5860] usb 8-1: Using ep0 maxpacket: 32 [ 569.377246][ T5860] usb 8-1: config 0 has an invalid interface number: 22 but max is 0 [ 569.377275][ T5860] usb 8-1: config 0 has no interface number 0 [ 569.377325][ T5860] usb 8-1: config 0 interface 22 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 569.381215][ T5860] usb 8-1: New USB device found, idVendor=1608, idProduct=020c, bcdDevice=e7.2c [ 569.381246][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.381264][ T5860] usb 8-1: Product: syz [ 569.381278][ T5860] usb 8-1: Manufacturer: syz [ 569.381293][ T5860] usb 8-1: SerialNumber: syz [ 569.399998][ T5860] usb 8-1: config 0 descriptor?? [ 569.410008][ T5860] io_ti 8-1:0.22: required endpoints missing [ 569.630648][ T6803] usb 8-1: USB disconnect, device number 3 [ 569.656488][ T148] team0 (unregistering): Port device team_slave_1 removed [ 569.790200][ T5856] Bluetooth: Wrong link type (-71) [ 569.884390][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 570.035297][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.061666][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.064140][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.065641][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.066611][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 570.689009][ T148] team0 (unregistering): Port device team_slave_0 removed [ 572.216192][ T59] Bluetooth: hci2: command tx timeout [ 572.446880][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.7.484'. [ 572.467796][ T8503] 9pnet: Could not find request transport: fd0x0000000000000003 [ 572.645481][ T8511] 9pnet: Could not find request transport: fd0x0000000000000003 [ 574.105968][ T8528] vivid-000: disconnect [ 574.419478][ T59] Bluetooth: hci2: command tx timeout [ 574.454168][ T8520] vivid-000: reconnect [ 575.294430][ T8536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 575.375243][ T8530] 9pnet: Could not find request transport: fd0x0000000000000003 [ 576.318654][ T8544] 9pnet: Could not find request transport: fd0x0000000000000003 [ 576.424012][ T59] Bluetooth: hci2: command tx timeout [ 576.523578][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.6.496'. [ 576.574727][ T8548] 9pnet: Could not find request transport: fd0x0000000000000003 [ 578.406491][ T8564] vivid-004: disconnect [ 578.503701][ T59] Bluetooth: hci2: command tx timeout [ 579.096347][ T8561] vivid-004: reconnect [ 579.276747][ T59] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 579.276785][ T59] Bluetooth: hci4: unexpected event for opcode 0x204b [ 581.499048][ T8581] netlink: 36 bytes leftover after parsing attributes in process `syz.4.506'. [ 581.528954][ T8580] 9pnet: Could not find request transport: fd0x0000000000000003 [ 582.107781][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.500'. [ 583.510961][ T8587] vivid-004: disconnect [ 584.661142][ T8600] vivid-004: reconnect [ 584.923049][ T8615] vivid-000: disconnect [ 585.243411][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.515'. [ 585.446410][ T8608] vivid-000: reconnect [ 585.455032][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 585.904363][ T8628] netlink: 36 bytes leftover after parsing attributes in process `syz.6.516'. [ 586.256009][ T8625] 9pnet: Could not find request transport: fd0x0000000000000003 [ 589.856759][ T8653] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 591.445420][ T8664] vivid-000: disconnect [ 591.830428][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.911476][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.941988][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.967034][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.970767][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.075717][ T8664] Bluetooth: MGMT ver 1.23 [ 593.976970][ T8675] vivid-000: reconnect [ 594.104739][ T59] Bluetooth: hci1: command tx timeout [ 596.313127][ T5856] Bluetooth: hci1: command tx timeout [ 596.650432][ T8713] vivid-004: disconnect [ 598.343336][ T59] Bluetooth: hci1: command tx timeout [ 598.576123][ T8705] vivid-004: reconnect [ 599.877747][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 600.743300][ T59] Bluetooth: hci1: command tx timeout [ 604.871887][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.552870][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.577420][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.824286][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.104574][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.260606][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.579628][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.868674][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.274769][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.570688][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.584673][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.732357][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.855523][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.296483][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.534039][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.886572][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.129420][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.540239][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.898826][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.311913][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.526830][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.391665][ T8817] random: crng reseeded on system resumption [ 614.488975][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.882981][ T5952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 615.883192][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 615.883269][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 615.926356][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.926519][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.926775][ T8488] bridge_slave_0: entered allmulticast mode [ 615.931309][ T8488] bridge_slave_0: entered promiscuous mode [ 616.013005][ T5952] usb 5-1: device descriptor read/64, error -32 [ 616.049183][ T9] usb 8-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024 [ 616.049222][ T9] usb 8-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0 [ 616.049246][ T9] usb 8-1: config 16 interface 0 has no altsetting 0 [ 616.049281][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 616.049305][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.089645][ T8829] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 616.264270][ T5952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 616.326484][ T9] usb 8-1: string descriptor 0 read error: -71 [ 616.359287][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 616.359404][ T9] imon 8-1:16.0: unable to initialize intf0, err -19 [ 616.359422][ T9] imon:imon_probe: failed to initialize context! [ 616.359435][ T9] imon 8-1:16.0: unable to register, err -19 [ 616.413493][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 616.420975][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.421060][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 616.421112][ T5952] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 616.421141][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.315219][ T9] usb 8-1: USB disconnect, device number 4 [ 617.344738][ T5952] usb 5-1: config 0 descriptor?? [ 617.389370][ T5952] usb 5-1: bad CDC descriptors [ 617.419456][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.725213][ T5952] usb 5-1: USB disconnect, device number 9 [ 618.871827][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.577'. [ 618.937746][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.937893][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.938139][ T8488] bridge_slave_1: entered allmulticast mode [ 618.941095][ T8488] bridge_slave_1: entered promiscuous mode [ 619.489327][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.567963][ T8867] comedi comedi2: pcmda12: I/O port conflict (0x6,16) [ 619.570715][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.403172][ T8901] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 621.658557][ T8488] team0: Port device team_slave_0 added [ 621.698737][ T8488] team0: Port device team_slave_1 added [ 623.188275][ T8922] ubi31: attaching mtd0 [ 623.229800][ T8922] ubi31: scanning is finished [ 624.908236][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.908324][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.908418][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.145710][ T8922] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 626.216998][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.217016][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.217044][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.500111][ T8939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.604'. [ 626.500200][ T8939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.604'. [ 626.555157][ T8942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.605'. [ 627.095378][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.217818][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.420681][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.474637][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.296379][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.431215][ C1] vkms_vblank_simulate: vblank timer overrun [ 628.464336][ T148] bridge_slave_1: left allmulticast mode [ 628.464373][ T148] bridge_slave_1: left promiscuous mode [ 628.464635][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.592351][ T148] bridge_slave_0: left allmulticast mode [ 628.592386][ T148] bridge_slave_0: left promiscuous mode [ 628.592720][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.729004][ T148] bridge_slave_1: left allmulticast mode [ 628.729041][ T148] bridge_slave_1: left promiscuous mode [ 628.729337][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.830178][ T148] bridge_slave_0: left allmulticast mode [ 628.830217][ T148] bridge_slave_0: left promiscuous mode [ 628.830495][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.243341][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.472594][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.472697][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.741697][ T148] bond0 (unregistering): Released all slaves [ 629.832239][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.850245][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.851665][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.868937][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.869771][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.064966][ T148] bond0 (unregistering): Released all slaves [ 630.272398][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.689232][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.854250][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.942947][ T5856] Bluetooth: hci2: command tx timeout [ 631.943759][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.018721][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.059366][ T148] bond0 (unregistering): Released all slaves [ 632.210020][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.353730][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.404204][ C1] vkms_vblank_simulate: vblank timer overrun [ 632.419354][ T8670] chnl_net:caif_netlink_parms(): no params data found [ 633.656247][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.660630][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.660879][ T8670] bridge_slave_0: entered allmulticast mode [ 633.664401][ T8670] bridge_slave_0: entered promiscuous mode [ 633.710717][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.710888][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.711152][ T8670] bridge_slave_1: entered allmulticast mode [ 633.722003][ T8670] bridge_slave_1: entered promiscuous mode [ 634.023180][ T5856] Bluetooth: hci2: command tx timeout [ 634.497220][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.546421][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.848441][ T8670] team0: Port device team_slave_0 added [ 634.876572][ T8670] team0: Port device team_slave_1 added [ 635.213000][ T148] hsr_slave_0: left promiscuous mode [ 635.233161][ T148] hsr_slave_1: left promiscuous mode [ 635.235566][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.235597][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.284004][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.284041][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.369028][ T148] veth1_macvtap: left promiscuous mode [ 635.369159][ T148] veth0_macvtap: left promiscuous mode [ 635.369460][ T148] veth1_vlan: left promiscuous mode [ 635.369678][ T148] veth0_vlan: left promiscuous mode [ 636.102956][ T5856] Bluetooth: hci2: command tx timeout [ 638.192970][ T5856] Bluetooth: hci2: command tx timeout [ 638.363092][ T148] team0 (unregistering): Port device team_slave_1 removed [ 638.644125][ T148] team0 (unregistering): Port device team_slave_0 removed [ 641.404016][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.404035][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.404064][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.477087][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.477105][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.477135][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.851237][ T8670] hsr_slave_0: entered promiscuous mode [ 641.854440][ T8670] hsr_slave_1: entered promiscuous mode [ 642.352399][ T8973] chnl_net:caif_netlink_parms(): no params data found [ 643.168540][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.168666][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.168868][ T8973] bridge_slave_0: entered allmulticast mode [ 643.171175][ T8973] bridge_slave_0: entered promiscuous mode [ 643.222518][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.222730][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.239303][ T8973] bridge_slave_1: entered allmulticast mode [ 643.241990][ T8973] bridge_slave_1: entered promiscuous mode [ 643.531453][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.579601][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.864695][ T8973] team0: Port device team_slave_0 added [ 643.875710][ T8973] team0: Port device team_slave_1 added [ 644.069689][ T8670] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 644.286782][ T8670] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 644.362266][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.362285][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.362314][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.439775][ T8670] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 644.496517][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.496535][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.496564][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.509912][ T8670] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 644.770338][ T148] IPVS: stop unused estimator thread 0... [ 645.045032][ T8973] hsr_slave_0: entered promiscuous mode [ 645.046464][ T8973] hsr_slave_1: entered promiscuous mode [ 645.047503][ T8973] debugfs: 'hsr0' already exists in 'hsr' [ 645.047530][ T8973] Cannot create hsr debugfs directory [ 645.450160][ T148] bridge_slave_1: left allmulticast mode [ 645.450195][ T148] bridge_slave_1: left promiscuous mode [ 645.450473][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.554580][ T148] bridge_slave_0: left allmulticast mode [ 645.554616][ T148] bridge_slave_0: left promiscuous mode [ 645.554910][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.263825][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.403726][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.457184][ T148] bond0 (unregistering): Released all slaves [ 646.549924][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.575650][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.577016][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.578238][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.579103][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 646.764923][ T148] bond0 (unregistering): Released all slaves [ 647.330089][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.373157][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.724038][ T148] team0 (unregistering): Port device team_slave_1 removed [ 647.915206][ T148] team0 (unregistering): Port device team_slave_0 removed [ 648.663334][ T5856] Bluetooth: hci5: command tx timeout [ 650.177171][ T9068] chnl_net:caif_netlink_parms(): no params data found [ 650.672524][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.674480][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.683260][ T9068] bridge_slave_0: entered allmulticast mode [ 650.686587][ T9068] bridge_slave_0: entered promiscuous mode [ 650.744027][ T5856] Bluetooth: hci5: command tx timeout [ 650.896882][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.897036][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.897271][ T9068] bridge_slave_1: entered allmulticast mode [ 650.901866][ T9068] bridge_slave_1: entered promiscuous mode [ 651.339156][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.356036][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.724202][ T9068] team0: Port device team_slave_0 added [ 651.731207][ T9068] team0: Port device team_slave_1 added [ 651.828962][ T8973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 652.171975][ T8973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 652.212078][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.212097][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.212128][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.325260][ T8973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.354380][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.354399][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.354438][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.358093][ T8973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.691437][ T9068] hsr_slave_0: entered promiscuous mode [ 652.694927][ T9068] hsr_slave_1: entered promiscuous mode [ 652.695960][ T9068] debugfs: 'hsr0' already exists in 'hsr' [ 652.695989][ T9068] Cannot create hsr debugfs directory [ 652.823328][ T5856] Bluetooth: hci5: command tx timeout [ 653.148939][ T148] bridge_slave_1: left allmulticast mode [ 653.148977][ T148] bridge_slave_1: left promiscuous mode [ 653.149237][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.206626][ T148] bridge_slave_0: left allmulticast mode [ 653.206665][ T148] bridge_slave_0: left promiscuous mode [ 653.206961][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.766484][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.854050][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.919049][ T148] bond0 (unregistering): Released all slaves [ 654.345680][ T148] hsr_slave_0: left promiscuous mode [ 654.373350][ T148] hsr_slave_1: left promiscuous mode [ 654.374408][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.396449][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.903208][ T5856] Bluetooth: hci5: command tx timeout [ 655.155603][ T148] team0 (unregistering): Port device team_slave_1 removed [ 655.325266][ T148] team0 (unregistering): Port device team_slave_0 removed [ 656.489846][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.535003][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.620405][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.620600][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.653412][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.653643][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.414467][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.466500][ T9068] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 657.522995][ T9068] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 657.556054][ T9068] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 657.599710][ T9068] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 657.929282][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.006217][ T9068] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.029508][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.033126][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.079499][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.079677][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.245943][ T8973] veth0_vlan: entered promiscuous mode [ 658.292665][ T8973] veth1_vlan: entered promiscuous mode [ 658.438096][ T8973] veth0_macvtap: entered promiscuous mode [ 658.458623][ T8973] veth1_macvtap: entered promiscuous mode [ 658.533888][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.569576][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.601280][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.602689][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.634146][ T3616] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.634719][ T3616] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.964817][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.129726][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.129750][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.327728][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.327750][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.972739][ T9068] veth0_vlan: entered promiscuous mode [ 660.042087][ T9068] veth1_vlan: entered promiscuous mode [ 660.490423][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.98'. [ 661.077892][ T9068] veth0_macvtap: entered promiscuous mode [ 661.165450][ T9068] veth1_macvtap: entered promiscuous mode [ 663.297216][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.360914][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.590643][ T3507] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.614802][ T3507] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.615623][ T3507] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.615919][ T3507] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.756099][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.756125][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.594462][ C0] vkms_vblank_simulate: vblank timer overrun [ 665.610977][ T9188] vivid-001: disconnect [ 665.699883][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.705249][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.756648][ T9184] 9pnet: Could not find request transport: fd0x0000000000000003 [ 666.107186][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.382703][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.024946][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.413865][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.778176][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.760677][ T9208] vivid-001: reconnect [ 672.183024][ T38] audit: type=1326 audit(1758852335.938:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.8.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8926eec9 code=0x7ffc0000 [ 672.183083][ T38] audit: type=1326 audit(1758852335.948:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.8.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f6a8926eec9 code=0x7ffc0000 [ 672.183124][ T38] audit: type=1326 audit(1758852335.948:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.8.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8926eec9 code=0x7ffc0000 [ 672.183164][ T38] audit: type=1326 audit(1758852335.948:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9220 comm="syz.8.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6a8926eec9 code=0x7ffc0000 [ 672.916683][ T9] IPVS: starting estimator thread 0... [ 673.184218][ T9233] IPVS: using max 6 ests per chain, 14400 per kthread [ 674.175996][ T9252] vivid-000: ================= START STATUS ================= [ 674.176102][ T9252] vivid-000: Test Pattern: 75% Colorbar [ 674.176138][ T9252] vivid-000: Fill Percentage of Frame: 100 [ 674.176159][ T9252] vivid-000: Horizontal Movement: No Movement [ 674.176199][ T9252] vivid-000: Vertical Movement: No Movement [ 674.176219][ T9252] vivid-000: OSD Text Mode: All [ 674.176238][ T9252] vivid-000: Show Border: false [ 674.176257][ T9252] vivid-000: Show Square: false [ 674.176276][ T9252] vivid-000: Sensor Flipped Horizontally: false [ 674.176296][ T9252] vivid-000: Sensor Flipped Vertically: false [ 674.176315][ T9252] vivid-000: Insert SAV Code in Image: false [ 674.262952][ T9252] vivid-000: Insert EAV Code in Image: false [ 674.262975][ T9252] vivid-000: Insert Video Guard Band: false [ 674.262996][ T9252] vivid-000: Reduced Framerate: false [ 674.263015][ T9252] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 000-0 [ 674.263035][ T9252] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 674.263055][ T9252] vivid-000: Enable Capture Cropping: true [ 674.263073][ T9252] vivid-000: Enable Capture Composing: true [ 674.263092][ T9252] vivid-000: Enable Capture Scaler: true [ 674.263111][ T9252] vivid-000: Timestamp Source: End of Frame [ 674.263130][ T9252] vivid-000: Colorspace: Rec. 709 [ 674.263149][ T9252] vivid-000: Transfer Function: Default [ 674.263168][ T9252] vivid-000: Y'CbCr Encoding: Default [ 674.263188][ T9252] vivid-000: HSV Encoding: Hue 0-179 [ 674.263207][ T9252] vivid-000: Quantization: Default [ 674.263226][ T9252] vivid-000: Apply Alpha To Red Only: false [ 674.263245][ T9252] vivid-000: Standard Aspect Ratio: 4x3 [ 674.263264][ T9252] vivid-000: DV Timings Signal Mode: Current DV Timings [ 674.263282][ T9252] vivid-000: DV Timings: 640x480p59 inactive [ 674.263306][ T9252] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 674.263326][ T9252] vivid-000: Maximum EDID Blocks: 2 [ 674.263347][ T9252] vivid-000: Limited RGB Range (16-235): true [ 674.263367][ T9252] vivid-000: Rx RGB Quantization Range: Automatic [ 674.263387][ T9252] vivid-000: Power Present: 0x00000001 [ 674.263489][ T9252] tpg source WxH: 1280x720 (R'G'B) [ 674.263503][ T9252] tpg field: 1 [ 674.263510][ T9252] tpg crop: (0,0)/1280x720 [ 674.263523][ T9252] tpg compose: (0,0)/1280x720 [ 674.263537][ T9252] tpg colorspace: 3 [ 674.263544][ T9252] tpg transfer function: 0/0 [ 674.263555][ T9252] tpg quantization: 0/0 [ 674.263564][ T9252] tpg RGB range: 0/1 [ 674.263579][ T9252] vivid-000: ================== END STATUS ================== [ 674.617029][ T9253] 9pnet: Could not find request transport: fd0x0000000000000003 [ 675.716281][ T9261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.646'. [ 675.852700][ T9263] 9pnet: Could not find request transport: fd0x0000000000000003 [ 678.025977][ T9296] vivid-000: disconnect [ 679.024856][ T9303] 9pnet: Could not find request transport: fd0x0000000000000003 [ 679.119000][ T9303] netlink: 36 bytes leftover after parsing attributes in process `syz.5.657'. [ 679.174833][ T9308] vivid-000: reconnect [ 680.786368][ T9343] $H: renamed from bond0 (while UP) [ 681.167597][ T9343] $H: entered promiscuous mode [ 681.167623][ T9343] bond_slave_0: entered promiscuous mode [ 681.167924][ T9343] bond_slave_1: entered promiscuous mode [ 681.953453][ T9339] ALSA: mixer_oss: invalid OSS volume '' [ 685.778843][ T9398] netlink: 'syz.8.682': attribute type 8 has an invalid length. [ 686.055835][ T9401] vivid-004: disconnect [ 687.122175][ T9402] vivid-004: reconnect [ 687.441456][ T9413] IPv6: addrconf: prefix option has invalid lifetime [ 687.468277][ T9413] IPv6: addrconf: prefix option has invalid lifetime [ 689.731061][ T9433] vivid-000: disconnect [ 691.592164][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.592250][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.981632][ T9435] vivid-000: reconnect [ 695.330335][ T9487] vivid-001: disconnect [ 696.421515][ T9481] vivid-001: reconnect [ 697.063409][ T5952] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 697.239990][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 697.240030][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 697.240061][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 154, setting to 64 [ 697.240109][ T5952] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 697.240133][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.283947][ T5952] usb 6-1: config 0 descriptor?? [ 697.294015][ T9515] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 697.308999][ T5952] usb 6-1: Found UVC 0.00 device (10c4:ea90) [ 697.309052][ T5952] usb 6-1: No valid video chain found. [ 697.582670][ T31] usb 6-1: USB disconnect, device number 2 [ 697.893586][ T9539] vivid-000: disconnect [ 698.531376][ T9540] vivid-000: reconnect [ 698.629120][ T38] audit: type=1326 audit(1758852362.458:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.630091][ T38] audit: type=1326 audit(1758852362.458:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.631554][ T38] audit: type=1326 audit(1758852362.458:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.632033][ T38] audit: type=1326 audit(1758852362.458:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.632084][ T38] audit: type=1326 audit(1758852362.458:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.632389][ T38] audit: type=1326 audit(1758852362.458:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.635364][ T38] audit: type=1326 audit(1758852362.468:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.635418][ T38] audit: type=1326 audit(1758852362.468:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.635808][ T38] audit: type=1326 audit(1758852362.468:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.5.