last executing test programs: 12.27265807s ago: executing program 4 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 11.862106605s ago: executing program 4 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'sit0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x6, 0x1fc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x84f, 0x400000000000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b", 0xd) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x0) sendmmsg(r4, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)}}], 0x1, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020) 7.493394064s ago: executing program 0 (id=777): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0xfffffc77, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0xd1, &(0x7f0000000340)={0x0, 0xe12a, 0x800, 0x100002, 0x24c}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r4, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 6.346220904s ago: executing program 4 (id=779): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.254227656s ago: executing program 4 (id=781): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f7706"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x2, 0x6, 0x4, 0x400, 0x2c2, {}, {0x3, 0x2, 0xd5, 0x80, 0x3, 0x8, "c61f3a28"}, 0xfffffffe, 0x3, {0x0}, 0x8}) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x1f8, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4af3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "81785f9162a45cded4d9a9629dfcbde28395484c3edcc369ba9b5a30c09877030b7cf52c12"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "83f85319573575671a99f4ac5d1c8f01059bc908d8"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d9a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb20}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6.144576198s ago: executing program 1 (id=782): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 6.093865701s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newtaction={0x2f8c, 0x30, 0x401, 0x0, 0x0, {}, [{0x2f78, 0x1, [@m_ctinfo={0x80, 0x1c, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}]}, {0x3a, 0x6, "d7b562814f1ae92f511c3f5dbe0b90ff0b6be237cf06559a0b8c855f9e96afefea0262ea273e1d7ba67f3819d7e1d44f79557fc334c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x44, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "bfae72fb91d261a91ae9cbb0fd24310ab4cef0bc71"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x158, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x2, 0x10000000, 0x35fa, 0x9}}, @TCA_DEF_DATA={0xf, 0x3, '/dev/audio\x00'}, @TCA_DEF_DATA={0x7, 0x3, ')}\x00'}, @TCA_DEF_DATA={0x8, 0x3, '-#\x8f\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\\!&/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1, 0x1, 0x9, 0x10001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1, 0xffffffffffffffff, 0x1, 0x852d}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0xffffffffffffffff, 0x9, 0xa44}}]}, {0x96, 0x6, "5882172863ecab726d85d4c968c9cee6f43af93ae437aa59b7738e08bada54a8dd0daddadac9445da7014bdac44a23ecb0509d0aaabd873064c212a20ee857ee099934f45c57b4ce58a86027ac7d5f3543a55f154f1d8ffaab6345b31160954524fb2d9f7dc5f6bb7b657e1490ed69d93f48ba0c1f653382e45efbb5e34da6897dd3206570e7e61a286ece45a6790dcece7c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1d14, 0xa, 0x0, 0x0, {{0xb}, {0xce8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x7, 0x8, 0x4, 0x9, {0x6, 0x1, 0x28, 0x2, 0x7, 0x2}, {0x2, 0x2, 0x1e, 0xf, 0x8, 0x80000000}, 0x1, 0x6}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x3, 0x1, 0x2, {0x1, 0x0, 0x6, 0x9, 0x7450, 0x7ff}, {0xf, 0x0, 0x4, 0x5, 0xffff, 0x9c9}, 0x6, 0x7fffffff, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x6, 0x5, 0x9, 0x1, 0x9, 0x3, 0x5, 0x9, 0x0, 0x7, 0x576126b3, 0xf4, 0x4, 0x3, 0x7, 0x0, 0x4, 0x100, 0x8f0, 0x0, 0x1, 0x5, 0x3, 0x2, 0x4, 0x7b6, 0x9, 0x9, 0x8, 0x0, 0x7, 0x401, 0xfffffff4, 0x8, 0x100, 0x3, 0x66e, 0x3, 0x5, 0x1, 0xfffffe01, 0x10000, 0xfffffff5, 0x7, 0x1ff, 0x2, 0x7, 0x0, 0x5, 0x7, 0x200, 0x1, 0xb, 0x4, 0x4477, 0x5, 0xfff, 0x80000001, 0x6, 0x2, 0x5, 0x40, 0x9, 0x8, 0x4, 0x5, 0x280, 0x3a, 0xfffff000, 0x4, 0x5a6b, 0x1, 0x4, 0x1, 0x0, 0xfffffe01, 0x7, 0x3, 0xd, 0xb0c, 0x8001, 0xffffff01, 0x8, 0x3, 0xd, 0x0, 0x2, 0x27, 0x5, 0x0, 0x7f, 0x10001, 0x1, 0xfffffffc, 0xa, 0x2, 0x9, 0x80000000, 0x8, 0x81, 0xfffffff7, 0x2, 0x35a, 0x5, 0x9, 0x6, 0x7fffffff, 0xf, 0x3, 0x47f8, 0xf4, 0xff, 0x40, 0x10, 0x9696, 0xfffffff9, 0xffffffff, 0x0, 0x6, 0x0, 0x6, 0x800, 0x1, 0x1, 0xffffff6a, 0x5, 0x8001, 0x6, 0x80000000, 0x0, 0x6, 0x820, 0x8000, 0x16, 0xe5e, 0x7, 0x10001, 0x1000, 0x8, 0x7, 0x6, 0x10001, 0x2, 0x7, 0xff, 0x2, 0xbf5, 0x1, 0xffffffff, 0x7, 0x10001, 0x4, 0x8, 0x6, 0x0, 0x6, 0x4, 0x1, 0x6, 0x1, 0x2, 0x4, 0x1, 0x4589, 0x1, 0x4, 0x5, 0x4, 0x7a3a, 0x7, 0x81, 0x1ffe000, 0xcc1, 0x5, 0x3, 0x8000, 0xeec, 0x4, 0x9, 0x200, 0x8, 0x3c, 0x3, 0x7, 0x0, 0x401, 0x200, 0x2, 0x7fff, 0xd, 0x3, 0x5, 0x9, 0x8, 0x4, 0x200, 0xffffffff, 0x9, 0x4, 0x8, 0xfff, 0x5, 0x3ff, 0x10000, 0x1, 0x100, 0x40, 0x7, 0x7, 0x347, 0x7, 0xd1d, 0x2, 0x798, 0xfffffff3, 0x5, 0x8, 0x7, 0x80000001, 0xfffffffe, 0xd, 0x0, 0x401, 0xff, 0x5, 0x1, 0x61, 0x7206, 0x72, 0x46b, 0x1, 0x8, 0x5, 0x9, 0x4, 0x4, 0x80, 0x4, 0x2, 0x0, 0x93c, 0x398e, 0xc4, 0x8, 0x4, 0x7, 0x309b, 0x0, 0x1dac, 0x2, 0x0, 0x401, 0x1, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8f5, 0x7, 0x8, 0x5, 0xa609613, 0x9, 0x400, 0x7, 0x10001, 0x6, 0x8, 0x1, 0x3, 0x7fffffff, 0x9, 0xfffffffb, 0xf, 0x6, 0xf, 0x10000, 0x3, 