last executing test programs: 23.417854866s ago: executing program 3 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={&(0x7f0000000380)=[0x3, 0xe, 0x6, 0x6, 0x5, 0x7ff, 0x4a4564f4, 0x6, 0x8, 0x6920, 0x8, 0x2, 0x9, 0x10, 0x5, 0x7, 0x5, 0xffffffff, 0x7f, 0x4, 0x4, 0x7, 0x0, 0x9, 0x8000, 0x7fff, 0x1, 0x9, 0x3, 0x7, 0xd, 0x10, 0xfffffbff, 0x200, 0xfffffff7, 0x5, 0x8, 0xff, 0x8, 0x4, 0xc, 0xff, 0x8, 0x80, 0x9, 0x8, 0x1, 0x3ff, 0x40, 0x9, 0x1a5, 0x5, 0x6, 0x5, 0x8, 0x4, 0x40, 0xc12168d1, 0x6, 0x1ff, 0x0, 0xffff, 0x1, 0xe917, 0x85, 0x5, 0x0, 0x10001, 0xb6e, 0xa438, 0xffff8000, 0x1, 0x0, 0x9, 0x1ff, 0x9, 0x1, 0x5, 0x8, 0x6, 0x4, 0x8, 0x4, 0xb6, 0x8, 0xc74e, 0xf40, 0x4, 0x3, 0x8, 0x5, 0x5, 0x7fffffff, 0xffffff68, 0x2, 0x3, 0x0, 0xd00, 0x9, 0xa, 0x0, 0x0, 0x80, 0x1, 0x3, 0x8000, 0x9, 0x5, 0xe8, 0x3, 0xe, 0x0, 0x7, 0x4, 0x101, 0x1, 0x0, 0x5, 0x9, 0x3, 0xfffffffa, 0x0, 0x4, 0x7, 0x3, 0x0, 0x400, 0x0, 0x4, 0xfffff801, 0x6, 0xf4ed, 0x7, 0x2, 0x2, 0x2, 0x7fff, 0xff, 0x5, 0x7, 0x400, 0x0, 0x42e, 0xfffff000, 0x80, 0x5f, 0x1, 0x7fff, 0xe, 0x5, 0xc, 0x0, 0x0, 0x9, 0x40, 0x470, 0x0, 0x80, 0x4, 0x7, 0x2, 0x6, 0xfffffff9, 0x0, 0x4, 0x80000000, 0x1, 0x1, 0x4, 0x0, 0x4, 0x3b01, 0x4, 0x2, 0x5, 0x7, 0xfffffff9, 0x261c, 0x7, 0x8, 0x2, 0x40000000, 0xe, 0x3, 0x0, 0x7, 0x7f9, 0x9, 0x3, 0x9, 0xe6, 0x0, 0xffff, 0x8, 0x0, 0x2, 0x8, 0x2, 0x8, 0xfa5, 0xd, 0x4, 0x8, 0x1, 0x9, 0x62b, 0x4, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9a, 0x8001, 0x6, 0xc, 0xaaf, 0x10000, 0x4, 0x7, 0x2, 0x1000, 0x8, 0x401, 0x5, 0x3, 0x40, 0x2, 0x10000, 0xfea, 0x6, 0x3e, 0x2, 0xff, 0x5, 0x0, 0x6, 0x373, 0x9, 0x4, 0x6, 0x2, 0x7fffffff, 0x2000, 0x9, 0x10001, 0xffffd396, 0x0, 0x3, 0xfff, 0x4, 0x9, 0x9, 0x3, 0xc, 0x5, 0xdd05, 0x81, 0x5, 0xa, 0x9, 0x4, 0xff, 0x7, 0x5, 0xfffffff2, 0x10000, 0x8, 0xa62, 0x2, 0xa5c7, 0x6, 0x8e0000, 0x57, 0x80000001, 0x2, 0x1, 0x37577f6c, 0x2, 0x4, 0x200, 0x9, 0x1, 0x10000, 0xe5, 0x5, 0x5, 0x1, 0xfb480000, 0x6, 0xffffffff, 0x5, 0x9, 0x7c8571a3, 0x6, 0x4, 0x15e, 0x8001, 0xffff, 0x2, 0x805, 0x80000000, 0x1212, 0x5, 0x3, 0x0, 0x1ff, 0x7, 0xfff, 0xc, 0x8, 0x7, 0x8, 0x8, 0xfff, 0x0, 0x1ee, 0x6, 0x363, 0x42, 0x10000, 0x4, 0x1, 0x0, 0x9, 0x94cf, 0xffffffff, 0x7fffffff, 0x7, 0x1, 0x2c, 0x3, 0x8, 0x32, 0xffffffff, 0x1, 0xf0, 0x200, 0x4, 0x6, 0x2, 0x7, 0xceb, 0x9, 0x4, 0x0, 0x800, 0x4, 0x2, 0x4, 0xc0, 0x4, 0x3, 0x2, 0x201a, 0x9, 0x0, 0x4, 0x2, 0x6, 0xffffffff, 0x1, 0x4, 0xff, 0xff, 0x6, 0x1, 0xe, 0x6, 0x101, 0x2000, 0x4, 0x0, 0x2, 0x8, 0x2, 0xa, 0x7, 0x1, 0x4, 0x20b5, 0x8, 0x7, 0x6, 0x2, 0x100, 0x1, 0x7, 0x5, 0x80, 0x940d, 0x9, 0x5, 0x7, 0x400, 0x1, 0x3, 0x8c48, 0x75, 0x14000, 0x7, 0x5, 0x0, 0x200, 0x0, 0x9, 0x2, 0x9, 0x5, 0x3c, 0x7, 0x98c, 0x3, 0x0, 0x7, 0x4, 0x1, 0x1000, 0x3, 0x2, 0x3, 0x4, 0x1, 0x4, 0xe7, 0x2, 0x3, 0x4, 0x5, 0x6, 0xe23, 0x2, 0x100, 0x3, 0x6, 0x7fffffff, 0x6, 0x2, 0x9, 0x9, 0x7ff, 0x3, 0xa618, 0x7, 0x5, 0x9, 0x5, 0x10000, 0xb, 0xff, 0xc, 0x2f3, 0x6, 0x8, 0x5, 0x2, 0xfffffffe, 0xffffffff, 0x7, 0x2, 0x6, 0x10001, 0x8, 0x0, 0x887, 0x10000, 0x5, 0x8000, 0x8, 0x81, 0x2, 0x4, 0xd, 0x1, 0x2, 0x0, 0x800000, 0xf, 0x7, 0x1ff, 0x7, 0x7, 0x2ef5, 0x5, 0xb0, 0x1, 0x5fa, 0x4, 0x2, 0x5, 0x10, 0x2, 0x1, 0x7ff, 0x3, 0x365, 0x8, 0x9, 0x9bd, 0xfff, 0xfffffc01, 0x1, 0x3, 0xeda, 0xbdb, 0x4b9, 0x7, 0x5, 0x9, 0x8, 0x7, 0x8000, 0x4, 0x8001, 0x81, 0x2, 0xf36, 0x77, 0x80000, 0x100, 0xec3d, 0x0, 0x10, 0xe6, 0x7ff, 0x8001, 0x8, 0xadc9, 0x0, 0x10001, 0x0, 0x4, 0x2, 0x4, 0x3, 0x5, 0x6, 0x3, 0x1000, 0x10001, 0x3638000, 0x49, 0x8, 0x26b75e0, 0x97, 0x10001, 0x7, 0x6a, 0x6000000, 0x4, 0x6, 0x1, 0x60c, 0xe6c, 0x8, 0x7f, 0x7fffffff, 0x1, 0x6, 0x4, 0x9, 0xd2e5, 0x5, 0x800, 0x903, 0xf, 0x3, 0x5512d90e, 0x40, 0xffff0000, 0xffffffff, 0x4, 0x1, 0x0, 0x7, 0x1f, 0x90, 0x9c, 0x0, 0x3, 0x345adf17, 0x2, 0x9, 0x6, 0xffffff3c, 0x5, 0x7, 0x8, 0x80000000, 0x80000001, 0xfe, 0x9, 0x4, 0x0, 0x38b0, 0xf29c, 0x10, 0x7, 0x7, 0xa, 0x89, 0x6, 0x2, 0x4, 0x2, 0x0, 0xce, 0x10, 0xcb1d, 0xdee, 0x6f, 0x10000, 0xfffffffe, 0xdb, 0x8f, 0x3, 0x17, 0x3, 0xffffff01, 0xac2, 0x6, 0x380d, 0x4, 0x40ef, 0x4, 0x7028, 0x2, 0x3, 0xfffffffb, 0x2, 0x1, 0x0, 0xd, 0x0, 0x2, 0x2, 0x5, 0x3, 0xffffffff, 0x80000001, 0x800, 0x4, 0x0, 0x6, 0x7, 0xe3, 0x6, 0x9, 0x81, 0x3f4, 0x9, 0x4, 0x5, 0x0, 0xd41, 0x9, 0x200, 0x3, 0x7ff, 0x9, 0xed, 0x2, 0x4b, 0x2000000, 0x0, 0x2f3, 0x1, 0x6, 0x9, 0x4, 0xb, 0x81, 0xc5eb, 0x8, 0x0, 0x101, 0x2400000, 0x3b5f, 0x10001, 0x5, 0x0, 0x7, 0x5, 0x80000001, 0x6, 0x2, 0x7, 0x5, 0x80, 0x3f1, 0x5, 0x5, 0xe, 0x101, 0xd, 0x3, 0x3121, 0x8, 0x101, 0x5762, 0xe, 0x2, 0x0, 0x5, 0x1, 0x400, 0x1af8, 0x0, 0x9, 0x7, 0x7fffffff, 0xfffffffd, 0x4, 0x10, 0xd, 0xffff0000, 0x9, 0x343, 0x3, 0xfffff6ba, 0xa, 0x3, 0x1, 0x0, 0x5, 0x401, 0x3, 0x3, 0x3e84, 0x1, 0x41b, 0x0, 0x5, 0x7, 0x5, 0x80000000, 0x8, 0x7, 0x7, 0xffffffa5, 0x40, 0x10, 0x2, 0x401, 0x2, 0xef, 0x767, 0x80000001, 0x4, 0x6, 0x1, 0x0, 0x1ff, 0x1, 0x8, 0x9bb1, 0x50000, 0x9, 0x3, 0xe6, 0x2, 0x7, 0xe, 0x80000000, 0x9, 0xa2, 0x338d, 0x8f7, 0x7, 0x40bf9879, 0x1, 0x0, 0x1, 0x3, 0xd, 0x0, 0xffff, 0x6, 0x6, 0x40, 0x2, 0x3, 0x2, 0x4, 0x1000, 0x9, 0x2, 0xe, 0xfffffff7, 0x2, 0x5, 0x1, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4, 0x4, 0x4, 0x7fffffff, 0x8, 0x8, 0x10000, 0x400, 0x3fa, 0x5d, 0x1ff, 0x0, 0x1, 0x9, 0x1, 0xb2, 0x3893, 0x40, 0x7, 0x58dc, 0x6, 0x1, 0x10, 0x0, 0x9, 0x1, 0x9, 0x5, 0x5, 0x5, 0x1bb, 0x1e, 0xb1ae, 0x5, 0x9, 0x7fffffff, 0x7f, 0x5, 0x100, 0x3, 0x5, 0x80, 0xb6, 0x7, 0x2, 0x6, 0x1, 0x8, 0xee, 0x3, 0x1, 0x2800000, 0x6, 0x4, 0x7, 0x6, 0x4, 0x62, 0x7f, 0xfffffff6, 0x8946, 0x1, 0x1000, 0x0, 0x7, 0x9, 0x5, 0x7f, 0x7, 0x9, 0x9, 0x1, 0x7fff, 0x664, 0x6, 0x8, 0x1, 0x9, 0xfffffe01, 0x7, 0x0, 0xde, 0xfffff001, 0x8, 0x80000001, 0x0, 0x7, 0x4, 0x2, 0xb1, 0x1f4, 0x800, 0x10001, 0x1000, 0x8, 0x8, 0x1b, 0x7f, 0x1ff, 0xfff, 0xbb0, 0x0, 0x400, 0xb3b, 0xfffffe12, 0xd39d, 0xfff, 0x26, 0x6, 0x3, 0x5, 0xfffffffd, 0xbf1, 0x7, 0x18, 0x4, 0x7, 0x7fff, 0xfffffffe, 0x2, 0x3, 0xcc, 0x1, 0x3, 0x6, 0x2, 0x2, 0x8001, 0x6, 0xfffffffa, 0x80000000, 0x10001, 0x3, 0x5, 0x6, 0xd6, 0x48, 0x9, 0x1, 0x8, 0x7, 0xffffffff, 0x9, 0x8, 0x9, 0x8, 0x4eff, 0x45f, 0x900000, 0x9, 0x1, 0x8, 0x1, 0x3, 0x3ff, 0xef, 0x800, 0x9c7, 0x7ff, 0x10001, 0x7ff, 0x1, 0x5, 0x4, 0x7, 0x6e, 0x4, 0x8, 0xfffffffc, 0x2, 0x6, 0x70000, 0x8, 0x800, 0x8, 0x4, 0xfffffffa, 0x8, 0x7fff, 0xfe, 0x5, 0xc, 0x9, 0x4, 0x1, 0x7, 0x0, 0x4, 0x4, 0x4, 0x7, 0x6, 0x5, 0x9, 0x1, 0x401, 0xfffffffa, 0x3, 0x4, 0x9, 0x8, 0xff, 0x4, 0x8000, 0x6, 0x924e, 0x6, 0x5, 0x5, 0xb, 0x1, 0x0, 0x1, 0x5, 0x5, 0xfffffff7, 0x40, 0x2, 0x3, 0x2, 0x0, 0x6ad, 0x6, 0xff, 0x81, 0x8, 0x5], 0x5, 0x400, 0xb}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 22.4773795s ago: executing program 3 (id=3025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = epoll_create(0x5) epoll_wait(r2, 0x0, 0x0, 0x20400000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000005500e95f25bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01010800ac1414aa00"/24], 0x38}}, 0x4008000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x8041, &(0x7f0000002940)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x400}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@uid_gt}, {@fowner_eq}]}}) 19.867524823s ago: executing program 3 (id=3031): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x1000}}, 0x20}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 19.612033845s ago: executing program 3 (id=3033): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x5017747ba5258c55, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0xa, 0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf2501000000080002800400"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) socket$inet6_tcp(0xa, 0x1, 0x0) 19.203132108s ago: executing program 3 (id=3034): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = epoll_create(0x5) epoll_wait(r2, 0x0, 0x0, 0x20400000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000005500e95f25bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01010800ac1414aa00"/24], 0x38}}, 0x4008000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x8041, &(0x7f0000002940)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x400}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@uid_gt}, {@fowner_eq}]}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0xffff8880b8622f20) unshare(0xa000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) 17.356639921s ago: executing program 3 (id=3036): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000480)=0x4) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/10, 0xa) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r6, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0xe403, r5, 0x5280}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) 13.934103254s ago: executing program 2 (id=3046): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000580)={0x1}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f00000002c0)=""/187, 0xbb}, {0x0}, {0x0}, {&(0x7f0000000240)}, {&(0x7f0000000440)=""/138, 0x8a}], 0x6, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r4, 0x5502) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48000, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000600)="6d128a37d342832b615828f0a008cdeda20b172a6d08b237ece5ce802424beeaad6657005f0a7fe3b2b8d67ca7d0f7f1cca0f49ed4ab65e5be9616e5def9aefe61da9984dcebbe58e7056d0599180218b245daa4ca957506c39ef5730005f6b905b25ebfeb6f4caa1e68f9e003cf5cda004566d4387538b4b7165bb01ce9d41ce85f5514701c6d4dcef807590f0e8154c936b9a0f7b7460cf7f07b4289b1d68f3e712fe0347337f7dd6ab5f064af4eeb4e5611f87fbd7f94d6ea7738ef14b896fdb06ecf5661934f75ef54f81b7c741f97611f946728c21bd8f47bdef2b5fa2f92a747", 0xe3}, {&(0x7f0000000800)="b3df06bc066f7028d4379659fc9c06b6da146d4c10e0e5370ce28f2f666bec4bb28a930ad1411148a7f8e96c7316f5cbf3e819ced87caae18431f882625c871eda7f64b78fead1ed2ed436f0ae0c044c61b7e6638b5a28e1810141660a093472599acc0e74b42800bbc183e788d3e7e4cdc44efff84463d257aab38949f81899704e4ff23cd7822672b3270151269d72a3b42931edc98860124de6303e6d7a023ec5129be835560e2d4dd0fc111b4522b691cf8f2d35064fef36d8a22a652a85c45794ba2501af2b02fcd02a07f8dc1f4c0aee7eae57", 0xd6}, {&(0x7f0000001880)="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", 0x1000}], 0x3, &(0x7f0000002880)="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", 0x1000, 0x880}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) 12.455494668s ago: executing program 2 (id=3050): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000380)={0x0, 0x0, @pic={0xf, 0xa, 0x5, 0x7, 0x1, 0xff, 0x81, 0x7f, 0x0, 0x4, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x2000c884) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000600)='./file0\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r5, 0x9dffffff}}, 0x48) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f}}, 0x50) 10.889295259s ago: executing program 0 (id=3054): r0 = open(0x0, 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xff00, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r5, r6, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 9.783016926s ago: executing program 2 (id=3058): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001fb819608b404021058550102030109022400010400500009042601022bc2be03090503"], 0x0) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x1c}], 0x10000000000002aa, 0x0, 0x0, 0x4}, 0x310) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r4, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) 8.891635775s ago: executing program 0 (id=3059): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x5) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) unshare(0x2000400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80e85411, &(0x7f00000022c0)) 8.49500996s ago: executing program 0 (id=3060): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402200, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x24000, 0x0) syncfs(r0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/176, 0xb0}], 0x1) r2 = fsopen(&(0x7f0000000180)='ocfs2\x00', 0x1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000001c0)={{r1}, {@void, @actul_num={@void, 0xcf, 0x6d}}}) splice(r2, &(0x7f0000000200)=0xffffffff, r0, &(0x7f0000000240), 0x9, 0xf) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) fcntl$getownex(r1, 0x10, &(0x7f00000004c0)={0x0, 0x0}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = openat$cgroup_subtree(r0, &(0x7f0000000540), 0x2, 0x0) close_range(r5, r4, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={0x1, &(0x7f0000000580)="1b7de451ca63", &(0x7f00000005c0)=""/118}, 0x20) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000680)={0x3, 0x3, 0xf1, 0x9, 0x7, 0x2, 0x400, 0x9, 0x5, 0xfb2, 0x6ca2, 0x8, 0x30ae8ab4, 0x2}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000006c0)={0x97c, 0x1fb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f000000ea80), 0x4) syz_usb_connect(0x3, 0x837, &(0x7f000000eac0)={{0x12, 0x1, 0x200, 0x5b, 0x9f, 0x60, 0xff, 0x1a86, 0x5523, 0x7610, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x825, 0x3, 0x3, 0x4, 0xe53fab188de1bcac, 0x3, [{{0x9, 0x4, 0x50, 0xff, 0x7, 0x74, 0x9a, 0x48, 0xf8, [@hid_hid={0x9, 0x21, 0x7d0, 0x4, 0x1, {0x22, 0x89d}}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0xf, "48d6", "3fc1"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xa6}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x4, 0xb1, 0x40, "6ccb126dc300"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x7, 0xe}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x34, 0x1, 0x0, 0xb, 'F', "de6d"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x3, 0x8, 0x40, [@generic={0x24, 0x6, "3047618c2e061a3db9117c8a071aa47f590b1e8aa9b367d90b29f33ac74a1ba0a266"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x77, 0x1, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x8, 0x8, 0xb, [@generic={0xdf, 0x5, "f464a40f99801543367d670e383f6cf3b2a5e9448be3e7026fe305aeaefb46467aaa572e5cd1dc5d5c6fbec8816826401e8cef3b540f08ef690f103f8b1af77c0a095071e6be85f913ac7793330860de239380126d3dd4925abaaec471fc9d89d2053ceae279affb0fae110982c120704b8e47efd927044d8195a5d89104a83dd4d88c5831122dc36ef581a4be29a4a5fa33fb4610cb99e5ee7cc9f40498a731eb43e0499f874de055d1d5b58ac147aa539126629526458c6f955542de1f0c0f13813ed0e73fce5a04658fb868e77e723dd65e0ab381604bd0f275107a"}, @generic={0x5f, 0x11, "061059ebd18b49210636fd5e7f069b8ad7ea542bcd73e298f4fc910d29fe3182036255fb6d75408e9a249d698e9bf104433e5a622992606a2f51f0ecee5e086de1a57d4117cacef83189ad850158038721de108bcb08052873b1fc7561"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x5, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x92, 0x1}, @generic={0xb9, 0x3, "0eb7e2fcd8e4a1b14685d98ac362e49018d21549148141d02dab88ac21b771d781b49f969ffdc1de178bd1214e3ad2610560e70e1ad8a2f279c828b61cea32c9fb706e47509d5936c7aef5abfa50a2f7598a4cc71be76e02bb2b4f53e911ce26e0a4db1000ba2daeb00ad22739fb4a21b0fb514c54fcfeb66d561a69bbc2310d106f7dba788fa34150e75a1fd54af12bfb3c364e472cd2ac6d99383796d1b5d33dedbc76906942e6f2b0d724f155cc6b3e616558d69a0b"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xd, 0x8, 0x8}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x3, 0xb, 0x10, [@generic={0x7e, 0x21, "4dcc737b8a409fa8c0fe3926536ed0d3c243e3cedffae31dc82188f3dc1ebb4fd54a7182e7dda3c44aa87c1de21ff4c02c9a1a5e8c03313c6363089c9a4bb01cc7bc04c7e9ce70b471f090dbf8133d070f178f43ee7f4a901647d95446970aa03b4edc0c7e66654e0cf085458b13fdef279564b5abb3145c6ecf1598"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x3, 0xad, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x9d, 0x10, 0x8, 0x63, 0x52, 0x4e, 0x8, [@generic={0xe2, 0x1, "f29bc76ebeb9cc330476e28e9794023798c7b531be034e3c38031696663cd670937326dd7e76dbc7f13627e6b3a879fa9b1df01648eb934086e806515494599bcc6ab1c527acd750e431b7f13f01c6360045b17ee55274f31e0eaeed4b5e95fef3aad294138eb20514f5fb1d3071f5cf47d34772afc1079e414e34716ae70a21d0a66c2f1dbe8d3fe74696cfee9abcfd372c8dee2c7b068c1ce42affb0c09d96397b982072c616b8bf859c494dd58c2c68b3f30dcdd67779ea6b15385698224f8b5e90ecdf7908bd7032b5986730aa032febed145ef2cd63624a7d1f7ba90c72"}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0xb1}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x7e, "181620a8"}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x4, 0x7, "1a5e96b7"}]}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x4, 0x1, 0x5}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x1, 0x9, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xd}, @generic={0xd4, 0x1, "f59023017b42c2ed4c8f1aa7ecf427a9c990a5a556712d5e13aa897a9ece94a01aff4e15e1089ac2dcf12f9c82989e405a8324143d54e60a78ec20b6a7dad9bd68cb16fbaa68222895b22719003f669303fd4e21c7d88d46c5804944dc56b0f4944533c669a58ad7049e995a2cf91071c1e26cad2c62392e5698cefb95016c526f134f55fce97c1fe3377f14aa509b9098f2ae3356ef209e3edb99d6ac48269b84ec30eed69b1550ee3f899dccf2d4ef5e3ebfcb2a09d698ffccb525c5991cb343c21eda8e8703ebf429d47e10a2a46ac848"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x4, 0xe, 0xd, [@generic={0x6a, 0x23, "59ed865ad7e35cd12253b84d3d8ff9b2852ff5d9ee6a6aa86718e5a76cec0f8348d653e06f3c4690f4147b56cd522dc11290ca9cc97b640595e5cb7e336855fcb9d08ade7afa189691ea2d1737a2ef59fbff740950289caa2090b03dc6bdb1076476ca2492000b61"}, @generic={0x2b, 0x1, "748c5b4f38df9953e82022345f426f32a6bb2e9e4a1bc98f49ed5903de74431bf9b3f2e11bd0212dd5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5f, 0x3, [@generic={0x18, 0x31, "a3ff779b6b5e0447d965ab6c852595f15b7047d196ad"}, @generic={0xf5, 0x22, "a6f814774f4e4212dbee29b8c51225895a6738c1baadcb26243172e29abd18f4c6b02c7e160731cda8689b92cd05fc2881c7ccb395cb2733c1f3f3702f733c6f94ffebc62b4e890e156e7e2203678dac58c07b92ceb069941528986e7e4ca4f2ec96f752f553d7122eea19847b865ce526b7893f6b7c413264db89f72901a946352236e927ee3b36fafef4979fb1b4b1b9097f9f54f39172108728b42bc7e01583de0eb42b1f15d5ee0673396de76e371568dc310e97eacb20e2b90aeacc116d41325b4d93e5d3a989f6aadf96a11c5ecb854e9bf919b31271151461a3253d4ba6663ba672111a385057b84be19bba386a336b"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x4, 0xb0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x10, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ef, 