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 698.771581][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.855111][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.325987][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.453074][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.674116][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.934734][ T38] audit: type=1400 audit(1758852363.758:60): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9560 comm="syz.5.729" src=1 dest=20000 netif=wpan0 [ 701.272982][ T6113] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 701.440340][ T6113] usb 5-1: Using ep0 maxpacket: 32 [ 701.449887][ T6113] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.449914][ T6113] usb 5-1: config 0 has no interface number 0 [ 701.483539][ T6113] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 701.483575][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.483598][ T6113] usb 5-1: Product: syz [ 701.483615][ T6113] usb 5-1: Manufacturer: syz [ 701.483629][ T6113] usb 5-1: SerialNumber: syz [ 701.492966][ T5927] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 701.534553][ T6113] usb 5-1: config 0 descriptor?? [ 701.561046][ T6113] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 701.561082][ T6113] usb 5-1: selecting invalid altsetting 1 [ 701.561099][ T6113] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 701.662534][ T6113] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 701.679096][ T6113] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 701.679205][ T6113] usb 5-1: media controller created [ 701.701540][ T5927] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 701.701577][ T5927] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 701.701604][ T5927] usb 8-1: config 1 interface 0 has no altsetting 0 [ 701.739852][ T5927] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 701.739886][ T5927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.739908][ T5927] usb 8-1: Product: syz [ 701.739924][ T5927] usb 8-1: Manufacturer: syz [ 701.739939][ T5927] usb 8-1: SerialNumber: syz [ 701.784864][ T9602] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 701.785011][ T9602] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 701.836233][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 701.866415][ T6113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.957005][ T6113] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 701.957068][ T6113] zl10353_read_register: readreg error (reg=127, ret==-71) [ 701.988829][ T6113] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 702.039490][ T31] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 702.039524][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.039546][ T31] usb 6-1: config 0 has no interface number 0 [ 702.039600][ T31] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 702.039626][ T31] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.043973][ T31] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 702.044005][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.044027][ T31] usb 6-1: Product: syz [ 702.044042][ T31] usb 6-1: Manufacturer: syz [ 702.044058][ T31] usb 6-1: SerialNumber: syz [ 702.145088][ T31] usb 6-1: config 0 descriptor?? [ 702.347681][ T5927] rtl8150 8-1:1.0: couldn't reset the device [ 702.348196][ T5927] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 702.369900][ T6113] usb 5-1: USB disconnect, device number 10 [ 702.523334][ T5927] usb 8-1: USB disconnect, device number 5 [ 702.813705][ T31] usb 6-1: USB disconnect, device number 3 [ 704.188079][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 704.495836][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 704.499498][ T31] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 704.525031][ T31] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 704.525064][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.525086][ T31] usb 6-1: Product: syz [ 704.525101][ T31] usb 6-1: Manufacturer: syz [ 704.525115][ T31] usb 6-1: SerialNumber: syz [ 704.737113][ T31] usb 6-1: config 0 descriptor?? [ 705.694108][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 705.694185][ T31] usb 6-1: setting power ON [ 705.755591][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 705.807010][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.823721][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 705.823792][ T31] usb 6-1: media controller created [ 706.091673][ T9679] vivid-002: disconnect [ 706.644984][ T9680] vivid-002: reconnect [ 706.710001][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.006998][ T31] usb 6-1: selecting invalid altsetting 6 [ 708.007026][ T31] usb 6-1: digital interface selection failed (-22) [ 708.007057][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 708.036674][ T31] usb 6-1: setting power OFF [ 708.036990][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 708.037010][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 708.037024][ T31] (NULL device *): no alternate interface [ 708.201890][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 708.243435][ T31] usb 6-1: USB disconnect, device number 4 [ 708.530044][ T9700] netlink: 28 bytes leftover after parsing attributes in process `syz.8.774'. [ 709.302192][ T9721] syz.6.779 uses obsolete (PF_INET,SOCK_PACKET) [ 709.501327][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.001592][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.563958][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.823378][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 711.975794][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.975853][ T31] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 711.975880][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.040577][ T31] usb 9-1: config 0 descriptor?? [ 712.288529][ T5856] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 712.635978][ T31] logitech 0003:046D:C295.0001: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.8-1/input0 [ 712.636030][ T31] logitech 0003:046D:C295.0001: no inputs found [ 712.794202][ T31] usb 9-1: USB disconnect, device number 2 [ 712.873051][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 713.026710][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.026775][ T9] usb 5-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 713.026801][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.060842][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.088593][ T9] usb 5-1: config 0 descriptor?? [ 713.100915][ T9] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 713.101029][ T9] gspca_mr97310a: reg write [21] error -22 [ 713.101123][ T9] mr97310a 5-1:0.0: probe with driver mr97310a failed with error -22 [ 713.316064][ T6438] usb 5-1: USB disconnect, device number 11 [ 713.651666][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.041260][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.874643][ T9798] netlink: 36 bytes leftover after parsing attributes in process `syz.6.805'. [ 715.515227][ T9792] 9pnet: Could not find request transport: fd0x0000000000000003 [ 716.097214][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.129911][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.236154][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.648710][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.802255][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.967602][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.339149][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.802538][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.197699][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.644782][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.738504][ T9837] vivid-000: disconnect [ 719.123495][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.330744][ T9826] vivid-000: reconnect [ 719.930024][ T5952] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 720.045591][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.118866][ T5952] usb 9-1: Using ep0 maxpacket: 8 [ 720.612953][ T5952] usb 9-1: unable to get BOS descriptor or descriptor too short [ 720.617093][ T5952] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 720.617123][ T5952] usb 9-1: config 4 has no interface number 0 [ 720.617157][ T5952] usb 9-1: config 4 interface 30 has no altsetting 0 [ 720.630241][ T5952] usb 9-1: string descriptor 0 read error: -22 [ 720.630410][ T5952] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 720.630436][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.908451][ C1] vkms_vblank_simulate: vblank timer overrun [ 720.965199][ T5952] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 720.965259][ T5952] dw2102: su3000_power_ctrl: 1, initialized 0 [ 720.965280][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 721.022217][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.027125][ T5952] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 721.027199][ T5952] usb 9-1: media controller created [ 721.027596][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027612][ T5952] dw2102: i2c transfer failed. [ 721.027632][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027647][ T5952] dw2102: i2c transfer failed. [ 721.027665][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027679][ T5952] dw2102: i2c transfer failed. [ 721.027698][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027713][ T5952] dw2102: i2c transfer failed. [ 721.027731][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027745][ T5952] dw2102: i2c transfer failed. [ 721.027763][ T5952] dvb-usb: bulk message failed: -22 (6/0) [ 721.027778][ T5952] dw2102: i2c transfer failed. [ 721.027788][ T5952] dvb-usb: MAC address: 02:02:02:02:02:02 [ 721.145046][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.820'. [ 721.184317][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.234506][ T5952] dvb-usb: bulk message failed: -22 (3/0) [ 721.234526][ T5952] dw2102: command 0x0e transfer failed. [ 721.234533][ T5952] dvb-usb: bulk message failed: -22 (3/0) [ 721.234543][ T5952] dw2102: command 0x0e transfer failed. [ 721.365820][ T9858] 9pnet: Could not find request transport: fd0x0000000000000003 [ 721.544799][ T5952] dvb-usb: bulk message failed: -22 (3/0) [ 721.544827][ T5952] dw2102: command 0x0e transfer failed. [ 721.544838][ T5952] dvb-usb: bulk message failed: -22 (3/0) [ 721.544853][ T5952] dw2102: command 0x0e transfer failed. [ 721.544863][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 721.544877][ T5952] dw2102: command 0x51 transfer failed. [ 721.544888][ T5952] dvb-usb: bulk message failed: -22 (5/0) [ 721.544910][ T5952] dw2102: i2c probe for address 0x68 failed. [ 721.544923][ T5952] dvb-usb: bulk message failed: -22 (5/0) [ 721.544937][ T5952] dw2102: i2c probe for address 0x69 failed. [ 721.544950][ T5952] dvb-usb: bulk message failed: -22 (5/0) [ 721.544964][ T5952] dw2102: i2c probe for address 0x6a failed. [ 721.544975][ T5952] dw2102: probing for demodulator failed. Is the external power switched on? [ 721.544987][ T5952] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 721.832946][ T5952] rc_core: IR keymap rc-tt-1500 not found [ 721.832968][ T5952] Registered IR keymap rc-empty [ 721.866385][ T5952] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 721.893664][ T5952] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input9 [ 722.205713][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.432437][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.455812][ C1] vkms_vblank_simulate: vblank timer overrun [ 722.870610][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.210405][ T5952] dvb-usb: schedule remote query interval to 250 msecs. [ 723.210435][ T5952] dw2102: su3000_power_ctrl: 0, initialized 1 [ 723.210450][ T5952] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 723.243836][ T5952] usb 9-1: USB disconnect, device number 3 [ 723.558384][ C1] vkms_vblank_simulate: vblank timer overrun [ 723.985831][ T5952] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 724.090930][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.895826][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.025380][ T38] audit: type=1326 audit(1758852388.858:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.025440][ T38] audit: type=1326 audit(1758852388.858:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.033332][ T38] audit: type=1326 audit(1758852388.858:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.034478][ T38] audit: type=1326 audit(1758852388.868:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.034525][ T38] audit: type=1326 audit(1758852388.868:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.046209][ T38] audit: type=1326 audit(1758852388.878:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.5.