0xcd00000, 0x10, 0x7, 0x6, 0x2dd, 0x6, 0x101, 0x1ff, 0x1ff, 0xd, 0x200, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x5, 0x5cd0, 0xffff0001, 0x101, 0x401, 0x1, 0x7, 0xffffffce, 0x4, 0x4, 0x9, 0xee3, 0x4, 0x2c90, 0x8, 0x3, 0x7, 0x0, 0x27, 0x5, 0x5, 0x2, 0x2, 0x48, 0x4fc, 0x9, 0x1, 0xf326, 0x2, 0x8c4, 0x5, 0xf8c5, 0x8, 0x2, 0x7, 0x2, 0x3, 0xc13, 0x3ff, 0x6, 0x8, 0x9, 0x2, 0x4, 0x3, 0x0, 0x4, 0x5bc, 0xe54, 0xa, 0x3, 0x6, 0xb, 0x3, 0x7, 0x8000, 0x101, 0x8, 0x6, 0xe, 0x8, 0x8, 0x8, 0x8, 0xfffffffc, 0x0, 0x4, 0x9, 0x5, 0x8, 0x6, 0x9, 0xfffeffff, 0x5, 0x200, 0x7, 0xc, 0x1, 0x7ff, 0x7, 0x903c, 0x101, 0x80000000, 0x7, 0x2, 0x0, 0x3, 0xffffffe2, 0x3ff, 0x4, 0x2, 0xa9e7, 0x8, 0x7b, 0x0, 0x8, 0xd000000, 0x5, 0x8, 0x80000001, 0x101, 0x101, 0x3, 0xffff, 0x9, 0x7, 0x7, 0x8000, 0x80000000, 0x8, 0x1, 0xa, 0x8, 0x7, 0xb6f2, 0x0, 0x3, 0x7, 0x8, 0x0, 0x1, 0x9, 0x6, 0x6b4f, 0x1, 0xfe00, 0x1, 0x5199d7c1, 0x9, 0x0, 0xb, 0x80000001, 0x80000001, 0xfffffff8, 0x400, 0x1, 0x5, 0x5, 0xb, 0x400, 0x3, 0x6, 0xa, 0x4, 0x7f, 0x6, 0x8, 0xffffff6e, 0xe29, 0x5b42, 0x8, 0xfe6b, 0x6, 0xf, 0x71c9, 0x10, 0x4, 0x4, 0x3ff, 0x8, 0x0, 0x1, 0xa7, 0x6, 0x6b56234c, 0x8, 0x9, 0x4, 0x9, 0x2, 0xf, 0xed0, 0xfffff0f9, 0x9, 0x2, 0x0, 0x7, 0x1, 0x400, 0xc, 0x5bf, 0x3ff, 0x7, 0x145, 0x4, 0x0, 0xce, 0x0, 0x9094, 0xb, 0x4, 0x1, 0xfffffffd, 0x9, 0x8000, 0x21fb, 0x223, 0xfffffffc, 0x7ff, 0x3, 0x1000, 0x1ff, 0x0, 0x9, 0x6, 0x7, 0x8, 0x8001, 0x3, 0xed1e, 0x2, 0x5, 0xa, 0x7, 0x9, 0x4, 0x17, 0x7cd]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x2c4, 0x3, 0x6, 0x9, 0x1, 0xed83, 0x53d4, 0x1, 0x7, 0xabc6, 0xed65, 0x2, 0x101, 0x0, 0xfffff801, 0x6, 0x200, 0x7219, 0x5, 0x200, 0x7f, 0x1, 0x8, 0x2, 0x1e, 0x6, 0x4, 0x2, 0x81, 0x9, 0x3, 0xf, 0x7, 0x0, 0x94, 0x3, 0xde42, 0x73, 0xcb, 0xffffff7f, 0x3ff, 0x5, 0x80, 0x80000000, 0x9559, 0xfffffff2, 0x1ff, 0xa49, 0xf7, 0x0, 0xd, 0x81, 0x0, 0x3, 0xfffffff1, 0x2, 0x6, 0xffff, 0x1, 0x9, 0x8000004, 0x100000, 0x5, 0x6, 0x7, 0x9, 0xbe, 0x6, 0xfff, 0x61, 0x3, 0x7ff, 0xfff, 0x8, 0x4, 0x8, 0x8, 0x200, 0x6, 0x53cc339a, 0x5, 0x9, 0x8b50, 0x4, 0xfffffff7, 0x6, 0x4, 0xfff, 0x15f, 0x9, 0xd, 0x7fff, 0x5, 0x8d70, 0x4, 0x4, 0x600000, 0x3, 0x8001, 0xb, 0x8, 0x4, 0x3ff, 0x0, 0xfffffffb, 0x7e0c, 0x81, 0x8447, 0x8, 0x1, 0x7, 0x9, 0xb, 0x3, 0x4, 0x6, 0x3, 0x4, 0x66, 0x10, 0x0, 0x1000, 0x8000, 0x2, 0x0, 0xff, 0x7c70, 0x10, 0x1, 0x3, 0xf, 0x5, 0x2, 0xc8, 0x6, 0x3, 0x0, 0x5, 0x0, 0x1000, 0x40, 0x3, 0x1, 0x3, 0xb, 0x5, 0x2, 0x7, 0x4800000, 0x0, 0x800, 0xfffffff7, 0x2, 0x99, 0xe, 0x1, 0x3, 0xfffffffa, 0x5, 0x4, 0x4, 0x2, 0x6, 0x1ff, 0x1, 0x1ff, 0xffffffff, 0xad5a, 0x1, 0x800, 0x80000001, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x40, 0xfff, 0x10000, 0x5, 0xfffffff7, 0x6, 0x0, 0x2, 0x200, 0x1, 0xc735, 0x5, 0x3ff, 0x2, 0xd, 0xff, 0x10001, 0x9, 0x7ff, 0xffff88eb, 0x0, 0x101, 0x6d8, 0x38e, 0x3, 0x37, 0x8, 0x0, 0x2, 0x8, 0xffffff7f, 0x9f, 0x0, 0x8, 0x81, 0x3, 0x49f, 0x6, 0x8, 0x1, 0x1, 0x2daa, 0xc, 0x6a, 0x3, 0x19, 0x1000, 0xfff, 0x1, 0xfffffff7, 0x9fb7, 0x1ff, 0x6, 0x0, 0x2, 0xd75, 0x1, 0x1529, 0x6, 0xfffffff7, 0x8, 0x4, 0x4c7, 0xfffffff9, 0x2, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x0, 0x1, 0xd4f, 0x8, 0x0, 0x8, 0x81, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff7}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xc8, 0xf, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7fef}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x84, 0x6, "23f68a388900ef3980ed04362bcc323b46a012180ad3f4b794b76d0079d2ec4daeb47ace2524eec7b3772c8990cff2bc7222cab70511f27ef47139e35483fb8b6129899578e598cdd4c92e1b3bd147f31f10e8704fc6ff879ed6e8044848e3fb3b4dcff30dd8374b9a971b36f3628beef12bd51455f7007e9088015a0ef5b074"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xe0, 0x4, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4ea3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x73, 0x6, "182c1b240c5442a274c6be18ab3b2973d576004b39f113a07c734b762bdd5f94ad7e8394004aedbe52ddd26fda3e2ee80816fccaf37054913dbbd4310a37e63b277555eaf92fcb91fb2fd025448afaf74057c0abe57efee9fe7375759efeb5a20d41b545f48d6b86c05970b7e0b8b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe9c, 0x6, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4bc2, 0xcb, 0x5, 0x7f, 0x400}, 0xea, 0xb3, [{0xfffffff5, 0x35, 0x0, 0x7, 0xb, 0xd44}, {0x1, 0x4, 0xff800000, 0xfffffffc, 0x7ff, 0x83e1}, {0x9, 0x5, 0x4, 0x3, 0xb39a, 0x6}]}, [{0xf21, 0xfffff240, 0x800, 0x8001, 0xfffffffb, 0x3}, {0x6, 0x1, 0xffff, 0x9, 0x5, 0x69}, {0x7, 0x12, 0x0, 0x2, 0x200, 0xa}, {0xa1c, 0x5, 0x6, 0x2, 0x7f}, {0x2deb, 0xcf4a, 0x7, 0x1, 0x8, 0xa}, {0x7, 0x1, 0x8, 0x1, 0x6, 0x3}, {0x13, 0x0, 0xfffffffd, 0x1, 0xc6e, 0x7}, {0x1, 0xb459, 0x70d, 0x4, 0x7, 0xb}, {0x6, 0x7, 0x1, 0xffff, 0x5aac, 0x8}, {0xffff7fff, 0x5, 0x4, 0x7, 0x6, 0xbbb1}, {0x4, 0x4, 0x1, 0x800, 0xf2f2, 0x5}, {0x9, 0x6, 0x6, 0xfffffffe, 0x3, 0x9}, {0x400, 0x8, 0x9, 0x70, 0xfff}, {0x0, 0x34e, 0x8, 0x0, 0x8, 0x4f04}, {0x70, 0x20420b3d, 0x8, 0x0, 0x2, 0xfffffff9}, {0x3e5a, 0x400, 0x8000, 0xa3, 0x1, 0x120000}, {0x2, 0x100, 0x3, 0x3e30, 0x4ff, 0x4}, {0x0, 0x9, 0x0, 0x3, 0x10, 0x80000000}, {0x47e, 0x7, 0x6, 0xe722, 0x9, 0x6}, {0x6, 0x1d1a, 0x6, 0x3, 0x7, 0x4}, {0x4, 0xfd50, 0x7, 0x7ff, 0x3, 0xfc0}, {0x7, 0x4, 0x81, 0xe, 0x8}, {0x8, 0x10, 0x40, 0xe, 0x5, 0xdab1}, {0x8001, 0x8, 0x7fffffff, 0x1, 0x966, 0x17}, {0x4, 0x7, 0x0, 0x0, 0x70000000, 0xffffff7f}, {0x8, 0x6, 0x8, 0xf8, 0x4, 0x8}, {0x8, 0x3, 0x3, 0x7, 0x6, 0x4}, {0x2c, 0x5, 0x1cc, 0x2, 0x7fff, 0x1}, {0x5, 0x2, 0x80000000, 0xc, 0x8, 0x7}, {0x1000, 0x3, 0x10, 0x26, 