0x5e, 0x5, 0x8}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0xab, 0x7f, [@generic={0xaa, 0xa, "65a29f6b649502997665c538784bf517e34810318c564d08ee24d226a0cb7046dfe31b7d8cb212c33d45137c764b9c1352aa2cfc7fb032ce615317eaaaa06c03cf1a7ada65113631b37fe0548da0387f91b7a79513233db9c2bb626539215b7ff69f0497f3dcc054f7a3058bcbb1a87b9650073ff819a7f30a48a829b9ad95d8887ce96d603d19d8b5951773ffe8f776325ab9affbe536490f8b2cfb08d2da3718380f13935226fe"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}]}}, {{0x9, 0x4, 0xa9, 0xb1, 0x2, 0x25, 0x76, 0xd0, 0x7, [], [{{0x9, 0x5, 0x0, 0x1d, 0x10, 0x3d, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x1000}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x34, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x5}, @generic={0x2d, 0x10, "786d49edd3ea02e3a70911624cb10c44d0c278ddc2245233ecf6746669b819ed6fd6e5c63db642e56b2bc2"}]}}]}}]}}]}}, &(0x7f000000f740)={0xa, &(0x7f000000f300)={0xa, 0x6, 0x110, 0x4, 0x7, 0x81, 0x20, 0x3}, 0xa8, &(0x7f000000f340)={0x5, 0xf, 0xa8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xc9, "9051f33b69cd390038ef74665b14451d"}, @ssp_cap={0x18, 0x10, 0xa, 0xe4, 0x3, 0x7, 0xf00, 0x3ff, [0xf, 0xf, 0xc0ff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x8, 0x51}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8634473f0234d20cb2df4ec9226dc4d4"}, @generic={0x52, 0x10, 0x1, "a4e4a5e458f947302b9288285bf4a18b27f4a265944350ed7dda51e7ed0f0d1f86c20cdae654905091fe04775830aff736347252d7b516a15cf93fb10545b034ba79e52f658983298ff23936f31839"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x1, 0x4}]}, 0x4, [{0xe3, &(0x7f000000f400)=@string={0xe3, 0x3, "13d2bc620842d2965bb0f531a93d270d70f4b4870690784a9a4ce069fd3a430c3b619ba6e611b5ce06e765440bbb4f75ebd2b1dc6bce7ebace1afcee8a1de6e9af63923cbfafbb29a29306830383ca4ca10829d5e130d4c8767cfef7cf40f258050a2581a7127b63f07f001f10acff6666ef7ddebb2ce9826aeacec81a03d5806df63c400cd7fee94afed574e6abf58527b0bdd3da72c363cd2b6b7ac267df3a6ff28cbecf0fa974f15f79ed24be6e7ad604fcb8ff53d8fac6113c7d33f3ee6afc451f2b9db8eee059fb319253da0f3a48945c92abe9e58287b515d07806adff18"}}, {0xaa, &(0x7f000000f500)=@string={0xaa, 0x3, "dddc6fcd696288bbd8fdeee2d98a104192da3018f3997c3f93db7352fd0e1187ddd54349fca05c258060206605a9587da83b4f759d64088f0364c4b3da1fb3c8bbd3eafac17ab24e4b36bc904afef935aff66175a68bbbdc64d4c9cf0b73a241a9d051476b2095e72c22b134ab8016b305e0532395c813c1ec7f090f67c643e421f8ef33e461b15f92e6946ed85e81e002efc94b93453d2bdd221c5c24024debcf0777869ab496cb"}}, {0x2a, &(0x7f000000f600)=@string={0x2a, 0x3, "0cb801d07923b13c4853fdaa6bce2e231e9e572821a59cc1f7f01b248eca286b0e0f18a8313f8741"}}, {0xd8, &(0x7f000000f640)=@string={0xd8, 0x3, "d17fd562acb37639b34ed6cfe89730c754e60bfe482acdd192e0eaab2dbe09bd12489521b2b7fe81799fd26b4b598d3722207eda26e7311ff69dfaa6f25940defd1934fba218cabad603d3f7699400042d8b83849c31c365b4ef30d881ee2bd2e68821e119c333e340f56e96b4c3e94a609048553f053ace5d73bd976d56bb2fbb44cf9ce29bf56ccd472f15bf7037ae09d72f909f008da1c8f5ce398fd1cba59d21737525d27db4518913944f9c506226dd84770acb350d087f3afbb9cd2db0fc63648727a23798cda6b8c89a92dccbd11e211f2b69"}}]}) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f000000f7c0)=0x10, 0x4) socket$packet(0x11, 0x3, 0x300) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f000000f8c0)={&(0x7f000000f800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000f880)={&(0x7f000000f840)={0x2c, 0x1407, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc800) ptrace$setregs(0xf, r3, 0x3, &(0x7f000000f900)="d807ec3eea09cb01153085c23e3f449404a7fa17ef326b2499d52dad5dce099e92114edd4a36118f19b6064a4f31e72b295d912e0ff51f2e107e7dba4b7c65616b980041dbd07b9cf7e58d940b0dfe9f65863593ab02a130b549734d8bccb8b41717e7013f9def25a02f47c53986341d2d3c7e164a7a94cb941db2665c56473fe18fa2a6d3b7d06ce2a23f1a13f15efcd13fa9db118dae4612aad44d01c6b1") mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x810, r0, 0x10000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f000000f9c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f000000fa00)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f000000fa40)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f000000fa80)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f000000fac0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f000000fbc0)={&(0x7f000000fb40)=[r6, r7, r8, 0x0], &(0x7f000000fb80)=[0xfffffffffffffffb, 0x80, 0xe1, 0x1], 0x4}) 7.980945743s ago: executing program 4 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xda, 0x5, 0x2, 0xfffffff6, {0x4, 0x63c, 0xfffffffffffbfff8, 0x8, 0x3, 0x79, 0x3c, 0x7, 0x1, 0x8000, 0xffff, 0x0, 0x0, 0x7, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x7f, 0xf, 0xa, 0x1, 0x86, 0x4, 0x1, 0xff, 0x3, 0xfb, 0x4f, 0x3, 0x2, 0x7f}, 0xe) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"ae02a5462f56b2bbbd41fa66391eca64", 0x0, 0x0, {0x8, 0x9}, {0x9, 0x7f}, 0x100000001, [0x200, 0x8, 0xc77, 0x8a2, 0x5, 0x1e00000000000000, 0x3, 0x7fffffff, 0xab35, 0x2, 0x1, 0x6, 0xc, 0x8, 0x4, 0x3]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r4) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 7.784806243s ago: executing program 2 (id=3064): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000090c6160aa220c49794b61332d05a5b7af3b9288d45d37dc2e10634006c233577da51d329667a4f83a365dc7b0500000073ae65d06e91751e1a93a1ad304108fc5e97aa34f4fa180f921407cee3eba4af6017bad3935cf74a8fc2d8fe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc) getdents(0xffffffffffffffff, 0x0, 0x58) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20010, 0xffffffffffffffff, 0xffffd000) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) open(0x0, 0x60840, 0x0) 7.784355997s ago: executing program 4 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 6.736493957s ago: executing program 4 (id=3066): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x30fb2000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r4 = userfaultfd(0x80801) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f00008a6000/0x3000)=nil, 0x3000, 0x2000001, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) syz_open_dev$sg(0x0, 0x0, 0x103001) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)={0x1c, r8, 0x62c21a4ade68aba1, 0x70bd28, 0x70000000, {{0x32}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) syz_io_uring_submit(r5, 0x0, 0x0) r11 = syz_open_procfs(r3, &(0x7f0000000240)='net/snmp6\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8000840}, 0x4000000) 6.395506913s ago: executing program 1 (id=3067): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000380)={0x0, 0x0, @pic={0xf, 0xa, 0x5, 0x7, 0x1, 0xff, 0x81, 0x7f, 0x0, 0x4, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x2000c884) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = inotify_init() chdir(&(0x7f0000000600)='./file0\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) 6.160068171s ago: executing program 1 (id=3068): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="f0ff28bd70070800000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48850}, 0x20000010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12c40, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x5f}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x101}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4, 0x2, 0x0, 0xae9}]}]}, 0x13c}}, 0x50) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003c85f620823040c00bf2e0102"], 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}, 0x0, 0x4000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x22, 0x1, @thr={&(0x7f0000000580)="e3c2a5d39da607b164ae409b1a7e6efd1237e662c09da4e6762c33f213e34aeb28cb8ac59e", &(0x7f00000006c0)="86ad66ef191649d2f53c9a2793ed80a27ade31dc2c4ae21698971bdb09bb60f72f3648a0dd4861d871e9e2b28ec3167e3ca50ecc10840777c754cdb61efbd5d45be84d788e7e278f26d68e568fbb94569f053813f94d01dac28a3922fbc26943cd4737ed35af8b29f10304d1e56bbb027dc54ae29517807d6a643b3c6a8716558949101b6e422a3af4d2b12b8c3c83aaa892efbbc50e68bf108ddfc57ca1ebc3e4db3ac8b4d5e814792cf15cb8560ed2c2bb6fb1cc54121c25bda65e946587efea"}}, &(0x7f0000000600)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x2, 0xfd8b, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000f50f00010225bd7000f9dbdf2500000000ec542a41095c92023d7a073957fa8ea342bbd2fb47b26f4650", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0024ffffff"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$instantiate(0xc, r3, &(0x7f0000000080)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '.&!^()', 0x20, 0x3, 0x20, [0x37, 0x37, 0x65, 0x33, 0x65, 0x33, 0x63, 0x35, 0x64]}, 0x3c, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r7, 0x0, 0x1802}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.139931798s ago: executing program 0 (id=3069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x44000) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r6 = gettid() r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r3) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040084}, 0x40) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r9, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f00000000c0)={0xdf, &(0x7f00000002c0)=""/223}) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/115, 0x73}], 0x3, &(0x7f00000006c0)=""/227, 0xe3}, 0x3}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/50, 0x32}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/83, 0x53}, {&(0x7f0000000940)=""/41, 0x29}, {&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/249, 0xf9}], 0x6, &(0x7f0000000c00)=""/33, 0x21}}, {{&(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/7, 0x7}], 0x1, &(0x7f0000000d40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001dc0)=""/221, 0xdd}, {&(0x7f0000001ec0)=""/18, 0x12}, {&(0x7f0000001f00)=""/230, 0xe6}], 0x3, &(0x7f0000002040)=""/167, 0xa7}, 0x5}, {{&(0x7f0000002100)=@tipc, 0x80, &(0x7f0000003840)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/133, 0x85}, {&(0x7f0000003240)=""/226, 0xe2}, {&(0x7f0000003340)=""/233, 0xe9}, {&(0x7f0000003440)=""/206, 0xce}, {&(0x7f0000003540)=""/38, 0x26}, {&(0x7f0000003580)=""/255, 0xff}, {&(0x7f0000003680)=""/216, 0xd8}, {&(0x7f0000003780)=""/122, 0x7a}, {&(0x7f0000003800)=""/41, 0x29}], 0xa}, 0x3}, {{&(0x7f0000003900)=@isdn, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003980)=""/54, 0x36}], 0x1, &(0x7f0000003a00)=""/165, 0xa5}, 0x4}, {{&(0x7f0000003ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003b40)=""/19, 0x13}, {&(0x7f0000003b80)=""/58, 0x3a}, {&(0x7f0000003bc0)=""/75, 0x4b}, {&(0x7f0000003c40)=""/157, 0x9d}, {&(0x7f0000003d00)=""/55, 0x37}], 0x5, &(0x7f0000003dc0)=""/176, 0xb0}, 0xfffffffc}, {{&(0x7f0000003e80)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000004240)=[{&(0x7f0000003f00)=""/47, 0x2f}, {&(0x7f0000003f40)=""/154, 0x9a}, {&(0x7f0000004000)=""/170, 0xaa}, {0x0}, {&(0x7f00000041c0)=""/80, 0x50}], 0x5, &(0x7f00000042c0)=""/4096, 0x1000}, 0xff}, {{&(0x7f00000052c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005340)=""/140, 0x8c}, {&(0x7f0000005400)=""/187, 0xbb}], 0x2, &(0x7f0000005500)=""/255, 0xff}, 0x8}, {{&(0x7f0000005600)=@sco, 0x80, &(0x7f0000005700)=[{&(0x7f0000005680)=""/72, 0x48}], 0x1, &(0x7f0000005740)=""/131, 0x83}, 0x7}], 0xa, 0x40000100, &(0x7f0000005ac0)={r10, r11+10000000}) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f00000001c0)={0x0, 0x6, 0x10, &(0x7f0000000140)=""/16}) getitimer(0x1, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.033167143s ago: executing program 0 (id=3070): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa3aa86dd6001010000641100fe8000000000000001000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6dad84b345dccac643e7df3e526ff0"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r1}, 0x10) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.777493642s ago: executing program 2 (id=3071): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xb, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]}) 3.565827223s ago: executing program 4 (id=3072): userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 3.151428021s ago: executing program 4 (id=3073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x80, 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000380), 0x2) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3800000081fd014d"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r7 = accept4$unix(r2, &(0x7f00000003c0), &(0x7f0000000180)=0x6e, 0x400) recvmmsg$unix(r7, &(0x7f0000004880)=[{{&(0x7f0000000440), 0x6e, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/240, 0xf0}, {&(0x7f0000001780)=""/114, 0x72}, {&(0x7f0000001800)=""/157, 0x9d}], 0x7, &(0x7f0000001940)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000003080)=[{&(0x7f0000001ac0)=""/219, 0xdb}, {&(0x7f0000001bc0)=""/1, 0x1}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/246, 0xf6}, {&(0x7f0000002d40)=""/26, 0x1a}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/221, 0xdd}, {&(0x7f0000002ec0)=""/199, 0xc7}, {&(0x7f0000002fc0)=""/138, 0x8a}], 0xa, &(0x7f0000003140)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003180), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003200)=""/250, 0xfa}, {&(0x7f0000003300)=""/192, 0xc0}], 0x2, &(0x7f0000003400)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x180}}, {{&(0x7f0000003580), 0x6e, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/39, 0x27}, {&(0x7f0000003640)=""/143, 0x8f}, {&(0x7f0000003700)=""/91, 0x5b}, {&(0x7f0000003780)=""/3, 0x3}], 0x4, &(0x7f0000003800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003940)=""/129, 0x81}, {&(0x7f0000003a00)=""/90, 0x5a}, {&(0x7f0000003a80)=""/92, 0x5c}], 0x3, &(0x7f0000003b40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003bc0)=@abs, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003c40)=""/151, 0x97}, {&(0x7f0000003d00)=""/102, 0x66}], 0x2}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003dc0)=""/96, 0x60}, {&(0x7f0000003e40)=""/139, 0x8b}, {&(0x7f0000003f00)=""/93, 0x5d}, {&(0x7f0000003f80)=""/127, 0x7f}, {&(0x7f0000004000)=""/229, 0xe5}, {&(0x7f0000004100)=""/137, 0x89}], 0x6, &(0x7f0000004240)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004700)=[{&(0x7f0000004380)=""/197, 0xc5}, {&(0x7f0000004480)=""/45, 0x2d}, {&(0x7f00000044c0)=""/44, 0x2c}, {&(0x7f0000004500)=""/255, 0xff}, {0x0}], 0x5, &(0x7f0000004780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x8, 0x0, &(0x7f0000004a80)={0x0, 0x3938700}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000000a00000008000300", @ANYRES32, @ANYBLOB="1400508000000000040008800500020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 2.519682014s ago: executing program 1 (id=3074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (fail_nth: 6) 2.186211069s ago: executing program 1 (id=3075): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0xfffffffe, 0x4) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000080)={0x14}, 0x14) r6 = dup2(r3, r1) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="aa8aaaaaaaaaffffffffffff86dd697a262d00383afefe880000000000000000000000000001ff0300000000000000000000000000010200907800000500620813313f6fff000000000000002000000000000000000000780000000000000000000000000001554001294a77376b"], 0x0) r7 = dup2(r0, r0) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) 1.827429526s ago: executing program 1 (id=3076): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xc, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r10, &(0x7f0000000040)='syz0\x00', 0x1ff) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) 1.239463906s ago: executing program 0 (id=3077): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x20) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, r3], 0x0, 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) open_by_handle_at(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="15000000fe00000000fb1599da424cb5fa9f53831c4b29d56dffa4c3b4ec379b1a106b67eef22d0ffc5e015c8304df7059364a632b0400e17b7da70eee108ef46cb085689cd08bfd517b0a82338d69fa27f4463c4505530f0e46608b6d4898361ca1ce3f566d14219056d26263011db56a2c053a4ac2d01fcdca0db8d846540332197b0e44c6d51863b6a96e8ca156d777e4c545cc4734398f210c25323223694004c79efff606a8dcc0b1d9c4bec00fbde64c25203b7c4aff88a60f6a9a7642b083d9f5fcf3f8000000000000000000"], 0x1) r6 = fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0xf017}, {0xffffffffffffffff, 0x2200}, {r0, 0x1620}], 0x3, 0x1007) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.142216927s ago: executing program 4 (id=3078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40010) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r4, 0x0, 0x0, 0x40, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.076139025s ago: executing program 2 (id=3079): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r0, 0xffffffffffffffff, 0x1e00000000000000) 0s ago: executing program 1 (id=3080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) kernel console output (not intermixed with test programs): 7295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 798.830441][T15920] truncated [ 798.845874][T15920] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 798.891189][T10228] usb 5-1: config 0 descriptor?? [ 798.936401][ T30] audit: type=1326 audit(1763654176.931:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 798.958797][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.982028][T10228] usb 2-1: USB disconnect, device number 127 [ 799.004813][T10228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 799.023815][T15925] trusted_key: encrypted_key: insufficient parameters specified [ 799.049795][ T30] audit: type=1326 audit(1763654176.931:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.052216][T10228] cp210x 2-1:0.0: device disconnected [ 799.115959][ T30] audit: type=1326 audit(1763654176.931:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.225703][ T30] audit: type=1326 audit(1763654176.931:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.394516][ T30] audit: type=1326 audit(1763654176.931:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.652528][ T30] audit: type=1326 audit(1763654176.931:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.674896][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.723421][ T30] audit: type=1326 audit(1763654176.931:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.0.2662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 799.745776][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.284928][T15942] random: crng reseeded on system resumption [ 800.890871][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 801.092388][T15951] team0: entered promiscuous mode [ 801.097598][T15951] team0: entered allmulticast mode [ 801.704317][T14782] usb 5-1: USB disconnect, device number 122 [ 802.315355][T15965] random: crng reseeded on system resumption [ 802.540312][T10209] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 802.710113][T10209] usb 2-1: device descriptor read/64, error -71 [ 802.941433][T10205] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 803.005164][T10209] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 803.200288][T10209] usb 2-1: device descriptor read/64, error -71 [ 803.223469][T10205] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.233805][T10205] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 803.286370][T10205] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 803.309415][T10205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 803.320619][T10209] usb usb2-port1: attempt power cycle [ 803.369534][T10205] usb 4-1: SerialNumber: syz [ 803.370561][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2677'. [ 803.638083][T10205] usb 4-1: 0:2 : does not exist [ 803.662446][T10205] usb 4-1: USB disconnect, device number 13 [ 803.670088][T10209] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 803.700748][T10209] usb 2-1: device descriptor read/8, error -71 [ 803.727794][T15129] udevd[15129]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.940625][T10209] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 803.960860][T10209] usb 2-1: device descriptor read/8, error -71 [ 804.071305][T10209] usb usb2-port1: unable to enumerate USB device [ 804.170460][T14782] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 804.362018][T15991] binder: 15986:15991 ioctl c0306201 0 returned -14 [ 804.380686][T14782] usb 3-1: Using ep0 maxpacket: 16 [ 804.457498][T14782] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 804.490338][T14782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.570796][T14782] usb 3-1: Product: syz [ 804.626281][T14782] usb 3-1: Manufacturer: syz [ 804.662823][T14782] usb 3-1: SerialNumber: syz [ 804.716130][T14782] usb 3-1: config 0 descriptor?? [ 804.745562][T14782] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 805.269682][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.379295][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.580541][T14782] gspca_sn9c20x: Write register 1001 failed -110 [ 805.588274][T14782] gspca_sn9c20x: Device initialization failed [ 805.602407][T14782] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 807.700970][T10205] usb 3-1: USB disconnect, device number 2 [ 808.484976][T10209] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 808.694218][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.700811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.709465][T10209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.721529][T10209] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 808.732766][T10209] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 808.744714][T10209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 808.753151][T10209] usb 4-1: SerialNumber: syz [ 809.084163][T10209] usb 4-1: 0:2 : does not exist [ 809.679633][T10209] usb 4-1: USB disconnect, device number 14 [ 810.514465][T15830] IPVS: starting estimator thread 0... [ 810.670307][T16057] IPVS: using max 32 ests per chain, 76800 per kthread [ 810.765492][T16063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.019784][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2702'. [ 812.440628][T14782] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 812.820444][T14782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.831835][T14782] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.843217][T14782] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 812.854271][T14782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.862581][T14782] usb 1-1: Product: syz [ 812.866845][T14782] usb 1-1: Manufacturer: syz [ 812.872080][T14782] usb 1-1: SerialNumber: syz [ 812.887995][T14782] usb 1-1: config 0 descriptor?? [ 813.392335][T16083] nvme_fabrics: missing parameter 'transport=%s' [ 813.398946][T16083] nvme_fabrics: missing parameter 'nqn=%s' [ 813.545118][T14782] usb 1-1: USB disconnect, device number 4 [ 815.154740][T10205] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 815.304447][T10205] usb 4-1: device descriptor read/64, error -71 [ 815.620110][T10205] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 815.770132][T10205] usb 4-1: device descriptor read/64, error -71 [ 815.891893][T10205] usb usb4-port1: attempt power cycle [ 816.291405][T10205] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 816.335220][T10205] usb 4-1: device descriptor read/8, error -71 [ 816.610085][T10205] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 817.033615][T10205] usb 4-1: device descriptor read/8, error -71 [ 817.811518][T10205] usb usb4-port1: unable to enumerate USB device [ 818.249169][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 818.520075][T10209] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 818.742131][T10209] usb 1-1: Using ep0 maxpacket: 8 [ 818.773411][T10209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 818.781271][T10209] usb 1-1: no configurations [ 818.788021][T10209] usb 1-1: can't read configurations, error -22 [ 818.810117][T15830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 818.960191][T10209] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 818.986293][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 818.986309][ T30] audit: type=1326 audit(1763654197.331:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.043664][T15830] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 819.053495][T15830] usb 2-1: config 0 has no interface number 0 [ 819.072937][T15830] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 819.239873][ T30] audit: type=1326 audit(1763654197.331:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.263349][T10209] usb 1-1: Using ep0 maxpacket: 8 [ 819.338979][T10209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 819.350094][T10209] usb 1-1: no configurations [ 819.359185][T10209] usb 1-1: can't read configurations, error -22 [ 819.372517][T10209] usb usb1-port1: attempt power cycle [ 819.386976][T15830] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 819.389699][ T30] audit: type=1326 audit(1763654197.431:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.684972][ T30] audit: type=1326 audit(1763654197.431:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.707331][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.728222][T15830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.745040][ T30] audit: type=1326 audit(1763654197.431:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.759555][T15830] usb 2-1: Product: syz [ 819.809386][T15830] usb 2-1: Manufacturer: syz [ 819.809426][ T30] audit: type=1326 audit(1763654197.431:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16177 comm="syz.3.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 819.849909][T15830] usb 2-1: SerialNumber: syz [ 820.010145][T10209] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 820.038552][T10209] usb 1-1: Using ep0 maxpacket: 8 [ 820.045762][T10209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 820.054080][T10209] usb 1-1: no configurations [ 820.058685][T10209] usb 1-1: can't read configurations, error -22 [ 820.101035][T15830] usb 2-1: config 0 descriptor?? [ 820.132372][T15830] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 820.190114][T10209] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 820.228456][T10209] usb 1-1: Using ep0 maxpacket: 8 [ 820.264403][T10209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 820.290542][T10209] usb 1-1: no configurations [ 820.315210][T10209] usb 1-1: can't read configurations, error -22 [ 820.330947][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.350548][T10209] usb usb1-port1: unable to enumerate USB device [ 820.355864][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.606544][ T30] audit: type=1326 audit(1763654198.941:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77018f749 code=0x7ffc0000 [ 820.696136][ T30] audit: type=1326 audit(1763654198.941:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa77018f749 code=0x7ffc0000 [ 820.723846][T15830] usb 2-1: USB disconnect, device number 6 [ 820.735938][T15830] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 820.855936][ T30] audit: type=1326 audit(1763654198.941:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77018f749 code=0x7ffc0000 [ 820.892282][ T30] audit: type=1326 audit(1763654198.951:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16188 comm="syz.4.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa77018f749 code=0x7ffc0000 [ 821.000476][T16197] fuse: Bad value for 'fd' [ 821.287289][T14782] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 821.470774][T14782] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 821.502271][T14782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.565662][T16207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.702508][T14782] usb 3-1: config 0 descriptor?? [ 821.761652][T14782] cp210x 3-1:0.0: cp210x converter detected [ 822.116348][T14782] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 822.124937][T14782] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 822.133147][T14782] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 822.791797][T14782] usb 3-1: cp210x converter now attached to ttyUSB0 [ 824.153364][T10209] usb 3-1: USB disconnect, device number 3 [ 824.161191][T10209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 824.169531][T10209] cp210x 3-1:0.0: device disconnected [ 824.180573][T14782] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 824.255718][T15830] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 824.313952][T16238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2744'. [ 824.340345][T14782] usb 4-1: Using ep0 maxpacket: 8 [ 824.382391][T16238] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 824.424375][T14782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 824.432278][T14782] usb 4-1: no configurations [ 824.436976][T14782] usb 4-1: can't read configurations, error -22 [ 824.454085][T15830] usb 1-1: config 0 has no interfaces? [ 824.459752][T15830] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 824.502153][T16238] bond3 (unregistering): Released all slaves [ 824.532942][T15830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.571801][T14782] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 824.667792][T15830] usb 1-1: config 0 descriptor?? [ 824.740162][T14782] usb 4-1: Using ep0 maxpacket: 8 [ 824.749035][T14782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 824.757439][T14782] usb 4-1: no configurations [ 824.762687][T14782] usb 4-1: can't read configurations, error -22 [ 824.769699][T14782] usb usb4-port1: attempt power cycle [ 825.008037][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 825.008055][ T30] audit: type=1326 audit(1763654203.371:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.010439][T15830] usb 1-1: USB disconnect, device number 9 [ 825.077475][ T30] audit: type=1326 audit(1763654203.371:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.202197][ T30] audit: type=1326 audit(1763654203.441:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.224582][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.250210][ T30] audit: type=1326 audit(1763654203.441:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.272693][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.278989][T14782] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 825.319342][ T30] audit: type=1326 audit(1763654203.441:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.341716][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.363923][T14782] usb 4-1: Using ep0 maxpacket: 8 [ 825.376347][ T30] audit: type=1326 audit(1763654203.441:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.415433][T14782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 825.426014][T14782] usb 4-1: no configurations [ 825.430774][T14782] usb 4-1: can't read configurations, error -22 [ 825.509667][ T30] audit: type=1326 audit(1763654203.441:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.590189][T14782] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 825.612071][T14782] usb 4-1: Using ep0 maxpacket: 8 [ 825.629861][T14782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 825.638534][T14782] usb 4-1: no configurations [ 825.650505][T14782] usb 4-1: can't read configurations, error -22 [ 825.657159][T14782] usb usb4-port1: unable to enumerate USB device [ 825.664655][ T30] audit: type=1326 audit(1763654203.441:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.696522][ T30] audit: type=1326 audit(1763654203.441:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 825.746725][ T30] audit: type=1326 audit(1763654203.441:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16241 comm="syz.1.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb954f8f749 code=0x7ffc0000 [ 827.300123][T14782] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 827.523766][T14782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.536626][T14782] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 827.781523][T14782] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 827.790914][T14782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.798916][T14782] usb 4-1: Product: syz [ 827.803312][T14782] usb 4-1: Manufacturer: syz [ 827.810730][T14782] usb 4-1: SerialNumber: syz [ 827.850788][T14782] usb 4-1: config 0 descriptor?? [ 828.557505][T16270] nvme_fabrics: missing parameter 'transport=%s' [ 828.567656][T16270] nvme_fabrics: missing parameter 'nqn=%s' [ 828.587088][ T24] usb 4-1: USB disconnect, device number 23 [ 829.533735][T16312] random: crng reseeded on system resumption [ 829.660211][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 829.912729][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.925523][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 829.936458][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 829.956615][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 829.997878][ T24] usb 3-1: SerialNumber: syz [ 830.238273][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 830.238294][ T30] audit: type=1326 audit(1763654208.451:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 830.454313][ T30] audit: type=1326 audit(1763654208.451:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 830.476769][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.487190][ T24] usb 3-1: 0:2 : does not exist [ 830.578834][T16320] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 830.705615][ T24] usb 3-1: USB disconnect, device number 4 [ 830.744450][T16322] support for the xor transformation has been removed. [ 830.763057][ T30] audit: type=1326 audit(1763654208.451:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 830.958143][ T30] audit: type=1326 audit(1763654208.451:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.120086][ T30] audit: type=1326 audit(1763654208.451:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.142548][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.170738][T15830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 831.320296][ T30] audit: type=1326 audit(1763654208.451:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.322039][T15830] usb 2-1: config 0 has no interfaces? [ 831.342663][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.407319][T15830] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 831.418315][T15830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.426602][T15830] usb 2-1: Product: syz [ 831.451372][T15830] usb 2-1: Manufacturer: syz [ 831.455984][T15830] usb 2-1: SerialNumber: syz [ 831.480061][ T30] audit: type=1326 audit(1763654208.451:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.491396][T15830] usb 2-1: config 0 descriptor?? [ 831.532084][T10228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 831.600237][ T30] audit: type=1326 audit(1763654208.461:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.622682][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.632557][ T30] audit: type=1326 audit(1763654208.461:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.669560][ T30] audit: type=1326 audit(1763654208.461:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.3.