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa9afd0eec9 code=0x7ffc0000 [ 725.153623][ C1] vkms_vblank_simulate: vblank timer overrun [ 725.163821][ T5845] IPVS: starting estimator thread 0... [ 725.283408][ T9917] IPVS: using max 6 ests per chain, 14400 per kthread [ 725.403903][ T5952] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 725.555385][ T5952] usb 9-1: Using ep0 maxpacket: 32 [ 725.573363][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.837'. [ 725.580059][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.580096][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.614074][ T5952] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 725.614102][ T5952] usb 9-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 725.614116][ T5952] usb 9-1: Manufacturer: syz [ 725.619097][ T5952] usb 9-1: config 0 descriptor?? [ 725.655041][ T5952] hub 9-1:0.0: USB hub found [ 725.672992][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 725.836053][ T9923] 9pnet: Could not find request transport: fd0x0000000000000003 [ 725.853199][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 725.855596][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 725.855638][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 725.855659][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.855725][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.855744][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 725.857055][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 725.857094][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 725.857115][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.857133][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.857198][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 725.858659][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 725.858696][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 725.858716][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.858734][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.858806][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 726.036152][ T9] usb 8-1: string descriptor 0 read error: -22 [ 726.036492][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 726.036528][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.049312][ T5952] hub 9-1:0.0: 1 port detected [ 726.203576][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 726.289031][ T5952] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 726.289060][ T5952] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 726.321907][ T5952] usbhid 9-1:0.0: can't add hid device: -71 [ 726.322054][ T5952] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 726.373477][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.839'. [ 726.374806][ T5952] usb 9-1: USB disconnect, device number 4 [ 726.433666][ T9] usb 8-1: USB disconnect, device number 6 [ 727.374900][ T9948] tipc: Started in network mode [ 727.374924][ T9948] tipc: Node identity a2a7, cluster identity 4711 [ 727.374937][ T9948] tipc: Node number set to 41639 [ 727.416898][ T9948] tipc: Cannot configure node identity twice [ 730.198061][ T9974] vivid-002: disconnect [ 730.968873][ T9979] vivid-002: reconnect [ 731.176907][ T6015] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 731.334319][ T6015] usb 6-1: Using ep0 maxpacket: 32 [ 731.336986][ T6015] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.337021][ T6015] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 731.337051][ T6015] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.337087][ T6015] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 731.337120][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.369688][ T6015] usb 6-1: config 0 descriptor?? [ 731.562995][ T5927] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 731.750734][ T5927] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 731.750767][ T5927] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 731.750788][ T5927] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 731.750810][ T5927] usb 9-1: config 220 has no interface number 2 [ 731.750889][ T5927] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 731.750919][ T5927] usb 9-1: config 220 interface 0 has no altsetting 0 [ 731.750939][ T5927] usb 9-1: config 220 interface 76 has no altsetting 0 [ 731.750958][ T5927] usb 9-1: config 220 interface 1 has no altsetting 0 [ 731.831130][ T5927] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 731.831163][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.831185][ T5927] usb 9-1: Product: syz [ 731.831200][ T5927] usb 9-1: Manufacturer: syz [ 731.831215][ T5927] usb 9-1: SerialNumber: syz [ 732.028892][ T6015] hid (null): unknown global tag 0xc [ 732.028917][ T6015] hid (null): global environment stack underflow [ 732.036245][ T6015] corsair-cpro 0003:1B1C:0C10.0002: unknown global tag 0xc [ 732.036272][ T6015] corsair-cpro 0003:1B1C:0C10.0002: item 0 1 1 12 parsing failed [ 732.037252][ T6015] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -22 [ 732.142955][ T5845] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 732.197492][ T5927] usb 9-1: selecting invalid altsetting 0 [ 732.219677][ T5927] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 732.219716][ T5927] usb 9-1: No valid video chain found. [ 732.277552][ T5952] usb 6-1: USB disconnect, device number 5 [ 732.291688][ T5927] usb 9-1: selecting invalid altsetting 0 [ 732.291730][ T5927] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 732.307495][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 732.312998][ T5845] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 732.313029][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.313049][ T5845] usb 8-1: Product: syz [ 732.313065][ T5845] usb 8-1: Manufacturer: syz [ 732.313091][ T5845] usb 8-1: SerialNumber: syz [ 732.514832][ T5845] usb 8-1: config 0 descriptor?? [ 732.527102][ T5927] usb 9-1: USB disconnect, device number 5 [ 732.606928][ T6438] IPVS: starting estimator thread 0... [ 732.713065][T10014] IPVS: using max 6 ests per chain, 14400 per kthread [ 733.038641][ T5927] usb 8-1: USB disconnect, device number 7 [ 733.327817][ T9534] udevd[9534]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.428510][T10023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.867'. [ 735.692053][T10035] 9pnet: Could not find request transport: fd0x0000000000000003 [ 735.881523][T10046] capability: warning: `syz.5.869' uses 32-bit capabilities (legacy support in use) [ 736.322965][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 736.485011][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.485071][ T31] usb 8-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 736.485096][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.550489][ T31] usb 8-1: config 0 descriptor?? [ 736.682962][ T5927] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 736.846611][ T5927] usb 9-1: Using ep0 maxpacket: 8 [ 736.894489][ T5927] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 736.894523][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.894544][ T5927] usb 9-1: Product: syz [ 736.894560][ T5927] usb 9-1: Manufacturer: syz [ 736.894575][ T5927] usb 9-1: SerialNumber: syz [ 736.955266][ T5927] usb 9-1: config 0 descriptor?? [ 736.986261][ T5927] usb_ehset_test 9-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 737.067512][ T6685] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 737.069615][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069655][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069684][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069711][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069738][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069778][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.069806][ T31] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 737.170699][ T5927] usb 9-1: USB disconnect, device number 6 [ 737.276717][ T31] hid-alps 0003:044E:121E.0003: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.7-1/input0 [ 737.293076][ T6685] usb 5-1: Using ep0 maxpacket: 32 [ 737.303225][ T6685] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.303258][ T6685] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.303288][ T6685] usb 5-1: config 0 interface 0 has no altsetting 0 [ 737.303325][ T6685] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 737.303351][ T6685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.355133][ T6685] usb 5-1: config 0 descriptor?? [ 737.466409][ T31] usb 8-1: USB disconnect, device number 8 [ 737.617521][T10073] fido_id[10073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 737.853335][ T6685] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 737.853374][ T6685] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 737.853403][ T6685] magicmouse 0003:05AC:0324.0004: unknown main item tag 0x0 [ 737.867817][ T6685] magicmouse 0003:05AC:0324.0004: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.4-1/input0 [ 737.870252][ T6685] magicmouse 0003:05AC:0324.0004: magicmouse input not registered [ 737.874548][ T6685] magicmouse 0003:05AC:0324.0004: probe with driver magicmouse failed with error -12 [ 738.038492][ T6685] usb 5-1: USB disconnect, device number 12 [ 739.463363][ T6438] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 739.616992][ T6438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.617030][ T6438] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.617075][ T6438] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 739.617101][ T6438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.705276][T10091] fido_id[10091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 739.740107][ T6438] usb 6-1: config 0 descriptor?? [ 740.782254][ T6438] stadia 0003:18D1:9400.0005: unexpected long global item [ 740.802316][ T6438] stadia 0003:18D1:9400.0005: parse failed [ 740.802400][ T6438] stadia 0003:18D1:9400.0005: probe with driver stadia failed with error -22 [ 740.950553][ T9] usb 6-1: USB disconnect, device number 6 [ 741.782973][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 741.954981][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 741.983629][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.983697][ T9] usb 9-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 741.983722][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.035217][ T9] usb 9-1: config 0 descriptor?? [ 742.063355][ T9] dvb-usb: found a 'TeVii S662' in warm state. [ 742.063418][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 742.063437][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 742.075221][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 742.104105][ T9] dvbdev: DVB: registering new adapter (TeVii S662) [ 742.104179][ T9] usb 9-1: media controller created [ 742.104210][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104227][ T9] dw2102: i2c transfer failed. [ 742.104247][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104262][ T9] dw2102: i2c transfer failed. [ 742.104280][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104302][ T9] dw2102: i2c transfer failed. [ 742.104321][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104336][ T9] dw2102: i2c transfer failed. [ 742.104354][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104369][ T9] dw2102: i2c transfer failed. [ 742.104386][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 742.104401][ T9] dw2102: i2c transfer failed. [ 742.104412][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 742.205205][T10127] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 742.205246][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 742.251872][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 742.276177][T10122] dw2102: i2c wr: len=66 is too big! [ 742.276177][T10122] [ 742.313606][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 742.313628][ T9] dw2102: command 0x0e transfer failed. [ 742.313638][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 742.313652][ T9] dw2102: command 0x0e transfer failed. [ 742.626824][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 742.626855][ T9] dw2102: command 0x0e transfer failed. [ 742.626866][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 742.626880][ T9] dw2102: command 0x0e transfer failed. [ 742.626891][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 742.626904][ T9] dw2102: command 0x51 transfer failed. [ 742.626915][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 742.626929][ T9] dw2102: i2c probe for address 0x68 failed. [ 742.626941][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 742.626956][ T9] dw2102: i2c probe for address 0x69 failed. [ 742.626968][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 742.626981][ T9] dw2102: i2c probe for address 0x6a failed. [ 742.626992][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 742.627002][ T9] dvb-usb: no frontend was attached by 'TeVii S662' [ 742.846437][ T9] rc_core: IR keymap rc-tt-1500 not found [ 742.846468][ T9] Registered IR keymap rc-empty [ 742.848289][ T9] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 742.851619][ T9] input: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input10 [ 742.904057][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 742.904082][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 742.904096][ T9] dvb-usb: TeVii S662 successfully initialized and connected. [ 742.943393][ T9] usb 9-1: USB disconnect, device number 7 [ 743.023282][ T6438] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 743.202826][ T6438] usb 5-1: Using ep0 maxpacket: 8 [ 743.207654][ T6438] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.207693][ T6438] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 743.207720][ T6438] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 743.207748][ T6438] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.212338][ T6438] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 743.212369][ T6438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.212390][ T6438] usb 5-1: Product: syz [ 743.212406][ T6438] usb 5-1: Manufacturer: syz [ 743.212428][ T6438] usb 5-1: SerialNumber: syz [ 744.103279][ T6438] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 744.105063][ T6438] usbtest 5-1:1.0: Linux user mode ISO test driver [ 744.105088][ T6438] usbtest 5-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 744.183268][ T6438] usb 5-1: USB disconnect, device number 13 [ 744.613076][ T9] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 746.455754][T10170] 9pnet: Could not find request transport: fd0x0000000000000003 [ 746.732992][ T31] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 