last executing test programs: 39.576398883s ago: executing program 0 (id=3292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001043f0000000000000000000008", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 39.19646692s ago: executing program 0 (id=3295): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) 39.088213539s ago: executing program 3 (id=3298): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="32b972", 0x3}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20000000) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 38.048762673s ago: executing program 3 (id=3299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0xa8}, 0x1, 0x0, 0x100000000000000, 0x40080c0}, 0x0) 37.891904996s ago: executing program 3 (id=3300): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"fbffffff", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f43d83ba1", "0c000004dd372a9000"]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) brk(0x400000ffc000) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x8, 0x0, 0x0) r5 = inotify_init1(0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e24, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r7 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000434) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]}) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 37.569573257s ago: executing program 1 (id=3301): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0xe}, {0x1, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 36.544130357s ago: executing program 1 (id=3303): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00K\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00'], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 34.771661753s ago: executing program 2 (id=3309): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="32b972", 0x3}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20000000) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 34.768804781s ago: executing program 3 (id=3311): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f5002c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x1854c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) fsopen(&(0x7f0000000100)='binder\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="fbff00001000010000000000000000000000000a20000000000a030000000000000000c4a6b6001d5ba8700073797a30"], 0xb8}}, 0x20050800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000000800034000000001"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r5, r6, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r7}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000080)) 34.768117893s ago: executing program 0 (id=3312): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x21) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) rmdir(&(0x7f0000000200)='./file/file0/..//file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff18010040"]) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000ac0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc01c64b9, &(0x7f00000004c0)={0x0, 0x0, 0x0, r12}) accept4$tipc(r1, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x80000) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000003c0a00000000000000d1798c474c71fe975bdba39a73ea0000000000000022eacff3eb7315fee5cca4611720f8486593161fe315a55a3b927cc7f578845246beabc6146b5a925ad8db162eafd4464bb4e106bdbd146956e17dadcd39a7d7cfbd1a35f69dd5b81c4d7e67d33180e3fa296ef73c1654a62683630faa182050aa62fff8a760d203eb7e06f05271d3fba5007ccb63f85502e63d5d657a2f8427d652fcb69695a683cf911007aa91689188d81b680858444cb7f61425f17a28fc6d7371447bff21a6f8cccbf9732547c1f971fd9005694965141bff7bd5fa68e801ee5497206684921829a4cf33a64e6deea06a1717620e65ba7150d5803612d84f702599743cbf4360e30dc16e31d9dc39e437f5493039d147a1e9ad09c11171680127db7ae8377c0b61a1ab72166d543776120a54c9b52105a847947aa042fe8bd805cbf62a34", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, r8, 0x0) 33.38041581s ago: executing program 1 (id=3313): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x78}}, 0x24040884) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) r5 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x80, 0x6, 0x0, @empty, @local, 0x80, 0x0, 0x2, 0x89}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) 33.241921792s ago: executing program 2 (id=3314): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0xe}, {0x1, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 33.217142295s ago: executing program 0 (id=3315): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x46, {{0x3, 0x1, 0x4, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) 32.872246964s ago: executing program 3 (id=3317): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0x2, @pix_mp={0x4, 0x7, 0x59555956, 0x2, 0x8, [{0xe, 0x3}, {0x5, 0x7}, {0x3, 0x4ee}, {0x0, 0x3ff}, {0x8, 0x6}, {0x1, 0x1ff}, {0x8, 0x10004}, {0xff, 0x7fffffff}], 0x9, 0x2, 0x7, 0x0, 0x3}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) r4 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x10182a, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x3, 0x3, 0x4, 0x0, 0x8}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x41, 0x6000, @fd_index=0x2, 0x6, &(0x7f0000000080)="8684", 0x2, 0x6, 0x1}) io_uring_enter(r4, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r7 = socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x3, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x4800) sendmsg$nl_netfilter(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x154, 0x12, 0xd, 0x202, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0xa}, [@typed={0xf, 0x8, 0x0, 0x0, @str='syzkaller0\x00'}, @generic="89bfe683fc33bd1775854f47886ee599107bb3e78a75eab560d4bc0aab51babbd5682ea3990ca9a964ff08764483737a9e9bd773e4ecbc904404a8e83031ecd4a8d960538afb32ab525023a158a35d7028683f5b80f4e56eabc9efc840efc4661c7b1b1e1e80fa8f6db3269f7488c16f3c341132fd", @typed={0x8, 0x148, 0x0, 0x0, @u32=0x6}, @nested={0xaa, 0x4f, 0x0, 0x1, [@nested={0x4, 0xc}, @nested={0x4, 0x11e}, @generic, @generic="22ae6f63ea9f184966d84dee94e3421d13d7f5feeb97bf7619b1a418733f6d4a", @typed={0x4, 0x14d}, @typed={0x8, 0xad, 0x0, 0x0, @uid}, @generic="7be8a2a9f1bc6568b642c198484fc5f1fe5e78dee39acc87171aa3cbdf73d4da318df451b0db0597c5646423c1ebdd06a5402b2141daa49fd7ad5ade860a81cc8a2ef47ae9d7b7308827d1856ee94209aceebb6496cc9f36e8f90d8e27109caf62cbaa0135aae9e38eefc04fa5be", @nested={0x4, 0x37}]}, @typed={0x4, 0x9e}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040084}, 0x4040010) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x5761, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.666142667s ago: executing program 0 (id=3318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006480000000c0a01030000000000000000070000070900020073797a31000000000900010073797a30000000001c00038018000080080003400000000209"], 0xdc}}, 0x0) 32.376703444s ago: executing program 4 (id=3320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x208, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa00c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffdc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x673c7c38}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2b56319c45c315eb73c72256703e9cf6b0eda1197d35e01f"}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20040810}, 0x20048050) syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xe0, 0x1, 0x4, 0x10, 0x34ef, 0x202b, 0x3609, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x84, 0x65, 0x20, 0x9, [{{0x9, 0x4, 0x4, 0x0, 0x3, 0x5d, 0x8e, 0xb8, 0x9, [], [{{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x6, 0x2, 0x9f}}, {{0x9, 0x5, 0x2, 0x2, 0x1af, 0x5, 0x3, 0xc}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xf1, 0x5}}]}}]}}]}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) 31.995125286s ago: executing program 2 (id=3321): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xe6) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_uring_setup(0x7d98, 0x0) 31.760452275s ago: executing program 2 (id=3322): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) (async) 31.745244399s ago: executing program 1 (id=3323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000eedbdf25010000000000000002410000001000137564703a73797a2c4d69201f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r2 = socket(0x11, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x60, 0x6, 0x200, 0x6f, @empty, @empty, 0x8000, 0x8000}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582020002"], 0x0) syz_usb_connect$uac1(0x0, 0xd6, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x1, 0x30, 0xa1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5020, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x1, 0x5, 0xde, 0x71}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0xde8, 0x0, "94bd"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x401, 0x81, 0x5, "b9cb98fe34364b"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc, 0xfffd, 0xfb, "8e44186113c323"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x5, 0x18}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x3499, 0xce, '*'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x1, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1000, 0x67ec, 0x90, "bdd79c"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x100, 0x7f, 0x7, "c62fd683cb28"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x8, 0x5, {0x7, 0x25, 0x1, 0x82, 0x7f, 0x6}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0x7, 0x51, 0x40, 0xb}, 0x2d, &(0x7f0000000140)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "654112e047a31c648eaf32413b85bf56"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "56e9536c8e6759e37b5f973b96b91269"}]}, 0x9, [{0x84, &(0x7f0000000180)=@string={0x84, 0x3, "7348f216fd1a3deb2aa1ea679664787fce2c02787e2baadd217f8d672fc824d3c226209439305f01c01e57f81d9275b20e5698f98654521429e578f13bc0eadbd8b51955f3baa6b18e0c6ad25ee0d253088dd15bf5701b50677a24f714b369555a102e2faf8816122180b1c175ae9d73bfa67cd4ffaf0247a4b7a893718b56e7c665"}}, {0x7d, &(0x7f0000000240)=@string={0x7d, 0x3, "25336590a5c04eed7a757990c97b5ddfc256e2f40fe93504b7bb91ed0662f524d2a165bdef992c12209005ea18967f2ed66935842a317bf04f3b0af2946de4292e6530ea0d5b4413f78cb40347883407e76ebd305ee73bb492814a93d4e352613a32cd8a166bd404ac80f6f2c295210f0c659897a0d6ae4e906bd8"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb7, &(0x7f0000000300)=@string={0xb7, 0x3, "5df404f1a64810a2a2da3927bf5ca4332f62acb51af3572926770fedd202ad9c1ada52cff8f334ff279d0930b5ad9b107ea639d6cede875bc18a1071174bf9319b987a2fa60dfa5d1c296313b6f108eeb51a0d60cd7036485280b8bc1b834fbc2d1de82d6c8ef230e0c286e8fa895eddad6d46d50e31a11097f035b55451cc33499b9735294b4f8996aafed0af85fcc0bb8ce4bcd70a771ea16faedff87b43d8cfabea65786989498874b54a06fe6656c00edca592"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40c}}, {0xa3, &(0x7f0000000400)=@string={0xa3, 0x3, "5ab76849cfd7ce873b09d4c2f531868a8d8a7977620ff44f99ac81991a7bc1eeecd354e5035d306cca50833917c789ca8606515cbe1eb7c5fa554310b53ebb2b13b15bc01078e33632ef7d1d4169753870615a3e2653f8693cab8d18b0ce387582c2ed4b1b5c063870ca93737b8234efd89f9aa98553d34e09c30869869e00089fe6ff1c512e75c2f17a9c7985c74a84d6e10bc221bc0b159b075304fe1d886c67"}}, {0xbb, &(0x7f00000004c0)=@string={0xbb, 0x3, "ef62f330a2384a82b318e101e00e4e00c8228fe282a540f2a7f1535f7b9c6d08b8f562ac191a2e458c8d1e25734c4f7f3f093048390b3a81e4dd920f95718d3200e83af2d62803f08ff6422505fa93a818115f9b9636fcc77415f333ce832167857cf159778b442d7d934c427dcdeadf2054c6613d3a529bf2d57807fff2072b8b522f5b03638e2a64f6f2a48fe5d209c026919cf2e8f60660b5dca7965646d6b436f4d1be7895df70361b62ec66b2a5e5c85f6054ae074fc4"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x813}}, {0xec, &(0x7f0000000680)=@string={0xec, 0x3, "194a480eb67329144438deef405999abfc61fd91ed09f38520909b47e9f45d1628a1002675ae563051d77b614bbced993bbd10167aa878dbd3b10b325fadefd42f1361a251b7cf14ea042dbb6f15da021d753af71fcdf333d0d80283ffefc099123752db0326978c354a7af563797f731d3065277728269855195a49dd5b33935ceffc427099f79f7062e2c47b5269f3aff1ac53adbd142a53718985d8f9d3e68390c05ba521823909ddb5c2771d6c260fcbdc1160c62fe477a7183a69b7fec531ecbf4e5bae625cc3d7fd7e4a2dc1dd3afcdfd20234a2dc09074e5b52499a46e7f8e75d5d20c4b94d29"}}]}) 31.530465524s ago: executing program 2 (id=3324): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="32b972", 0x3}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x20000000) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 30.683484272s ago: executing program 4 (id=3325): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RWALK(r0, &(0x7f0000000040)={0x4a, 0x6f, 0x1, {0x5, [{0x8, 0x0, 0x2}, {0x0, 0x1, 0x3}, {0x4}, {0x1, 0x2, 0x2}, {0x80, 0x3, 0x6}]}}, 0x4a) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)='X', 0x1}], 0x35, 0x72, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a3200"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200025a725bd700008dbdf250a000200ff0000010200010008000600ff45ae4a29d008750c000000897981cad33da0545ff2eff9f2e75b2bef04aedad3d74303bf5561664e169e546ffd321c35aecdff3b453d99c0de2d0d56ef49ba0061aec073e5e4a38a640152967b22ee4dc74b788912c4cc3e45a84d8fb26511b39cfeb8b03ea825c163ee76ac9598945f7b9dc1c79a9efea0f3a2dac31a2fcf350484e49110df09488b0817b53e485c27190f400bdc651cbbf4ab39c1c31849c25a22674152db6ecdd2b62ac0f6e229f464195134ee0778dd158194260066ec"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x11266ca10227713f) 30.521501904s ago: executing program 4 (id=3326): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xffffcbb8, 0x53) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000}, 0x1}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = syz_usb_connect(0x7, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904", @ANYRES16=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x6, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0xffffcbb8, 0x53) (async) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/4096, 0x1000}, 0x1}], 0x1, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) syz_usb_connect(0x7, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904", @ANYRES16=r0], 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x6, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 30.516838915s ago: executing program 3 (id=3327): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 30.316421486s ago: executing program 4 (id=3328): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x46, {{0x3, 0x1, 0x4, 0x5, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0x100000008, 0x4, 0x1, 0x1ff, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) 30.230972013s ago: executing program 4 (id=3329): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350, 0x53ae}, {0xf4ef, 0x0, 0xfffffffc}, {0x0, 0xfd, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 29.734576028s ago: executing program 1 (id=3330): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040)) read(r0, &(0x7f0000000080)=""/247, 0xf7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x2}, {0x7fff}], r1}, 0x18, 0x3) (async) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x2}, {0x7fff}], r1}, 0x18, 0x3) memfd_create(&(0x7f0000000240)='/dev/udmabuf\x00', 0x1) (async) r2 = memfd_create(&(0x7f0000000240)='/dev/udmabuf\x00', 0x1) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={r2, 0x0, 0xffff000, 0x100000000}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000002c0)={0x0, "90696fca2813b568da559048bd4a502c"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000012c0)={r4, 0x2120, 0x1, [0xff, 0x7, 0x4, 0x1, 0x3], [0x9, 0x0, 0x0, 0x400c, 0xb, 0x8, 0x4, 0x6, 0x0, 0x7, 0xbf6, 0xd, 0x1, 0x2, 0x4, 0x8, 0x8b, 0xdd, 0xb, 0x0, 0x2, 0x6, 0x2, 0x4, 0x3, 0x0, 0x27f, 0x80000001, 0x7ff, 0xffffffff00000000, 0x5, 0x9, 0xe, 0xfff, 0x6, 0x0, 0x9, 0xec0e, 0x7, 0x8, 0x9, 0xc70, 0xad4e, 0x1, 0xffffffffffff8001, 0x9, 0x4, 0x8000, 0x7, 0x100000000, 0x7fffffff, 0xaef, 0x10001, 0x8001, 0x5, 0x4, 0x3, 0x5, 0x80000001, 0x7ff, 0x6, 0x2, 0xfffffffffffff07b, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0x100000000, 0x3, 0x400, 0x4, 0x0, 0x0, 0xcf75, 0xffffffffffffdd1e, 0x459, 0x1, 0x5, 0xbb, 0xffffffffffffff64, 0xffff, 0xeebd, 0x4, 0x89, 0x8, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x463b, 0x7f, 0x80000001, 0x7fff, 0x9, 0x6, 0x9, 0x5, 0x3, 0xfffffffffffffc01, 0x1, 0x6, 0x80000001, 0xe5, 0xb7c, 0x10000, 0x800, 0x2, 0x7, 0x8, 0xd3, 0x2, 0x8000000000000001, 0xa144, 0x2, 0x3, 0x94b, 0xffffffffffffffff, 0x3]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000012c0)={r4, 0x2120, 0x1, [0xff, 0x7, 0x4, 0x1, 0x3], [0x9, 0x0, 0x0, 0x400c, 0xb, 0x8, 0x4, 0x6, 0x0, 0x7, 0xbf6, 0xd, 0x1, 0x2, 0x4, 0x8, 0x8b, 0xdd, 0xb, 0x0, 0x2, 0x6, 0x2, 0x4, 0x3, 0x0, 0x27f, 0x80000001, 0x7ff, 0xffffffff00000000, 0x5, 0x9, 0xe, 0xfff, 0x6, 0x0, 0x9, 0xec0e, 0x7, 0x8, 0x9, 0xc70, 0xad4e, 0x1, 0xffffffffffff8001, 0x9, 0x4, 0x8000, 0x7, 0x100000000, 0x7fffffff, 0xaef, 0x10001, 0x8001, 0x5, 0x4, 0x3, 0x5, 0x80000001, 0x7ff, 0x6, 0x2, 0xfffffffffffff07b, 0x4, 0x9, 0x8000000000000001, 0x0, 0x5, 0x100000000, 0x3, 0x400, 0x4, 0x0, 0x0, 0xcf75, 0xffffffffffffdd1e, 0x459, 0x1, 0x5, 0xbb, 0xffffffffffffff64, 0xffff, 0xeebd, 0x4, 0x89, 0x8, 0x8, 0x2, 0x4, 0x0, 0x3, 0x3, 0x463b, 0x7f, 0x80000001, 0x7fff, 0x9, 0x6, 0x9, 0x5, 0x3, 0xfffffffffffffc01, 0x1, 0x6, 0x80000001, 0xe5, 0xb7c, 0x10000, 0x800, 0x2, 0x7, 0x8, 0xd3, 0x2, 0x8000000000000001, 0xa144, 0x2, 0x3, 0x94b, 0xffffffffffffffff, 0x3]}) r5 = inotify_init1(0x800) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x80000001) inotify_rm_watch(r5, r6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001740)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001740)) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0xe85, &(0x7f0000001940)={0x0, 0x3411, 0x4004, 0x2, 0x20c}, &(0x7f00000019c0), &(0x7f0000001a00)=0x0) syz_io_uring_submit(r7, r9, &(0x7f0000001ac0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x20, 0x9}, &(0x7f0000001a80)='./file0\x00', 0x18, 0x0, 0x12345}) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x7c, r12, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x810) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r13 = openat$cgroup(r8, &(0x7f0000001cc0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000001d00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) r14 = openat$cgroup_ro(r13, &(0x7f0000001d00)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) inotify_rm_watch(r14, r6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r14, 0x404c534a, &(0x7f0000001d40)={0x7f, 0x2, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r14, 0x404c534a, &(0x7f0000001d40)={0x7f, 0x2, 0x9}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r11) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f00000027c0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002780)={&(0x7f0000001e40)={0x908, r15, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe6, 0x3c}}}}, [@NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0xc, 0x18, 0x4, 0x6c, 0xc, 0x48, 0x1, 0x9, 0xd, 0x6, 0x1b, 0x6c, 0xb05caf575f92de4f]}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x2}, {0x7, 0x5}, {0x2, 0xa}, {0x2, 0x6}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x3}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x9}, {0x2, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x1, 0x1, 0x3, 0x9, 0xf]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x4, 0x24, 0x36, 0x30, 0xb, 0x1, 0x16, 0x4, 0x4, 0x4, 0x6, 0x24, 0x12, 0xc, 0x6, 0x1b, 0x36, 0x9, 0x5, 0x12, 0x36, 0x6, 0x36, 0x48, 0x9, 0x1b, 0x6c, 0x5, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x2}, {0x6}, {0x1, 0x5}, {0x7}, {0x3, 