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 831.758700][T10228] usb 3-1: Using ep0 maxpacket: 8 [ 831.771008][T10228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 831.778799][T10228] usb 3-1: no configurations [ 831.783673][T10228] usb 3-1: can't read configurations, error -22 [ 831.796190][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 831.829851][T16332] sch_tbf: burst 511 is lower than device bridge0 mtu (1514) ! [ 831.966342][T10228] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 832.128102][T10228] usb 3-1: Using ep0 maxpacket: 8 [ 832.141830][T10228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 832.149918][T10228] usb 3-1: no configurations [ 832.154704][T10228] usb 3-1: can't read configurations, error -22 [ 832.330376][T10228] usb usb3-port1: attempt power cycle [ 832.549847][T15830] usb 2-1: USB disconnect, device number 7 [ 832.780249][T10228] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 832.811004][T10228] usb 3-1: Using ep0 maxpacket: 8 [ 832.820856][T10228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 832.828531][T10228] usb 3-1: no configurations [ 832.834324][T10228] usb 3-1: can't read configurations, error -22 [ 832.970122][T10228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 832.998204][T10228] usb 3-1: Using ep0 maxpacket: 8 [ 833.327912][T10228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 833.350137][T10228] usb 3-1: no configurations [ 833.360789][T10228] usb 3-1: can't read configurations, error -22 [ 833.483686][T10228] usb usb3-port1: unable to enumerate USB device [ 834.244828][T10228] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 835.149087][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2776'. [ 835.204505][T16371] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 835.261500][T16371] bond1 (unregistering): Released all slaves [ 835.281374][T10228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.292810][T10228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.314078][T10228] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 835.371323][T10228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.390080][T10228] usb 4-1: Product: syz [ 835.394280][T10228] usb 4-1: Manufacturer: syz [ 835.398875][T10228] usb 4-1: SerialNumber: syz [ 835.431557][T10228] usb 4-1: config 0 descriptor?? [ 835.732214][T15830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 835.815454][T16357] nvme_fabrics: missing parameter 'transport=%s' [ 835.825840][T16357] nvme_fabrics: missing parameter 'nqn=%s' [ 835.856608][T10228] usb 4-1: USB disconnect, device number 24 [ 835.894355][T15830] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 835.909590][T15830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.922702][T15830] usb 1-1: config 0 descriptor?? [ 835.940331][T15830] cp210x 1-1:0.0: cp210x converter detected [ 836.061513][T10205] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 836.255935][T10205] usb 2-1: device descriptor read/64, error -71 [ 836.347931][T15830] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 836.358442][T15830] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 836.366289][T15830] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 836.570103][T10205] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 836.589485][T15830] usb 1-1: cp210x converter now attached to ttyUSB0 [ 836.713601][T16399] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 836.752185][T10205] usb 2-1: device descriptor read/64, error -71 [ 837.060272][T10205] usb usb2-port1: attempt power cycle [ 837.390070][T14782] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 837.410134][T10205] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 837.440766][T10205] usb 2-1: device descriptor read/8, error -71 [ 837.573102][T14782] usb 4-1: unable to get BOS descriptor or descriptor too short [ 837.581800][T14782] usb 4-1: not running at top speed; connect to a high speed hub [ 837.593625][T14782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.604923][T14782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.698926][T14782] usb 4-1: string descriptor 0 read error: -22 [ 837.705544][T14782] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.714856][T14782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.766268][T10205] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 837.801705][T10205] usb 2-1: device descriptor read/8, error -71 [ 837.803054][T14782] usb 4-1: 0:2 : does not exist [ 837.948520][T10205] usb usb2-port1: unable to enumerate USB device [ 838.343469][T14782] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 838.428732][T14782] usb 4-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 838.472364][T14782] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 838.499692][T10205] usb 1-1: USB disconnect, device number 10 [ 838.500378][T14782] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 838.516554][T10205] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 838.567557][T10205] cp210x 1-1:0.0: device disconnected [ 838.589370][T14782] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 838.642410][T14782] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 838.709408][T14782] usb 4-1: USB disconnect, device number 25 [ 839.270083][T10205] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 839.421725][T10205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.464933][T10205] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.493033][T10205] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 839.514807][T10205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.531337][T10205] usb 2-1: Product: syz [ 839.540308][T10205] usb 2-1: Manufacturer: syz [ 839.550324][T10205] usb 2-1: SerialNumber: syz [ 839.570853][T10205] usb 2-1: config 0 descriptor?? [ 840.068189][T10205] usb 2-1: USB disconnect, device number 12 [ 841.380199][T10209] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 841.563092][T10209] usb 3-1: Using ep0 maxpacket: 8 [ 841.579925][T10209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.593572][T10209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.626052][T10209] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 841.658031][T10209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.710866][T10209] usb 3-1: config 0 descriptor?? [ 842.222770][T16467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.239280][T16467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.509055][T10209] logitech 0003:046D:C20E.0019: rdesc size test failed for formula gp [ 842.527109][T10209] logitech 0003:046D:C20E.0019: item fetching failed at offset 10/11 [ 842.551365][T10209] logitech 0003:046D:C20E.0019: parse failed [ 842.567289][T10209] logitech 0003:046D:C20E.0019: probe with driver logitech failed with error -22 [ 842.759296][T10205] usb 3-1: USB disconnect, device number 9 [ 842.802507][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2805'. [ 842.881347][T16481] tipc: Enabling of bearer rejected, failed to enable media [ 843.470078][T10228] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 843.793129][T10228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.812658][T10228] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 843.829484][T10228] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 843.838840][T10228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.847257][T10228] usb 4-1: Product: syz [ 843.851938][T10228] usb 4-1: Manufacturer: syz [ 843.856764][T10228] usb 4-1: SerialNumber: syz [ 843.881097][T10228] usb 4-1: config 0 descriptor?? [ 844.161786][T10228] usb 4-1: USB disconnect, device number 26 [ 845.086448][T14782] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 845.220079][T14782] usb 1-1: device descriptor read/64, error -71 [ 845.242258][T16533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.491154][T14782] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 845.630093][T14782] usb 1-1: device descriptor read/64, error -71 [ 845.742218][T14782] usb usb1-port1: attempt power cycle [ 846.510109][T14782] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 846.551469][T14782] usb 1-1: device descriptor read/8, error -71 [ 846.619102][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2825'. [ 846.693514][T16551] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 846.706499][T16551] bond2 (unregistering): Released all slaves [ 846.790092][T14782] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 846.879007][T14782] usb 1-1: device descriptor read/8, error -71 [ 847.003334][T16560] FAULT_INJECTION: forcing a failure. [ 847.003334][T16560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.040723][T14782] usb usb1-port1: unable to enumerate USB device [ 847.053910][T16560] CPU: 0 UID: 0 PID: 16560 Comm: syz.2.2828 Not tainted syzkaller #0 PREEMPT(full) [ 847.053942][T16560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 847.053954][T16560] Call Trace: [ 847.053963][T16560] [ 847.053972][T16560] dump_stack_lvl+0x189/0x250 [ 847.054005][T16560] ? __pfx____ratelimit+0x10/0x10 [ 847.054033][T16560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 847.054060][T16560] ? __pfx__printk+0x10/0x10 [ 847.054084][T16560] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 847.054123][T16560] should_fail_ex+0x414/0x560 [ 847.054159][T16560] strncpy_from_user+0x36/0x290 [ 847.054191][T16560] __se_sys_request_key+0xa2/0x340 [ 847.054216][T16560] ? ksys_write+0x22a/0x250 [ 847.054243][T16560] ? __pfx___se_sys_request_key+0x10/0x10 [ 847.054273][T16560] ? do_syscall_64+0xbe/0xfa0 [ 847.054305][T16560] do_syscall_64+0xfa/0xfa0 [ 847.054331][T16560] ? lockdep_hardirqs_on+0x9c/0x150 [ 847.054357][T16560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.054377][T16560] ? clear_bhb_loop+0x60/0xb0 [ 847.054401][T16560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.054421][T16560] RIP: 0033:0x7f0e2b58f749 [ 847.054439][T16560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.054458][T16560] RSP: 002b:00007f0e2c422038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 847.054479][T16560] RAX: ffffffffffffffda RBX: 00007f0e2b7e5fa0 RCX: 00007f0e2b58f749 [ 847.054495][T16560] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000240 [ 847.054509][T16560] RBP: 00007f0e2c422090 R08: 0000000000000000 R09: 0000000000000000 [ 847.054522][T16560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.054534][T16560] R13: 00007f0e2b7e6038 R14: 00007f0e2b7e5fa0 R15: 00007f0e2b90fa28 [ 847.054567][T16560] [ 847.350082][T10228] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 847.530136][T10205] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 847.560960][T10228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.578226][T16566] random: crng reseeded on system resumption [ 847.644982][T10228] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 847.678385][T10228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.711401][T10205] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.722965][T10205] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 847.740893][T10228] usb 5-1: config 0 descriptor?? [ 847.764361][T10205] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 847.781283][T10205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.789451][T10205] usb 3-1: Product: syz [ 847.829473][T10205] usb 3-1: Manufacturer: syz [ 847.849196][T10205] usb 3-1: SerialNumber: syz [ 847.891786][T10205] usb 3-1: config 0 descriptor?? [ 848.078945][T16570] binder: BINDER_SET_CONTEXT_MGR already set [ 848.085203][T16570] binder: 16567:16570 ioctl 4018620d 2000000001c0 returned -16 [ 848.094656][T16570] binder: 16567:16570 ioctl c0306201 0 returned -14 [ 848.223361][T10209] usb 3-1: USB disconnect, device number 10 [ 848.382336][T10228] usbhid 5-1:0.0: can't add hid device: -71 [ 848.436905][T10228] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 848.476038][T10228] usb 5-1: USB disconnect, device number 123 [ 849.842666][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 849.886872][T16596] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 849.943062][T16596] bond4 (unregistering): Released all slaves [ 850.051619][T16602] FAULT_INJECTION: forcing a failure. [ 850.051619][T16602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 850.105450][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.4.2838 Not tainted syzkaller #0 PREEMPT(full) [ 850.105467][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.105475][T16602] Call Trace: [ 850.105480][T16602] [ 850.105485][T16602] dump_stack_lvl+0x189/0x250 [ 850.105505][T16602] ? __pfx____ratelimit+0x10/0x10 [ 850.105520][T16602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.105534][T16602] ? __pfx__printk+0x10/0x10 [ 850.105546][T16602] ? fs_reclaim_acquire+0x7d/0x100 [ 850.105568][T16602] should_fail_ex+0x414/0x560 [ 850.105587][T16602] prepare_alloc_pages+0x213/0x610 [ 850.105601][T16602] __alloc_frozen_pages_noprof+0x123/0x370 [ 850.105614][T16602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 850.105630][T16602] ? policy_nodemask+0x27c/0x720 [ 850.105639][T16602] ? __lock_acquire+0xab9/0xd20 [ 850.105653][T16602] alloc_pages_mpol+0x232/0x4a0 [ 850.105667][T16602] vma_alloc_folio_noprof+0xe4/0x200 [ 850.105679][T16602] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 850.105696][T16602] folio_prealloc+0x30/0x180 [ 850.105713][T16602] __handle_mm_fault+0x2a8b/0x5400 [ 850.105735][T16602] ? lock_vma_under_rcu+0x1a3/0x450 [ 850.105750][T16602] ? __pfx___handle_mm_fault+0x10/0x10 [ 850.105772][T16602] ? lock_vma_under_rcu+0x3d2/0x450 [ 850.105786][T16602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 850.105803][T16602] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 850.105822][T16602] handle_mm_fault+0x40a/0x8e0 [ 850.105842][T16602] do_user_addr_fault+0xa7c/0x1380 [ 850.105857][T16602] ? rcu_is_watching+0x15/0xb0 [ 850.105869][T16602] ? trace_page_fault_user+0x84/0x1e0 [ 850.105881][T16602] exc_page_fault+0x82/0x100 [ 850.105898][T16602] asm_exc_page_fault+0x26/0x30 [ 850.105908][T16602] RIP: 0033:0x7fa77005a65b [ 850.105919][T16602] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 850.105928][T16602] RSP: 002b:00007fa771043fb0 EFLAGS: 00010202 [ 850.105939][T16602] RAX: 0000000000000000 RBX: 00007fa7703e6090 RCX: 0000000000000000 [ 850.105946][T16602] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000000 [ 850.105953][T16602] RBP: 00007fa771045090 R08: 0000000000000000 R09: 0000000000000000 [ 850.105963][T16602] R10: 0000200000000000 R11: 0000000000000000 R12: 0000000000000001 [ 850.105971][T16602] R13: 00007fa7703e6128 R14: 00007fa7703e6090 R15: 00007fa77050fa28 [ 850.105996][T16602] [ 850.106178][T16602] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 850.940147][T10205] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 851.060087][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 851.110099][T10205] usb 5-1: Using ep0 maxpacket: 32 [ 851.117205][T10205] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 851.128021][T10205] usb 5-1: config 0 has no interface number 0 [ 851.148803][T10205] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 851.158238][T10205] usb 5-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 851.168723][T10205] usb 5-1: Product: syz [ 851.173676][T10205] usb 5-1: Manufacturer: syz [ 851.179264][T10205] usb 5-1: SerialNumber: syz [ 851.308270][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 851.317146][ T24] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 851.317236][T10205] usb 5-1: config 0 descriptor?? [ 851.325618][ T24] usb 3-1: config 0 has no interface number 0 [ 851.325674][ T24] usb 3-1: config 0 interface 185 has no altsetting 0 [ 851.330950][T15831] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 851.353736][ T24] usb 3-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 851.363908][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.374056][T10205] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 851.402197][ T24] usb 3-1: Product: syz [ 851.412726][ T24] usb 3-1: Manufacturer: syz [ 851.419755][ T24] usb 3-1: SerialNumber: syz [ 851.450089][T10205] usb 5-1: selecting invalid altsetting 1 [ 851.456007][T10205] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 851.456559][ T24] usb 3-1: config 0 descriptor?? [ 851.540169][T16624] syzkaller0: entered promiscuous mode [ 851.545694][T16624] syzkaller0: entered allmulticast mode [ 851.581272][T15831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.594390][T15831] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 851.608322][T10205] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 851.625858][T10205] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 851.637183][T10205] usb 5-1: media controller created [ 851.643508][T15831] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 851.653138][T15831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.663013][T15831] usb 2-1: Product: syz [ 851.668420][T15831] usb 2-1: Manufacturer: syz [ 851.695190][T15831] usb 2-1: SerialNumber: syz [ 851.722898][T15831] usb 2-1: config 0 descriptor?? [ 851.743679][T10205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.860303][ T24] usb 3-1: Could not find all expected endpoints [ 852.033227][ T24] usb 3-1: USB disconnect, device number 11 [ 852.040146][T10205] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 852.096642][T10205] zl10353_read_register: readreg error (reg=127, ret==-71) [ 852.116201][T10205] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 852.150810][T16618] nvme_fabrics: missing parameter 'transport=%s' [ 852.157286][T16618] nvme_fabrics: missing parameter 'nqn=%s' [ 852.174296][T14782] usb 2-1: USB disconnect, device number 13 [ 852.285384][T10205] usb 5-1: USB disconnect, device number 124 [ 852.632258][T15831] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 852.819480][T15831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.832484][T15831] usb 1-1: config 0 has no interfaces? [ 852.840709][T15831] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 852.853503][T15831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.869269][T15831] usb 1-1: Product: syz [ 852.878264][T15831] usb 1-1: Manufacturer: syz [ 852.888008][T15831] usb 1-1: SerialNumber: syz [ 852.892874][T10205] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 852.967719][T15831] usb 1-1: config 0 descriptor?? [ 853.073205][T10228] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 853.108616][T10205] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 853.120189][T10205] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.147785][T10205] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 