746.884564][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 746.887463][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.887528][ T31] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.889102][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.889132][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 746.889167][ T31] usb 9-1: SerialNumber: syz [ 746.955448][ T31] cdc_acm 9-1:1.0: skipping garbage [ 746.955471][ T31] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 746.955501][ T31] cdc_acm 9-1:1.0: This needs exactly 3 endpoints [ 746.955541][ T31] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 747.071841][T10195] 9pnet: Could not find request transport: fd0x0000000000000003 [ 747.089322][T10195] netlink: 36 bytes leftover after parsing attributes in process `syz.6.911'. [ 747.368147][ T5845] usb 9-1: USB disconnect, device number 8 [ 748.693788][T10211] vivid-004: disconnect [ 750.330977][T10216] vivid-004: reconnect [ 751.123119][ T5927] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 751.288862][ T5927] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 751.288900][ T5927] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 751.288929][ T5927] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.288957][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 751.288994][ T5927] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 751.289018][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.365722][ T5927] usb 5-1: config 0 descriptor?? [ 751.367125][T10234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 751.542914][ T31] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 751.855895][ T31] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 751.864957][ T31] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 751.864996][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.865021][ T31] usb 9-1: Product: syz [ 751.865039][ T31] usb 9-1: Manufacturer: syz [ 751.865055][ T31] usb 9-1: SerialNumber: syz [ 751.909885][ T5927] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 751.989896][ T31] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 752.020553][ T5927] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 752.020795][ T5927] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero RNG initialised [ 752.050156][ T5927] usb 5-1: USB disconnect, device number 14 [ 752.067331][ T38] audit: type=1326 audit(1758852415.898:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3920eec9 code=0x7ffc0000 [ 752.067408][ T38] audit: type=1326 audit(1758852415.898:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3920eec9 code=0x7ffc0000 [ 752.067842][ T38] audit: type=1326 audit(1758852415.898:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3920eec9 code=0x7ffc0000 [ 752.067897][ T38] audit: type=1326 audit(1758852415.898:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3920eec9 code=0x7ffc0000 [ 752.068015][ T38] audit: type=1326 audit(1758852415.898:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10247 comm="syz.6.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3920eec9 code=0x7ffc0000 [ 752.274998][T10249] fido_id[10249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 752.357253][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.357440][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.755708][ T31] usb 9-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 752.813387][ T31] usb 9-1: USB disconnect, device number 9 [ 753.155373][T10267] vivid-001: disconnect [ 753.220698][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 753.681006][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 753.705660][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 753.705692][ T9] usb 5-1: config 0 has no interface number 0 [ 753.705742][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 753.705771][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 753.787381][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 753.787417][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.787439][ T9] usb 5-1: Product: syz [ 753.787454][ T9] usb 5-1: Manufacturer: syz [ 753.787470][ T9] usb 5-1: SerialNumber: syz [ 754.024221][ T9] usb 5-1: config 0 descriptor?? [ 754.025592][T10259] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 754.439238][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 754.988443][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 754.988782][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 755.062046][T10270] vivid-001: reconnect [ 755.191027][ T9] usb 5-1: USB disconnect, device number 15 [ 755.353275][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.407829][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.481540][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.578310][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.641550][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.703237][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.742780][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.769780][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.848672][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.359074][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.599003][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.972772][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.045326][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.252166][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.267043][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.7.935'. [ 757.414793][T10280] 9pnet: Could not find request transport: fd0x0000000000000003 [ 757.627372][T10303] netlink: 'syz.6.941': attribute type 1 has an invalid length. [ 757.627397][T10303] netlink: 616 bytes leftover after parsing attributes in process `syz.6.941'. [ 757.627439][T10303] netlink: 'syz.6.941': attribute type 1 has an invalid length. [ 757.851785][T10310] warning: `syz.7.942' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 758.032908][ T6113] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 758.192381][ T6113] usb 9-1: Using ep0 maxpacket: 16 [ 758.206322][ T6113] usb 9-1: config 0 interface 0 has no altsetting 0 [ 758.206368][ T6113] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 758.206394][ T6113] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.230151][ T5927] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 758.310995][ T6113] usb 9-1: config 0 descriptor?? [ 758.432970][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 758.524559][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.524596][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.524620][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 758.524666][ T5927] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 758.524691][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.537951][ T5927] usb 5-1: config 0 descriptor?? [ 758.967425][ T6113] hid (null): global environment stack underflow [ 759.190036][ T6113] megaworld 0003:07B5:0312.0007: global environment stack underflow [ 759.190061][ T6113] megaworld 0003:07B5:0312.0007: item 0 0 1 11 parsing failed [ 759.190771][ T6113] megaworld 0003:07B5:0312.0007: parse failed [ 759.190836][ T6113] megaworld 0003:07B5:0312.0007: probe with driver megaworld failed with error -22 [ 759.203588][ T5927] hid_parser_main: 2 callbacks suppressed [ 759.203614][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203645][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203670][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203695][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203722][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203749][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203777][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203804][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203832][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.203860][ T5927] hid-multitouch 0003:0457:07DA.0008: unknown main item tag 0x0 [ 759.217148][ T5927] hid-multitouch 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 759.440891][ T5927] usb 5-1: USB disconnect, device number 16 [ 760.363396][ T6113] usb 9-1: USB disconnect, device number 10 [ 760.800765][T10330] fido_id[10330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 761.262968][ T5927] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 761.729246][ T5927] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 761.729339][ T5927] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 761.729392][ T5927] usb 5-1: config 162 has no interface number 0 [ 761.729440][ T5927] usb 5-1: config 162 has no interface number 1 [ 761.792016][ T5927] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.792493][ T5927] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 761.792614][ T5927] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 761.848593][ T5927] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 761.848636][ T5927] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 761.848666][ T5927] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 761.848696][ T5927] usb 5-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 761.848726][ T5927] usb 5-1: config 162 interface 79 has no altsetting 0 [ 761.848747][ T5927] usb 5-1: config 162 interface 183 has no altsetting 0 [ 761.924189][ T5927] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 761.924224][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.924246][ T5927] usb 5-1: Product: syz [ 761.924262][ T5927] usb 5-1: Manufacturer: syz [ 761.924278][ T5927] usb 5-1: SerialNumber: syz [ 762.405799][ T6113] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 762.481394][ T5927] pl2303 5-1:162.79: required endpoints missing [ 762.561718][ T5927] pl2303 5-1:162.183: pl2303 converter detected [ 762.573195][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 762.575292][ T5927] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 762.580593][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 762.611263][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 762.612249][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 762.633124][ T5927] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 762.635024][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 762.639426][ T5927] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 762.640465][ T5927] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 762.681384][ T5927] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 762.682410][ T5927] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 762.758694][ T5927] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 762.860677][ T5927] usb 5-1: USB disconnect, device number 17 [ 763.006588][ T5927] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 763.063901][ T5927] pl2303 5-1:162.183: device disconnected [ 763.256089][ T6113] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.256126][ T6113] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 763.256155][ T6113] usb 9-1: config 0 interface 0 has no altsetting 0 [ 763.256189][ T6113] usb 9-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 763.256215][ T6113] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.364193][ T6113] usb 9-1: config 0 descriptor?? [ 763.367676][T10333] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 763.385213][T10355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.954'. [ 763.479710][T10358] 9pnet: Could not find request transport: fd0x0000000000000003 [ 763.950648][ T6113] uclogic 0003:28BD:0074.0009: interface is invalid, ignoring [ 764.373599][ T6113] usb 9-1: USB disconnect, device number 11 [ 764.916297][ T5860] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 765.076813][ T5860] usb 8-1: Using ep0 maxpacket: 8 [ 765.081437][ T5860] usb 8-1: unable to get BOS descriptor or descriptor too short [ 765.093883][ T5860] usb 8-1: config 4 interface 0 has no altsetting 0 [ 765.113245][ T5860] usb 8-1: string descriptor 0 read error: -22 [ 765.113415][ T5860] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 765.113442][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.170281][ T5860] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 765.209385][ T5860] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 765.210335][ T5860] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 765.210390][ T5860] usb 8-1: media controller created [ 765.281499][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.324870][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 765.493186][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 765.498496][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 765.519447][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 765.519549][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 765.519580][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.519604][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 765.519631][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 765.519723][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 8192, setting to 1024 [ 765.519752][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 765.608238][ T5927] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 765.608742][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.608767][ T5927] usb 6-1: Product: syz [ 765.608783][ T5927] usb 6-1: Manufacturer: syz [ 765.608798][ T5927] usb 6-1: SerialNumber: syz [ 765.704863][ T5927] usb 6-1: config 0 descriptor?? [ 765.706595][T10381] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 765.741886][ T5927] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 766.292302][ T5927] usb 6-1: USB disconnect, device number 7 [ 766.438233][ T5860] zl10353_read_register: readreg error (reg=127, ret==0) [ 766.674962][ T5860] usb 8-1: USB disconnect, device number 9 [ 767.657115][T10029] udevd[10029]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.993992][ T6015] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 768.089089][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.973'. [ 768.157550][ T6015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.157587][ T6015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.157723][ T6015] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 768.157749][ T6015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.212116][ T6015] usb 9-1: config 0 descriptor?? [ 768.292893][ T5860] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 768.473035][ T5860] usb 8-1: Using ep0 maxpacket: 8 [ 768.482073][ T5860] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 768.482107][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.482128][ T5860] usb 8-1: Product: syz [ 768.482143][ T5860] usb 8-1: Manufacturer: syz [ 768.482157][ T5860] usb 8-1: SerialNumber: syz [ 768.508329][ T5860] usb 8-1: config 0 descriptor?? [ 768.802960][ T5860] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 768.855923][ T6015] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 768.886347][ T6015] usb 9-1: USB disconnect, device number 12 [ 769.218531][ T5860] usb write operation failed. (-71) [ 769.229566][ T5860] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 769.230204][ T5860] dvbdev: DVB: registering new adapter (Terratec H7) [ 769.230258][ T5860] usb 8-1: media controller created [ 769.235288][ T5860] usb read operation failed. (-71) [ 769.237656][ T5860] usb write operation failed. (-71) [ 769.263775][ T5860] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 769.286043][ T5860] usb 8-1: USB disconnect, device number 10 [ 769.362940][ T6015] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 769.512974][ T6015] usb 5-1: Using ep0 maxpacket: 16 [ 769.520664][ T6015] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 769.520697][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.520718][ T6015] usb 5-1: Product: syz [ 769.520732][ T6015] usb 5-1: Manufacturer: syz [ 769.520747][ T6015] usb 5-1: SerialNumber: syz [ 769.566017][ T6015] usb 5-1: config 0 descriptor?? [ 769.589280][ T6015] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.638119][ T6015] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 769.699507][T10444] program syz.8.