0x2, 0x4}, {0x5, 0x3, 0x1, 0x7fffffff, 0x7, 0x7}, {0x6, 0xfff, 0x9, 0xa, 0x1, 0x4}, {0x6, 0x2, 0xb, 0x0, 0x3, 0x100}, {0x9b, 0x9, 0x5, 0x401, 0xdab, 0x6}, {0x6, 0x1, 0x4, 0x5, 0x144a, 0x2}, {0x10, 0xffffe41b, 0x1ff, 0x101, 0x5, 0xff}, {0x6, 0x2, 0xffffffff, 0xffffff82, 0x1, 0x8}, {0x176d, 0x66, 0x8, 0xff, 0x8000, 0xe7}, {0xd, 0xf48, 0x9, 0x9ba, 0x3, 0xfb870783}, {0x0, 0x4, 0x9, 0xce37, 0x24, 0x80000001}, {0x4, 0x4, 0x6, 0x3, 0x5, 0x9}, {0x9, 0x594c, 0x100, 0x1, 0x5, 0x7}, {0x6, 0x4, 0x7, 0x101, 0xa, 0x2}, {0x5, 0xffff0001, 0x8, 0x3, 0x6, 0x2}, {0x800, 0x3, 0xcf, 0x4, 0x2, 0xfff}, {0x0, 0xc1bf, 0x2, 0x6, 0x7ff, 0x15b2}, {0x5, 0x6, 0x402e8222, 0x9, 0x7, 0x10000}, {0x2, 0x8, 0x7f, 0xa2c, 0x1, 0x5}, {0x4, 0x6, 0x40, 0x0, 0x1b, 0x9}, {0x2, 0x6, 0xa, 0xaaeb, 0x5357, 0x76b}, {0x0, 0x9, 0x6, 0x1, 0x44, 0x8}, {0x4, 0x8, 0x6, 0x3, 0x7ff, 0x6}, {0xbc, 0x0, 0x38, 0x7, 0x5, 0x401}, {0xfffffffe, 0xffff6e28, 0x8, 0x6, 0x5, 0x1}, {0x6, 0x0, 0x5, 0x8, 0x7, 0x8}, {0x7, 0x2, 0x5, 0x1, 0x4, 0x1}, {0x77, 0x8, 0x2, 0x0, 0xfffffff9, 0x39}, {0xe54a, 0x2, 0x9, 0x1, 0x9, 0x15}, {0x6, 0x7, 0x2, 0xfffffff9, 0x7fffffff, 0x8}, {0x80000001, 0x1ff, 0x8, 0x100, 0x2, 0x85c}, {0x2, 0x9, 0x1, 0x40, 0x8, 0xfffffff3}, {0x6, 0x1000, 0x1, 0xbe0e, 0xce3, 0xffffffff}, {0x6, 0x8, 0x5d27, 0x2, 0x3, 0x101}, {0x9e8, 0x22, 0x45fe, 0x10543d3c, 0x7, 0xffff}, {0x4, 0x2, 0x8000, 0x0, 0x8001, 0x6}, {0x2, 0xfffff000, 0x294541a6, 0x2, 0x3, 0x9}, {0x4, 0xffffffff, 0x1, 0x9, 0x2, 0x7}, {0x7, 0xffffc7a9, 0x5, 0x6, 0x4, 0x8}, {0x3, 0x0, 0xffffffff, 0xb73, 0x8, 0x10000}, {0xf84f8ba, 0x9, 0x7, 0x3, 0x101, 0xfffffffc}, {0x8, 0x5, 0x9, 0x1, 0xfff, 0x5}, {0xc, 0x1, 0x4, 0x86f, 0x4, 0x1}, {0x5, 0x9, 0x6, 0xd582, 0x1, 0x2}, {0x1, 0x401, 0x2, 0x0, 0x2}, {0xc6fa, 0x3, 0x9, 0x5, 0xae, 0x3ff}, {0xf, 0x0, 0x1, 0x4, 0x863, 0x7}, {0x10000, 0xfffff001, 0xfb5b, 0x9, 0x7, 0x36}, {0x0, 0x9, 0xa5a, 0x5ab, 0x10001, 0x7fffffff}, {0x3, 0x3, 0x9, 0x9, 0xd, 0xfffffffe}, {0xfffffc01, 0xfff, 0x7, 0x6, 0x100, 0x80000001}, {0x5ae, 0x1, 0xf, 0x10, 0x0, 0x3}, {0x0, 0xb, 0x7b, 0x1ffe0000, 0x1, 0x120a1ba3}, {0x401, 0x9, 0x10, 0x0, 0x9, 0xbdd3}, {0x98e3, 0xfffffffa, 0x8, 0x8000, 0x7, 0x8}, {0x1, 0xd880, 0x50, 0x6, 0x8, 0x9}, {0x2, 0x6, 0x2, 0x529d, 0x7, 0x401}, {0x4, 0xfff, 0x200, 0x2, 0x1, 0x7}, {0x10001, 0xf, 0x7, 0x7, 0x9, 0x4}, {0xff7, 0x9, 0x1, 0x7, 0x7fffffff, 0x3}, {0x4, 0x80000000, 0x8, 0x7, 0x52b, 0x702}, {0x0, 0x9, 0x8, 0xaf8, 0x1, 0x8}, {0x4, 0x2, 0x900, 0x4, 0x10001, 0x7}, {0x41, 0x8, 0x1, 0x80000000, 0xf, 0x9}, {0x1, 0x8, 0x9, 0x80, 0x8000, 0x71eeaaef}, {0x2, 0xe, 0x81, 0x7fff, 0x2, 0x8}, {0x1, 0x0, 0x5, 0x5, 0x7, 0x80000001}, {0x0, 0x7782, 0xffffffff, 0x5, 0x100, 0x2}, {0x8001, 0x48d9, 0x4, 0x6, 0xcb, 0x9}, {0xfa3, 0x5, 0xae, 0x1, 0x5, 0x80000001}, {0x9, 0x3ff, 0x8, 0x57, 0x9, 0x8001}, {0xa, 0x8001, 0x1, 0x0, 0x1d2, 0x1}, {0x8, 0x1c3f4b84, 0x8, 0x78f, 0x10000, 0xa}, {0x2, 0xa, 0x9, 0xff, 0x800, 0x2}, {0x1ff, 0x6, 0x36df, 0x5ff, 0x4f, 0x3ff}, {0x70bd, 0x8000, 0x1, 0x5866, 0xef}, {0x80000001, 0x100000, 0x6, 0x3, 0x5, 0x3}, {0x10000, 0x70ba9052, 0x2, 0x9, 0xffffffff, 0x7ff}, {0x3, 0x6, 0x3, 0xff, 0x0, 0x6}, {0x6, 0x5, 0x3, 0x3ff, 0x7fff, 0xd}, {0x6, 0x23a, 0x2, 0x8, 0x4, 0x43e}, {0x0, 0x8001, 0x6, 0x40, 0x7ff, 0x2d6b8c5d}, {0x8, 0xfffffffe, 0x6, 0x3, 0x80000000}, {0x3, 0x9, 0x1, 0x200, 0x7f, 0x1ff}, {0xfffffffe, 0xff, 0x9, 0x51a4, 0x9, 0x34}, {0x8, 0x1, 0xb6b6, 0xffff0001, 0x6, 0x8}, {0x7fffffff, 0x7, 0x7, 0x0, 0x100, 0xb8}, {0x8, 0xb3, 0x6, 0x6, 0x1, 0x8}, {0x7ff, 0xe8e, 0x8, 0x5, 0xfff, 0x7}, {0x1, 0x90f, 0x0, 0x80000000, 0x8b6, 0xf403d4a}, {0xf, 0x4, 0xf3, 0x800, 0xbff, 0x4}, {0xbd60, 0x1, 0x9, 0x4, 0x76e, 0x8}, {0x8, 0x0, 0x2, 0x3, 0x0, 0x4}, {0x997, 0x1, 0x10, 0xb, 0xfffffffd, 0x40}, {0xfffffff7, 0xf299, 0x3, 0x6, 0x26b, 0x372}, {0x9, 0x1, 0x1, 0xe, 0xb}, {0x8, 0x44, 0x80000000, 0x3, 0x0, 0x78bc}, {0x2, 0x7, 0x8d14, 0x400, 0x9, 0x7}, {0x6d, 0x5, 0x2, 0x7, 0x10000}], [{0x2, 0x1}, {0x4, 0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {}, {}, {0x5}, {}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x2cb3b8b7d4d2ab52}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x3, 0xed5a647e0b0c6e1}, {0x0, 0x1}, {0x4}, {0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x1, 0xeaed4228d165b465}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2}, {}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x5, 0x6, "bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2f8c}, 0x1, 0x0, 0x0, 0x24000045}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b8", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 5.993753228s ago: executing program 4 (id=784): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000002c0)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf6, 0x54, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.992460395s ago: executing program 1 (id=785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) msync(&(0x7f00005af000/0x4000)=nil, 0x4000, 0x1) 4.901070945s ago: executing program 1 (id=786): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) writev(r0, &(0x7f0000002340)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000002140)="d4e313897ba92abab9c6583cddfbf1f4b390d6384d4189fc285bfd1db0a938013ef24cd269cd536ca80a89137d5aa380120d7111ad9e2e3312deebb72711e2bfdddf651604b872294c921b9a98940e8fff6928666bf0722b7a18f3968806b39a3621ddd9aec7c9830c92c4c4", 0x6c}, {0x0}, {&(0x7f0000002280)="d8d36f6ba46a391b430b4958b58cef93a7c4b042205d569cdd6650ec9748c1", 0x1f}, {&(0x7f00000022c0)="028bb81475e1e09a81dd", 0xa}], 0x6) 4.724978175s