853.168404][T10205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.277972][T10228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.285813][ T24] usb 1-1: USB disconnect, device number 15 [ 853.288484][T10228] usb 2-1: config 0 has no interfaces? [ 853.332644][T10228] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 853.349172][T10228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.399304][T10228] usb 2-1: config 0 descriptor?? [ 853.404409][T10205] usb 4-1: usb_control_msg returned -32 [ 853.541444][T10205] usbtmc 4-1:16.0: can't read capabilities [ 853.685202][T16640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.704820][T16640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.754045][T16640] vlan0: entered promiscuous mode [ 853.760123][T16640] bond0: entered promiscuous mode [ 853.765259][T16640] bond_slave_0: entered promiscuous mode [ 853.771334][T16640] bond_slave_1: entered promiscuous mode [ 853.831568][T10205] usb 2-1: USB disconnect, device number 14 [ 854.618900][T16669] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 854.625435][T16669] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 854.686421][T16669] vhci_hcd vhci_hcd.0: Device attached [ 854.770653][T16670] vhci_hcd: connection closed [ 854.771353][ T3541] vhci_hcd: stop threads [ 854.789043][ T3541] vhci_hcd: release socket [ 854.793639][ T3541] vhci_hcd: disconnect device [ 855.713158][T10205] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 855.740812][T15830] usb 4-1: USB disconnect, device number 27 [ 855.886502][T10205] usb 5-1: Using ep0 maxpacket: 8 [ 855.947736][T10205] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 855.956838][T10205] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.977407][T10205] usb 5-1: config 0 has no interface number 0 [ 856.018465][T10205] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 856.157262][T10205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.172156][T10205] usb 5-1: Product: syz [ 856.180606][T10205] usb 5-1: Manufacturer: syz [ 856.185245][T10205] usb 5-1: SerialNumber: syz [ 856.207684][T10205] usb 5-1: config 0 descriptor?? [ 856.245856][T10205] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 856.500121][T15830] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 856.764855][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'. [ 856.817905][T15830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.856119][T15830] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.881844][T15830] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 856.891517][T15830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.910913][T15830] usb 2-1: Product: syz [ 856.935496][T15830] usb 2-1: Manufacturer: syz [ 856.955749][T15830] usb 2-1: SerialNumber: syz [ 857.075406][T15830] usb 2-1: config 0 descriptor?? [ 857.310090][T10209] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 857.361526][T16692] nvme_fabrics: missing parameter 'transport=%s' [ 857.367957][T16692] nvme_fabrics: missing parameter 'nqn=%s' [ 857.451184][T15830] usb 2-1: USB disconnect, device number 15 [ 857.453731][T10209] usb 3-1: device descriptor read/64, error -71 [ 857.740167][T10209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 857.880091][T10209] usb 3-1: device descriptor read/64, error -71 [ 857.992740][T10209] usb usb3-port1: attempt power cycle [ 858.272313][ T24] usb 5-1: USB disconnect, device number 125 [ 858.450212][T10209] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 858.480705][T10209] usb 3-1: device descriptor read/8, error -71 [ 859.080107][T10209] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 859.120235][T10209] usb 3-1: device descriptor read/8, error -71 [ 859.200283][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 859.270351][T10209] usb usb3-port1: unable to enumerate USB device [ 859.334579][T16735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2871'. [ 859.370347][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 859.377509][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.389443][ T24] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 859.398963][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.412984][ T24] usb 4-1: Product: syz [ 859.418214][ T24] usb 4-1: Manufacturer: syz [ 859.428754][ T24] usb 4-1: SerialNumber: syz [ 859.436680][ T24] usb 4-1: config 0 descriptor?? [ 859.502189][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 859.502206][ T30] audit: type=1326 audit(1763654237.861:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.505683][ T24] usb 4-1: invalid MIDI EP [ 859.508337][ T30] audit: type=1326 audit(1763654237.861:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.558949][ T24] usb 4-1: snd-bcd2000: error during probing [ 859.565952][ T24] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 859.606656][ T30] audit: type=1326 audit(1763654237.861:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.630134][ T30] audit: type=1326 audit(1763654237.861:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.654372][ T30] audit: type=1326 audit(1763654237.861:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.660383][ T24] usb 4-1: USB disconnect, device number 28 [ 859.680397][ T30] audit: type=1326 audit(1763654237.861:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 859.919900][ T30] audit: type=1326 audit(1763654237.861:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 860.046394][ T30] audit: type=1326 audit(1763654237.871:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 860.160144][ T30] audit: type=1326 audit(1763654237.871:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 860.188421][ T30] audit: type=1326 audit(1763654237.941:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16737 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dd978f749 code=0x7ffc0000 [ 860.750079][T15830] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 860.942305][T15830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.954688][T15830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 860.980117][T10228] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 861.169373][T15830] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 861.279826][T15830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.349808][T15830] usb 3-1: Product: syz [ 861.441299][T10228] usb 1-1: device descriptor read/64, error -71 [ 861.456022][T15830] usb 3-1: Manufacturer: syz [ 861.548559][T15830] usb 3-1: SerialNumber: syz [ 861.575736][T15830] usb 3-1: config 0 descriptor?? [ 861.720815][T10228] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 861.862509][T16761] nvme_fabrics: missing parameter 'transport=%s' [ 861.869593][T16761] nvme_fabrics: missing parameter 'nqn=%s' [ 861.897254][T10209] usb 3-1: USB disconnect, device number 16 [ 861.950654][T10228] usb 1-1: device descriptor read/64, error -71 [ 862.060553][T10228] usb usb1-port1: attempt power cycle [ 862.464984][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.478518][T10228] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 862.490132][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.502123][T10228] usb 1-1: device descriptor read/8, error -71 [ 862.685211][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.712169][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.740353][T10228] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 862.762635][T10228] usb 1-1: device descriptor read/8, error -71 [ 862.796268][T16790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.807678][T16790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.816621][T16790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.831768][T16790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.839434][T16790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 862.900152][T14782] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 862.900500][T10228] usb usb1-port1: unable to enumerate USB device [ 862.907991][T10209] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 862.923221][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 862.935595][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 862.950901][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 862.959188][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 862.970222][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.048944][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.091242][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.120646][T10209] usb 4-1: device descriptor read/64, error -71 [ 863.157883][T14782] usb 3-1: Using ep0 maxpacket: 32 [ 863.170475][T14782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.182005][T14782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.192202][T14782] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 863.201553][T14782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.214808][T14782] usb 3-1: config 0 descriptor?? [ 863.216480][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.240226][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.390345][T10209] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 863.541077][T10209] usb 4-1: device descriptor read/64, error -71 [ 863.572164][ T60] batman_adv: batadv0: Interface deactivated: gretap1 [ 863.652593][T14782] savu 0003:1E7D:2D5A.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 863.668160][T10209] usb usb4-port1: attempt power cycle [ 863.903025][T15831] usb 3-1: USB disconnect, device number 17 [ 864.020273][T10209] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 864.041406][T10209] usb 4-1: device descriptor read/8, error -71 [ 864.253707][ T60] batman_adv: batadv0: Removing interface: gretap1 [ 864.290209][T10209] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 864.311186][T10209] usb 4-1: device descriptor read/8, error -71 [ 864.390173][T15831] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 864.432609][T10209] usb usb4-port1: unable to enumerate USB device [ 864.480076][T10228] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 864.530144][T15831] usb 3-1: device descriptor read/64, error -71 [ 864.888215][T10228] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 864.899424][T10228] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 864.947085][T10228] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 864.957420][T10228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.977834][T16819] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 865.003941][T10228] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.011290][T15831] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 865.018908][T16790] Bluetooth: hci3: command tx timeout [ 865.170349][T15831] usb 3-1: device descriptor read/64, error -71 [ 865.177049][ T60] bond0 (unregistering): Released all slaves [ 865.242514][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2892'. [ 865.287503][T15831] usb usb3-port1: attempt power cycle [ 865.403565][ T60] bond1 (unregistering): Released all slaves [ 865.487818][T10213] usb 1-1: USB disconnect, device number 20 [ 865.511232][T16829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2893'. [ 865.565335][ T60] tipc: Disabling bearer [ 865.573769][ T60] tipc: Left network mode [ 865.593223][T16829] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 865.612675][T16829] bond3 (unregistering): Released all slaves [ 865.640256][T15831] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 865.816044][T16793] chnl_net:caif_netlink_parms(): no params data found [ 865.857864][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2897'. [ 865.867089][T15831] usb 3-1: device not accepting address 20, error -71 [ 865.943711][T16839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 865.993507][T16848] netlink: 'syz.3.2896': attribute type 21 has an invalid length. [ 866.253475][T15831] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 866.351559][T16862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.386102][T15831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.396535][T15831] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.412825][T15831] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 866.422238][T15831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.470333][T15831] usb 3-1: Product: syz [ 866.610239][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.617626][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.630112][T15831] usb 3-1: Manufacturer: syz [ 866.639509][T15831] usb 3-1: SerialNumber: syz [ 866.639677][T16793] bridge_slave_0: entered allmulticast mode [ 866.672969][T16793] bridge_slave_0: entered promiscuous mode [ 866.778195][T15831] usb 3-1: config 0 descriptor?? [ 866.786432][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.803498][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.822205][T16793] bridge_slave_1: entered allmulticast mode [ 866.855755][T16793] bridge_slave_1: entered promiscuous mode [ 867.105795][T16790] Bluetooth: hci3: command tx timeout [ 867.306682][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.321414][T16840] nvme_fabrics: missing parameter 'transport=%s' [ 867.328822][T16840] nvme_fabrics: missing parameter 'nqn=%s' [ 867.334633][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.355010][T10213] usb 3-1: USB disconnect, device number 21 [ 867.492883][T16793] team0: Port device team_slave_0 added [ 867.507367][T16793] team0: Port device team_slave_1 added [ 867.532163][T16880] trusted_key: encrypted_key: insufficient parameters specified [ 867.648531][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.664665][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.690743][ C1] vkms_vblank_simulate: vblank timer overrun [ 867.718436][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.053903][T16897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2904'. [ 868.067307][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.078034][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.104027][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.115653][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.261389][ T60] hsr_slave_0: left promiscuous mode [ 868.533754][ T60] hsr_slave_1: left promiscuous mode [ 868.609252][ T60] veth1_macvtap: left promiscuous mode [ 868.790550][ T60] veth0_macvtap: left promiscuous mode [ 868.820047][ T60] veth1_vlan: left promiscuous mode [ 868.992631][ T60] veth0_vlan: left promiscuous mode [ 869.189047][T16790] Bluetooth: hci3: command tx timeout [ 870.134616][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.148071][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.170769][ T60] pim6reg (unregistering): left allmulticast mode [ 871.260160][T16790] Bluetooth: hci3: command tx timeout [ 872.014216][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 872.014232][ T30] audit: type=1326 audit(1763654250.321:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.077274][ T30] audit: type=1326 audit(1763654250.321:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.126760][ T30] audit: type=1326 audit(1763654250.331:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.171189][ T30] audit: type=1326 audit(1763654250.331:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.196208][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'. [ 872.206827][ T30] audit: type=1326 audit(1763654250.331:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.252555][ T30] audit: type=1326 audit(1763654250.331:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.277499][ T30] audit: type=1326 audit(1763654250.331:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.328216][ T30] audit: type=1326 audit(1763654250.331:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.433346][ T30] audit: type=1326 audit(1763654250.331:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.456240][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.501436][ T30] audit: type=1326 audit(1763654250.331:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.2.