0x1}, {0x2, 0x2}, {0x1, 0x5}, {0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x1}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x2}, {0x6, 0xa}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0x9}, {0x3, 0x1}, {0x1}, {0x3, 0x6}, {0x4, 0x6}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x5}, {0x2}, {0x7, 0xa}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x9}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x7}, {0x4}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x70, 0x24, 0x2, 0x36, 0x48]}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x9, 0x1b, 0x0, 0x6c, 0x2, 0x18, 0x6c, 0x16, 0x9, 0x1, 0x48, 0x3, 0x48, 0x9, 0x6, 0x9, 0x36, 0x12, 0x18, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18c, 0xf8e, 0xcb23, 0xb7e, 0x1, 0x100, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2}, {0x2, 0x4}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0xa}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x4}, {0x7}, {0x0, 0x8}, {}, {0x3, 0x9}, {0x3, 0x2}, {0x2, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x3}, {0x7, 0x8}, {0x3, 0x2}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x3}, {0x0, 0x4}, {0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x6}, {0x3}, {0x2}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x903, 0x10, 0x4, 0x2, 0xf7, 0xffff, 0x3, 0x4]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xfff, 0x8001, 0x1, 0x0, 0x933e, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x2000, 0xbe34, 0x6, 0x0, 0x5, 0x3ff, 0x9730]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff1, 0x5, 0x0, 0xe7f, 0x7, 0x3, 0x0, 0xc12]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x8, 0xff, 0x9, 0x5, 0x95e, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x623, 0x28cf, 0x9, 0x9, 0x8, 0x400, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0xb, 0x6, 0x4, 0x1, 0x86ba]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x3}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x5}, {0x4, 0x9}, {0x3, 0x6}, {0x1}, {0x6, 0x2}, {0x5, 0x7}, {0x7, 0x8}, {0x7}, {0x6, 0x8}, {0x5, 0x7}, {0x6}, {0x5, 0x8}, {0x3, 0x6}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x5, 0x5}, {0x2}, {0x1, 0xa}, {0x2}, {0x3, 0x9}, {0x2}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x8}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x30, 0x9, 0x1a, 0x1b, 0x16, 0x3, 0xc, 0x3, 0x48]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x2, 0x5, 0x6, 0x18, 0x60, 0x3, 0x1b, 0x1b, 0x18, 0x16, 0x24, 0x36, 0x24, 0x6c, 0x5, 0xb, 0x9, 0x18, 0x9, 0x18, 0x5, 0x66, 0x6, 0x36, 0x12, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffb, 0x6, 0x7, 0x0, 0xfffe, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x23c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x7}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x6}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xfff, 0x6, 0x4d, 0x1, 0x533, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x60, 0x7, 0x48, 0x0, 0x5, 0x3, 0x20, 0x18, 0x12, 0x36, 0x1b, 0x30, 0x5, 0x30, 0x1b, 0x24, 0xc, 0x4, 0x1, 0x1b, 0x18, 0x12, 0x2, 0x36, 0x9]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0x24, 0x3, 0x1b, 0x36, 0x4, 0x5, 0x6, 0xa, 0x930754ff72162915, 0x6, 0x10, 0xc, 0x2, 0x36, 0x12, 0x5, 0x36, 0x2ead2855557f3eba, 0x2, 0x27, 0x60, 0x18, 0x12, 0x12, 0x48, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x9, 0x8, 0xc33, 0x1, 0x80, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2b, 0x6, 0x7, 0x1, 0x2, 0x0, 0x3d28]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x2, 0xa}, {0x4, 0x9}, {0x3, 0x4}, {0x5}, {0x1, 0x7}, {0x2}, {0x7, 0xa}, {0x5, 0x9}, {0x7, 0x6}, {0x6, 0x9}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {0x6}, {0x0, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0x24, 0xb, 0x12, 0x4, 0x12, 0x30, 0x16, 0x1b, 0xb, 0x6, 0xc, 0x4, 0x6, 0x3, 0x5, 0x1b, 0x30, 0x12, 0x16, 0x1b, 0x9, 0x30, 0x12, 0x2, 0x16, 0x24, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc, 0x3, 0x3daa, 0xe, 0x4, 0xf800, 0x4]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x8}, {0x4, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x5, 0x1}, {0x5, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x6}, {0x5, 0x3}, {0x2}, {0x6, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0xd}, {0x2, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x2, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x7}, {}, {0x7, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xce3, 0x0, 0xff, 0x7, 0xffff, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x42b9, 0x1ff, 0xe, 0x4, 0x9, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0x6, 0x4a99, 0x718, 0x0, 0x4, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x2}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x7, 0x6}, {0x7, 0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x7}, {0x5, 0x7}, {0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x7, 0x3ff, 0x5, 0x1a, 0x4, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x101, 0x4, 0x0, 0x3, 0x7, 0x100, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x7, 0x6}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {}, {0x1, 0x7}, {0x6}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x7}, {0x0, 0x3}, {0x1}, {0x2, 0x9}, {0x4, 0xa}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x6}, {0x7, 0x8}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x3}, {0x1, 0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x2, 0x7}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xdb4, 0x9, 0x1, 0x9, 0xfff8, 0x4, 0x4]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x1, 0x7, 0x60, 0x48, 0x2, 0x60, 0x3, 0x3, 0xf74ee92cb9aac76, 0x18, 0x16, 0x18, 0x1b, 0x5, 0x16, 0x7, 0x7a, 0x60, 0xb, 0xb, 0x24, 0x2, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x2, 0x48, 0x36, 0x24, 0xc, 0x6c, 0xc, 0x3, 0x3d, 0x5, 0xc, 0xb, 0x36, 0x4, 0x16, 0x5, 0x50, 0x4, 0x18, 0x4, 0xb]}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x5}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x3, 0x7}, {0x1}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x4, 0x7}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x81, 0x0, 0x9, 0x6, 0x800, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0xc, 0x2a6df3d2170f2e27, 0x24, 0x1, 0x1b, 0x24, 0x24, 0x1, 0x48, 0x15, 0x1, 0x1, 0xc, 0x0, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x100, 0x2, 0x2, 0x3, 0x3, 0x3, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xce7a, 0x81, 0x4, 0x101, 0x9, 0xf867, 0x400, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8a68, 0x0, 0x92b, 0x80, 0x9e69, 0x9b]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0xa}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0x1b}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x1}, {0x4, 0x8}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x7}, {0x4}, {0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x8}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x3, 0xa}, {0x2, 0x7}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x2}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x6, 0x5, 0xfff7, 0x8001, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x5, 0xe51, 0x3, 0x3, 0x6, 0x8]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x2d, 0x12, 0xe, 0x5, 0x60, 0x6c, 0xb, 0x24, 0x30, 0x1b, 0x16, 0x36, 0x5, 0x36, 0xb, 0xc, 0x6, 0x12, 0x24, 0x1, 0xc]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x6c, 0x60, 0x4, 0x4, 0x4, 0x9, 0xb, 0x12, 0xc, 0x1, 0x9, 0x9, 0x24, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x3ff, 0xff, 0xcc, 0xeb6, 0x6, 0x400]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x5}, {0x3, 0x1}]}]}]}]}, 0x908}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) inotify_rm_watch(r5, r6) (async) inotify_rm_watch(r5, r6) sendto$isdn(r14, &(0x7f0000002800)={0x4, 0x0, "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"}, 0x1008, 0x84, &(0x7f0000003840)={0x22, 0x7, 0x9, 0xc, 0x1}, 0x6) 28.312610505s ago: executing program 4 (id=3331): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0xe}, {0x1, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 28.1351251s ago: executing program 0 (id=3332): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) gettid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 27.917319844s ago: executing program 2 (id=3333): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x78}}, 0x24040884) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) r5 = socket$inet6(0xa, 0x200000000003, 0x87) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x80, 0x6, 0x0, @empty, @local, 0x80, 0x0, 0x2, 0x89}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) 27.831333751s ago: executing program 1 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x46a8, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x6, 0x0, 0x3, 0x0, 0x5}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000001400000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000002180)=r7) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl(r0, 0x8b0f, &(0x7f0000000040)) 5.768798221s ago: executing program 32 (id=3327): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 5.024879452s ago: executing program 33 (id=3331): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0xe}, {0x1, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 3.074337353s ago: executing program 34 (id=3332): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) gettid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r4}, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 35 (id=3334): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x46a8, &(0x7f0000000080)={0x0, 0x5d50, 0x0, 0x0, 0x3c1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x6, 0x0, 0x3, 0x0, 0x5}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000001400000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000002180)=r7) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl(r0, 0x8b0f, &(0x7f0000000040)) kernel console output (not intermixed with test programs): omiscuous mode [ 912.038882][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.060747][ T8013] bridge_slave_0: left allmulticast mode [ 912.066789][ T8013] bridge_slave_0: left promiscuous mode [ 912.074120][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.232722][ T5938] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 912.313716][ T6003] usb 5-1: USB disconnect, device number 96 [ 912.522282][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 912.531283][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 912.585209][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.626043][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.851758][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 912.889252][ T5938] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 912.926518][ T5938] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 912.968363][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.995364][ T5989] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 913.005938][ T5989] ath9k_htc: Failed to initialize the device [ 913.027616][ T6003] usb 5-1: ath9k_htc: USB layer deinitialized [ 913.041072][ T5938] usb 3-1: config 0 descriptor?? [ 913.419996][ T5866] Bluetooth: hci5: command tx timeout [ 913.461292][ T5866] Bluetooth: hci2: urb ffff88814cf6af00 submission failed (90) [ 914.072107][ T8013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.090307][ T8013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.111180][ T8013] bond0 (unregistering): Released all slaves [ 914.129838][ T8013] bond1 (unregistering): Released all slaves [ 914.145546][ T8013] bond2 (unregistering): Released all slaves [ 914.166401][ T8013] bond3 (unregistering): Released all slaves [ 914.184989][ T8013] bond4 (unregistering): Released all slaves [ 914.203817][ T8013] bond5 (unregistering): Released all slaves [ 914.386579][ T8013] bond6 (unregistering): (slave vlan0): Releasing active interface [ 914.395406][ T8013] tipc: Resetting bearer [ 914.403998][ T8013] tipc: Resetting bearer [ 914.411425][ T8013] bond6 (unregistering): (slave veth3): Releasing active interface [ 914.421852][ T8013] bond6 (unregistering): Released all slaves [ 914.440566][ T8013] bond7 (unregistering): Released all slaves [ 914.617260][T16347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.688582][ T8013] tipc: Disabling bearer [ 914.744676][ T8013] tipc: Disabling bearer [ 914.780027][ T8013] tipc: Left network mode [ 914.797494][T16347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.898011][T16416] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2927'. [ 915.091699][T16427] netlink: 'syz.0.2926': attribute type 10 has an invalid length. [ 915.100475][T16427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2926'. [ 915.212400][T16427] team0: entered promiscuous mode [ 915.217854][T16427] team_slave_0: entered promiscuous mode [ 915.224326][T16427] team_slave_1: entered promiscuous mode [ 915.230745][T16427] batadv1: entered promiscuous mode [ 915.432571][T16427] team0: entered allmulticast mode [ 915.437957][T16427] team_slave_0: entered allmulticast mode [ 915.448127][T16427] team_slave_1: entered allmulticast mode [ 915.455102][ T5866] Bluetooth: hci5: command tx timeout [ 915.478273][T16427] batadv1: entered allmulticast mode [ 915.490138][T16427] bridge0: port 3(team0) entered blocking state [ 915.506840][T16427] bridge0: port 3(team0) entered disabled state [ 916.060955][T16347] team0: Port device team_slave_0 added [ 916.068491][ T8006] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 916.078287][ T8006] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 916.119408][ T5938] usb 3-1: USB disconnect, device number 116 [ 916.138970][T16347] team0: Port device team_slave_1 added [ 916.278739][T16439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2931'. [ 916.602582][ T6019] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 916.776909][T16456] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 916.793078][ T6019] usb 4-1: Using ep0 maxpacket: 32 [ 916.813888][ T6019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.832369][ T6019] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.858935][ T6019] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 916.890763][ T6019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.933525][ T6019] usb 4-1: config 0 descriptor?? [ 917.004056][T16347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.071537][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.100850][T16347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.266626][ T8013] hsr_slave_0: left promiscuous mode [ 917.354030][ T6019] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 917.365665][ T6019] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 917.377123][ T6019] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 917.441506][ T8013] hsr_slave_1: left promiscuous mode [ 917.450073][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.486519][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.505108][ T6019] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 917.518729][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.548655][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.553051][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.570289][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.582924][ T6019] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 917.629141][ T6019] koneplus 0003:1E7D:2D51.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 917.722772][ T8013] veth1_macvtap: left promiscuous mode [ 917.736991][ T8013] veth0_macvtap: left promiscuous mode [ 918.026542][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059a6f400: rx timeout, send abort [ 918.035180][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059a6f400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 918.778142][ T8013] team0 (unregistering): Port device team_slave_1 removed [ 918.845775][ T8013] team0 (unregistering): Port device team_slave_0 removed [ 918.892591][ T6019] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 919.057759][ T6019] usb 3-1: config 0 has no interfaces? [ 919.068857][ T6019] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 919.078719][ T6019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.087039][ T6019] usb 3-1: Product: syz [ 919.094161][ T6019] usb 3-1: Manufacturer: syz [ 919.112179][ T6019] usb 3-1: SerialNumber: syz [ 919.163346][ T6019] usb 3-1: config 0 descriptor?? [ 919.535039][T16465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.545332][T16465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.917829][T16347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.930345][T16347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.970962][T16347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.251914][ T5989] usb 4-1: USB disconnect, device number 110 [ 921.288533][T16347] hsr_slave_0: entered promiscuous mode [ 921.315599][T16481] netlink: 'syz.3.2936': attribute type 5 has an invalid length. [ 921.357819][T16347] hsr_slave_1: entered promiscuous mode [ 921.433336][T16347] debugfs: 'hsr0' already exists in 'hsr' [ 921.454460][T16347] Cannot create hsr debugfs directory [ 921.485451][T16477] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 921.757827][ T5938] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 921.992439][ T5938] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 922.001691][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.014876][ T5938] usb 4-1: Product: syz [ 922.019186][ T5938] usb 4-1: Manufacturer: syz [ 922.067579][ T5938] usb 4-1: SerialNumber: syz [ 922.125828][ T5938] usb 4-1: config 0 descriptor?? [ 922.239395][ T5938] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 922.268647][ T5938] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 922.339240][ T5938] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 922.487821][ T6003] usb 3-1: USB disconnect, device number 117 [ 922.984803][T16498] sctp: [Deprecated]: syz.4.2938 (pid 16498) Use of int in maxseg socket option. [ 922.984803][T16498] Use struct sctp_assoc_value instead [ 924.076451][ T5952] usb 4-1: USB disconnect, device number 111 [ 924.450049][T16523] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2946'. [ 924.472639][ T6003] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 924.642684][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 924.651156][ T6003] usb 3-1: config 1 has no interfaces? [ 924.672722][ T6003] usb 3-1: New USB device found, idVendor=14aa, idProduct=0002, bcdDevice=c6.78 [ 924.688510][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.874571][ T6003] usb 3-1: Product: С [ 924.889171][ T6003] usb 3-1: Manufacturer: 㐉 [ 925.142480][ T6003] usb 3-1: SerialNumber: syz [ 925.406900][ T6003] usb 3-1: USB disconnect, device number 118 [ 925.608251][T16347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 925.678269][T16347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 925.700688][T16347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 925.714697][T16347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 926.048522][T16530] fuse: Unknown parameter '`' [ 926.631333][T16347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.687607][T16347] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.856539][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.863869][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.036959][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.044534][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.123695][T16552] program