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.753159][ T9518] udevd[9518]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.782928][ T5856] Bluetooth: hci5: command 0x0406 tx timeout [ 769.876812][ T5927] usb 5-1: USB disconnect, device number 18 [ 770.613124][ T5860] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 770.688786][T10455] netlink: 36 bytes leftover after parsing attributes in process `syz.8.990'. [ 770.766738][ T5860] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.766773][ T5860] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.766913][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 770.766953][ T5860] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 770.766979][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.848479][T10453] 9pnet: Could not find request transport: fd0x0000000000000003 [ 770.938033][ T5860] usb 6-1: config 0 descriptor?? [ 771.435993][ T5860] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0 [ 771.583647][ T5860] lenovo 0003:17EF:60EE.000B: Failed to switch middle button: -71 [ 771.589327][ T5860] lenovo 0003:17EF:60EE.000B: Fn-lock setting failed: -71 [ 771.589903][ T5860] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71 [ 771.634860][ T5860] usb 6-1: USB disconnect, device number 8 [ 771.971262][T10474] fido_id[10474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 772.466843][T10496] vivid-001: disconnect [ 772.539079][ T5860] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 772.707899][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 772.794010][ T5860] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 772.794039][ T5860] usb 5-1: config 0 has no interface number 0 [ 772.794087][ T5860] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.794115][ T5860] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.794145][ T5860] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.794173][ T5860] usb 5-1: config 0 interface 2 has no altsetting 0 [ 772.794210][ T5860] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 772.794234][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.943359][ T5860] usb 5-1: config 0 descriptor?? [ 773.868252][T10497] vivid-001: reconnect [ 774.167718][ T5860] hid_parser_main: 17 callbacks suppressed [ 774.167746][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167780][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167805][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167850][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167876][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167910][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.167937][ T5860] uclogic 0003:5543:0781.000C: unknown main item tag 0x0 [ 774.245999][ T5860] uclogic 0003:5543:0781.000C: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input2 [ 774.263140][T10511] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1007'. [ 774.348788][ T5860] usb 5-1: USB disconnect, device number 19 [ 774.540021][T10502] 9pnet: Could not find request transport: fd0x0000000000000003 [ 774.638050][T10515] fido_id[10515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 776.163474][ T5845] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 776.323023][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 776.327845][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.327915][ T5845] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.327944][ T5845] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.327969][ T5845] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 776.327999][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 776.328035][ T5845] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 776.328059][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.342601][ T5845] usb 5-1: config 0 descriptor?? [ 776.534839][T10548] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 777.064432][ T5845] hid-thrustmaster 0003:044F:B65D.000D: global environment stack underflow [ 777.064455][ T5845] hid-thrustmaster 0003:044F:B65D.000D: item 0 4 1 11 parsing failed [ 777.065203][ T5845] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22 [ 777.065571][ T5845] hid-thrustmaster 0003:044F:B65D.000D: probe with driver hid-thrustmaster failed with error -22 [ 778.279720][T10544] ALSA: mixer_oss: invalid OSS volume '' [ 778.328515][ T6015] usb 5-1: USB disconnect, device number 20 [ 779.127782][T10577] ptrace attach of "./syz-executor exec"[7284] was attempted by "R~sۄ9!+làvs\x22~Uxa*fPyw.6iB֡O ^$ w*? ;-b?3ASѭKkr\x0aؙ:y>sy\x1bSD8\x1bu\x0a2.bfhݹ5cM+wk|(Hn'cCj<,ᨊr.u(lnvNFQ+&iЁk&ȍĤ>貥fbRs󷖾\x0c~1%^?\x1bY\x1bg-3˩VO|\x0a᳷[.'3DAzrcO ,;j!poUe{s%@OtnZbB&+4?pRN!YˑNjgiq[6hvN|ՠxiPo54(%* ħlLUD䧥7`z8h“=-ei}\x5c\x09v:-ם\x099.VE&\x09 b&hΚA`R&֕AO ݛ/\x1bL\x07&DuoO^C'S1 @#^^V156r詴tU\x0c0鴲>ŪMVj\x07=}]MXUtY[%>p*js;x9K4m{yWp5p\x0cV\x0c\x0a(UηX8'C}ħJ=6Ww&u]8?+3q(*R\x09-e\x22gNN?-݋0ުJx~~/ALI8o$a3e@JcT ̑ѧ8%p缑/܏!/%V'Rjoqsvgqc]\x09 [ 781.457883][T10602] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>fF" [ 781.457906][T10602] CUSE: zero length info key specified [ 781.663471][T10588] ALSA: mixer_oss: invalid OSS volume '' [ 782.437284][ T6685] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 782.526680][T10612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1049'. [ 782.594193][ T6685] usb 8-1: Using ep0 maxpacket: 8 [ 782.597738][ T6685] usb 8-1: unable to get BOS descriptor or descriptor too short [ 782.600182][ T6685] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 782.600216][ T6685] usb 8-1: config 8 interface 0 has no altsetting 0 [ 782.812420][ T6685] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 782.812454][ T6685] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.812476][ T6685] usb 8-1: Product: syz [ 782.812490][ T6685] usb 8-1: Manufacturer: syz [ 782.812506][ T6685] usb 8-1: SerialNumber: syz [ 782.834289][T10606] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 783.082488][ T6685] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.082551][ T6685] usb 8-1: selecting invalid altsetting 0 [ 783.201228][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 783.428483][ T6685] usb 8-1: USB disconnect, device number 11 [ 783.699140][T10631] vivid-004: disconnect [ 784.157373][T10338] udevd[10338]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.066472][T10633] vivid-004: reconnect [ 785.642905][ T6685] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 786.176009][ T6685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.176035][ T6685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.176065][ T6685] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 786.176082][ T6685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.188883][ T6685] usb 5-1: config 0 descriptor?? [ 786.327376][T10652] 9pnet: Could not find request transport: fd0x0000000000000003 [ 786.448058][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1064'. [ 786.907310][ T6685] ortek 0003:05A4:2000.000E: item fetching failed at offset 3/5 [ 786.908235][ T6685] ortek 0003:05A4:2000.000E: probe with driver ortek failed with error -22 [ 787.313727][ T6685] usb 5-1: USB disconnect, device number 21 [ 787.530719][T10668] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.414485][T10678] vivid-001: disconnect [ 790.378100][T10673] vivid-001: reconnect [ 790.863111][T10702] tipc: Started in network mode [ 790.863146][T10702] tipc: Node identity 00000000000000000000ffffac1414bb, cluster identity 4711 [ 790.863210][T10702] tipc: Enabling of bearer rejected, failed to enable media [ 791.172964][ T6685] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 791.323001][ T6685] usb 9-1: Using ep0 maxpacket: 8 [ 791.325698][ T6685] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 791.325753][ T6685] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 791.325851][ T6685] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.398255][ T6685] usb 9-1: config 0 descriptor?? [ 791.991246][ T6685] corsair 0003:1B1C:1B09.000F: unbalanced collection at end of report description [ 791.992176][ T6685] corsair 0003:1B1C:1B09.000F: parse failed [ 791.992290][ T6685] corsair 0003:1B1C:1B09.000F: probe with driver corsair failed with error -22 [ 792.172035][ T6685] usb 9-1: USB disconnect, device number 13 [ 799.988591][ C0] sched: DL replenish lagged too much [ 802.003231][ T6685] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 802.782851][ T6685] usb 8-1: Using ep0 maxpacket: 8 [ 807.869620][ T6685] usb 8-1: unable to read config index 0 descriptor/start: -110 [ 807.869666][ T6685] usb 8-1: can't read configurations, error -110 [ 813.792251][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.792334][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 860.546739][T10775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 860.580001][T10775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 860.603250][T10775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 860.606266][T10775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 860.607155][T10775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 861.159514][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.202899][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 861.299982][T10773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 861.302205][T10773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 861.347727][T10773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 861.436874][T10782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 861.463467][T10782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 861.464962][T10782] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 861.551359][T10782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 861.552233][T10782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 862.104704][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 862.141324][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 862.143036][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 862.158927][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 862.159904][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 862.391873][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 862.426705][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 862.428080][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 862.453163][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 862.454111][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 862.747745][ T59] Bluetooth: hci1: command tx timeout [ 863.543394][ T59] Bluetooth: hci6: command tx timeout [ 863.703395][T10782] Bluetooth: hci7: command tx timeout [ 864.266429][T10782] Bluetooth: hci8: command tx timeout [ 864.583054][ T59] Bluetooth: hci9: command tx timeout [ 864.624892][T10772] chnl_net:caif_netlink_parms(): no params data found [ 864.832993][ T59] Bluetooth: hci1: command tx timeout [ 865.623158][ T59] Bluetooth: hci6: command tx timeout [ 865.783343][ T59] Bluetooth: hci7: command tx timeout [ 866.343085][ T59] Bluetooth: hci8: command tx timeout [ 866.663067][ T59] Bluetooth: hci9: command tx timeout [ 866.913205][ T59] Bluetooth: hci1: command tx timeout [ 867.703159][T10782] Bluetooth: hci6: command tx timeout [ 867.870874][T10782] Bluetooth: hci7: command tx timeout [ 868.423073][T10782] Bluetooth: hci8: command tx timeout [ 868.743112][T10782] Bluetooth: hci9: command tx timeout [ 868.982973][T10782] Bluetooth: hci1: command tx timeout [ 869.783282][T10782] Bluetooth: hci6: command tx timeout [ 869.943186][T10782] Bluetooth: hci7: command tx timeout [ 870.511823][T10782] Bluetooth: hci8: command tx timeout [ 870.823120][T10782] Bluetooth: hci9: command tx timeout [ 875.249338][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.249419][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.238784][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 921.254035][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 921.286411][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 921.287801][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 921.289207][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 921.834249][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 921.892313][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 921.901375][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 921.918488][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 921.933484][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 922.054860][T10782] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 