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b58f749 code=0x7ffc0000 [ 872.523897][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.394210][ T60] lo (unregistering): left allmulticast mode [ 873.442091][T16933] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 873.630609][T16951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2914'. [ 873.641079][T16793] hsr_slave_0: entered promiscuous mode [ 873.683733][T16793] hsr_slave_1: entered promiscuous mode [ 873.699482][T16793] debugfs: 'hsr0' already exists in 'hsr' [ 873.748939][T16793] Cannot create hsr debugfs directory [ 873.805562][T15831] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 873.826188][T16956] fuse: Bad value for 'group_id' [ 873.831276][T16956] fuse: Bad value for 'group_id' [ 873.840300][T16956] fuse: Bad value for 'user_id' [ 873.845399][T16956] fuse: Bad value for 'user_id' [ 873.952816][T16959] trusted_key: encrypted_key: insufficient parameters specified [ 874.055705][T15831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.082824][T15831] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 874.121686][T15831] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 874.148334][T15831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.194117][T15831] usb 4-1: Product: syz [ 874.225212][T15831] usb 4-1: Manufacturer: syz [ 874.241420][T15831] usb 4-1: SerialNumber: syz [ 874.293273][T15831] usb 4-1: config 0 descriptor?? [ 874.370163][ T60] IPVS: stop unused estimator thread 0... [ 875.144461][T16943] nvme_fabrics: missing parameter 'transport=%s' [ 875.151028][T16943] nvme_fabrics: missing parameter 'nqn=%s' [ 875.204095][T15831] usb 4-1: USB disconnect, device number 33 [ 875.888087][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2919'. [ 875.923915][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2919'. [ 876.202201][T10228] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 876.216093][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2922'. [ 876.363029][T10228] usb 2-1: config 0 has no interfaces? [ 876.363117][T16997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 876.377857][T10228] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 876.387587][T10228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.456789][T10228] usb 2-1: Product: syz [ 876.466068][T10228] usb 2-1: Manufacturer: syz [ 876.471409][T10228] usb 2-1: SerialNumber: syz [ 876.487132][T10228] usb 2-1: config 0 descriptor?? [ 876.703808][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.730492][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.750833][T16793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 876.777953][T17010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2924'. [ 876.796118][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.832167][T16793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 876.851966][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.892180][T16793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 876.894042][T16989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.929663][T16793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 876.950750][T16989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.967335][T17012] trusted_key: encrypted_key: insufficient parameters specified [ 877.323089][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.389245][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.418581][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.425741][T10303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.466989][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.474217][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.488640][T15830] usb 2-1: USB disconnect, device number 16 [ 877.590240][T15831] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 877.754411][T15831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.766961][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.803920][T15831] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.921163][T15831] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 877.966779][T15831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.980456][T15830] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 878.000243][T15831] usb 4-1: Product: syz [ 878.016523][T15831] usb 4-1: Manufacturer: syz [ 878.030988][T15831] usb 4-1: SerialNumber: syz [ 878.058535][T15831] usb 4-1: config 0 descriptor?? [ 878.074225][T16793] veth0_vlan: entered promiscuous mode [ 878.109526][T16793] veth1_vlan: entered promiscuous mode [ 878.172101][T15830] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 878.203020][T15830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.223084][T16793] veth0_macvtap: entered promiscuous mode [ 878.251452][T15830] usb 2-1: config 0 descriptor?? [ 878.253671][T17055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2931'. [ 878.263097][T16793] veth1_macvtap: entered promiscuous mode [ 878.278636][T15830] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 878.312914][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2931'. [ 878.377680][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.405640][T17035] nvme_fabrics: missing parameter 'transport=%s' [ 878.412659][T17035] nvme_fabrics: missing parameter 'nqn=%s' [ 878.428240][T15831] usb 4-1: USB disconnect, device number 34 [ 878.449663][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.480240][T10303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.512682][T10303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.549512][T10303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.619390][T10303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.816880][T16750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.830150][T10213] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 878.841426][T16750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.932029][T17073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2935'. [ 879.021335][T10303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.035583][T10303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.084290][T10213] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 879.102330][T10213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.135485][T10213] usb 1-1: config 0 descriptor?? [ 879.140844][T15830] usb 2-1: USB disconnect, device number 17 [ 879.162502][T10213] cp210x 1-1:0.0: cp210x converter detected [ 879.165174][T17079] trusted_key: encrypted_key: insufficient parameters specified [ 879.369539][T10213] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 879.396319][T10213] cp210x 1-1:0.0: querying part number failed [ 879.470699][T10213] usb 1-1: cp210x converter now attached to ttyUSB0 [ 879.598064][T17092] random: crng reseeded on system resumption [ 879.976294][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 879.976313][ T30] audit: type=1326 audit(1763654258.341:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5678f749 code=0x7ffc0000 [ 880.004949][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.216768][ T30] audit: type=1326 audit(1763654258.341:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e5678df90 code=0x7ffc0000 [ 880.239245][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.331174][ T30] audit: type=1326 audit(1763654258.341:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 880.353539][ C1] vkms_vblank_simulate: vblank timer overrun [ 880.370155][T10205] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 880.458661][ T30] audit: type=1326 audit(1763654258.341:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 880.530675][T10205] usb 4-1: Using ep0 maxpacket: 16 [ 880.559951][T10205] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 880.580692][T10205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.601561][T10205] usb 4-1: Product: syz [ 880.613722][T10205] usb 4-1: Manufacturer: syz [ 880.636838][T10205] usb 4-1: SerialNumber: syz [ 880.744336][ T30] audit: type=1326 audit(1763654258.611:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 880.769662][T10205] usb 4-1: config 0 descriptor?? [ 880.821020][ T30] audit: type=1326 audit(1763654258.611:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 881.042614][ T30] audit: type=1326 audit(1763654258.611:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 881.159519][ T30] audit: type=1326 audit(1763654258.681:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 881.211711][T10205] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 881.240083][ T30] audit: type=1326 audit(1763654258.741:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 881.296448][ T30] audit: type=1326 audit(1763654258.751:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17099 comm="syz.3.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5678f34b code=0x7ffc0000 [ 881.318862][ C1] vkms_vblank_simulate: vblank timer overrun [ 881.361120][T10205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 881.391912][T10205] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 881.440704][T10205] usb 4-1: media controller created [ 881.521556][T14782] usb 1-1: USB disconnect, device number 21 [ 881.532934][T14782] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 881.570942][T14782] cp210x 1-1:0.0: device disconnected [ 881.596052][T10205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 881.714910][T17126] random: crng reseeded on system resumption [ 881.791652][T10205] zl10353_read_register: readreg error (reg=127, ret==0) [ 881.983872][T10205] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 882.159384][T10205] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 882.250123][T10213] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 882.421977][T10213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.433441][T10213] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 882.446247][T10205] usb 4-1: USB disconnect, device number 35 [ 882.485434][T10213] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 882.495023][T10213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.504131][T10213] usb 1-1: Product: syz [ 882.526525][T10213] usb 1-1: Manufacturer: syz [ 882.556893][T10213] usb 1-1: SerialNumber: syz [ 882.581651][T10213] usb 1-1: config 0 descriptor?? [ 882.653346][T10205] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 882.876968][T17146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2947'. [ 882.941738][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2947'. [ 882.984493][T17149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2947'. [ 883.108577][T17132] nvme_fabrics: missing parameter 'transport=%s' [ 883.116251][T17132] nvme_fabrics: missing parameter 'nqn=%s' [ 883.135190][T10205] usb 1-1: USB disconnect, device number 22 [ 883.430113][T10228] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 883.575890][T10228] usb 2-1: device descriptor read/64, error -71 [ 883.842112][T10228] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 883.867193][T17167] trusted_key: encrypted_key: insufficient parameters specified [ 883.990084][T10228] usb 2-1: device descriptor read/64, error -71 [ 884.110323][T10228] usb usb2-port1: attempt power cycle [ 884.250132][T10213] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 884.516138][T10213] usb 1-1: Using ep0 maxpacket: 8 [ 884.531211][T10213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.550155][T10228] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 884.584999][T10228] usb 2-1: device descriptor read/8, error -71 [ 884.736125][T10213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 884.788400][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 884.800215][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 884.812454][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.851356][T10213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 884.862701][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 884.870486][T10228] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 884.880709][T10213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 884.893653][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.917117][T10213] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 884.934956][T10228] usb 2-1: device descriptor read/8, error -71 [ 884.943001][T10213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.993576][T10213] hub 1-1:1.0: bad descriptor, ignoring hub [ 885.000452][T10213] hub 1-1:1.0: probe with driver hub failed with error -5 [ 885.008290][T10213] cdc_wdm 1-1:1.0: skipping garbage [ 885.014382][T10213] cdc_wdm 1-1:1.0: skipping garbage [ 885.022078][T10213] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 885.028095][T10213] cdc_wdm 1-1:1.0: Unknown control protocol [ 885.104345][T10228] usb usb2-port1: unable to enumerate USB device [ 885.880327][T17182] chnl_net:caif_netlink_parms(): no params data found [ 886.562936][T17182] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.581922][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.628958][T17182] bridge_slave_0: entered allmulticast mode [ 886.636472][T17182] bridge_slave_0: entered promiscuous mode [ 886.660675][T17182] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.680226][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.687516][T17182] bridge_slave_1: entered allmulticast mode [ 886.699937][T17182] bridge_slave_1: entered promiscuous mode [ 886.825132][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.893258][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.970562][T17182] team0: Port device team_slave_0 added [ 886.981436][T17182] team0: Port device team_slave_1 added [ 887.010658][ T5837] Bluetooth: hci5: command tx timeout [ 887.200735][T17210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2957'. [ 887.285900][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.345314][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.370123][T10228] usb 1-1: USB disconnect, device number 23 [ 887.371512][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.430145][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.451214][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 887.468284][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.476409][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.502379][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.515613][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.566753][T17210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2957'. [ 887.586262][T17217] veth4: entered promiscuous mode [ 887.591784][T17217] veth4: entered allmulticast mode [ 887.760237][ T24] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 887.847141][T17182] hsr_slave_0: entered promiscuous mode [ 887.854210][T17182] hsr_slave_1: entered promiscuous mode [ 887.862088][T17182] debugfs: 'hsr0' already exists in 'hsr' [ 887.870579][T17182] Cannot create hsr debugfs directory [ 888.033303][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.044935][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.064028][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 888.075941][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.151496][ T24] usb 2-1: Product: syz [ 888.167736][ T24] usb 2-1: Manufacturer: syz [ 888.185234][ T24] usb 2-1: SerialNumber: syz [ 888.220539][ T24] usb 2-1: config 0 descriptor?? [ 888.587200][T17218] nvme_fabrics: missing parameter 'transport=%s' [ 888.596729][T17218] nvme_fabrics: missing parameter 'nqn=%s' [ 888.635438][ T24] usb 2-1: USB disconnect, device number 22 [ 889.090262][ T5837] Bluetooth: hci5: command tx timeout [ 889.158061][T17182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.172304][T17182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 889.195938][T17182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.220146][T17182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 889.578802][T17245] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 889.649068][T17260] binder: 17259:17260 ioctl c018620c 0 returned -14 [ 889.687495][T17182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.720055][T10205] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 889.900387][T10205] usb 2-1: Using ep0 maxpacket: 8 [ 889.941803][T17265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2967'. [ 889.965465][T10205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.003294][T10205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 890.105403][T10205] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 890.226228][T10205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 890.242687][T17182] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.406185][T10205] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 890.590584][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.597824][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.768835][T10205] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 890.856669][T10205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.883993][T16749] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.891165][T16749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.915128][T10205] hub 2-1:1.0: bad descriptor, ignoring hub [ 890.921165][T10205] hub 2-1:1.0: probe with driver hub failed with error -5 [ 890.940682][T10205] cdc_wdm 2-1:1.0: skipping garbage [ 890.950399][T10205] cdc_wdm 2-1:1.0: skipping garbage [ 890.955664][T10205] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 891.125781][T17241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2965'. [ 891.180639][ T5837] Bluetooth: hci5: command tx timeout [ 891.216869][T17182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.256385][T10205] usb 2-1: USB disconnect, device number 23 [ 891.327329][T17182] veth0_vlan: entered promiscuous mode [ 891.344819][T17182] veth1_vlan: entered promiscuous mode [ 891.450579][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 891.465520][T17182] veth0_macvtap: entered promiscuous mode [ 891.483707][T17182] veth1_macvtap: entered promiscuous mode [ 891.521428][T17182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.535177][T17182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.572400][T16750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.583271][T16750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.597785][T16750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.608090][T16750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.622278][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 891.661284][T15830] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 891.703924][ T24] usb 5-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 891.737207][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 891.766844][T16750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.779376][T16750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.793007][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.857676][T17283] FAULT_INJECTION: forcing a failure. [ 891.857676][T17283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.874528][T16749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.885990][T15830] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 891.901570][ T24] quatech2 5-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 891.903265][T16749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.919411][T15830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.962931][T17283] CPU: 1 UID: 0 PID: 17283 Comm: syz.0.2973 Not tainted syzkaller #0 PREEMPT(full) [ 891.962959][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.962971][T17283] Call Trace: [ 891.962980][T17283] [ 891.962992][T17283] dump_stack_lvl+0x189/0x250 [ 891.963023][T17283] ? __pfx____ratelimit+0x10/0x10 [ 891.963050][T17283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.963076][T17283] ? __pfx__printk+0x10/0x10 [ 891.963105][T17283] should_fail_ex+0x414/0x560 [ 891.963136][T17283] _copy_to_user+0x31/0xb0 [ 891.963162][T17283] simple_read_from_buffer+0xe1/0x170 [ 891.963201][T17283] proc_fail_nth_read+0x1b3/0x220 [ 891.963227][T17283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.963253][T17283] ? rw_verify_area+0x2a6/0x4d0 [ 891.963277][T17283] ? __lock_acquire+0xab9/0xd20 [ 891.963294][T17283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 891.963318][T17283] vfs_read+0x200/0xa30 [ 891.963343][T17283] ? fdget_pos+0x247/0x320 [ 891.963366][T17283] ? __pfx___mutex_lock+0x10/0x10 [ 891.963396][T17283] ? __pfx_vfs_read+0x10/0x10 [ 891.963425][T17283] ? __fget_files+0x2a/0x420 [ 891.963445][T17283] ? __fget_files+0x3a0/0x420 [ 891.963462][T17283] ? __fget_files+0x2a/0x420 [ 891.963487][T17283] ksys_read+0x145/0x250 [ 891.963514][T17283] ? __pfx_ksys_read+0x10/0x10 [ 891.963542][T17283] ? do_syscall_64+0xbe/0xfa0 [ 891.963573][T17283] do_syscall_64+0xfa/0xfa0 [ 891.963597][T17283] ? lockdep_hardirqs_on+0x9c/0x150 [ 891.963623][T17283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.963640][T17283] ? clear_bhb_loop+0x60/0xb0 [ 891.963663][T17283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.963682][T17283] RIP: 0033:0x7f1dd978e15c [ 891.963700][T17283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 891.963717][T17283] RSP: 002b:00007f1dda660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 891.963737][T17283] RAX: ffffffffffffffda RBX: 00007f1dd99e5fa0 RCX: 00007f1dd978e15c [ 891.963751][T17283] RDX: 000000000000000f RSI: 00007f1dda6600a0 RDI: 0000000000000004 [ 891.963762][T17283] RBP: 00007f1dda660090 R08: 0000000000000000 R09: 0000000000000000 [ 891.963773][T17283] R10: 0000000000000068 R11: 0000000000000246 R12: 0000000000000001 [ 891.963785][T17283] R13: 00007f1dd99e6038 R14: 00007f1dd99e5fa0 R15: 00007f1dd9b0fa28 [ 891.963818][T17283] [ 891.973877][T15830] usb 4-1: config 0 descriptor?? [ 892.234920][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 892.332896][ T24] usb 5-1: qt2_attach - failed to power on unit: -71 [ 892.356337][ T24] quatech2 5-1:24.0: probe with driver quatech2 failed with error -71 [ 892.369415][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 892.369428][ T30] audit: type=1326 audit(1763654270.731:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17290 comm="syz.0.2975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1dd978f749 code=0x0 [ 892.404637][ T24] usb 5-1: USB disconnect, device number 126 [ 892.460216][T10213] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 892.504989][T15830] cp210x 4-1:0.0: cp210x converter detected [ 892.613591][T10213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.627206][T10213] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.760773][ T30] audit: type=1326 audit(1763654271.111:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 892.788260][T15830] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 892.806218][T15830] cp210x 4-1:0.0: querying part number failed [ 892.819539][ T30] audit: type=1326 audit(1763654271.111:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 892.895141][ T30] audit: type=1326 audit(1763654271.121:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 892.936761][T15830] usb 4-1: cp210x converter now attached to ttyUSB0 [ 892.973699][ T30] audit: type=1326 audit(1763654271.121:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 892.997352][ T30] audit: type=1326 audit(1763654271.121:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 893.059707][ T30] audit: type=1326 audit(1763654271.121:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 893.084985][ T30] audit: type=1326 audit(1763654271.121:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 893.108725][ T30] audit: type=1326 audit(1763654271.121:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 893.135875][T10213] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 893.178327][ T30] audit: type=1326 audit(1763654271.121:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17293 comm="syz.2.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 893.250315][T10213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.258515][T10213] usb 2-1: Product: syz [ 893.261229][ T5837] Bluetooth: hci5: command tx timeout [ 893.262729][T10213] usb 2-1: Manufacturer: syz [ 893.488824][T10213] usb 2-1: SerialNumber: syz [ 893.554127][T10213] usb 2-1: config 0 descriptor?? [ 893.841514][T17285] nvme_fabrics: missing parameter 'transport=%s' [ 893.848188][T17285] nvme_fabrics: missing parameter 'nqn=%s' [ 893.861799][T10213] usb 2-1: USB disconnect, device number 24 [ 894.510260][T15831] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 894.630337][ T24] usb 4-1: USB disconnect, device number 36 [ 894.655456][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 894.667617][ T24] cp210x 4-1:0.0: device disconnected [ 894.681226][T15831] usb 3-1: no configurations [ 894.686013][T15831] usb 3-1: can't read configurations, error -22 [ 894.930702][T15831] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 895.094431][T15831] usb 3-1: no configurations [ 895.099202][T15831] usb 3-1: can't read configurations, error -22 [ 895.106250][T15831] usb usb3-port1: attempt power cycle [ 895.460167][T15831] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 895.533927][T15831] usb 3-1: no configurations [ 895.538668][T15831] usb 3-1: can't read configurations, error -22 [ 895.670139][T15831] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 895.702033][T15831] usb 3-1: no configurations [ 895.706727][T15831] usb 3-1: can't read configurations, error -22 [ 895.713955][T15831] usb usb3-port1: unable to enumerate USB device [ 896.463004][T17335] fuse: Unknown parameter '0x0000000000000007' [ 897.350069][T14782] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 897.551579][T14782] usb 4-1: Using ep0 maxpacket: 32 [ 897.558684][T17349] trusted_key: encrypted_key: insufficient parameters specified [ 897.616414][T14782] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 897.712577][T17352] random: crng reseeded on system resumption [ 897.719168][T14782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.769379][T14782] usb 4-1: config 0 descriptor?? [ 897.803272][T14782] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 897.821290][T14782] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 897.835491][T14782] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 898.440393][T14782] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 898.701140][T14782] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 898.710420][T14782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.733553][T14782] usb 5-1: config 0 descriptor?? [ 898.749535][T14782] cp210x 5-1:0.0: cp210x converter detected [ 898.950728][T14782] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 898.958751][T14782] cp210x 5-1:0.0: querying part number failed [ 898.985297][T14782] usb 5-1: cp210x converter now attached to ttyUSB0 [ 899.336015][T10228] usb 4-1: USB disconnect, device number 37 [ 899.697527][T17374] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 899.704081][T17374] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 899.723147][T17374] vhci_hcd vhci_hcd.0: Device attached [ 899.812380][T17375] vhci_hcd: connection closed [ 899.814831][T16749] vhci_hcd: stop threads [ 899.855249][T16749] vhci_hcd: release socket [ 899.864406][T16749] vhci_hcd: disconnect device [ 899.910117][T10228] vhci_hcd: vhci_device speed not set [ 901.224346][T16790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.274492][T16790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.283365][T16790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.291419][T16790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.299501][T16790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 901.588616][T17390] trusted_key: encrypted_key: insufficient parameters specified [ 901.595796][T10228] usb 5-1: USB disconnect, device number 127 [ 901.619431][T10228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 901.700860][T10303] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.706841][T10228] cp210x 5-1:0.0: device disconnected [ 901.815935][T17395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3003'. [ 901.825340][T17395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3003'. [ 901.837833][T10303] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.248615][T10303] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.362473][T14782] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 902.580358][T14782] usb 4-1: device descriptor read/64, error -71 [ 902.693746][T10303] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.843219][T14782] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 903.250463][T14782] usb 4-1: device descriptor read/64, error -71 [ 903.457315][T16790] Bluetooth: hci2: command tx timeout [ 903.494625][T14782] usb usb4-port1: attempt power cycle [ 903.550088][T10228] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 903.661724][T17386] chnl_net:caif_netlink_parms(): no params data found [ 903.754510][T10228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.774751][T10228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.798628][T10228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.032360][T10228] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.061230][T14782] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 904.061444][T10228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.102175][T10228] usb 3-1: config 0 descriptor?? [ 904.144790][T14782] usb 4-1: device descriptor read/8, error -71 [ 904.314522][T17386] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.322566][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.344613][T17434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 904.345697][T17386] bridge_slave_0: entered allmulticast mode [ 904.351167][T17434] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 904.379261][T17434] vhci_hcd vhci_hcd.0: Device attached [ 904.550307][T10209] vhci_hcd: vhci_device speed not set [ 904.735092][T10228] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 904.763804][T17386] bridge_slave_0: entered promiscuous mode [ 904.787996][T17435] vhci_hcd: connection closed [ 904.789226][ T36] vhci_hcd: stop threads [ 904.801334][T10209] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 904.808848][T14782] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 904.821604][T17386] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.829357][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.845010][ T36] vhci_hcd: release socket [ 904.901352][ T36] vhci_hcd: disconnect device [ 905.000611][T17386] bridge_slave_1: entered allmulticast mode [ 905.022165][T17386] bridge_slave_1: entered promiscuous mode [ 905.036817][T14782] usb 4-1: device descriptor read/8, error -71 [ 905.150795][T14782] usb usb4-port1: unable to enumerate USB device [ 905.250535][T10228] usb 3-1: USB disconnect, device number 26 [ 905.493560][T16790] Bluetooth: hci2: command tx timeout [ 905.545191][T17460] trusted_key: encrypted_key: insufficient parameters specified [ 905.590177][T15830] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 905.770592][T15830] usb 4-1: config 252 has an invalid interface number: 251 but max is 0 [ 905.788327][T15830] usb 4-1: config 252 has no interface number 0 [ 905.813346][T15830] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 905.844083][T15830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.882685][T15830] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 905.935644][T17472] binder: BINDER_SET_CONTEXT_MGR already set [ 905.942180][T17472] binder: 17463:17472 ioctl 4018620d 2000000001c0 returned -16 [ 905.952100][T17472] binder: 17463:17472 ioctl c0306201 0 returned -14 [ 906.080761][T10205] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 906.265937][T10205] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 906.276930][T10205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.288569][T17453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3010'. [ 906.329880][T10303] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 906.339818][T10303] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 906.347905][T10303] bond0 (unregistering): Released all slaves [ 906.348261][T10205] usb 2-1: config 0 descriptor?? [ 906.576398][T10205] cp210x 2-1:0.0: cp210x converter detected [ 906.583442][T15830] gspca_sn9c20x: Write register 1001 failed -110 [ 906.589803][T15830] gspca_sn9c20x: Device initialization failed [ 906.598705][T15830] gspca_sn9c20x 4-1:252.251: probe with driver gspca_sn9c20x failed with error -110 [ 906.680231][T10205] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 906.688327][T10205] cp210x 2-1:0.0: querying part number failed [ 906.712603][T10205] usb 2-1: cp210x converter now attached to ttyUSB0 [ 906.869173][T10303] bond1 (unregistering): Released all slaves [ 907.087245][T10303] bond2 (unregistering): Released all slaves [ 907.256930][T10303] bond3 (unregistering): Released all slaves [ 907.468533][T10303] bond4 (unregistering): Released all slaves [ 907.571129][T16790] Bluetooth: hci2: command tx timeout [ 907.629326][T10303] : left promiscuous mode [ 907.722308][T10213] usb 4-1: USB disconnect, device number 42 [ 907.789467][T17386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.836280][T17386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.895874][T17480] binder: BINDER_SET_CONTEXT_MGR already set [ 907.944742][T17480] binder: 17479:17480 ioctl 4018620d 200000000100 returned -16 [ 907.976660][T10303] tipc: Left network mode [ 907.980136][T17386] team0: Port device team_slave_0 added [ 908.006364][T17386] team0: Port device team_slave_1 added [ 908.272084][T17386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.279303][T17386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.305529][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.315269][T17386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.343663][T17386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.352329][T17386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.385863][T17386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.475505][T10213] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 908.583284][T17386] hsr_slave_0: entered promiscuous mode [ 908.591906][T17386] hsr_slave_1: entered promiscuous mode [ 908.598465][T17386] debugfs: 'hsr0' already exists in 'hsr' [ 908.606606][T17386] Cannot create hsr debugfs directory [ 908.620123][T10213] usb 5-1: device descriptor read/64, error -71 [ 908.922307][T10213] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 908.976619][T15830] usb 2-1: USB disconnect, device number 25 [ 908.987363][T15830] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 909.058625][T15830] cp210x 2-1:0.0: device disconnected [ 909.072136][T10213] usb 5-1: device descriptor read/64, error -71 [ 909.125663][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3019'. [ 909.167345][T10303] hsr_slave_0: left promiscuous mode [ 909.189333][T10303] hsr_slave_1: left promiscuous mode [ 909.200910][T10213] usb usb5-port1: attempt power cycle [ 909.236151][T10303] batman_adv: batadv0: Removing interface: virt_wifi0 [ 909.286968][T10303] veth1_macvtap: left promiscuous mode [ 909.297182][T10303] veth0_macvtap: left promiscuous mode [ 909.590114][T10213] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 909.675810][T16790] Bluetooth: hci2: command tx timeout [ 909.730399][T10213] usb 5-1: device descriptor read/8, error -71 [ 909.887694][T17519] fuse: Unknown parameter 'subj_role' [ 909.971469][T10209] vhci_hcd: vhci_device speed not set [ 909.986169][T10213] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 910.014723][T10213] usb 5-1: device descriptor read/8, error -71 [ 910.247684][T10213] usb usb5-port1: unable to enumerate USB device [ 910.884054][T17510] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 911.108018][T17529] trusted_key: encrypted_key: insufficient parameters specified [ 911.441075][T17532] random: crng reseeded on system resumption [ 911.789882][T10303] IPVS: stop unused estimator thread 0... [ 912.426177][T17554] fuse: Bad value for 'rootmode' [ 912.432971][T17554] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3026'. [ 913.212634][T17386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 913.438448][T17386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 913.550743][T17386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 913.572581][T17386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 914.000402][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 914.060085][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 914.141880][T17583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 914.248286][ T24] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 914.278131][T17386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.285102][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.309012][ T24] usb 2-1: Product: syz [ 914.326452][ T24] usb 2-1: Manufacturer: syz [ 914.369615][ T24] usb 2-1: SerialNumber: syz [ 914.602217][T17386] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.662044][ T24] usb 2-1: config 0 descriptor?? [ 914.704312][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.711486][T10304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.853216][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.860434][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.979503][T17603] binder: 17598:17603 ioctl c0306201 0 returned -14 [ 915.141422][T17386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.344145][T17386] veth0_vlan: entered promiscuous mode [ 915.421350][T17386] veth1_vlan: entered promiscuous mode [ 915.828155][T17386] veth0_macvtap: entered promiscuous mode [ 915.870397][T17386] veth1_macvtap: entered promiscuous mode [ 