ago: executing program 2 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 4.606557182s ago: executing program 1 (id=788): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000002100)=0x1) 4.524406369s ago: executing program 4 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'sit0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0x6, 0x1fc, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x84f, 0x400000000000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b", 0xd) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, 0x0, 0x0) sendmmsg(r4, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)}}], 0x1, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020) 4.354192334s ago: executing program 2 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000800)={0x14, &(0x7f0000000740)={0x0, 0xa282983ff7e73054, 0x73, {0x73, 0x21, "87b15f7aea30fc472e464102387b19825aee40b2808046a201982b2d1e8d684f78e40e51734e7432b39f4727aa4127bdfe9c941adf0955245302d17c1e0bb0f456ddbd32c7d9e09888a602950b54b0ccb0b91e1b571c64921c358506da4953920503fca1e23bbd781a72b54e7b568c4aed"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x40, 0x17, 0x30, "d6bc7ca7292020a452f739bcbed1daf9ff66de38c59dacf86df02418bd759ce96086f3c17fcc1eee6fcf384cf37868bf"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x44}, 0x0, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x6, 0x7, 0x1, 0x2, 0x1, 0x7fff, 0x1000, 0x7, 0x1, 0x1, 0x3, 0x6}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x8001}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000a80)={0x20, 0x89, 0x2, 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd2(0x802, 0x0) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000b80)={r6, 0x8, 0x2, r7}) dup2(r7, r6) 4.248427581s ago: executing program 3 (id=791): socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0xf0}, 0x18) sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010) 4.212573499s ago: executing program 1 (id=792): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0xffffffff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0x7, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x7ff, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0xffffffff, 0x7, 0x5, 0x3f, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x4, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000, 0x2008004, 0x6, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x3, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x9, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e6, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x5, 0xfffffff9, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x8000086, 0x2, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x4000080, 0x3, 0x8000004, 0x2950bfaf, 0xffd, 0xa2, 0x7, 0xa9, 0x4005, 0x7, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x8000, 0x120000, 0xf55, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa61d, 0x2, 0x1, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x0, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x7, 0x9602, 0x0, 0xaf, 0x5e, 0x6, 0x8, 0x2, 0x5, 0x7, 0x30b1d696, 0x0, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.885047572s ago: executing program 3 (id=793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574000000000500"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.648111474s ago: executing program 3 (id=794): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f7706"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0x2, 0x6, 0x4, 0x400, 0x2c2, {}, {0x3, 0x2, 0xd5, 0x80, 0x3, 0x8, "c61f3a28"}, 0xfffffffe, 0x3, {0x0}, 0x8}) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x1f8, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4af3}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "81785f9162a45cded4d9a9629dfcbde28395484c3edcc369ba9b5a30c09877030b7cf52c12"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "83f85319573575671a99f4ac5d1c8f01059bc908d8"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d9a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb20}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.542809504s ago: executing program 0 (id=795): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2.394291274s ago: executing program 2 (id=796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) msync(&(0x7f00005af000/0x4000)=nil, 0x4000, 0x1) 2.347959098s ago: executing program 3 (id=797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) 2.286859645s ago: executing program 0 (id=798): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) writev(r0, &(0x7f0000002340)=[{&(0x7f00000000c0)}, {0x0}, {&(0x7f0000002140)="d4e313897ba92abab9c6583cddfbf1f4b390d6384d4189fc285bfd1db0a938013ef24cd269cd536ca80a89137d5aa380120d7111ad9e2e3312deebb72711e2bfdddf651604b872294c921b9a98940e8fff6928666bf0722b7a18f3968806b39a3621ddd9aec7c9830c92c4c4", 0x6c}, {0x0}, {&(0x7f0000002280)="d8d36f6ba46a391b430b4958b58cef93a7c4b042205d569cdd6650ec9748c1", 0x1f}, {&(0x7f00000022c0)="028bb81475e1e09a81dd", 0xa}], 0x6) 2.154292204s ago: executing program 2 (id=799): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 1.839539395s ago: executing program 0 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 1.792277076s ago: executing program 3 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x558410e9) 1.720174986s ago: executing program 2 (id=802): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) eventfd(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) 1.146123515s ago: executing program 0 (id=803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x3, r8, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 664.366047ms ago: executing program 3 (id=804): r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 478.146945ms ago: executing program 0 (id=805): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) close(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f28, 0x200, 0x7cc1, 0x3ff, 0x2, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3f9, 0x802, 0xc42, 0x1, 0x3, 0x9, 0xe1cb, 0x5, 0x3, 0x400000, 0x395, 0x8000008c, 0xfffffffe, 0x9, 0xfffffff5, 0x1, 0x3, 0xab99, 0x2, 0x7, 0x2, 0xff]}) 0s ago: executing program 1 (id=806): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0xf0}, 0x18) sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x20000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 81.005142][ T5793] cgroup: Unknown subsys name 'net' [ 81.245436][ T5793] cgroup: Unknown subsys name 'cpuset' [ 81.281731][ T5793] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.078528][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.892409][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.928853][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.940466][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.952830][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.956883][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.958240][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.980840][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.992054][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.001792][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.014813][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.020024][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.021675][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.023793][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.030830][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.038834][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.039998][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.042758][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.050817][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.051194][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.060101][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.061734][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.110690][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.112534][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.152376][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.158654][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.817369][ T31] cfg80211: failed to load regulatory.db [ 87.059557][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 87.186239][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 87.313436][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 87.339869][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 87.503087][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 87.972810][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.974052][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.974441][ T5808] bridge_slave_0: entered allmulticast mode [ 87.976046][ T5808] bridge_slave_0: entered promiscuous mode [ 88.082338][ T5124] Bluetooth: hci2: command tx timeout [ 88.082495][ T61] Bluetooth: hci1: command tx timeout [ 88.114873][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.115005][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.115180][ T5808] bridge_slave_1: entered allmulticast mode [ 88.117122][ T5808] bridge_slave_1: entered promiscuous mode [ 88.162726][ T61] Bluetooth: hci4: command tx timeout [ 88.240757][ T5124] Bluetooth: hci3: command tx timeout [ 88.240985][ T61] Bluetooth: hci0: command tx timeout [ 88.511706][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.511810][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.511929][ T5804] bridge_slave_0: entered allmulticast mode [ 88.513414][ T5804] bridge_slave_0: entered promiscuous mode [ 88.721539][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.721728][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.721903][ T5804] bridge_slave_1: entered allmulticast mode [ 88.724321][ T5804] bridge_slave_1: entered promiscuous mode [ 88.725441][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.725512][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.725616][ T5805] bridge_slave_0: entered allmulticast mode [ 88.727098][ T5805] bridge_slave_0: entered promiscuous mode [ 88.844882][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.845150][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.845271][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.845461][ T5807] bridge_slave_0: entered allmulticast mode [ 88.847230][ T5807] bridge_slave_0: entered promiscuous mode [ 88.931506][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.931606][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.931725][ T5805] bridge_slave_1: entered allmulticast mode [ 88.933217][ T5805] bridge_slave_1: entered promiscuous mode [ 89.044835][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.045108][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.045194][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.045298][ T5807] bridge_slave_1: entered allmulticast mode [ 89.046740][ T5807] bridge_slave_1: entered promiscuous mode [ 