syz.4.2950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.365109][T16556] PKCS7: Unknown OID: [5] (bad) [ 927.370785][T16556] PKCS7: Only support pkcs7_signedData type [ 927.430644][T16347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.577226][T16347] veth0_vlan: entered promiscuous mode [ 927.598053][T16347] veth1_vlan: entered promiscuous mode [ 927.652274][T16347] veth0_macvtap: entered promiscuous mode [ 927.677463][T16347] veth1_macvtap: entered promiscuous mode [ 927.778318][T16347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.907389][T16347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.233042][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.280566][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.461167][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.644299][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 928.663932][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2953'. [ 928.691382][T16572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.757718][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.701702][ T6953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.752711][ T6953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.173430][T16574] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 930.235906][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.247868][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.531506][T16574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 930.837884][T16574] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 930.922079][T16574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 930.932172][T16574] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 931.184671][T13201] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 931.219526][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 931.232523][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2955'. [ 931.247808][T16588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.308210][T16574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 931.319405][T16574] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 931.340951][T16574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 931.344418][T16574] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 931.364069][T13201] usb 2-1: Using ep0 maxpacket: 32 [ 931.368731][T13201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 931.370691][T13201] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 931.370713][T13201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.370726][T13201] usb 2-1: Product: syz [ 931.370736][T13201] usb 2-1: Manufacturer: syz [ 931.370745][T13201] usb 2-1: SerialNumber: syz [ 931.373164][T13201] usb 2-1: config 0 descriptor?? [ 931.375701][T13201] usb 2-1: no audio or video endpoints found [ 931.509638][T16591] FAULT_INJECTION: forcing a failure. [ 931.509638][T16591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.509665][T16591] CPU: 0 UID: 0 PID: 16591 Comm: syz.0.2956 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 931.509681][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.509689][T16591] Call Trace: [ 931.509695][T16591] [ 931.509700][T16591] dump_stack_lvl+0x189/0x250 [ 931.509720][T16591] ? __pfx____ratelimit+0x10/0x10 [ 931.509737][T16591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.509751][T16591] ? __pfx__printk+0x10/0x10 [ 931.509775][T16591] should_fail_ex+0x414/0x560 [ 931.509794][T16591] _copy_from_user+0x2d/0xb0 [ 931.509809][T16591] sctp_setsockopt+0x19f/0x1200 [ 931.509827][T16591] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 931.509844][T16591] do_sock_setsockopt+0x17c/0x1b0 [ 931.509866][T16591] __x64_sys_setsockopt+0x13f/0x1b0 [ 931.509881][T16591] do_syscall_64+0xfa/0x3b0 [ 931.509898][T16591] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.509913][T16591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.509924][T16591] ? clear_bhb_loop+0x60/0xb0 [ 931.509939][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.509950][T16591] RIP: 0033:0x7f0bb7d8ebe9 [ 931.509962][T16591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.509973][T16591] RSP: 002b:00007f0bb8c55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 931.509993][T16591] RAX: ffffffffffffffda RBX: 00007f0bb7fb5fa0 RCX: 00007f0bb7d8ebe9 [ 931.510006][T16591] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 931.510014][T16591] RBP: 00007f0bb8c55090 R08: 0000000000000008 R09: 0000000000000000 [ 931.510021][T16591] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 931.510029][T16591] R13: 00007f0bb7fb6038 R14: 00007f0bb7fb5fa0 R15: 00007f0bb80dfa28 [ 931.510048][T16591] [ 931.576926][T13201] usb 2-1: USB disconnect, device number 5 [ 931.822986][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.823100][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.913410][T16574] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 931.913450][T16574] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 932.773136][T16597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.028393][T16613] blktrace: Concurrent blktraces are not allowed on sg0 [ 933.110207][T16615] netlink: 'syz.1.2959': attribute type 20 has an invalid length. [ 934.552437][ T6011] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 934.715016][ T6011] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 934.746813][ T6011] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 934.774158][ T6011] usb 5-1: config 0 has no interface number 0 [ 934.818093][ T6011] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 934.872365][ T6011] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 934.889390][ T6011] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 934.906115][ T6011] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 934.906139][ T6011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.914946][ T6011] usb 5-1: config 0 descriptor?? [ 935.062089][ T5880] syz_tun (unregistering): left allmulticast mode [ 935.104350][T16037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.107203][T16037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.108526][T16037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.110236][T16037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.111517][T16037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 935.150275][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.162297][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.180189][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.213494][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.220127][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 935.397485][ T6003] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 935.465918][ T8006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.465990][ T8006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 935.547215][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 935.550661][ T6003] usb 2-1: unable to get BOS descriptor or descriptor too short [ 935.551869][ T6003] usb 2-1: config 255 has an invalid interface number: 190 but max is 1 [ 935.551900][ T6003] usb 2-1: config 255 has an invalid interface number: 137 but max is 1 [ 935.551933][ T6003] usb 2-1: config 255 has no interface number 0 [ 935.551966][ T6003] usb 2-1: config 255 has no interface number 1 [ 935.552008][ T6003] usb 2-1: config 255 interface 190 has no altsetting 0 [ 935.552029][ T6003] usb 2-1: config 255 interface 137 has no altsetting 0 [ 935.556747][ T6003] usb 2-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 935.556790][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.556812][ T6003] usb 2-1: Product: syz [ 935.556830][ T6003] usb 2-1: Manufacturer: syz [ 935.556846][ T6003] usb 2-1: SerialNumber: syz [ 935.695167][ T8006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.752417][ T5952] usb 5-1: USB disconnect, device number 97 [ 935.793602][T16630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2964'. [ 935.919168][ T8006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 936.036254][T16630] netlink: 'syz.1.2964': attribute type 29 has an invalid length. [ 936.051375][T16651] netlink: 'syz.1.2964': attribute type 29 has an invalid length. [ 936.118609][ T6003] usb 2-1: USB disconnect, device number 6 [ 936.130623][T16661] fuse: Unknown parameter 'fn?aaIxwx' [ 936.152966][ T8006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.182021][ T8006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 936.255970][ T8006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.262331][ T5952] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 936.274276][ T8006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 936.445370][ T5952] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 936.460638][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.529100][ T5952] usb 5-1: config 0 descriptor?? [ 936.560485][ T5952] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 936.992700][ T6003] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 937.053070][ T8006] bridge_slave_1: left allmulticast mode [ 937.066754][ T8006] bridge_slave_1: left promiscuous mode [ 937.081733][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.104074][ T8006] bridge_slave_0: left allmulticast mode [ 937.110007][ T8006] bridge_slave_0: left promiscuous mode [ 937.128167][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.364567][ T5866] Bluetooth: hci1: command tx timeout [ 937.438858][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 937.451134][ T6003] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 937.462626][ T6003] usb 2-1: config 0 has no interface number 0 [ 937.481231][ T6003] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3 [ 937.496881][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.523970][ T6003] usb 2-1: Product: syz [ 937.528207][ T6003] usb 2-1: Manufacturer: syz [ 937.547696][ T6003] usb 2-1: SerialNumber: syz [ 937.555768][ T6003] usb 2-1: config 0 descriptor?? [ 937.564791][ T6003] usb 2-1: bad CDC descriptors [ 937.790738][ T6003] usb 2-1: USB disconnect, device number 7 [ 937.851531][ T5952] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 938.202150][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2973'. [ 938.297644][ T8006] bond1 (unregistering): Released all slaves [ 938.325498][ T8006] bond2 (unregistering): Released all slaves [ 938.528258][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2974'. [ 938.689037][ T8006] bond0 (unregistering): Released all slaves [ 938.722069][ T8006] bond3 (unregistering): Released all slaves [ 938.758438][ T8006] bond4 (unregistering): Released all slaves [ 938.842665][ T6003] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 938.856415][ T8006] bond5 (unregistering): Released all slaves [ 938.877982][ T8006] bond6 (unregistering): Released all slaves [ 938.897071][ T8006] bond7 (unregistering): Released all slaves [ 939.002298][ T6003] usb 4-1: Using ep0 maxpacket: 8 [ 939.027722][ T6003] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.047660][T16640] chnl_net:caif_netlink_parms(): no params data found [ 939.159254][T16694] fuse: Bad value for 'fd' [ 939.189018][ T6003] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.279701][ T6003] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.313763][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.344998][ T6003] usb 4-1: Product: syz [ 939.354705][ T6003] usb 4-1: Manufacturer: syz [ 939.361075][T16692] netlink: 'syz.0.2977': attribute type 8 has an invalid length. [ 939.375396][ T6003] usb 4-1: SerialNumber: syz [ 939.454872][ T5866] Bluetooth: hci1: command tx timeout [ 939.456903][ T8006] : left promiscuous mode [ 939.629801][ T5952] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 939.655677][ T5952] usb 5-1: USB disconnect, device number 98 [ 940.245023][T16712] netlink: 'syz.0.2983': attribute type 10 has an invalid length. [ 940.280404][T16712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2983'. [ 941.376722][T16640] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.416551][T16640] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.463719][T16640] bridge_slave_0: entered allmulticast mode [ 941.473256][T16734] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[16734] [ 941.496106][T16640] bridge_slave_0: entered promiscuous mode [ 941.536914][T16640] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.546039][ T5866] Bluetooth: hci1: command tx timeout [ 941.581522][T16640] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.612747][T16640] bridge_slave_1: entered allmulticast mode [ 941.640255][T16640] bridge_slave_1: entered promiscuous mode [ 941.699343][ T8006] batadv_slave_1: left promiscuous mode [ 941.953022][ T8006] hsr_slave_0: left promiscuous mode [ 941.993055][T16744] fuse: Bad value for 'fd' [ 942.014761][ T8006] hsr_slave_1: left promiscuous mode [ 942.065149][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.160943][ T6003] usb 4-1: 0:2 : does not exist [ 942.212910][ T6003] usb 4-1: USB disconnect, device number 112 [ 942.223230][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.284627][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.362445][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.366868][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.531225][ T8006] veth1_macvtap: left promiscuous mode [ 942.539858][ T8006] veth0_macvtap: left promiscuous mode [ 942.545846][ T8006] veth1_vlan: left promiscuous mode [ 943.637609][ T5866] Bluetooth: hci1: command tx timeout [ 944.775689][ T8006] team_slave_1 (unregistering): left promiscuous mode [ 944.783173][ T8006] team_slave_1 (unregistering): left allmulticast mode [ 944.792870][ T8006] team0 (unregistering): Port device team_slave_1 removed [ 944.886581][ T8006] team_slave_0 (unregistering): left promiscuous mode [ 944.894058][ T8006] team_slave_0 (unregistering): left allmulticast mode [ 944.904809][ T8006] team0 (unregistering): Port device team_slave_0 removed [ 945.094760][ T30] audit: type=1326 audit(1754887684.856:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.4.2995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ebe9 code=0x0 [ 945.868471][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.956004][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.162102][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2998'. [ 946.245759][T16640] team0: Port device team_slave_0 added [ 946.257333][T16786] bridge_slave_1: left allmulticast mode [ 946.266062][T16786] bridge_slave_1: left promiscuous mode [ 946.300491][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.321489][T16786] bridge_slave_0: left allmulticast mode [ 946.341414][T16786] bridge_slave_0: left promiscuous mode [ 946.355821][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.564095][T16640] team0: Port device team_slave_1 added [ 946.617440][ T8006] IPVS: stop unused estimator thread 0... [ 946.723803][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.755592][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.809563][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.877941][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.907856][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.940695][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.218319][T16640] hsr_slave_0: entered promiscuous mode [ 947.276761][T16640] hsr_slave_1: entered promiscuous mode [ 947.388496][T16640] debugfs: 'hsr0' already exists in 'hsr' [ 947.411845][T16640] Cannot create hsr debugfs directory [ 947.892382][ T5938] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 948.084025][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 948.117283][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short [ 948.169929][ T5938] usb 5-1: config 2 has an invalid interface number: 9 but max is 0 [ 948.182350][ T5938] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 948.192654][ T5938] usb 5-1: config 2 has no interface number 0 [ 948.198843][ T5938] usb 5-1: config 2 interface 9 altsetting 10 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 948.226672][ T5938] usb 5-1: config 2 interface 9 altsetting 10 bulk endpoint 0x8E has invalid maxpacket 32 [ 948.260761][ T5938] usb 5-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 948.297244][ T5938] usb 5-1: config 2 interface 9 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 948.331612][ T5938] usb 5-1: config 2 interface 9 has no altsetting 0 [ 948.343072][ T5938] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 948.360697][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.380898][ T5938] usb 5-1: Product: syz [ 948.388546][ T5938] usb 5-1: Manufacturer: syz [ 948.395849][ T5938] usb 5-1: SerialNumber: syz [ 948.413335][T16801] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 948.667408][ T5938] pn533_usb 5-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 948.731397][ T5938] usb 5-1: USB disconnect, device number 99 [ 948.920443][T16640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 948.942047][T16640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 948.966866][T16640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 948.992108][T16640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 949.264076][T16640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.401322][T16640] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.550136][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.557506][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.640926][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.648293][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.722716][ T5938] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 949.784718][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3007'. [ 949.903332][T16853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 950.233316][T16850] bond0: entered promiscuous mode [ 950.248890][T16850] bond_slave_0: entered promiscuous mode [ 950.266800][T16850] bond_slave_1: entered promiscuous mode [ 950.586367][T16850] bond0: left promiscuous mode [ 950.591307][T16850] bond_slave_0: left promiscuous mode [ 950.607996][T16850] bond_slave_1: left promiscuous mode [ 951.118366][T16640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.996695][T16640] veth0_vlan: entered promiscuous mode [ 952.023601][T16640] veth1_vlan: entered promiscuous mode [ 952.219083][T16640] veth0_macvtap: entered promiscuous mode [ 952.287223][T16640] veth1_macvtap: entered promiscuous mode [ 952.408306][T16640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.439050][T16640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.539058][ T8006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.562470][ T8006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.661637][ T8006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.829723][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.852472][ T5938] usb 5-1: device descriptor read/64, error -71 [ 952.987209][ T8008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.006862][ T6019] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 953.032629][ T8008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.112751][ T5938] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 953.120013][ T8008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.139281][ T8008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.210584][ T6019] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 953.221832][ T6019] usb 2-1: config 0 has no interface number 0 [ 953.271210][ T6019] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 953.282591][ T5938] usb 5-1: device descriptor read/64, error -71 [ 953.290941][ T6019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.311324][ T6019] usb 2-1: Product: syz [ 953.337171][ T6019] usb 2-1: Manufacturer: syz [ 953.352458][ T6019] usb 2-1: SerialNumber: syz [ 953.399080][ T6019] usb 2-1: config 0 descriptor?? [ 953.403663][ T5938] usb usb5-port1: attempt power cycle [ 953.405280][T16887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2960'. [ 953.711388][ T6019] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 953.753167][ T6019] usb 2-1: No valid video chain found. [ 953.774442][ T6019] usb 2-1: USB disconnect, device number 8 [ 953.807341][ T5938] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 953.861876][ T5938] usb 5-1: device descriptor read/8, error -71 [ 953.907712][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3015'. [ 954.132513][ T5938] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 954.185099][ T5938] usb 5-1: device descriptor read/8, error -71 [ 954.227212][T16908] syz_tun: entered allmulticast mode [ 954.328190][ T5938] usb usb5-port1: unable to enumerate USB device [ 954.383871][T16909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3013'. [ 954.407636][T16908] dvmrp1: entered allmulticast mode [ 954.464175][T16905] syz_tun: left allmulticast mode [ 954.505299][ T5989] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 954.727876][ T5989] usb 4-1: config 0 has no interfaces? [ 954.744733][ T5989] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 954.774055][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.925083][ T5989] usb 4-1: Product: syz [ 954.968378][ T5989] usb 4-1: Manufacturer: syz [ 954.979327][ T5989] usb 4-1: SerialNumber: syz [ 954.996517][ T5989] usb 4-1: config 0 descriptor?? [ 955.194521][T16925] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 16925 comm: syz.2.3021) [ 955.272395][T16906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.282842][T16914] could not allocate digest TFM handle vmac(cast5-generic) [ 955.296320][T16906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.377603][ T30] audit: type=1800 audit(1754887695.066:3181): pid=16925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3021" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=73717 res=0 errno=0 [ 956.832411][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3026'. [ 956.848524][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3026'. [ 956.958552][T16941] netlink: 'syz.2.3026': attribute type 11 has an invalid length. [ 957.332355][T13201] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 957.452952][ T5938] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 957.495771][T13201] usb 3-1: Using ep0 maxpacket: 8 [ 957.504476][T13201] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 957.532527][T13201] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 957.552537][T13201] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 957.589086][T13201] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 957.602275][T13201] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 957.615477][T13201] usb 3-1: Product: syz [ 957.634703][ T5938] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 957.648677][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.659127][T13201] usb 3-1: config 0 descriptor?? [ 957.668743][T14280] usb 4-1: USB disconnect, device number 113 [ 957.699341][ T5938] usb 2-1: config 0 descriptor?? [ 957.896362][T16940] @: renamed from vlan0 (while UP) [ 957.941544][ T5938] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 958.161623][ T5938] [drm:udl_init] *ERROR* Selecting channel failed [ 958.202339][T14280] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 958.234399][ T5938] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 958.253781][ T5938] [drm] Initialized udl on minor 2 [ 958.277314][ T5938] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 958.311279][ T5938] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 958.336024][ T8448] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 958.362441][T14280] usb 4-1: Using ep0 maxpacket: 8 [ 958.395076][ T8448] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 958.404507][T13201] usb 3-1: USB disconnect, device number 119 [ 958.415870][ T5938] usb 2-1: USB disconnect, device number 9 [ 958.443195][T14280] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.511348][T14280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 958.587215][T14280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.629677][T14280] usb 4-1: Product: syz [ 958.683401][T14280] usb 4-1: Manufacturer: syz [ 958.688081][T14280] usb 4-1: SerialNumber: syz [ 958.854625][T14280] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 958.941479][T14280] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 959.022364][ T5989] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 959.180362][T16956] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.3029'. [ 959.220426][T14280] usb 4-1: USB disconnect, device number 114 [ 959.301443][ T5989] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 959.313054][ T5989] usb 5-1: config 0 has no interface number 0 [ 959.332054][ T5989] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 959.341811][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.350250][ T5989] usb 5-1: Product: syz [ 959.355037][ T5989] usb 5-1: Manufacturer: syz [ 959.359647][ T5989] usb 5-1: SerialNumber: syz [ 959.375442][ T5989] usb 5-1: config 0 descriptor?? [ 959.385601][ T6003] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 959.882472][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 959.932006][ T5989] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 960.002093][ T6003] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 960.230674][ T5989] usb 5-1: No valid video chain found. [ 960.352285][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.366465][ T6003] usb 2-1: Product: syz [ 960.377941][ T5989] usb 5-1: USB disconnect, device number 104 [ 960.385676][ T6003] usb 2-1: Manufacturer: syz [ 960.408160][ T6003] usb 2-1: SerialNumber: syz [ 960.428640][ T6003] usb 2-1: config 0 descriptor?? [ 960.432600][T14280] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 960.620536][ T6003] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 960.671658][ T6003] usb 2-1: Detected FT232H [ 960.753005][T14280] usb 3-1: config 0 has no interfaces? [ 960.787160][T16977] fuse: Bad value for 'fd' [ 960.820997][T14280] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 960.842283][T14280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.921820][T14280] usb 3-1: Product: syz [ 961.084535][ T6003] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 961.100423][ T6003] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 961.117857][ T6003] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 961.141002][T14280] usb 3-1: Manufacturer: syz [ 961.150182][ T6003] usb 2-1: USB disconnect, device number 10 [ 961.171121][T14280] usb 3-1: SerialNumber: syz [ 961.205138][ T6003] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 961.257368][ T6003] ftdi_sio 2-1:0.0: device disconnected [ 961.311698][T14280] usb 3-1: config 0 descriptor?? [ 961.877522][T16983] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 16983 comm: syz.4.3035) [ 961.933992][T16973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.993498][T16973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.206180][ T30] audit: type=1800 audit(1754887701.956:3182): pid=16983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3035" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48927 res=0 errno=0 [ 962.238787][ C0] vkms_vblank_simulate: vblank timer overrun [ 963.089741][T16992] vivid-002: disconnect [ 963.197946][T16995] vivid-002: reconnect [ 963.392492][T16998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3038'. [ 963.569382][T14280] usb 3-1: USB disconnect, device number 120 [ 963.692536][ T5938] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 963.852421][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 963.881550][ T5938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.892552][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 963.965077][ T5938] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 963.974462][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.016535][ T5938] usb 2-1: Product: syz [ 964.051275][ T5938] usb 2-1: Manufacturer: syz [ 964.072256][ T5938] usb 2-1: SerialNumber: syz [ 964.389628][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 964.649050][T13201] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 964.681126][T17015] fuse: Bad value for 'fd' [ 964.835971][T13201] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 964.882871][T13201] usb 5-1: config 0 has no interface number 0 [ 964.942868][T13201] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 964.952344][T13201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.960421][T13201] usb 5-1: Product: syz [ 964.971904][T13201] usb 5-1: Manufacturer: syz [ 964.984710][T13201] usb 5-1: SerialNumber: syz [ 965.014090][T13201] usb 5-1: config 0 descriptor?? [ 965.279527][T17023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3047'. [ 965.306757][T13201] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 965.313350][T13201] usb 5-1: No valid video chain found. [ 965.320769][T13201] usb 5-1: USB disconnect, device number 105 [ 965.854994][T17028] fuse: Bad value for 'user_id' [ 965.898599][T17028] fuse: Bad value for 'user_id' [ 966.742638][ T8448] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 966.872682][T17051] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 17051 comm: syz.4.3054) [ 966.952518][ T8448] usb 4-1: config 0 has no interfaces? [ 966.962693][ T30] audit: type=1800 audit(1754887706.716:3183): pid=17051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3054" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48927 res=0 errno=0 [ 967.083694][ T8448] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 967.404290][ T8448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.440711][ T8448] usb 4-1: Product: syz [ 967.462308][ T8448] usb 4-1: Manufacturer: syz [ 967.479364][ T8448] usb 4-1: SerialNumber: syz [ 967.497560][ T8448] usb 4-1: config 0 descriptor?? [ 967.768550][T17043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.781740][T17043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.891349][T17060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'. [ 968.338533][T17065] sctp: [Deprecated]: syz.4.3058 (pid 17065) Use of int in maxseg socket option. [ 968.338533][T17065] Use struct sctp_assoc_value instead [ 968.514229][ T5938] usb 2-1: 0:2 : does not exist [ 968.566294][ T5938] usb 2-1: USB disconnect, device number 11 [ 968.841316][T17075] sctp: [Deprecated]: syz.0.3059 (pid 17075) Use of int in maxseg socket option. [ 968.841316][T17075] Use struct sctp_assoc_value instead [ 969.055283][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.432468][ T5938] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 969.598278][ T5938] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 969.622359][ T5938] usb 2-1: config 0 has no interface number 0 [ 969.665569][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 969.707919][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.761853][ T5938] usb 2-1: Product: syz [ 969.775090][ T5938] usb 2-1: Manufacturer: syz [ 969.800351][ T5938] usb 2-1: SerialNumber: syz [ 969.834422][ T5938] usb 2-1: config 0 descriptor?? [ 970.108066][ T5938] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 970.138391][ T5938] usb 2-1: No valid video chain found. [ 970.196191][ T5989] usb 4-1: USB disconnect, device number 115 [ 970.223220][ T5938] usb 2-1: USB disconnect, device number 12 [ 970.405674][T17085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3063'. [ 970.587078][T13337] syz_tun (unregistering): left allmulticast mode [ 970.611264][T17085] bond0: entered promiscuous mode [ 970.623876][T17085] bond_slave_0: entered promiscuous mode [ 970.692379][T17085] bond_slave_1: entered promiscuous mode [ 970.735990][T17085] bond0: left promiscuous mode [ 970.770236][T17085] bond_slave_0: left promiscuous mode [ 970.794717][T16037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 970.805226][T16037] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 970.818185][T16037] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 970.838363][T16037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 970.853169][T16037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 970.853321][T17085] bond_slave_1: left promiscuous mode [ 971.195913][T17096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3067'. [ 971.466753][T17103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3069'. [ 971.867931][T17103] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3069'. [ 971.896268][T17103] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3069'. [ 971.945994][T17103] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 972.613391][T17113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3070'. [ 972.952297][ T5989] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 972.985993][T16037] Bluetooth: hci2: command tx timeout [ 973.132565][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 973.313254][ T5989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.402283][ T5989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 973.657368][ T5989] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 973.700436][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 973.802721][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.811430][ T5989] usb 4-1: Product: syz [ 973.892309][ T5952] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 974.161265][ T5989] usb 4-1: Manufacturer: syz [ 974.247377][ T5952] usb 2-1: config 0 has no interfaces? [ 974.263159][ T5989] usb 4-1: SerialNumber: syz [ 974.276559][ T5952] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 974.298681][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.351658][ T5952] usb 2-1: Product: syz [ 974.371923][ T5952] usb 2-1: Manufacturer: syz [ 974.392508][ T5952] usb 2-1: SerialNumber: syz [ 974.425606][ T5952] usb 2-1: config 0 descriptor?? [ 974.439326][T17090] chnl_net:caif_netlink_parms(): no params data found [ 974.446845][ T5938] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 974.654855][ T5938] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 974.663979][ T5938] usb 3-1: config 0 has no interface number 0 [ 974.686643][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 974.703617][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.714908][ T5938] usb 3-1: Product: syz [ 974.720669][ T5938] usb 3-1: Manufacturer: syz [ 974.849639][T17133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.865631][T17133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.886594][ T5938] usb 3-1: SerialNumber: syz [ 974.921192][ T5938] usb 3-1: config 0 descriptor?? [ 975.052521][T16037] Bluetooth: hci2: command tx timeout [ 975.235840][ T5938] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 975.264012][ T5938] usb 3-1: No valid video chain found. [ 975.314838][ T5938] usb 3-1: USB disconnect, device number 121 [ 976.787154][ T5989] usb 4-1: 0:2 : does not exist [ 976.890868][ T5989] usb 4-1: USB disconnect, device number 116 [ 976.988694][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.096685][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.143520][T16037] Bluetooth: hci2: command tx timeout [ 977.352941][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.424481][ T49] bond0 (unregistering): Released all slaves [ 977.475067][ T49] bond1 (unregistering): Released all slaves [ 977.492854][ T49] bond2 (unregistering): Released all slaves [ 977.502342][ T5989] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 977.510332][ T49] bond3 (unregistering): Released all slaves [ 977.540696][ T49] bond4 (unregistering): Released all slaves [ 977.574810][ T49] bond5 (unregistering): Released all slaves [ 977.615211][ T49] bond6 (unregistering): Released all slaves [ 977.770391][ T5989] usb 4-1: Using ep0 maxpacket: 16 [ 977.915435][ T49] tipc: Left network mode [ 978.041889][T17090] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.063314][T17090] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.093289][T17090] bridge_slave_0: entered allmulticast mode [ 978.112134][T17090] bridge_slave_0: entered promiscuous mode [ 978.204136][ T5952] usb 2-1: USB disconnect, device number 13 [ 978.227813][T17090] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.294354][T17090] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.609093][T17090] bridge_slave_1: entered allmulticast mode [ 978.633636][T17090] bridge_slave_1: entered promiscuous mode [ 978.895844][T17175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 979.222663][T16037] Bluetooth: hci2: command tx timeout [ 979.422588][ T5938] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 979.583650][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 980.052094][T17090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.243042][ T49] hsr_slave_0: left promiscuous mode [ 980.249701][ T49] hsr_slave_1: left promiscuous mode [ 980.256853][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.299260][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.319625][ T49] dummy0: left allmulticast mode [ 980.341957][ T49] dummy0: left promiscuous mode [ 981.222216][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 981.251362][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'. [ 981.760992][ T5989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 982.069059][ T5989] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 982.117581][ T5989] usb 4-1: can't read configurations, error -71 [ 982.192609][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 982.625078][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 982.634348][ T5938] usb 2-1: no configurations [ 982.666999][ T5938] usb 2-1: can't read configurations, error -22 [ 982.974175][ T5989] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 983.183900][ T5989] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 983.192497][ T5989] usb 4-1: config 0 has no interface number 0 [ 983.210737][ T5989] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 983.229175][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.271217][ T5989] usb 4-1: Product: syz [ 983.288746][ T5989] usb 4-1: Manufacturer: syz [ 983.318486][ T5989] usb 4-1: SerialNumber: syz [ 983.324482][T17218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3087'. [ 983.345928][ T5989] usb 4-1: config 0 descriptor?? [ 983.623469][ T6019] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 983.634780][ T5989] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 983.641562][ T5989] usb 4-1: No valid video chain found. [ 983.665036][ T5989] usb 4-1: USB disconnect, device number 118 [ 983.792845][ T6019] usb 3-1: Using ep0 maxpacket: 8 [ 983.912310][ T6019] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.936398][ T6019] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.969659][ T6019] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.980066][ T6019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.989042][ T6019] usb 3-1: Product: syz [ 983.994165][ T6019] usb 3-1: Manufacturer: syz [ 983.998797][ T6019] usb 3-1: SerialNumber: syz [ 984.010450][ T49] team0 (unregistering): Port device team_slave_1 removed [ 984.176739][ T49] team0 (unregistering): Port device team_slave_0 removed [ 986.127542][T17090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.162576][ T5938] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 986.217303][T17201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3084'. [ 986.360704][ T5938] usb 4-1: config 0 has no interfaces? [ 986.389351][ T5938] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 986.404545][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.440437][ T5938] usb 4-1: Product: syz [ 986.487932][ T5938] usb 4-1: Manufacturer: syz [ 986.497277][ T5938] usb 4-1: SerialNumber: syz [ 986.508770][ T5938] usb 4-1: config 0 descriptor?? [ 986.610287][T17090] team0: Port device team_slave_0 added [ 986.624201][ T6019] usb 3-1: 0:2 : does not exist [ 986.658064][T17090] team0: Port device team_slave_1 added [ 986.767160][ T6019] usb 3-1: USB disconnect, device number 122 [ 986.800578][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3091'. [ 986.862577][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 986.892974][T17237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.920229][T17237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.129215][T17234] bond0: entered promiscuous mode [ 987.140771][T17234] bond_slave_0: entered promiscuous mode [ 987.155768][T17234] bond_slave_1: entered promiscuous mode [ 987.207979][T17234] bond0: left promiscuous mode [ 987.215580][T17234] bond_slave_0: left promiscuous mode [ 987.221433][T17234] bond_slave_1: left promiscuous mode [ 987.244149][ T893] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 987.274592][T17090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.379135][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.402319][ T893] usb 2-1: Using ep0 maxpacket: 8 [ 987.446884][ T893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.447051][T17090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.529696][ T893] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 987.540305][ T893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.551779][ T893] usb 2-1: Product: syz [ 987.567615][ T893] usb 2-1: Manufacturer: syz [ 987.578946][T17090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.587654][ T893] usb 2-1: SerialNumber: syz [ 987.636190][ T893] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 987.636403][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.646167][ T893] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 987.936872][ T6019] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 987.955250][T17090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.999501][T17241] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.3093'. [ 988.091224][ T6003] usb 2-1: USB disconnect, device number 16 [ 988.098081][ T6019] usb 3-1: device descriptor read/64, error -71 [ 988.261722][T17090] hsr_slave_0: entered promiscuous mode [ 988.286369][T17090] hsr_slave_1: entered promiscuous mode [ 988.294991][T17090] debugfs: 'hsr0' already exists in 'hsr' [ 988.301250][T17090] Cannot create hsr debugfs directory [ 988.352469][ T6019] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 988.496666][ T6019] usb 3-1: device descriptor read/64, error -71 [ 988.612995][ T6019] usb usb3-port1: attempt power cycle [ 988.993956][ T6019] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 989.035169][ T6019] usb 3-1: device descriptor read/8, error -71 [ 989.273459][ T6019] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 989.294931][ T5938] usb 4-1: USB disconnect, device number 119 [ 989.363660][ T6019] usb 3-1: device descriptor read/8, error -71 [ 989.486291][ T6019] usb usb3-port1: unable to enumerate USB device [ 990.362439][ T5952] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 990.608738][T17273] netlink: 'syz.0.3097': attribute type 10 has an invalid length. [ 990.618142][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 990.619873][ T5952] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 990.625113][T17273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3097'. [ 990.688791][ T5952] usb 2-1: config 0 has no interface number 0 [ 990.702492][ T5952] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.162276][ T6003] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 991.264042][ T5952] usb 2-1: config 0 interface 85 has no altsetting 0 [ 991.297724][T17090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 991.321221][ T5952] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 991.324983][T17090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 991.360186][T17090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 991.387519][T17090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 991.394748][ T6003] usb 3-1: device descriptor read/64, error -71 [ 991.422496][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.512240][ T5952] usb 2-1: Product: syz [ 991.542372][ T5952] usb 2-1: Manufacturer: syz [ 991.557281][ T5952] usb 2-1: SerialNumber: syz [ 991.598910][ T5952] usb 2-1: config 0 descriptor?? [ 991.632797][ T6003] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 991.802684][ T6003] usb 3-1: device descriptor read/64, error -71 [ 991.933608][ T6003] usb usb3-port1: attempt power cycle [ 991.961606][T17290] input: syz1 as /devices/virtual/input/input57 [ 992.188830][T17090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.283415][T17090] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.312400][ T5989] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 992.324037][ T6003] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 992.363297][ T6003] usb 3-1: device descriptor read/8, error -71 [ 992.379453][T17090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 992.401669][T17090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.401897][ T5952] appletouch 2-1:0.85: Geyser mode initialized. [ 992.487565][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.494861][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.502143][ T5989] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 992.519047][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.570266][ T5952] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input56 [ 992.599612][ T5989] usb 4-1: config 0 descriptor?? [ 992.605114][ T6003] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 992.644740][ T5989] cp210x 4-1:0.0: cp210x converter detected [ 992.657656][ T6003] usb 3-1: device descriptor read/8, error -71 [ 992.733694][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.740905][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.765966][ T6019] usb 2-1: USB disconnect, device number 17 [ 992.771944][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 992.797067][ T6003] usb usb3-port1: unable to enumerate USB device [ 992.886736][ T6019] appletouch 2-1:0.85: input: appletouch disconnected [ 993.042684][ T5989] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 993.071028][T17090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.219946][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.233137][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.274410][T17090] veth0_vlan: entered promiscuous mode [ 993.290216][T17090] veth1_vlan: entered promiscuous mode [ 993.410360][T17090] veth0_macvtap: entered promiscuous mode [ 993.446545][T17090] veth1_macvtap: entered promiscuous mode [ 993.693028][T17090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.798369][T17090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.838880][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 994.081685][ T3444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.145403][ T3444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.207781][ T5989] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 994.235914][ T3444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.250416][ T5989] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 994.273799][ T3444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.290207][ T5989] usb 4-1: cp210x converter now attached to ttyUSB0 [ 994.355107][ T5989] usb 4-1: USB disconnect, device number 120 [ 994.388687][T17314] tipc: Enabling of bearer rejected, failed to enable media [ 994.434200][ T5989] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 994.476557][ T5989] cp210x 4-1:0.0: device disconnected [ 994.754324][ T8006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.837642][ T8006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.047644][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.077367][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.534564][T17339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.702416][ T6019] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 995.862885][ T6019] usb 3-1: Using ep0 maxpacket: 8 [ 995.870484][ T6019] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 995.885958][ T6019] usb 3-1: config 0 has no interface number 0 [ 995.902311][ T8448] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 995.912836][ T6019] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 995.997327][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.052597][ T6019] usb 3-1: config 0 descriptor?? [ 996.169971][ T8448] usb 4-1: config index 0 descriptor too short (expected 51488, got 36) [ 996.173905][ T6019] viperboard 3-1:0.143: version 0.00 found at bus 003 address 005 [ 996.219442][ T8448] usb 4-1: config 237 has too many interfaces: 93, using maximum allowed: 32 [ 996.232647][ T6019] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 996.271250][T17340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.292832][T17340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.300974][ T8448] usb 4-1: config 237 has an invalid descriptor of length 215, skipping remainder of the config [ 996.312940][ T6019] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 996.368896][ T8448] usb 4-1: config 237 has 0 interfaces, different from the descriptor's value: 93 [ 996.452274][ T8448] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 996.456835][ T6019] usb 3-1: USB disconnect, device number 5 [ 996.516191][ T8448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.279053][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.288789][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.337452][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.346630][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.355836][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.365099][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.374402][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.383910][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 997.393079][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'. [ 998.728346][T17381] bond0: entered promiscuous mode [ 998.828779][T17381] bond_slave_0: entered promiscuous mode [ 998.903344][T17381] bond_slave_1: entered promiscuous mode [ 999.307916][T17387] __nla_validate_parse: 41 callbacks suppressed [ 999.307975][T17387] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3116'. [ 999.399398][T17381] bond0: left promiscuous mode [ 999.405118][T17381] bond_slave_0: left promiscuous mode [ 999.425974][T17381] bond_slave_1: left promiscuous mode [ 999.882492][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1000.072482][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 1000.120895][ T5952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.172401][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.214669][ T5952] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.224423][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.234618][ T5952] usb 3-1: Product: syz [ 1000.276384][ T5952] usb 3-1: Manufacturer: syz [ 1000.296241][ T5952] usb 3-1: SerialNumber: syz [ 1001.161885][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 1001.652348][ T5938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1001.694170][ T8448] usb 4-1: string descriptor 0 read error: -32 [ 1001.724504][T17420] FAULT_INJECTION: forcing a failure. [ 1001.724504][T17420] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.746652][ T8448] usb 4-1: USB disconnect, device number 121 [ 1001.816870][ T5938] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1001.838494][ T5938] usb 2-1: config 0 has no interface number 0 [ 1001.869595][T17420] CPU: 1 UID: 0 PID: 17420 Comm: syz.0.3123 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1001.869627][T17420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1001.869639][T17420] Call Trace: [ 1001.869648][T17420] [ 1001.869657][T17420] dump_stack_lvl+0x189/0x250 [ 1001.869688][T17420] ? __pfx____ratelimit+0x10/0x10 [ 1001.869715][T17420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.869739][T17420] ? __pfx__printk+0x10/0x10 [ 1001.869768][T17420] ? __lock_acquire+0xab9/0xd20 [ 1001.869806][T17420] should_fail_ex+0x414/0x560 [ 1001.869837][T17420] should_failslab+0xa8/0x100 [ 1001.869868][T17420] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1001.869892][T17420] ? skb_clone+0x212/0x3a0 [ 1001.869920][T17420] skb_clone+0x212/0x3a0 [ 1001.869945][T17420] __netlink_deliver_tap+0x404/0x850 [ 1001.869986][T17420] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.870016][T17420] netlink_deliver_tap+0x19c/0x1b0 [ 1001.870045][T17420] netlink_unicast+0x7fa/0x9e0 [ 1001.870080][T17420] ? __pfx_netlink_unicast+0x10/0x10 [ 1001.870107][T17420] ? netlink_sendmsg+0x642/0xb30 [ 1001.870132][T17420] ? skb_put+0x11b/0x210 [ 1001.870163][T17420] netlink_sendmsg+0x805/0xb30 [ 1001.870213][T17420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.870245][T17420] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1001.870279][T17420] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1001.870302][T17420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.870331][T17420] __sock_sendmsg+0x21c/0x270 [ 1001.870358][T17420] ____sys_sendmsg+0x505/0x830 [ 1001.870387][T17420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.870418][T17420] ? import_iovec+0x74/0xa0 [ 1001.870444][T17420] ___sys_sendmsg+0x21f/0x2a0 [ 1001.870468][T17420] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.870528][T17420] ? __fget_files+0x2a/0x420 [ 1001.870546][T17420] ? __fget_files+0x3a0/0x420 [ 1001.870577][T17420] __x64_sys_sendmsg+0x19b/0x260 [ 1001.870602][T17420] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1001.870634][T17420] ? __pfx_ksys_write+0x10/0x10 [ 1001.870668][T17420] ? do_syscall_64+0xbe/0x3b0 [ 1001.870701][T17420] do_syscall_64+0xfa/0x3b0 [ 1001.870726][T17420] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.870752][T17420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.870773][T17420] ? clear_bhb_loop+0x60/0xb0 [ 1001.870799][T17420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.870817][T17420] RIP: 0033:0x7f0bb7d8ebe9 [ 1001.870836][T17420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.870854][T17420] RSP: 002b:00007f0bb8c55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.870877][T17420] RAX: ffffffffffffffda RBX: 00007f0bb7fb5fa0 RCX: 00007f0bb7d8ebe9 [ 1001.870893][T17420] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1001.870906][T17420] RBP: 00007f0bb8c55090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.870919][T17420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.870931][T17420] R13: 00007f0bb7fb6038 R14: 00007f0bb7fb5fa0 R15: 00007f0bb80dfa28 [ 1001.870964][T17420] [ 1001.877257][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1003.136659][T17434] netlink: 'syz.4.3127': attribute type 12 has an invalid length. [ 1003.151076][T17434] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1003.192587][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 1003.903584][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'. [ 1004.377954][ T5952] usb 3-1: 0:2 : does not exist [ 1004.489753][T17455] sctp: [Deprecated]: syz.4.3129 (pid 17455) Use of int in maxseg socket option. [ 1004.489753][T17455] Use struct sctp_assoc_value instead [ 1004.717408][ T5952] usb 3-1: USB disconnect, device number 6 [ 1004.742238][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.780054][ T5938] usb 2-1: Product: syz [ 1004.793980][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.812230][ T5938] usb 2-1: Manufacturer: syz [ 1004.817087][ T5938] usb 2-1: SerialNumber: syz [ 1005.069847][ T5938] usb 2-1: config 0 descriptor?? [ 1005.093380][ T5938] usb 2-1: can't set config #0, error -71 [ 1005.185476][ T5938] usb 2-1: USB disconnect, device number 18 [ 1006.803777][T17479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.898269][T17479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.040619][ T8448] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1007.276621][T17488] FAULT_INJECTION: forcing a failure. [ 1007.276621][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.310491][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.2.3135 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1007.310523][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1007.310536][T17488] Call Trace: [ 1007.310545][T17488] [ 1007.310554][T17488] dump_stack_lvl+0x189/0x250 [ 1007.310585][T17488] ? __pfx____ratelimit+0x10/0x10 [ 1007.310619][T17488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.310644][T17488] ? __pfx__printk+0x10/0x10 [ 1007.310679][T17488] ? __pfx___might_resched+0x10/0x10 [ 1007.310697][T17488] ? fs_reclaim_acquire+0x7d/0x100 [ 1007.310734][T17488] should_fail_ex+0x414/0x560 [ 1007.310765][T17488] should_failslab+0xa8/0x100 [ 1007.310795][T17488] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1007.310821][T17488] ? skb_clone+0x212/0x3a0 [ 1007.310847][T17488] skb_clone+0x212/0x3a0 [ 1007.310866][T17488] ? nfnetlink_rcv+0x486/0x2520 [ 1007.310895][T17488] nfnetlink_rcv+0x4b4/0x2520 [ 1007.310922][T17488] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1007.310953][T17488] ? __dev_queue_xmit+0x27b/0x3b50 [ 1007.310987][T17488] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1007.311029][T17488] ? ref_tracker_free+0x63a/0x7d0 [ 1007.311057][T17488] ? __asan_memcpy+0x40/0x70 [ 1007.311079][T17488] ? __pfx_ref_tracker_free+0x10/0x10 [ 1007.311103][T17488] ? __skb_clone+0x63/0x7a0 [ 1007.311125][T17488] ? __skb_clone+0x483/0x7a0 [ 1007.311146][T17488] ? skb_clone+0x246/0x3a0 [ 1007.311169][T17488] ? __netlink_deliver_tap+0x807/0x850 [ 1007.311196][T17488] ? netlink_deliver_tap+0x2e/0x1b0 [ 1007.311241][T17488] netlink_unicast+0x82c/0x9e0 [ 1007.311275][T17488] ? __pfx_netlink_unicast+0x10/0x10 [ 1007.311301][T17488] ? netlink_sendmsg+0x642/0xb30 [ 1007.311325][T17488] ? skb_put+0x11b/0x210 [ 1007.311392][T17488] netlink_sendmsg+0x805/0xb30 [ 1007.311431][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.311464][T17488] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1007.311500][T17488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1007.311522][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.311551][T17488] __sock_sendmsg+0x21c/0x270 [ 1007.311580][T17488] ____sys_sendmsg+0x505/0x830 [ 1007.311609][T17488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.311640][T17488] ? import_iovec+0x74/0xa0 [ 1007.311667][T17488] ___sys_sendmsg+0x21f/0x2a0 [ 1007.311691][T17488] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.311751][T17488] ? __fget_files+0x2a/0x420 [ 1007.311767][T17488] ? __fget_files+0x3a0/0x420 [ 1007.311797][T17488] __x64_sys_sendmsg+0x19b/0x260 [ 