922.078444][T10782] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 922.101437][T10782] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 922.140290][T10782] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 922.141194][T10782] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 922.357149][T10782] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 922.383430][T10782] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 922.385159][T10782] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 922.386594][T10782] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 922.387536][T10782] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 922.594894][T10775] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 922.615602][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 922.618225][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 922.620510][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 922.621448][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 923.383379][T10782] Bluetooth: hci10: command tx timeout [ 924.024872][T10782] Bluetooth: hci11: command tx timeout [ 924.263333][T10782] Bluetooth: hci12: command tx timeout [ 924.423273][T10782] Bluetooth: hci13: command tx timeout [ 924.742979][T10782] Bluetooth: hci14: command tx timeout [ 925.463095][T10782] Bluetooth: hci10: command tx timeout [ 926.104885][T10782] Bluetooth: hci11: command tx timeout [ 926.344128][T10782] Bluetooth: hci12: command tx timeout [ 926.506456][T10782] Bluetooth: hci13: command tx timeout [ 926.823186][T10782] Bluetooth: hci14: command tx timeout [ 927.544693][T10782] Bluetooth: hci10: command tx timeout [ 928.183613][T10782] Bluetooth: hci11: command tx timeout [ 928.426216][T10782] Bluetooth: hci12: command tx timeout [ 928.583328][T10782] Bluetooth: hci13: command tx timeout [ 928.904439][T10782] Bluetooth: hci14: command tx timeout [ 929.623656][T10782] Bluetooth: hci10: command tx timeout [ 930.273115][T10782] Bluetooth: hci11: command tx timeout [ 930.503105][T10782] Bluetooth: hci12: command tx timeout [ 930.665386][T10782] Bluetooth: hci13: command tx timeout [ 930.983094][T10782] Bluetooth: hci14: command tx timeout [ 936.671686][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.671770][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 982.415071][ T59] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 982.451994][ T59] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 982.461710][ T59] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 982.502986][ T59] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 982.504043][ T59] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 983.680061][T10833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 983.713458][T10833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 983.716260][T10833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 983.744363][T10833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 983.745324][T10833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 984.014095][T10833] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 984.040581][T10833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 984.042137][T10833] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 984.060097][T10833] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 984.073867][T10833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 984.319334][T10828] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 984.356290][T10828] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 984.394737][T10828] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 984.396657][T10828] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 984.397964][T10828] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 984.398478][T10828] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 984.400905][T10828] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 984.401596][T10828] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 984.456671][T10828] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 984.460596][T10842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 984.743259][T10833] Bluetooth: hci15: command tx timeout [ 984.853044][T10833] Bluetooth: hci1: command 0x0406 tx timeout [ 984.853085][T10833] Bluetooth: hci6: command 0x0406 tx timeout [ 984.853113][T10833] Bluetooth: hci7: command 0x0406 tx timeout [ 984.853140][T10833] Bluetooth: hci8: command 0x0406 tx timeout [ 984.853168][T10833] Bluetooth: hci9: command 0x0406 tx timeout [ 985.873171][T10842] Bluetooth: hci16: command tx timeout [ 986.103010][T10842] Bluetooth: hci17: command tx timeout [ 986.583504][T10842] Bluetooth: hci19: command tx timeout [ 986.584149][T10842] Bluetooth: hci18: command tx timeout [ 986.823135][T10833] Bluetooth: hci15: command tx timeout [ 987.952859][T10833] Bluetooth: hci16: command tx timeout [ 988.183840][T10833] Bluetooth: hci17: command tx timeout [ 988.663590][T10833] Bluetooth: hci18: command tx timeout [ 988.663627][T10833] Bluetooth: hci19: command tx timeout [ 988.903113][T10842] Bluetooth: hci15: command tx timeout [ 990.026118][T10842] Bluetooth: hci16: command tx timeout [ 990.262978][T10842] Bluetooth: hci17: command tx timeout [ 990.742955][T10842] Bluetooth: hci19: command tx timeout [ 990.742991][T10842] Bluetooth: hci18: command tx timeout [ 990.983080][T10833] Bluetooth: hci15: command tx timeout [ 992.104594][T10833] Bluetooth: hci16: command tx timeout [ 992.342991][T10833] Bluetooth: hci17: command tx timeout [ 992.833039][T10833] Bluetooth: hci18: command tx timeout [ 992.833076][T10833] Bluetooth: hci19: command tx timeout [ 998.123633][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.123719][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.746140][ T39] INFO: task syz-executor:9068 blocked for more than 143 seconds. [ 998.746174][ T39] Not tainted syzkaller #0 [ 998.746187][ T39] Blocked by coredump. [ 998.746193][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.746204][ T39] task:syz-executor state:D stack:21832 pid:9068 tgid:9068 ppid:1 task_flags:0x40054c flags:0x00004006 [ 998.746270][ T39] Call Trace: [ 998.746278][ T39] [ 998.746294][ T39] __schedule+0x16f3/0x4c20 [ 998.746365][ T39] ? __lock_acquire+0xab9/0xd20 [ 998.746398][ T39] ? __pfx___schedule+0x10/0x10 [ 998.746449][ T39] ? schedule+0x91/0x360 [ 998.746484][ T39] schedule+0x165/0x360 [ 998.746519][ T39] schedule_timeout+0x9a/0x270 [ 998.746551][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 998.746598][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.746632][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.746665][ T39] ? wait_for_completion+0x267/0x5d0 [ 998.746702][ T39] wait_for_completion+0x2bf/0x5d0 [ 998.746752][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 998.746784][ T39] ? start_poll_synchronize_rcu_common+0x149/0x290 [ 998.746818][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 998.746851][ T39] synchronize_rcu_normal+0x17d/0x260 [ 998.746875][ T39] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 998.746929][ T39] ? __pfx___might_resched+0x10/0x10 [ 998.746974][ T39] synchronize_rcu_expedited+0x161/0x730 [ 998.747002][ T39] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 998.747028][ T39] ? call_rcu+0x6ff/0x9c0 [ 998.747048][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.747101][ T39] ? __pfx_call_rcu+0x10/0x10 [ 998.747131][ T39] ? rt_spin_unlock+0x65/0x80 [ 998.747162][ T39] ? shrink_dentry_list+0x5cb/0x5e0 [ 998.747197][ T39] ? namespace_unlock+0x529/0x760 [ 998.747231][ T39] namespace_unlock+0x533/0x760 [ 998.747258][ T39] ? reacquire_held_locks+0x127/0x1d0 [ 998.747291][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 998.747323][ T39] ? __pfx_namespace_unlock+0x10/0x10 [ 998.747355][ T39] ? rt_spin_unlock+0x65/0x80 [ 998.747388][ [ 998.747388][ T39] ? free_nsproxy+0x3e/0x350 [ 998.747417][ T39] free_nsproxy+0x3e/0x350 [ 998.747446][ T39] do_exit+0x6b0/0x2300 [ 998.747467][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 998.747509][ T39] ? __lock_acquire+0xab9/0xd20 [ 998.747542][ T39] ? __pfx_do_exit+0x10/0x10 [ 998.747560][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 998.747592][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 998.747632][ T39] do_group_exit+0x21c/0x2d0 [ 998.747661][ T39] get_signal+0x125e/0x1310 [ 998.747715][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 998.747743][ T39] ? __pfx___x64_sys_wait4+0x10/0x10 [ 998.747771][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 998.747817][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 998.747852][ T39] exit_to_user_mode_loop+0x75/0x110 [ 998.747883][ T39] do_syscall_64+0x2bd/0x3b0 [ 998.747904][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.747937][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.747960][ T39] ? clear_bhb_loop+0x60/0xb0 [ 998.747988][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.748016][ T39] RIP: 0033:0x7f6a89265017 [ 998.748040][ T39] RSP: 002b:00007ffe554082f0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 998.748063][ T39] RAX: fffffffffffffe00 RBX: 00000000000000df RCX: 00007f6a89265017 [ 998.748080][ T39] RDX: 0000000040000000 RSI: 00007ffe5540835c RDI: 00000000ffffffff [ 998.748096][ T39] RBP: 00007ffe5540835c R08: 0000000000000000 R09: 0000000000000000 [ 998.748110][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000056 [ 998.748129][ T39] R13: 000055557f00f590 R14: 00000000000c1f21 R15: 00007ffe554083b0 [ 998.748166][ T39] [ 998.748217][ T39] [ 998.748217][ T39] Showing all locks held in the system: [ 998.748227][ T39] 8 locks held by kworker/0:0/9: [ 998.748242][ T39] 2 locks held by rcuc/0/20: [ 998.748255][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 998.748314][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 998.748373][ T39] 1 lock held by khungtaskd/39: [ 998.748385][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 998.748439][ T39] 6 locks held by kworker/u9:0/59: [ 998.748451][ T39] #0: ffff888082c19938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.748522][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.748599][ T39] #2: ffff88807e9c0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 998.748655][ T39] #3: ffff88807e9c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 998.748716][ T39] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 998.748778][ T39] #5: ffff888083070b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 998.748836][ T39] 3 locks held by kworker/u8:5/148: [ 998.748865][ T39] 2 locks held by kworker/0:2/5168: [ 998.748880][ T39] 2 locks held by getty/5599: [ 998.748892][ T39] #0: ffff88823bf6c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 998.748958][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 998.749016][ T39] 5 locks held by kworker/u9:7/5856: [ 998.749029][ T39] #0: ffff888064812938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.749086][ T39] #1: ffffc90004d5fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.749151][ T39] #2: ffff88807d63ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 998.749205][ T39] #3: ffff88807d63c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 998.749266][ T39] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 998.749329][ T39] 4 locks held by kworker/0:4/5924: [ 998.749341][ T39] #0: ffff888024286d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.749404][ T39] #1: ffffc900055afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.749483][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 998.749539][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 998.749596][ T39] 4 locks held by kworker/0:5/5927: [ 998.749609][ T39] #0: ffff88802fe6e938 ((wq_completion)wg-crypt-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.749672][ T39] #1: ffffc900055dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.749750][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 998.749806][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 998.749863][ T39] 4 locks held by kworker/0:6/5952: [ 998.749877][ T39] #0: ffff888039f42d38 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.749939][ T39] #1: ffffc9000571fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750018][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 998.750074][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 998.750138][ T39] 3 locks held by kworker/1:5/6015: [ 998.750150][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.750208][ T39] #1: ffffc9000584fbc0 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750264][ T39] #2: ffffffff8daaa198 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 998.750318][ T39] 3 locks held by kworker/1:6/6113: [ 998.750330][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.750387][ T39] #1: ffffc90005da7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750444][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 998.750498][ T39] 3 locks held by kworker/u8:17/6282: [ 998.750510][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.750568][ T39] #1: ffffc9000c50fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750625][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 998.750679][ T39] 2 locks held by kworker/u8:19/6665: [ 998.750692][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.750748][ T39] #1: ffffc90005d1fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750807][ T39] 2 locks held by kworker/1:8/6803: [ 998.750819][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.750876][ T39] #1: ffffc9000565fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.750957][ T39] 2 locks held by syz.4.210/6968: [ 998.750980][ T39] 4 locks held by kworker/0:1/10734: [ 998.750993][ T39] #0: ffff888033436138 ((wq_completion)wg-crypt-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.751055][ T39] #1: ffffc90010d3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.751142][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 998.751199][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 998.751256][ T39] 2 locks held by kworker/0:8/10735: [ 998.751270][ T39] 4 locks held by kworker/0:9/10736: [ 998.751284][ T39] 3 locks held by kworker/u8:22/10743: [ 998.751296][ T39] #0: ffff88814cf0e938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.751355][ T39] #1: ffffc90010d9fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.751415][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 998.751472][ T39] 1 lock held by dhcpcd/10760: [ 998.751485][ T39] #0: ffff888078dd0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751543][ T39] 1 lock held by dhcpcd/10762: [ 998.751555][ T39] #0: ffff88807608a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751612][ T39] 1 lock held by dhcpcd/10763: [ 998.751625][ T39] #0: ffff888053bf6350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751681][ T39] 1 lock held by dhcpcd/10764: [ 998.751694][ T39] #0: ffff88805ac8a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751751][ T39] 1 lock held by dhcpcd/10766: [ 998.751763][ T39] #0: ffff888074ef8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751819][ T39] 1 lock held by dhcpcd/10767: [ 998.751831][ T39] #0: ffff888074754350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.751888][ T39] 2 locks held by syz-executor/10772: [ 998.751901][ T39] #0: ffffffff8e43b9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 998.751968][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 998.752027][ T39] 5 locks held by kworker/u9:1/10773: [ 998.752040][ T39] #0: ffff88806a158938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.752098][ T39] #1: ffffc90010dcfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.752165][ T39] #2: ffff88807cc10e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 998.752219][ T39] #3: ffff88807cc100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 998.752280][ T39] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 998.752342][ T39] 5 locks held by kworker/u9:2/10775: [ 998.752355][ T39] #0: ffff88805389c938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 998.752413][ T39] #1: ffffc90010e9fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 998.752471][ T39] #2: ffff88807d758e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 998.752524][ T39] #3: ffff88807d7580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 998.752585][ T39] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 999.012812][ T39] 2 locks held by syz-executor/10779: [ 999.012828][ T39] #0: ffffffff8f1d8840 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 999.012900][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 999.012958][ T39] 2 locks held by syz-executor/10780: [ 999.012971][ T39] #0: ffffffff8f1d7bd8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 999.013038][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 999.013097][ T39] 5 locks held by kworker/u9:3/10782: [ 999.013110][ T39] #0: ffff88807ed17138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 999.013170][ T39] #1: ffffc90010eefbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 999.013228][ T39] #2: ffff88807f0e8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 999.013291][ T39] #3: ffff88807f0e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 999.013352][ T39] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 999.013415][ T39] 1 lock held by syz-executor/10784: [ 999.013428][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 999.013487][ T39] 1 lock held by syz-executor/10786: [ 999.013500][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 999.013560][ T39] 1 lock held by dhcpcd/10790: [ 999.013572][ T39] #0: ffff88803d8eda38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 999.013636][ T39] 4 locks held by kworker/0:11/10799: [ 999.013649][ T39] #0: ffff88805c25ad38 ((wq_completion)wg-crypt-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 999.013712][ T39] #1: ffffc900197afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 999.013790][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 999.013847][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 999.013905][ T39] 4 locks held by kworker/0:12/10800: [ 999.013918][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 999.013975][ T39] #1: ffffc90010e8fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 999.014034][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 999.014090][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 999.014148][ T39] 1 lock held by syz-executor/10807: [ 999.014161][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014214][ T39] 1 lock held by syz-executor/10811: [ 999.014231][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014291][ T39] 1 lock held by syz-executor/10812: [ 999.014304][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014357][ T39] 1 lock held by syz-executor/10815: [ 999.014369][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014422][ T39] 1 lock held by syz-executor/10817: [ 999.014435][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014490][ T39] 1 lock held by syz-executor/10825: [ 999.014503][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014556][ T39] 1 lock held by syz-executor/10832: [ 999.014568][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014621][ T39] 1 lock held by syz-executor/10835: [ 999.014634][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014687][ T39] 1 lock held by syz-executor/10837: [ 999.014700][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014753][ T39] 1 lock held by syz-executor/10838: [ 999.014765][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 999.014821][ T39] [ 999.014827][ T39] ============================================= [ 999.014827][ T39] [ 999.014850][ T39] NMI backtrace for cpu 1 [ 999.014882][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 999.014929][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.014953][ T39] Call Trace: [ 999.014969][ T39] [ 999.014983][ T39] dump_stack_lvl+0x189/0x250 [ 999.015031][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.015063][ T39] ? __pfx__printk+0x10/0x10 [ 999.015101][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 999.015135][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 999.015167][ T39] ? __pfx__printk+0x10/0x10 [ 999.015196][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 999.015226][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 999.015265][ T39] watchdog+0xf93/0xfe0 [ 999.015298][ T39] ? watchdog+0x1de/0xfe0 [ 999.015329][ T39] kthread+0x70e/0x8a0 [ 999.015366][ T39] ? __pfx_watchdog+0x10/0x10 [ 999.015393][ T39] ? __pfx_kthread+0x10/0x10 [ 999.015432][ T39] ? __pfx_kthread+0x10/0x10 [ 999.015466][ T39] ret_from_fork+0x436/0x7d0 [ 999.015498][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 999.015534][ T39] ? __switch_to_asm+0x39/0x70 [ 999.015553][ T39] ? __switch_to_asm+0x33/0x70 [ 999.015571][ T39] ? __pfx_kthread+0x10/0x10 [ 999.015606][ T39] ret_from_fork_asm+0x1a/0x30 [ 999.015644][ T39] [ 999.015653][ T39] Sending NMI from CPU 1 to CPUs 0: [ 999.015680][ C0] NMI backtrace for cpu 0 [ 999.015696][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 999.015717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.015728][ C0] RIP: 0010:unwind_next_frame+0x33c/0x2390 [ 999.015758][ C0] Code: ff 48 8d 1c 08 48 81 c3 2c 87 2a 8f 48 81 fb 2c 87 2a 8f 0f 83 48 11 00 00 48 c7 c0 2c 87 2a 8f 49 29 c5 48 c7 c6 44 eb 9d 8f <49> c1 fd 02 4a 8d 14 6d 00 00 00 00 4c 01 ea 48 01 d2 48 01 f2 48 [ 999.015773][ C0] RSP: 0018:ffffc90000156538 EFLAGS: 00000246 [ 999.015789][ C0] RAX: ffffffff8f850b20 RBX: ffffffff8f850b24 RCX: ffffffff8f850b28 [ 999.015804][ C0] RDX: ffffffff8f850b24 RSI: ffffffff9025b138 RDI: ffffffff8b621620 [ 999.015818][ C0] RBP: ffffffff8f850b28 R08: 0000000000000011 R09: ffffffff8172c165 [ 999.015832][ C0] R10: ffffc90000156658 R11: ffffffff81aaf450 R12: ffffffff88e41744 [ 999.015846][ C0] R13: 0000000000000000 R14: ffffc90000156608 R15: ffffffff8f850b24 [ 999.015860][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 999.015875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.015888][ C0] CR2: 00007f282bf3f5a0 CR3: 000000004e330000 CR4: 00000000003526f0 [ 999.015904][ C0] Call Trace: [ 999.015911][ C0] [ 999.015922][ C0] ? unwind_next_frame+0xa5/0x2390 [ 999.015947][ C0] ? dst_alloc+0x105/0x170 [ 999.015968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 999.015989][ C0] arch_stack_walk+0x11c/0x150 [ 999.016025][ C0] ? dst_alloc+0x105/0x170 [ 999.016046][ C0] stack_trace_save+0x9c/0xe0 [ 999.016065][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 999.016083][ C0] ? do_raw_spin_lock+0x121/0x290 [ 999.016111][ C0] kasan_save_track+0x3e/0x80 [ 999.016131][ C0] ? kasan_save_track+0x3e/0x80 [ 999.016151][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 999.016172][ C0] ? kmem_cache_alloc_noprof+0x143/0x310 [ 999.016197][ C0] ? dst_alloc+0x105/0x170 [ 999.016241][ C0] ? dst_alloc+0x105/0x170 [ 999.016260][ C0] __kasan_slab_alloc+0x6c/0x80 [ 999.016284][ C0] ? dst_alloc+0x105/0x170 [ 999.016301][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 999.016329][ C0] dst_alloc+0x105/0x170 [ 999.016349][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 999.016375][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 999.016397][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 999.016416][ C0] ? __lock_acquire+0xab9/0xd20 [ 999.016441][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 999.016466][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 999.016492][ C0] ip_route_output_flow+0x2a/0x150 [ 999.016508][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 999.016531][ C0] ip_route_me_harder+0x6d2/0x1030 [ 999.016559][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 999.016598][ C0] synproxy_send_tcp+0x359/0x6c0 [ 999.016630][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 999.016666][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 999.016694][ C0] ? nft_synproxy_eval_v4+0x38/0x560 [ 999.016714][ C0] ? synproxy_pernet+0x45/0x270 [ 999.016737][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 999.016760][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 999.016781][ C0] ? nf_ip_checksum+0x13c/0x510 [ 999.016803][ C0] nft_synproxy_do_eval+0x345/0x570 [ 999.016826][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 999.016847][ C0] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 999.016874][ C0] nft_do_chain+0x409/0x1920 [ 999.016897][ C0] ? sched_clock_cpu+0x74/0x430 [ 999.016915][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 999.016950][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 999.016979][ C0] nft_do_chain_inet+0x25d/0x340 [ 999.016998][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 999.017028][ C0] ? __lock_acquire+0xab9/0xd20 [ 999.017058][ C0] ? NF_HOOK+0x9a/0x3a0 [ 999.017083][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 999.017102][ C0] nf_hook_slow+0xc5/0x220 [ 999.017131][ C0] NF_HOOK+0x206/0x3a0 [ 999.017156][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 999.017182][ C0] ? NF_HOOK+0x9a/0x3a0 [ 999.017205][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 999.017228][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 999.017256][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 999.017284][ C0] ? skb_dst+0x4f/0xd0 [ 999.017309][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 999.017336][ C0] NF_HOOK+0x309/0x3a0 [ 999.017362][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 999.017387][ C0] ? NF_HOOK+0x9a/0x3a0 [ 999.017410][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 999.017436][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 999.017468][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 999.017491][ C0] __netif_receive_skb+0x143/0x380 [ 999.017515][ C0] ? rt_spin_unlock+0x65/0x80 [ 999.017540][ C0] ? process_backlog+0x27b/0x900 [ 999.017564][ C0] process_backlog+0x31e/0x900 [ 999.017595][ C0] __napi_poll+0xb6/0x540 [ 999.017620][ C0] net_rx_action+0x707/0xe00 [ 999.017644][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 999.017682][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 999.017726][ C0] handle_softirqs+0x22f/0x710 [ 999.017754][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 999.017783][ C0] run_ktimerd+0xcf/0x190 [ 999.017808][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 999.017835][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 999.017856][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 999.017879][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 999.017901][ C0] smpboot_thread_fn+0x53f/0xa60 [ 999.017924][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 999.017951][ C0] kthread+0x70e/0x8a0 [ 999.017980][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 999.018003][ C0] ? __pfx_kthread+0x10/0x10 [ 999.018042][ C0] ? __pfx_kthread+0x10/0x10 [ 999.018070][ C0] ret_from_fork+0x436/0x7d0 [ 999.018095][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 999.018122][ C0] ? __switch_to_asm+0x39/0x70 [ 999.018139][ C0] ? __switch_to_asm+0x33/0x70 [ 999.018155][ C0] ? __pfx_kthread+0x10/0x10 [ 999.018182][ C0] ret_from_fork_asm+0x1a/0x30 [ 999.018209][ C0] [ 999.018686][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 999.018703][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 999.018728][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.018742][ T39] Call Trace: [ 999.018750][ T39] [ 999.018759][ T39] dump_stack_lvl+0x99/0x250 [ 999.018792][ T39] ? __asan_memcpy+0x40/0x70 [ 999.018817][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.018849][ T39] ? __pfx__printk+0x10/0x10 [ 999.018888][ T39] vpanic+0x281/0x750 [ 999.018923][ T39] ? __pfx_vpanic+0x10/0x10 [ 999.018954][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 999.018977][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.019021][ T39] panic+0xb9/0xc0 [ 999.019053][ T39] ? __pfx_panic+0x10/0x10 [ 999.019088][ T39] ? irq_work_queue+0xc3/0x140 [ 999.019117][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 999.019148][ T39] watchdog+0xfd2/0xfe0 [ 999.019182][ T39] ? watchdog+0x1de/0xfe0 [ 999.019217][ T39] kthread+0x70e/0x8a0 [ 999.019254][ T39] ? __pfx_watchdog+0x10/0x10 [ 999.019289][ T39] ? __pfx_kthread+0x10/0x10 [ 999.019328][ T39] ? __pfx_kthread+0x10/0x10 [ 999.019363][ T39] ret_from_fork+0x436/0x7d0 [ 999.019394][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 999.019431][ T39] ? __switch_to_asm+0x39/0x70 [ 999.019451][ T39] ? __switch_to_asm+0x33/0x70 [ 999.019470][ T39] ? __pfx_kthread+0x10/0x10 [ 999.019506][ T39] ret_from_fork_asm+0x1a/0x30 [ 999.019544][ T39] [ 999.019869][ T39] Kernel Offset: disabled