915.917767][T17386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.978489][T17386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.026434][T10303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.065134][T10303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.098998][T10303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.726658][T10303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.746921][T17625] random: crng reseeded on system resumption [ 916.864949][T17627] fuse: Bad value for 'rootmode' [ 916.873754][T17627] netlink: 79 bytes leftover after parsing attributes in process `syz.2.3037'. [ 916.980165][ T24] int51x1 2-1:0.0: probe with driver int51x1 failed with error -71 [ 917.030388][ T24] usb 2-1: USB disconnect, device number 26 [ 917.541963][T10303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.549911][T10303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.917226][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.947378][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.477155][T17658] Cannot find add_set index 0 as target [ 918.486040][T17658] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 918.548608][T17661] xt_connbytes: Forcing CT accounting to be enabled [ 918.630338][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 918.665582][T10213] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 918.771418][ T24] usb 1-1: device descriptor read/64, error -71 [ 918.836017][T10213] usb 2-1: Using ep0 maxpacket: 16 [ 918.867606][T10213] usb 2-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 918.927365][T10213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.004229][T10213] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 919.040135][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 919.065410][T10213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 919.207930][T10213] usb 2-1: SerialNumber: syz [ 919.260123][ T24] usb 1-1: device descriptor read/64, error -71 [ 919.273029][T10213] usb 2-1: 0:2 : does not exist [ 919.320661][T10205] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 919.380335][ T24] usb usb1-port1: attempt power cycle [ 919.500514][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.520324][T10205] usb 5-1: Using ep0 maxpacket: 32 [ 919.528423][T10205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.545860][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.564685][T10205] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 919.599233][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.617732][T10205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.638946][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.667101][T10205] usb 5-1: config 0 descriptor?? [ 919.681106][T10213] usb 2-1: USB disconnect, device number 27 [ 919.733630][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.743900][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.757879][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.765241][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 919.776117][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.786674][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.822182][ T24] usb 1-1: device descriptor read/8, error -71 [ 920.035577][T17682] input: syz1 as /devices/virtual/input/input40 [ 920.070132][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 920.111648][ T24] usb 1-1: device descriptor read/8, error -71 [ 920.118051][T10205] stadia 0003:18D1:9400.001C: item fetching failed at offset 0/4 [ 920.181028][T10205] stadia 0003:18D1:9400.001C: parse failed [ 920.230517][ T24] usb usb1-port1: unable to enumerate USB device [ 920.317864][T17669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.380917][T10205] stadia 0003:18D1:9400.001C: probe with driver stadia failed with error -22 [ 920.441913][T17669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.546940][T17669] syzkaller1: entered promiscuous mode [ 920.570629][T17669] syzkaller1: entered allmulticast mode [ 920.738933][T10304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.787444][T10213] usb 5-1: USB disconnect, device number 6 [ 920.955780][T10304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.032759][T17706] fuse: Bad value for 'rootmode' [ 921.038828][T17706] netlink: 79 bytes leftover after parsing attributes in process `syz.1.3048'. [ 921.094987][T10304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.116670][T17678] chnl_net:caif_netlink_parms(): no params data found [ 921.173065][T10304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.289080][T17678] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.319535][T17678] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.346091][T17678] bridge_slave_0: entered allmulticast mode [ 921.353985][T17678] bridge_slave_0: entered promiscuous mode [ 921.363362][T17678] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.371186][T17678] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.380760][T17678] bridge_slave_1: entered allmulticast mode [ 921.388741][T17678] bridge_slave_1: entered promiscuous mode [ 921.474046][T17678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.486929][T17678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.140672][ T5837] Bluetooth: hci0: command tx timeout [ 922.160564][T17678] team0: Port device team_slave_0 added [ 922.200257][T17678] team0: Port device team_slave_1 added [ 922.886351][T10304] batman_adv: batadv0: Removing interface: ip6gretap3 [ 924.006385][T10304] bond0 (unregistering): Released all slaves [ 924.210396][ T5837] Bluetooth: hci0: command tx timeout [ 924.600182][T10228] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 924.667374][T10304] bond1 (unregistering): Released all slaves [ 924.770451][T10228] usb 3-1: Using ep0 maxpacket: 8 [ 924.788142][T10228] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 924.810093][T10228] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 924.830566][T10228] usb 3-1: config 4 has no interface number 0 [ 924.855612][T10228] usb 3-1: config 4 interface 38 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 924.910066][T10228] usb 3-1: config 4 interface 38 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.980321][T10228] usb 3-1: config 4 interface 38 has no altsetting 0 [ 925.110130][T10228] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 925.140140][T10228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.160231][T10228] usb 3-1: Product: syz [ 925.164516][T10228] usb 3-1: Manufacturer: syz [ 925.193051][T10228] usb 3-1: SerialNumber: syz [ 925.363241][T10304] bond2 (unregistering): Released all slaves [ 925.469885][T10228] usb 3-1: USB disconnect, device number 27 [ 925.800144][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 925.801141][T10304] bond3 (unregistering): Released all slaves [ 925.940505][ T9] usb 1-1: device descriptor read/64, error -71 [ 926.084580][T17776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3065'. [ 926.200112][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 926.301376][ T5837] Bluetooth: hci0: command tx timeout [ 926.420063][ T9] usb 1-1: device descriptor read/64, error -71 [ 926.510126][T10213] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 926.530358][ T9] usb usb1-port1: attempt power cycle [ 926.588244][T10304] bond4 (unregistering): Released all slaves [ 926.603890][T17678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.617970][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.665361][T17678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.714426][T10213] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 926.741606][T10213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.813350][T10213] usb 3-1: config 0 descriptor?? [ 926.869710][T17776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 926.879278][T10213] cp210x 3-1:0.0: cp210x converter detected [ 926.880144][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 926.911130][ T9] usb 1-1: device descriptor read/8, error -71 [ 926.979566][T17678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.033032][T17678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.129411][T10213] usb 3-1: cp210x converter now attached to ttyUSB0 [ 927.140213][T17678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.151162][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 927.200882][ T9] usb 1-1: device descriptor read/8, error -71 [ 927.215374][T10304] tipc: Disabling bearer [ 927.221688][T10304] tipc: Disabling bearer [ 927.238870][T10304] tipc: Left network mode [ 927.398791][ T9] usb usb1-port1: unable to enumerate USB device [ 927.516027][T17678] hsr_slave_0: entered promiscuous mode [ 927.528494][T17678] hsr_slave_1: entered promiscuous mode [ 928.162316][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 928.371684][ T5837] Bluetooth: hci0: command tx timeout [ 928.397539][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 929.105106][T10304] hsr_slave_0: left promiscuous mode [ 929.135441][T10304] hsr_slave_1: left promiscuous mode [ 929.143517][T10304] batman_adv: batadv0: Removing interface: virt_wifi0 [ 929.159221][T10304] veth1_vlan: left promiscuous mode [ 929.165959][T10304] veth0_vlan: left promiscuous mode [ 929.995212][T10205] usb 3-1: USB disconnect, device number 28 [ 930.006014][T10205] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 930.045757][T10205] cp210x 3-1:0.0: device disconnected [ 930.219397][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 930.219418][ T30] audit: type=1326 audit(1763654308.521:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.252844][ T30] audit: type=1326 audit(1763654308.521:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.280044][ T30] audit: type=1326 audit(1763654308.531:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.318231][ T30] audit: type=1326 audit(1763654308.531:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.343131][ T30] audit: type=1326 audit(1763654308.531:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.367437][ T30] audit: type=1326 audit(1763654308.531:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.395611][ T30] audit: type=1326 audit(1763654308.531:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.418900][ T30] audit: type=1326 audit(1763654308.531:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.446906][ T30] audit: type=1326 audit(1763654308.531:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 930.473986][ T30] audit: type=1326 audit(1763654308.531:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17818 comm="syz.2.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa3b598f749 code=0x7ffc0000 [ 931.215830][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 931.366364][ T24] usb 2-1: no configurations [ 931.374627][ T24] usb 2-1: can't read configurations, error -22 [ 931.576688][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.583317][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.802739][T17678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 933.169408][T17678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 933.277569][T10205] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 933.397126][T17678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 933.428420][T17678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 933.499336][T10304] IPVS: stop unused estimator thread 0... [ 933.590590][T10205] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 933.681059][T10205] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 933.820815][T10205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 933.857553][T10304] ------------[ cut here ]------------ [ 933.863219][T10304] WARNING: CPU: 0 PID: 10304 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 933.874435][T10304] Modules linked in: [ 933.879154][T10304] CPU: 0 UID: 0 PID: 10304 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 933.890142][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 933.900432][T10304] Workqueue: netns cleanup_net [ 933.905235][T10304] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 933.911030][T10304] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 7f 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f9 62 1a f8 e8 c4 bd d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 bd d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 933.930796][T10304] RSP: 0018:ffffc9001aa97878 EFLAGS: 00010293 [ 933.936906][T10304] RAX: ffffffff89eb45fc RBX: ffff888077638000 RCX: ffff88806ee13c80 [ 933.944955][T10304] RDX: 0000000000000000 RSI: ffffffff8d8f50ca RDI: ffff88806ee13c80 [ 933.953012][T10304] RBP: ffffc9001aa97990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 933.961158][T10304] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6ec0 [ 933.969149][T10304] R13: 1ffff92003552f3c R14: ffff8880776394c0 R15: dffffc0000000000 [ 933.978283][T10304] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 933.988206][T10304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.995066][T10304] CR2: 00007fcfdc4633f6 CR3: 000000001d6fe000 CR4: 00000000003526f0 [ 934.003083][T10304] Call Trace: [ 934.006359][T10304] [ 934.009352][T10304] xfrm_net_exit+0x2d/0x70 [ 934.013815][T10304] ops_undo_list+0x49a/0x990 [ 934.018410][T10304] ? __pfx_ops_undo_list+0x10/0x10 [ 934.023586][T10304] ? do_raw_spin_unlock+0x122/0x240 [ 934.028780][T10304] cleanup_net+0x4d8/0x820 [ 934.033243][T10304] ? __pfx_cleanup_net+0x10/0x10 [ 934.038172][T10304] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.043379][T10304] ? process_scheduled_works+0x9ef/0x17b0 [ 934.049086][T10304] ? process_scheduled_works+0x9ef/0x17b0 [ 934.054895][T10304] process_scheduled_works+0xae1/0x17b0 [ 934.060471][T10304] ? __pfx_process_scheduled_works+0x10/0x10 [ 934.066632][T10304] worker_thread+0x8a0/0xda0 [ 934.071273][T10304] kthread+0x711/0x8a0 [ 934.075957][T10304] ? __pfx_worker_thread+0x10/0x10 [ 934.081612][T10304] ? __pfx_kthread+0x10/0x10 [ 934.086212][T10304] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.091468][T10304] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.096689][T10304] ? __pfx_kthread+0x10/0x10 [ 934.101350][T10304] ret_from_fork+0x4bc/0x870 [ 934.105961][T10304] ? __pfx_ret_from_fork+0x10/0x10 [ 934.111200][T10304] ? __switch_to_asm+0x39/0x70 [ 934.115994][T10304] ? __switch_to_asm+0x33/0x70 [ 934.120826][T10304] ? __pfx_kthread+0x10/0x10 [ 934.125443][T10304] ret_from_fork_asm+0x1a/0x30 [ 934.130323][T10304] [ 934.133364][T10304] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 934.140655][T10304] CPU: 0 UID: 0 PID: 10304 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 934.150283][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 934.160341][T10304] Workqueue: netns cleanup_net [ 934.165124][T10304] Call Trace: [ 934.168410][T10304] [ 934.171338][T10304] dump_stack_lvl+0x99/0x250 [ 934.176369][T10304] ? __asan_memcpy+0x40/0x70 [ 934.180971][T10304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.186168][T10304] ? __pfx__printk+0x10/0x10 [ 934.190764][T10304] vpanic+0x237/0x6d0 [ 934.194743][T10304] ? __pfx_vpanic+0x10/0x10 [ 934.199253][T10304] panic+0xb9/0xc0 [ 934.202976][T10304] ? __pfx_panic+0x10/0x10 [ 934.207415][T10304] __warn+0x31b/0x4b0 [ 934.211489][T10304] ? xfrm_state_fini+0x26d/0x2f0 [ 934.216430][T10304] ? xfrm_state_fini+0x26d/0x2f0 [ 934.221363][T10304] report_bug+0x2be/0x4f0 [ 934.225700][T10304] ? xfrm_state_fini+0x26d/0x2f0 [ 934.230635][T10304] ? xfrm_state_fini+0x26d/0x2f0 [ 934.235578][T10304] ? xfrm_state_fini+0x26f/0x2f0 [ 934.240692][T10304] handle_bug+0x84/0x160 [ 934.244929][T10304] exc_invalid_op+0x1a/0x50 [ 934.249423][T10304] asm_exc_invalid_op+0x1a/0x20 [ 934.254268][T10304] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 934.259856][T10304] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 7f 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f9 62 1a f8 e8 c4 bd d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b6 bd d4 f7 90 0f 0b 90 e9 60 fe ff ff [ 934.280066][T10304] RSP: 0018:ffffc9001aa97878 EFLAGS: 00010293 [ 934.286152][T10304] RAX: ffffffff89eb45fc RBX: ffff888077638000 RCX: ffff88806ee13c80 [ 934.294164][T10304] RDX: 0000000000000000 RSI: ffffffff8d8f50ca RDI: ffff88806ee13c80 [ 934.302139][T10304] RBP: ffffc9001aa97990 R08: ffffffff8f7cee77 R09: 1ffffffff1ef9dce [ 934.310631][T10304] R10: dffffc0000000000 R11: fffffbfff1ef9dcf R12: ffffffff8f3c6ec0 [ 934.318598][T10304] R13: 1ffff92003552f3c R14: ffff8880776394c0 R15: dffffc0000000000 [ 934.326575][T10304] ? xfrm_state_fini+0x26c/0x2f0 [ 934.331520][T10304] ? xfrm_state_fini+0x26c/0x2f0 [ 934.336461][T10304] xfrm_net_exit+0x2d/0x70 [ 934.340879][T10304] ops_undo_list+0x49a/0x990 [ 934.345470][T10304] ? __pfx_ops_undo_list+0x10/0x10 [ 934.350575][T10304] ? do_raw_spin_unlock+0x122/0x240 [ 934.355780][T10304] cleanup_net+0x4d8/0x820 [ 934.360193][T10304] ? __pfx_cleanup_net+0x10/0x10 [ 934.365213][T10304] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.370408][T10304] ? process_scheduled_works+0x9ef/0x17b0 [ 934.376119][T10304] ? process_scheduled_works+0x9ef/0x17b0 [ 934.382020][T10304] process_scheduled_works+0xae1/0x17b0 [ 934.387738][T10304] ? __pfx_process_scheduled_works+0x10/0x10 [ 934.393765][T10304] worker_thread+0x8a0/0xda0 [ 934.398383][T10304] kthread+0x711/0x8a0 [ 934.402456][T10304] ? __pfx_worker_thread+0x10/0x10 [ 934.407563][T10304] ? __pfx_kthread+0x10/0x10 [ 934.412253][T10304] ? _raw_spin_unlock_irq+0x23/0x50 [ 934.417452][T10304] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.422683][T10304] ? __pfx_kthread+0x10/0x10 [ 934.427276][T10304] ret_from_fork+0x4bc/0x870 [ 934.431876][T10304] ? __pfx_ret_from_fork+0x10/0x10 [ 934.437009][T10304] ? __switch_to_asm+0x39/0x70 [ 934.441772][T10304] ? __switch_to_asm+0x33/0x70 [ 934.446548][T10304] ? __pfx_kthread+0x10/0x10 [ 934.451160][T10304] ret_from_fork_asm+0x1a/0x30 [ 934.455950][T10304] [ 934.459389][T10304] Kernel Offset: disabled [ 934.463700][T10304] Rebooting in 86400 seconds..