1007.311819][T17488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.311846][T17488] ? __pfx_ksys_write+0x10/0x10 [ 1007.311866][T17488] ? rcu_is_watching+0x15/0xb0 [ 1007.311887][T17488] ? do_syscall_64+0xbe/0x3b0 [ 1007.311917][T17488] do_syscall_64+0xfa/0x3b0 [ 1007.311943][T17488] ? lockdep_hardirqs_on+0x9c/0x150 [ 1007.311969][T17488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.311990][T17488] ? clear_bhb_loop+0x60/0xb0 [ 1007.312015][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.312034][T17488] RIP: 0033:0x7f8fc6d8ebe9 [ 1007.312054][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.312071][T17488] RSP: 002b:00007f8fc7cc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.312094][T17488] RAX: ffffffffffffffda RBX: 00007f8fc6fb5fa0 RCX: 00007f8fc6d8ebe9 [ 1007.312108][T17488] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1007.312121][T17488] RBP: 00007f8fc7cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.312133][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.312146][T17488] R13: 00007f8fc6fb6038 R14: 00007f8fc6fb5fa0 R15: 00007f8fc70dfa28 [ 1007.312175][T17488] [ 1008.003578][ T8448] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1008.024946][ T8448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.238500][ T8448] usb 5-1: Product: syz [ 1008.251121][ T8448] usb 5-1: Manufacturer: syz [ 1008.269581][ T8448] usb 5-1: SerialNumber: syz [ 1008.379426][T17500] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3138'. [ 1008.401072][ T8448] usb 5-1: config 0 descriptor?? [ 1008.531827][ T8448] ch341 5-1:0.0: ch341-uart converter detected [ 1008.732848][ T8448] usb 5-1: failed to receive control message: -71 [ 1008.789742][ T8448] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1008.861390][ T8448] usb 5-1: USB disconnect, device number 106 [ 1008.879534][ T8448] ch341 5-1:0.0: device disconnected [ 1009.043171][T16293] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1009.267165][T16293] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1009.275589][T16293] usb 2-1: config 0 has no interface number 0 [ 1009.328859][T16293] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1009.351144][T16293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.397299][T16293] usb 2-1: Product: syz [ 1009.417577][T16293] usb 2-1: Manufacturer: syz [ 1009.460531][T16293] usb 2-1: SerialNumber: syz [ 1009.514311][T16293] usb 2-1: config 0 descriptor?? [ 1009.612073][T17511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1009.662738][ T5938] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1009.723258][ T3444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.755013][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.767636][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.778087][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.789966][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.801766][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.832252][ T5938] usb 5-1: Using ep0 maxpacket: 8 [ 1009.846453][ T5938] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1009.856358][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.868608][ T5938] usb 5-1: Product: syz [ 1009.873040][ T5938] usb 5-1: Manufacturer: syz [ 1009.878412][ T5938] usb 5-1: SerialNumber: syz [ 1009.900231][ T5938] usb 5-1: config 0 descriptor?? [ 1009.904076][T16293] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1009.927874][T17511] bond0: entered promiscuous mode [ 1009.933727][T16293] usb 2-1: No valid video chain found. [ 1009.946009][T16293] usb 2-1: USB disconnect, device number 19 [ 1009.952106][T17511] bond_slave_0: entered promiscuous mode [ 1009.961727][ T5938] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1009.991062][T17511] bond_slave_1: entered promiscuous mode [ 1010.000869][T17511] bond0: left promiscuous mode [ 1010.009904][T17511] bond_slave_0: left promiscuous mode [ 1010.042088][T17511] bond_slave_1: left promiscuous mode [ 1010.128171][T17516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'. [ 1010.129191][ T3444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.172977][T17516] bond0: entered promiscuous mode [ 1010.178263][T17516] bond_slave_0: entered promiscuous mode [ 1010.184908][T17516] bond_slave_1: entered promiscuous mode [ 1010.197753][T17516] bond0: left promiscuous mode [ 1010.207275][T17516] bond_slave_0: left promiscuous mode [ 1010.220692][T17516] bond_slave_1: left promiscuous mode [ 1010.277193][ T3444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.448643][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1010.773327][T17520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.138939][ T3444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.586839][ T5938] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1011.601103][ T5938] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1011.919853][T17537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1012.002360][ T5866] Bluetooth: hci0: command tx timeout [ 1012.243702][ T5989] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1012.278739][ T3444] bridge0: port 3(team0) entered disabled state [ 1012.451848][T17549] input: syz0 as /devices/virtual/input/input58 [ 1012.687776][T14280] usb 5-1: USB disconnect, device number 107 [ 1012.932253][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 1012.944068][ T3444] bridge_slave_1: left allmulticast mode [ 1012.956107][ T5989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.957231][ T3444] bridge_slave_1: left promiscuous mode [ 1012.996991][ T5989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.008709][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.109136][ T5989] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1013.129424][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.141710][ T5989] usb 2-1: Product: syz [ 1013.146362][ T5989] usb 2-1: Manufacturer: syz [ 1013.151438][ T5989] usb 2-1: SerialNumber: syz [ 1013.595232][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1013.620152][ T3444] bridge_slave_0: left allmulticast mode [ 1013.641034][ T3444] bridge_slave_0: left promiscuous mode [ 1013.672838][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.012994][ T5866] Bluetooth: hci0: command tx timeout [ 1015.271889][ T5989] usb 2-1: 0:2 : does not exist [ 1015.319321][ T5989] usb 2-1: USB disconnect, device number 20 [ 1015.396521][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1015.500429][T17573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1015.780247][ T3444] bond0 (unregistering): left promiscuous mode [ 1015.786724][ T3444] bond_slave_0: left promiscuous mode [ 1015.795845][ T3444] bond_slave_1: left promiscuous mode [ 1015.803202][ T3444] batadv0: left promiscuous mode [ 1015.809837][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.825414][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.836508][ T3444] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1015.846454][ T3444] bond0 (unregistering): Released all slaves [ 1016.019022][ T3444] bond1 (unregistering): Released all slaves [ 1016.035553][ T3444] bond2 (unregistering): Released all slaves [ 1016.095166][ T5866] Bluetooth: hci0: command tx timeout [ 1016.424186][T17581] vivid-007: kernel_thread() failed [ 1016.721776][T17573] bond0: entered promiscuous mode [ 1016.754534][T17573] bond_slave_0: entered promiscuous mode [ 1016.769466][T17573] bond_slave_1: entered promiscuous mode [ 1016.799712][T17573] bond0: left promiscuous mode [ 1016.805055][T17573] bond_slave_0: left promiscuous mode [ 1016.811049][T17573] bond_slave_1: left promiscuous mode [ 1016.832796][T14280] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1016.834537][ T3444] tipc: Left network mode [ 1016.846220][T17514] chnl_net:caif_netlink_parms(): no params data found [ 1016.898692][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1017.003286][T14280] usb 4-1: Using ep0 maxpacket: 32 [ 1017.014595][T14280] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.047623][T14280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1017.080950][ T5938] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1017.098071][ T5938] usb 3-1: config 0 has no interface number 0 [ 1017.112611][T14280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1017.162533][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1017.181544][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.191503][T14280] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1017.215209][ T5938] usb 3-1: Product: syz [ 1017.219548][ T5938] usb 3-1: Manufacturer: syz [ 1017.232025][T14280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.241054][ T5938] usb 3-1: SerialNumber: syz [ 1017.274503][T14280] usb 4-1: config 0 descriptor?? [ 1017.294830][ T5938] usb 3-1: config 0 descriptor?? [ 1017.310862][T17590] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1017.390948][T14280] hub 4-1:0.0: USB hub found [ 1017.399028][T17604] input: syz1 as /devices/virtual/input/input59 [ 1017.426931][ T3444] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 1017.545208][T14280] hub 4-1:0.0: 2 ports detected [ 1017.583232][ T5938] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 1017.589992][ T5938] usb 3-1: No valid video chain found. [ 1017.612382][ T5938] usb 3-1: USB disconnect, device number 7 [ 1017.692400][ T8448] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1017.700350][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.729576][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.737458][T17514] bridge_slave_0: entered allmulticast mode [ 1017.755453][T17514] bridge_slave_0: entered promiscuous mode [ 1017.766887][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.779117][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.787436][T17514] bridge_slave_1: entered allmulticast mode [ 1017.807684][T17514] bridge_slave_1: entered promiscuous mode [ 1017.822876][T17610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3161'. [ 1017.891383][ T8448] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1017.943317][ T8448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.986342][ T8448] usb 2-1: config 0 descriptor?? [ 1018.030632][ T8448] cp210x 2-1:0.0: cp210x converter detected [ 1018.050775][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.133539][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.174192][ T5866] Bluetooth: hci0: command tx timeout [ 1018.480190][ T8448] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1018.538510][T17514] team0: Port device team_slave_0 added [ 1018.559123][T17621] fuse: Unknown parameter './file0' [ 1018.625106][T17514] team0: Port device team_slave_1 added [ 1018.975132][ T3444] hsr_slave_0: left promiscuous mode [ 1019.007244][ T3444] hsr_slave_1: left promiscuous mode [ 1019.049528][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.070810][T17625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.099423][T14280] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 1019.120096][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.172805][T17625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.232518][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.357982][ T3444] veth1_macvtap: left promiscuous mode [ 1019.369803][ T3444] veth0_macvtap: left promiscuous mode [ 1019.380995][ T3444] veth1_vlan: left allmulticast mode [ 1019.506577][ T3444] veth1_vlan: left promiscuous mode [ 1019.512965][ T3444] veth0_vlan: left promiscuous mode [ 1019.691987][ T8448] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1019.716584][ T8448] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1020.049436][ T8448] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1020.120975][ T8448] usb 2-1: USB disconnect, device number 21 [ 1020.203176][ T8448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1020.234801][ T8448] cp210x 2-1:0.0: device disconnected [ 1021.099856][ T3444] batadv1 (unregistering): left promiscuous mode [ 1021.129512][ T3444] batadv1 (unregistering): left allmulticast mode [ 1021.202600][ T3444] team0 (unregistering): Port device batadv1 removed [ 1021.856895][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1021.878350][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1021.933059][T17649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.353131][ T3444] team_slave_1 (unregistering): left promiscuous mode [ 1024.373704][ T3444] team_slave_1 (unregistering): left allmulticast mode [ 1024.382950][T14280] usb 4-1: device descriptor read/64, error -110 [ 1024.397677][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 1024.487494][ T3444] team_slave_0 (unregistering): left promiscuous mode [ 1024.525349][ T3444] team_slave_0 (unregistering): left allmulticast mode [ 1024.536415][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 1024.662771][T14280] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 1024.682818][ T5938] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1024.723964][T17661] sctp: [Deprecated]: syz.2.3173 (pid 17661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1024.723964][T17661] Use struct sctp_sack_info instead [ 1024.838560][T14280] usb 4-1: device descriptor read/64, error -32 [ 1024.875185][ T5938] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1024.885022][ T5938] usb 2-1: config 0 has no interface number 0 [ 1024.896690][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1024.912244][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.920869][ T5938] usb 2-1: Product: syz [ 1024.931154][ T5938] usb 2-1: Manufacturer: syz [ 1024.939173][ T5938] usb 2-1: SerialNumber: syz [ 1024.962838][ T5938] usb 2-1: config 0 descriptor?? [ 1025.115386][T14280] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 1025.152880][T14280] usb 4-1: device descriptor read/8, error -32 [ 1025.278941][ T5938] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1025.289833][ T5938] usb 2-1: No valid video chain found. [ 1025.304866][ T5938] usb 2-1: USB disconnect, device number 22 [ 1025.400087][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.407446][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.434241][T14280] usb 4-1: reset high-speed USB device number 122 using dummy_hcd [ 1025.442659][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.458594][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.467820][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.498915][T14280] usb 4-1: device descriptor read/8, error -32 [ 1025.500309][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.518425][T17625] raw-gadget.1 gadget.3: failed to queue suspend event [ 1025.526265][T17625] raw-gadget.1 gadget.3: failed to queue disconnect event [ 1025.642706][T14280] hub 4-1:0.0: set hub depth failed [ 1025.654293][ T5952] usb 4-1: USB disconnect, device number 122 [ 1025.684981][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 1025.869119][T17514] hsr_slave_0: entered promiscuous mode [ 1025.884258][T17514] hsr_slave_1: entered promiscuous mode [ 1026.018988][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1026.059164][T17677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1026.634710][T17688] loop6: detected capacity change from 0 to 524287999 [ 1026.642973][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.651516][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.660817][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.669938][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.678498][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.687337][T17693] Buffer I/O error on dev loop6, logical block 1048575, async page read [ 1026.708639][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.717249][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.725915][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.736893][T17688] ldm_validate_partition_table(): Disk read failed. [ 1026.744391][T17688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.753377][T17688] Dev loop6: unable to read RDB block 0 [ 1026.763525][T17688] loop6: unable to read partition table [ 1026.770262][T17688] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1028.076747][T17720] sctp: [Deprecated]: syz.2.3184 (pid 17720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1028.076747][T17720] Use struct sctp_sack_info instead [ 1029.048056][T17514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1029.119887][T17514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1029.194544][T17514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1029.349596][T17514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1029.670564][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 1029.778113][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.988310][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.048639][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.056358][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.167599][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1030.245301][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.252687][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.283241][T17770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1030.556767][T17772] loop6: detected capacity change from 0 to 524287999 [ 1030.757240][T17514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1030.911605][T17514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.116192][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.459828][T17788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3194'. [ 1031.628045][T17514] veth0_vlan: entered promiscuous mode [ 1031.751512][T17514] veth1_vlan: entered promiscuous mode [ 1031.752445][T16293] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1031.924828][T16293] usb 5-1: Using ep0 maxpacket: 8 [ 1031.976772][T16293] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.000576][T16293] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.013334][T17514] veth0_macvtap: entered promiscuous mode [ 1032.068104][T16293] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1032.076552][T17514] veth1_macvtap: entered promiscuous mode [ 1032.079563][T16293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.162587][T16293] usb 5-1: Product: syz [ 1032.171669][T16293] usb 5-1: Manufacturer: syz [ 1032.192479][T16293] usb 5-1: SerialNumber: syz [ 1032.300217][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.427057][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1032.554489][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.599155][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.667604][ T8006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.734331][ T8006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.751949][ T8006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.067146][ T5952] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1033.106810][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.134144][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.242320][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 1033.262903][ T5952] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1033.276669][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.292507][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.319072][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.336408][ T5952] usb 2-1: Product: syz [ 1033.357544][ T5952] usb 2-1: Manufacturer: syz [ 1033.381270][ T5952] usb 2-1: SerialNumber: syz [ 1033.421657][ T5952] usb 2-1: config 0 descriptor?? [ 1033.460699][ T5952] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1033.924748][T17819] tipc: Started in network mode [ 1033.932546][T17819] tipc: Node identity ff, cluster identity 4711 [ 1033.939002][T17819] tipc: Enabling of bearer rejected, failed to enable media [ 1034.158182][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1034.168123][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1034.181919][T17824] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1035.131603][T17824] bond1: entered allmulticast mode [ 1035.139769][T17824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1035.221786][ T5952] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 1035.240058][ T5952] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1036.580572][T16293] usb 5-1: 0:2 : does not exist [ 1036.876477][T16293] usb 5-1: USB disconnect, device number 108 [ 1037.010390][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.818753][T17860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1037.928827][T17860] bond0: entered promiscuous mode [ 1037.960980][T17860] bond_slave_0: entered promiscuous mode [ 1037.989689][ T5938] usb 2-1: USB disconnect, device number 23 [ 1038.037761][T17860] bond_slave_1: entered promiscuous mode [ 1038.120370][T17860] bond0: left promiscuous mode [ 1038.165992][T17860] bond_slave_0: left promiscuous mode [ 1038.176101][ T5952] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1038.200782][T17860] bond_slave_1: left promiscuous mode [ 1038.324480][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1038.584320][T16293] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1038.612912][ T5952] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1038.772550][ T5952] usb 4-1: device descriptor read/64, error -71 [ 1038.822609][T16293] usb 2-1: config 0 has no interfaces? [ 1038.847908][ T6003] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1038.874870][T16293] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1038.885832][ T5952] usb usb4-port1: attempt power cycle [ 1038.904351][T16293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.937482][T16293] usb 2-1: Product: syz [ 1038.970150][T16293] usb 2-1: Manufacturer: syz [ 1038.994578][T16293] usb 2-1: SerialNumber: syz [ 1039.102893][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 1039.113738][T16293] usb 2-1: config 0 descriptor?? [ 1039.143358][ T6003] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 1039.173362][ T6003] usb 3-1: config 0 has no interface number 0 [ 1039.234490][ T6003] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1039.276936][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.307698][ T6003] usb 3-1: Product: syz [ 1039.332394][ T6003] usb 3-1: Manufacturer: syz [ 1039.347459][ T6003] usb 3-1: SerialNumber: syz [ 1039.373218][ T6003] usb 3-1: config 0 descriptor?? [ 1039.398392][T17870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.408547][T17870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.442933][ T6003] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1039.612606][T17898] sctp: [Deprecated]: syz.4.3215 (pid 17898) Use of int in maxseg socket option. [ 1039.612606][T17898] Use struct sctp_assoc_value instead [ 1039.930557][T17900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3216'. [ 1040.328916][ T6003] gspca_topro: reg_w err -71 [ 1040.380395][ T6003] gspca_topro: Sensor soi763a [ 1040.462468][ T5952] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1040.583014][ T6003] usb 3-1: USB disconnect, device number 8 [ 1040.613420][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 1040.630527][ T5952] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.649387][ T5952] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.722393][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.815415][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.923588][ T5952] usb 4-1: Product: syz [ 1040.950085][ T5952] usb 4-1: Manufacturer: syz [ 1040.996178][ T5952] usb 4-1: SerialNumber: syz [ 1041.413670][T17909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3217'. [ 1041.752339][T14280] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1041.945672][T14280] usb 3-1: Using ep0 maxpacket: 8 [ 1041.982219][T14280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.068449][T14280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1042.100950][T14280] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1042.179275][T14280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.213020][T14280] usb 3-1: Product: syz [ 1042.231147][T14280] usb 3-1: Manufacturer: syz [ 1042.253930][T14280] usb 3-1: SerialNumber: syz [ 1042.440958][T17912] sctp: [Deprecated]: syz.0.3218 (pid 17912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1042.440958][T17912] Use struct sctp_sack_info instead [ 1042.949062][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1042.965124][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3220'. [ 1043.487135][ T8448] usb 2-1: USB disconnect, device number 24 [ 1043.694715][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1044.065744][ T5952] usb 4-1: 0:2 : does not exist [ 1044.124145][ T5952] usb 4-1: USB disconnect, device number 126 [ 1044.462647][T17929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1044.585229][T17929] bond0: entered promiscuous mode [ 1044.611093][T17929] bond_slave_0: entered promiscuous mode [ 1044.631801][T17929] bond_slave_1: entered promiscuous mode [ 1044.668443][T17929] bond0: left promiscuous mode [ 1044.682604][T17929] bond_slave_0: left promiscuous mode [ 1044.725994][T17929] bond_slave_1: left promiscuous mode [ 1045.197230][ T8445] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1045.613357][T17943] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3226'. [ 1045.645001][T17943] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3226'. [ 1045.661516][ T8445] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1045.903840][ T8445] usb 2-1: config 0 has no interface number 0 [ 1045.940554][ T8445] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1046.012387][T17945] sctp: [Deprecated]: syz.3.3227 (pid 17945) Use of int in maxseg socket option. [ 1046.012387][T17945] Use struct sctp_assoc_value instead [ 1046.067632][ T8445] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1046.121801][ T8445] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1046.438795][ T8445] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1046.453003][T14280] usb 3-1: 0:2 : does not exist [ 1046.482211][ T8445] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1046.497017][T14280] usb 3-1: USB disconnect, device number 9 [ 1046.512293][ T8445] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1046.535204][ T8445] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1046.618119][ T8445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.780242][ T8445] usb 2-1: config 0 descriptor?? [ 1046.789162][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1046.829588][T17937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1046.880101][T17937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1046.937751][ T8445] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1047.291746][ T30] audit: type=1800 audit(1754887787.026:3184): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3225" name="file1" dev="tmpfs" ino=330 res=0 errno=0 [ 1047.317017][ T5952] usb 2-1: USB disconnect, device number 25 [ 1047.326054][ T5952] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1047.720998][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3231'. [ 1047.743271][T17960] ipvlan0: entered promiscuous mode [ 1048.132295][ T8445] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1048.352491][T14280] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 1048.374068][ T8445] usb 4-1: config 0 has no interfaces? [ 1048.391414][ T8445] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.410675][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1048.423557][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1048.480874][ T8445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.492250][ T8445] usb 4-1: Product: syz [ 1048.496529][ T8445] usb 4-1: Manufacturer: syz [ 1048.513219][ T8445] usb 4-1: SerialNumber: syz [ 1048.524498][T14280] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1048.537127][ T8445] usb 4-1: config 0 descriptor?? [ 1048.546960][T14280] usb 3-1: config 0 has no interface number 0 [ 1048.562846][T14280] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 1048.588190][T14280] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1048.600314][T14280] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 1048.616712][T14280] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1048.636277][T14280] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 1048.650736][T14280] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1048.676775][T14280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.687705][T14280] usb 3-1: config 0 descriptor?? [ 1048.708265][T17969] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1048.786216][T17964] tls_set_device_offload_rx: netdev not found [ 1048.795068][T14280] hub 3-1:0.3: bad descriptor, ignoring hub [ 1048.810301][T14280] hub 3-1:0.3: probe with driver hub failed with error -5 [ 1048.864254][T14280] sierra 3-1:0.3: Sierra USB modem converter detected [ 1049.056431][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.067267][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.084557][T17984] netlink: 'syz.2.3233': attribute type 1 has an invalid length. [ 1049.109775][T17984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.172879][T17988] bond1: (slave gretap1): making interface the new active one [ 1049.201022][T17988] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1049.422395][ T893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1049.573266][ T893] usb 2-1: Using ep0 maxpacket: 16 [ 1049.615263][ T893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.656012][ T893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.668842][ T893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1049.687150][ T893] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1049.724686][ T893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.745022][ T893] usb 2-1: config 0 descriptor?? [ 1050.178769][ T893] microsoft 0003:045E:07DA.0018: item fetching failed at offset 11/34 [ 1050.190535][ T893] microsoft 0003:045E:07DA.0018: parse failed [ 1050.197150][ T893] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 1050.571146][ T893] usb 2-1: USB disconnect, device number 26 [ 1050.830320][ T8448] usb 4-1: USB disconnect, device number 127 [ 1051.144089][T18003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.266634][T14280] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1051.381159][T14280] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 1051.529075][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1051.653763][T14280] usb 3-1: USB disconnect, device number 10 [ 1052.219159][T14280] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1052.283037][T14280] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1052.312584][T14280] sierra 3-1:0.3: device disconnected [ 1052.485303][T18015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.759327][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1054.667550][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.674862][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.492339][T14280] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1055.671874][T14280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.729860][T14280] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1055.729903][T14280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.735243][T14280] usb 5-1: config 0 descriptor?? [ 1056.149731][T14280] uclogic 0003:145F:0212.0019: interface is invalid, ignoring [ 1056.210494][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 1056.349072][T14280] usb 5-1: USB disconnect, device number 109 [ 1056.466445][T18092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.731517][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 1057.020937][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1057.671310][T18118] sctp: [Deprecated]: syz.4.3273 (pid 18118) Use of int in maxseg socket option. [ 1057.671310][T18118] Use struct sctp_assoc_value instead [ 1057.838832][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1057.931989][T18121] bond0: entered promiscuous mode [ 1057.959855][T18121] bond_slave_0: entered promiscuous mode [ 1057.987095][T18121] bond_slave_1: entered promiscuous mode [ 1058.056401][T18121] bond0: left promiscuous mode [ 1058.073603][T18121] bond_slave_0: left promiscuous mode [ 1058.081493][T18121] bond_slave_1: left promiscuous mode [ 1058.213647][T18125] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1058.458563][T18134] netlink: 'syz.1.3282': attribute type 3 has an invalid length. [ 1058.472022][ T893] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1058.503576][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 1058.514808][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3280'. [ 1058.530661][ T893] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1058.645228][T18140] netlink: 'syz.0.3279': attribute type 2 has an invalid length. [ 1061.456794][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1061.885905][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.134491][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3292'. [ 1062.200487][T18171] fuse: Bad value for 'fd' [ 1062.238135][T18173] bond0: entered promiscuous mode [ 1062.244445][T18173] bond_slave_0: entered promiscuous mode [ 1062.251086][T18173] bond_slave_1: entered promiscuous mode [ 1062.267173][T18173] bond0: left promiscuous mode [ 1062.275057][T18173] bond_slave_0: left promiscuous mode [ 1062.275231][T18177] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1062.280836][T18173] bond_slave_1: left promiscuous mode [ 1062.742578][ T8448] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1062.823784][T18187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1062.926960][T18199] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 18199 comm: syz.3.3298) [ 1062.982706][ T30] audit: type=1800 audit(1754887802.706:3185): pid=18199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3298" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=81691 res=0 errno=0 [ 1063.015344][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.032283][ T8448] usb 5-1: device descriptor read/64, error -71 [ 1063.336291][T16293] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1063.493179][ T8448] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1063.600343][T16293] usb 3-1: Using ep0 maxpacket: 8 [ 1063.642557][ T8448] usb 5-1: device descriptor read/64, error -71 [ 1063.650409][T16293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.669462][T16293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.701648][T16293] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.722281][T16293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.767024][T16293] usb 3-1: Product: syz [ 1063.773534][T16293] usb 3-1: Manufacturer: syz [ 1063.778387][T16293] usb 3-1: SerialNumber: syz [ 1063.798009][ T8448] usb usb5-port1: attempt power cycle [ 1064.079995][T16293] usb 3-1: 0:2 : does not exist [ 1064.148517][T16293] usb 3-1: USB disconnect, device number 11 [ 1064.162396][ T8448] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1064.184257][ T8448] usb 5-1: device descriptor read/8, error -71 [ 1064.215285][T13202] udevd[13202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.423064][ T8448] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1064.453315][ T8448] usb 5-1: device descriptor read/8, error -71 [ 1064.563287][ T8448] usb usb5-port1: unable to enumerate USB device [ 1064.795722][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1065.449598][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3305'. [ 1065.493707][T18223] bond0: entered promiscuous mode [ 1065.501525][T18223] bond_slave_0: entered promiscuous mode [ 1065.507792][T18223] bond_slave_1: entered promiscuous mode [ 1065.554241][T18223] bond0: left promiscuous mode [ 1065.575486][T18223] bond_slave_0: left promiscuous mode [ 1065.581509][T18223] bond_slave_1: left promiscuous mode [ 1065.818804][T18228] program syz.2.3307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1066.340740][T18240] sctp: [Deprecated]: syz.4.3310 (pid 18240) Use of int in maxseg socket option. [ 1066.340740][T18240] Use struct sctp_assoc_value instead [ 1066.360939][T18241] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 18241 comm: syz.2.3309) [ 1066.411152][ T30] audit: type=1800 audit(1754887806.166:3186): pid=18241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3309" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=73717 res=0 errno=0 [ 1066.443547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.742900][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1066.762624][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3311'. [ 1068.785433][T18263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.833666][T18268] fuse: Unknown parameter 'grou00000000000000000000' [ 1069.152409][T16293] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1069.322278][T16293] usb 4-1: Using ep0 maxpacket: 32 [ 1069.331088][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1069.352020][T16293] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1069.362039][T16293] usb 4-1: config 0 has no interface number 0 [ 1069.379915][T16293] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1069.400258][T16293] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1069.419806][T16293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.440090][T16293] usb 4-1: Product: syz [ 1069.448763][T16293] usb 4-1: Manufacturer: syz [ 1069.456424][T16293] usb 4-1: SerialNumber: syz [ 1069.475602][T16293] usb 4-1: config 0 descriptor?? [ 1069.484835][T16293] smsc75xx v1.0.0 [ 1069.592496][T14280] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1069.762868][T14280] usb 5-1: Using ep0 maxpacket: 16 [ 1069.802521][T14280] usb 5-1: config 132 has an invalid interface number: 4 but max is 0 [ 1069.834461][T14280] usb 5-1: config 132 has no interface number 0 [ 1069.861283][T14280] usb 5-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 1069.902279][T14280] usb 5-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 431 [ 1069.933376][T14280] usb 5-1: config 132 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 241, changing to 11 [ 1069.975565][T14280] usb 5-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 1069.993272][T14280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.017434][T14280] usb 5-1: Product: syz [ 1070.035476][T14280] usb 5-1: Manufacturer: syz [ 1070.046968][T14280] usb 5-1: SerialNumber: syz [ 1070.077674][T18280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1070.109265][T18280] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1070.303693][ T8448] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1070.306419][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1070.344934][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1070.362595][T14280] usb 5-1: USB disconnect, device number 114 [ 1070.372918][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1070.398323][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1070.422254][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1070.458946][T16293] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1070.474980][ T8448] usb 2-1: Using ep0 maxpacket: 32 [ 1070.484452][ T8448] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1070.497458][ T8448] usb 2-1: config 0 has no interface number 0 [ 1070.506131][T18296] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 18296 comm: syz.2.3324) [ 1070.528701][ T30] audit: type=1800 audit(1754887810.286:3187): pid=18296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3324" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=73717 res=0 errno=0 [ 1070.531418][T16293] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1070.560896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.571872][ T8448] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1070.618633][ T8448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.657489][ T8448] usb 2-1: Product: syz [ 1070.660111][T16293] usb 4-1: USB disconnect, device number 2 [ 1070.669409][ T8448] usb 2-1: Manufacturer: syz [ 1070.681195][ T8448] usb 2-1: SerialNumber: syz [ 1070.702982][ T8448] usb 2-1: config 0 descriptor?? [ 1070.748317][ T8448] hub 2-1:0.89: bad descriptor, ignoring hub [ 1070.767130][ T8448] hub 2-1:0.89: probe with driver hub failed with error -5 [ 1070.798782][ T8448] option 2-1:0.89: GSM modem (1-port) converter detected [ 1070.831629][ T8448] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1070.951367][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.972605][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.128040][ T8448] usb 2-1: USB disconnect, device number 27 [ 1071.163794][ T8448] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1071.204987][ T8448] option 2-1:0.89: device disconnected [ 1071.353006][T18310] fuse: Unknown parameter 'grou00000000000000000000' [ 1073.478996][T18313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1076.696377][T18339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.592157][ C1] sched: DL replenish lagged too much [ 1098.422228][T16037] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.742788][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.749170][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1231.872089][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1231.879173][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P18351/1:b..l P18329/1:b..l [ 1231.889808][ C1] rcu: (detected by 1, t=10502 jiffies, g=125125, q=990477 ncpus=2) [ 1231.897969][ C1] task:syz.0.3332 state:R running task stack:25000 pid:18329 tgid:18324 ppid:17514 task_flags:0x400040 flags:0x00004006 [ 1231.912723][ C1] Call Trace: [ 1231.916017][ C1] [ 1231.918958][ C1] __schedule+0x1798/0x4cc0 [ 1231.923565][ C1] ? __pfx___schedule+0x10/0x10 [ 1231.928520][ C1] ? __lock_acquire+0xab9/0xd20 [ 1231.933411][ C1] ? page_table_check_set+0x18d/0x730 [ 1231.938816][ C1] ? preempt_schedule+0xae/0xc0 [ 1231.943717][ C1] preempt_schedule_common+0x83/0xd0 [ 1231.949034][ C1] preempt_schedule+0xae/0xc0 [ 1231.953824][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1231.959224][ C1] ? page_table_check_set+0x18d/0x730 [ 1231.964619][ C1] preempt_schedule_thunk+0x16/0x30 [ 1231.969846][ C1] _raw_spin_unlock+0x3f/0x50 [ 1231.974537][ C1] __handle_mm_fault+0x3a6c/0x5440 [ 1231.979702][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1231.985180][ C1] ? find_vma+0xe7/0x160 [ 1231.989533][ C1] ? __pfx_find_vma+0x10/0x10 [ 1231.994238][ C1] handle_mm_fault+0x40a/0x8e0 [ 1231.999188][ C1] do_user_addr_fault+0x764/0x1390 [ 1232.004490][ C1] exc_page_fault+0x76/0xf0 [ 1232.009086][ C1] asm_exc_page_fault+0x26/0x30 [ 1232.013955][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1232.019787][ C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1232.039419][ C1] RSP: 0018:ffffc9000ae57a18 EFLAGS: 00050206 [ 1232.045529][ C1] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 1232.053600][ C1] RDX: 0000000000000001 RSI: 00002000002fc000 RDI: ffffc9000ae57aa0 [ 1232.061958][ C1] RBP: ffffc9000ae57c30 R08: ffffc9000ae57ad7 R09: 1ffff920015caf5a [ 1232.069949][ C1] R10: dffffc0000000000 R11: fffff520015caf5b R12: 0000000000000002 [ 1232.078130][ C1] R13: dffffc0000000000 R14: ffffc9000ae57aa0 R15: 00002000002fc000 [ 1232.086227][ C1] _copy_from_user+0x7a/0xb0 [ 1232.090845][ C1] ___sys_recvmsg+0x12e/0x510 [ 1232.095612][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1232.100907][ C1] ? __might_fault+0xb0/0x130 [ 1232.105595][ C1] do_recvmmsg+0x307/0x770 [ 1232.110032][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1232.115357][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1232.120742][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1232.126038][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 1232.131091][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1232.136675][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1232.141381][ C1] do_syscall_64+0xfa/0x3b0 [ 1232.145893][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.151108][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.157187][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1232.161869][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.167856][ C1] RIP: 0033:0x7f163a58ebe9 [ 1232.172405][ C1] RSP: 002b:00007f163b41d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1232.180831][ C1] RAX: ffffffffffffffda RBX: 00007f163a7b6090 RCX: 00007f163a58ebe9 [ 1232.188889][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1232.197143][ C1] RBP: 00007f163a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1232.205117][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1232.213269][ C1] R13: 00007f163a7b6128 R14: 00007f163a7b6090 R15: 00007f163a8dfa28 [ 1232.221249][ C1] [ 1232.224266][ C1] task:syz-executor state:R running task stack:24104 pid:18351 tgid:18351 ppid:5851 task_flags:0x400000 flags:0x00004000 [ 1232.237760][ C1] Call Trace: [ 1232.241158][ C1] [ 1232.244197][ C1] __schedule+0x1798/0x4cc0 [ 1232.248762][ C1] ? __pfx___schedule+0x10/0x10 [ 1232.253619][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1232.258818][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 1232.264103][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1232.269247][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1232.274826][ C1] preempt_schedule_irq+0xb5/0x150 [ 1232.280168][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1232.286106][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1232.292034][ C1] irqentry_exit+0x6f/0x90 [ 1232.296509][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1232.302652][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 1232.307995][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1232.327956][ C1] RSP: 0018:ffffc9000b5771c0 EFLAGS: 00000206 [ 1232.334029][ C1] RAX: 700b2d1bc3dbf400 RBX: 0000000000000000 RCX: 700b2d1bc3dbf400 [ 1232.341994][ C1] RDX: 0000000000000000 RSI: ffffffff8dba5f85 RDI: ffffffff8be33300 [ 1232.349961][ C1] RBP: ffffffff822c77ee R08: 0000000000000000 R09: ffffffff822c77ee [ 1232.358101][ C1] R10: 0000000000000010 R11: ffffffff81ac3890 R12: 0000000000000002 [ 1232.366066][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000246 [ 1232.374041][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.380391][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1232.386568][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.392838][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 1232.398130][ C1] ? __put_partials+0x156/0x1a0 [ 1232.402980][ C1] ? __slab_free+0x2d5/0x3c0 [ 1232.407577][ C1] ? qlist_free_all+0x97/0x140 [ 1232.412352][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1232.417983][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 1232.422766][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.429120][ C1] __update_page_owner_free_handle+0x4b/0x470 [ 1232.435275][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.441644][ C1] ? page_ext_put+0x97/0xc0 [ 1232.446234][ C1] __reset_page_owner+0x85/0x1f0 [ 1232.451349][ C1] __free_frozen_pages+0xbc4/0xd30 [ 1232.456470][ C1] __put_partials+0x156/0x1a0 [ 1232.461144][ C1] put_cpu_partial+0x17c/0x250 [ 1232.465899][ C1] ? put_cpu_partial+0x6d/0x250 [ 1232.470747][ C1] __slab_free+0x2d5/0x3c0 [ 1232.475173][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1232.481261][ C1] ? __phys_addr+0xd3/0x180 [ 1232.485772][ C1] qlist_free_all+0x97/0x140 [ 1232.490366][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1232.495821][ C1] __kasan_kmalloc+0x22/0xb0 [ 1232.500416][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 1232.505280][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1232.511081][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1232.516639][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1232.522542][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1232.528695][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1232.535200][ C1] ? __lock_acquire+0xab9/0xd20 [ 1232.540072][ C1] ? mnt_get_write_access+0x68/0x2a0 [ 1232.545438][ C1] ? tomoyo_file_open+0x165/0x220 [ 1232.550457][ C1] security_file_open+0xb1/0x270 [ 1232.555392][ C1] do_dentry_open+0x384/0x13f0 [ 1232.560166][ C1] ? vfs_open+0x31/0x340 [ 1232.564500][ C1] vfs_open+0x3b/0x340 [ 1232.568571][ C1] ? path_openat+0x2ecd/0x3830 [ 1232.573594][ C1] path_openat+0x2ee5/0x3830 [ 1232.578202][ C1] ? arch_stack_walk+0xfc/0x150 [ 1232.583255][ C1] ? stack_depot_save_flags+0x40/0x860 [ 1232.588730][ C1] ? __pfx_path_openat+0x10/0x10 [ 1232.593753][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.599911][ C1] do_filp_open+0x1fa/0x410 [ 1232.604427][ C1] ? __lock_acquire+0xab9/0xd20 [ 1232.609366][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1232.614492][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1232.619423][ C1] ? alloc_fd+0x64c/0x6c0 [ 1232.623756][ C1] do_sys_openat2+0x121/0x1c0 [ 1232.628516][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1232.633742][ C1] ? rcu_is_watching+0x15/0xb0 [ 1232.638604][ C1] __x64_sys_openat+0x138/0x170 [ 1232.643466][ C1] do_syscall_64+0xfa/0x3b0 [ 1232.647976][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.653174][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.659234][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1232.663996][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.669889][ C1] RIP: 0033:0x7efff598d4d1 [ 1232.674297][ C1] RSP: 002b:00007ffc4b5db610 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1232.682720][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efff598d4d1 [ 1232.690692][ C1] RDX: 0000000000000002 RSI: 00007efff5a11e93 RDI: 00000000ffffff9c [ 1232.698814][ C1] RBP: 00007efff5a11e93 R08: 00000000000000d9 R09: 0000000000000000 [ 1232.706799][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1232.714770][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1232.722749][ C1] [ 1232.725764][ C1] task:kthreadd state:R running task stack:25576 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 1232.739230][ C1] Call Trace: [ 1232.742504][ C1] [ 1232.745442][ C1] __schedule+0x1798/0x4cc0 [ 1232.749957][ C1] ? __pfx___schedule+0x10/0x10 [ 1232.754812][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1232.759931][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 1232.765210][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1232.770317][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1232.775604][ C1] preempt_schedule_irq+0xb5/0x150 [ 1232.780732][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1232.786463][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1232.792473][ C1] irqentry_exit+0x6f/0x90 [ 1232.796901][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1232.802878][ C1] RIP: 0010:lock_acquire+0xd5/0x360 [ 1232.808078][ C1] Code: 8b 04 25 08 40 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 74 24 10 4d 89 fe <4c> 8b 7c 24 30 fa 48 c7 c7 cc a8 9c 8d e8 d9 f6 db 09 65 ff 05 82 [ 1232.827778][ C1] RSP: 0018:ffffc900000774c8 EFLAGS: 00000246 [ 1232.833858][ C1] RAX: ffff88801ce89e00 RBX: 0000000000000000 RCX: d2f9d8f093a47200 [ 1232.841908][ C1] RDX: 0000000000000000 RSI: ffffffff822c780b RDI: 1ffffffff1c273dc [ 1232.849929][ C1] RBP: ffffffff822c77ee R08: 0000000000000000 R09: 0000000000000000 [ 1232.857918][ C1] R10: 000000000000000f R11: ffffffff81ac3890 R12: 0000000000000002 [ 1232.865892][ C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000 [ 1232.873935][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.880280][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1232.886452][ C1] ? __update_page_owner_free_handle+0x4b/0x470 [ 1232.892709][ C1] ? __pfx_save_stack+0x10/0x10 [ 1232.897565][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 1232.902964][ C1] ? __put_partials+0x156/0x1a0 [ 1232.908180][ C1] ? put_cpu_partial+0x17c/0x250 [ 1232.913106][ C1] ? qlist_free_all+0x97/0x140 [ 1232.917860][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1232.923495][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 1232.928256][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 1232.933452][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.939784][ C1] __update_page_owner_free_handle+0x4b/0x470 [ 1232.945934][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 1232.952180][ C1] __reset_page_owner+0x85/0x1f0 [ 1232.957128][ C1] __free_frozen_pages+0xbc4/0xd30 [ 1232.962245][ C1] __put_partials+0x156/0x1a0 [ 1232.966914][ C1] put_cpu_partial+0x17c/0x250 [ 1232.971775][ C1] ? put_cpu_partial+0x6d/0x250 [ 1232.976661][ C1] __slab_free+0x2d5/0x3c0 [ 1232.981100][ C1] ? __phys_addr+0xd3/0x180 [ 1232.985624][ C1] qlist_free_all+0x97/0x140 [ 1232.990413][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1232.995889][ C1] __kasan_kmalloc+0x22/0xb0 [ 1233.000678][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 1233.005537][ C1] ? security_task_alloc+0x4d/0x360 [ 1233.010792][ C1] security_task_alloc+0x4d/0x360 [ 1233.015854][ C1] copy_process+0x1530/0x3c00 [ 1233.020574][ C1] ? copy_process+0x97f/0x3c00 [ 1233.025391][ C1] ? __pfx_copy_process+0x10/0x10 [ 1233.030697][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.035369][ C1] kernel_clone+0x21e/0x840 [ 1233.039921][ C1] ? rcu_is_watching+0x15/0xb0 [ 1233.044698][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1233.049742][ C1] ? __schedule+0x17ae/0x4cc0 [ 1233.054424][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.059009][ C1] kernel_thread+0x10c/0x160 [ 1233.063705][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 1233.068809][ C1] ? __lock_acquire+0xab9/0xd20 [ 1233.073661][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.078263][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1233.083461][ C1] kthreadd+0x575/0x770 [ 1233.087612][ C1] ? kthreadd+0x30b/0x770 [ 1233.091937][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1233.096608][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1233.101821][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1233.107012][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1233.111804][ C1] ret_from_fork+0x3f9/0x770 [ 1233.116415][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.121626][ C1] ? __switch_to_asm+0x39/0x70 [ 1233.126483][ C1] ? __switch_to_asm+0x33/0x70 [ 1233.131254][ C1] ? __pfx_kthreadd+0x10/0x10 [ 1233.135941][ C1] ret_from_fork_asm+0x1a/0x30 [ 1233.140809][ C1] [ 1233.143824][ C1] rcu: rcu_preempt kthread starved for 10461 jiffies! g125125 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1233.155106][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1233.165299][ C1] rcu: RCU grace-period kthread stack dump: [ 1233.171214][ C1] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1233.184696][ C1] Call Trace: [ 1233.187995][ C1] [ 1233.190926][ C1] __schedule+0x1798/0x4cc0 [ 1233.195537][ C1] ? __lock_acquire+0xab9/0xd20 [ 1233.200496][ C1] ? __pfx___schedule+0x10/0x10 [ 1233.205395][ C1] ? schedule+0x91/0x360 [ 1233.209664][ C1] schedule+0x165/0x360 [ 1233.213822][ C1] schedule_timeout+0x12b/0x270 [ 1233.218676][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1233.224136][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1233.230130][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1233.235417][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1233.240964][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1233.245816][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1233.252074][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1233.257430][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1233.262639][ C1] rcu_gp_kthread+0x99/0x390 [ 1233.267246][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1233.272543][ C1] ? __kthread_parkme+0x7b/0x200 [ 1233.277597][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1233.282652][ C1] kthread+0x70e/0x8a0 [ 1233.286751][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1233.291982][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.296593][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1233.301792][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1233.306993][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.311663][ C1] ret_from_fork+0x3f9/0x770 [ 1233.316465][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1233.321604][ C1] ? __switch_to_asm+0x39/0x70 [ 1233.326567][ C1] ? __switch_to_asm+0x33/0x70 [ 1233.331364][ C1] ? __pfx_kthread+0x10/0x10 [ 1233.335973][ C1] ret_from_fork_asm+0x1a/0x30 [ 1233.340768][ C1] [ 1233.343806][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1233.350128][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1233.355346][ C0] NMI backtrace for cpu 0 [ 1233.355363][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1233.355381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1233.355391][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1233.355418][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1233.355433][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1233.355449][ C0] RAX: 6ef73531472bea00 RBX: ffffffff81968308 RCX: 6ef73531472bea00 [ 1233.355462][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b6d3c RDI: ffffffff8be33300 [ 1233.355473][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 1233.355485][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa37e30 [ 1233.355497][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 1233.355508][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1233.355521][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.355533][ C0] CR2: 00002000002fc000 CR3: 0000000067fa0000 CR4: 00000000003526f0 [ 1233.355550][ C0] DR0: 0000000000000000 DR1: 0000000006490301 DR2: 0000000000000000 [ 1233.355569][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1233.355579][ C0] Call Trace: [ 1233.355587][ C0] [ 1233.355594][ C0] default_idle+0x13/0x20 [ 1233.355617][ C0] default_idle_call+0x74/0xb0 [ 1233.355631][ C0] do_idle+0x1e8/0x510 [ 1233.355649][ C0] ? __pfx_do_idle+0x10/0x10 [ 1233.355671][ C0] cpu_startup_entry+0x44/0x60 [ 1233.355686][ C0] rest_init+0x2de/0x300 [ 1233.355702][ C0] start_kernel+0x3a9/0x410 [ 1233.355721][ C0] x86_64_start_reservations+0x24/0x30 [ 1233.355741][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1233.355761][ C0] common_startup_64+0x13e/0x147 [ 1233.355787][ C0] [ 1233.572790][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.579246][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.080712][T16086] Bluetooth: hci0: command 0x0406 tx timeout [ 1241.003589][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.009953][ T1302] ieee802154 phy1 wpan1: encryption failed: -22