89.303262][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.303368][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.303512][ T5806] bridge_slave_0: entered allmulticast mode [ 89.305051][ T5806] bridge_slave_0: entered promiscuous mode [ 89.456977][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.531595][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.531724][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.531903][ T5806] bridge_slave_1: entered allmulticast mode [ 89.533758][ T5806] bridge_slave_1: entered promiscuous mode [ 89.664078][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.666841][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.753031][ T5808] team0: Port device team_slave_0 added [ 89.756612][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.844269][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.903357][ T5808] team0: Port device team_slave_1 added [ 89.905673][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.064362][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.163534][ T61] Bluetooth: hci1: command tx timeout [ 90.163568][ T61] Bluetooth: hci2: command tx timeout [ 90.212795][ T5804] team0: Port device team_slave_0 added [ 90.240801][ T5124] Bluetooth: hci4: command tx timeout [ 90.273811][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.320665][ T5124] Bluetooth: hci0: command tx timeout [ 90.320699][ T5124] Bluetooth: hci3: command tx timeout [ 90.403636][ T5804] team0: Port device team_slave_1 added [ 90.664790][ T5805] team0: Port device team_slave_0 added [ 90.732434][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.732446][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.732461][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.789126][ T5807] team0: Port device team_slave_0 added [ 90.862743][ T5805] team0: Port device team_slave_1 added [ 90.922339][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.922354][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.922377][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.924098][ T5807] team0: Port device team_slave_1 added [ 91.082989][ T5806] team0: Port device team_slave_0 added [ 91.173249][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.173266][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.173283][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.263892][ T5806] team0: Port device team_slave_1 added [ 91.342414][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.342430][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.342454][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.343453][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.343466][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.343480][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.440183][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.440195][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.440209][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.454543][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.454559][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.454589][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.692650][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.692666][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.692681][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.701842][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.701857][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.701881][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.819730][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.819744][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.819758][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.929895][ T5808] hsr_slave_0: entered promiscuous mode [ 91.931432][ T5808] hsr_slave_1: entered promiscuous mode [ 92.066473][ T5804] hsr_slave_0: entered promiscuous mode [ 92.067322][ T5804] hsr_slave_1: entered promiscuous mode [ 92.068313][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 92.068402][ T5804] Cannot create hsr debugfs directory [ 92.240917][ T5124] Bluetooth: hci2: command tx timeout [ 92.240947][ T5124] Bluetooth: hci1: command tx timeout [ 92.320702][ T5124] Bluetooth: hci4: command tx timeout [ 92.396540][ T5805] hsr_slave_0: entered promiscuous mode [ 92.397390][ T5805] hsr_slave_1: entered promiscuous mode [ 92.397955][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 92.397973][ T5805] Cannot create hsr debugfs directory [ 92.410699][ T61] Bluetooth: hci0: command tx timeout [ 92.410811][ T5124] Bluetooth: hci3: command tx timeout [ 92.441554][ T5807] hsr_slave_0: entered promiscuous mode [ 92.442937][ T5807] hsr_slave_1: entered promiscuous mode [ 92.443822][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 92.443842][ T5807] Cannot create hsr debugfs directory [ 92.638209][ T5806] hsr_slave_0: entered promiscuous mode [ 92.639029][ T5806] hsr_slave_1: entered promiscuous mode [ 92.639617][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 92.639639][ T5806] Cannot create hsr debugfs directory [ 94.155199][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.189601][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.204301][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.256595][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.321442][ T5124] Bluetooth: hci2: command tx timeout [ 94.321474][ T5124] Bluetooth: hci1: command tx timeout [ 94.375756][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.400824][ T5124] Bluetooth: hci4: command tx timeout [ 94.408794][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.445370][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.480799][ T61] Bluetooth: hci0: command tx timeout [ 94.480844][ T5124] Bluetooth: hci3: command tx timeout [ 94.505736][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.615214][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.648311][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.667923][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.710495][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.878907][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.934303][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.958701][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.011194][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.082476][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.159097][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.193873][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.233507][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.278733][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.322227][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.363737][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.364865][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.399029][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.399594][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.435157][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.507941][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.519693][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.556703][ T1859] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.556828][ T1859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.607110][ T1859] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.607242][ T1859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.619830][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.662464][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.662684][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.717549][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.719915][ T1859] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.720047][ T1859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.852720][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.894815][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.902572][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.902772][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.940227][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.940410][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.005324][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.044630][ T1504] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.044843][ T1504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.113211][ T1504] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.113379][ T1504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.175486][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.588162][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.670215][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.899898][ T5806] veth0_vlan: entered promiscuous mode [ 96.915829][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.959978][ T5806] veth1_vlan: entered promiscuous mode [ 96.969436][ T5807] veth0_vlan: entered promiscuous mode [ 97.019646][ T5807] veth1_vlan: entered promiscuous mode [ 97.038175][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.085370][ T5808] veth0_vlan: entered promiscuous mode [ 97.117872][ T5805] veth0_vlan: entered promiscuous mode [ 97.128884][ T5806] veth0_macvtap: entered promiscuous mode [ 97.145206][ T5808] veth1_vlan: entered promiscuous mode [ 97.163315][ T5806] veth1_macvtap: entered promiscuous mode [ 97.172044][ T5805] veth1_vlan: entered promiscuous mode [ 97.176614][ T5807] veth0_macvtap: entered promiscuous mode [ 97.205543][ T5807] veth1_macvtap: entered promiscuous mode [ 97.255704][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.290185][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.290359][ T5804] veth0_vlan: entered promiscuous mode [ 97.305040][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.337010][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.343795][ T5808] veth0_macvtap: entered promiscuous mode [ 97.345519][ T1504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.371288][ T1504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.375954][ T1504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.376947][ T5804] veth1_vlan: entered promiscuous mode [ 97.378395][ T5805] veth0_macvtap: entered promiscuous mode [ 97.414630][ T1504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.416185][ T5808] veth1_macvtap: entered promiscuous mode [ 97.440473][ T1504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.450995][ T5805] veth1_macvtap: entered promiscuous mode [ 97.455922][ T1504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.495304][ T1504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511090][ T1504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.646975][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.702387][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.753788][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.809791][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.877683][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.882592][ T5804] veth0_macvtap: entered promiscuous mode [ 97.889585][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.893505][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.893532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.900462][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.912189][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.913595][ T5804] veth1_macvtap: entered promiscuous mode [ 97.917666][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.935753][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.973519][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.007340][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.033320][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.033339][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.220697][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.220717][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.285055][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.386976][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.409932][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.409952][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.463124][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.509372][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.526527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.526547][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.529121][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574114][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.610470][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.610489][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.780006][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.780024][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.849986][ T5928] ======================================================= [ 98.849986][ T5928] WARNING: The mand mount option has been deprecated and [ 98.849986][ T5928] and is ignored by this kernel. Remove the mand [ 98.849986][ T5928] option from the mount to silence this warning. [ 98.849986][ T5928] ======================================================= [ 99.751260][ T37] audit: type=1326 audit(1764755215.449:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 99.751312][ T37] audit: type=1326 audit(1764755215.449:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 99.751352][ T37] audit: type=1326 audit(1764755215.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 99.990807][ T5931] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 100.232125][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.232146][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.344357][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.344379][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.556998][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.557018][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.747413][ T194] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.992604][ T194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.992631][ T194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.992671][ T194] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 105.992695][ T194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.126692][ T194] usb 4-1: config 0 descriptor?? [ 106.369522][ T10] usb 4-1: USB disconnect, device number 2 [ 108.090562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.091738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.092848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.094016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.095141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.096271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.097793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.099469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.487627][ T6043] process 'syz.4.33' launched './file1' with NULL argv: empty string added [ 111.158767][ T6046] syz.3.35 (6046) used greatest stack depth: 17848 bytes left [ 111.359865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.464661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.881430][ T5997] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.966865][ T6064] bridge_slave_0: left allmulticast mode [ 111.966891][ T6064] bridge_slave_0: left promiscuous mode [ 111.968948][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.050676][ T5997] usb 4-1: Using ep0 maxpacket: 32 [ 112.053587][ T5997] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.053615][ T5997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.053634][ T5997] usb 4-1: config 0 has no interface number 0 [ 112.055459][ T5997] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 112.055488][ T5997] usb 4-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.055516][ T5997] usb 4-1: config 0 interface 184 has no altsetting 0 [ 112.100703][ T5997] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.100733][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.100753][ T5997] usb 4-1: Product: syz [ 112.100767][ T5997] usb 4-1: Manufacturer: syz [ 112.100781][ T5997] usb 4-1: SerialNumber: syz [ 112.245515][ T5997] usb 4-1: config 0 descriptor?? [ 112.264310][ T5997] smsc75xx v1.0.0 [ 112.264339][ T5997] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 112.264854][ T5997] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 112.301789][ T6064] bridge_slave_1: left allmulticast mode [ 112.301818][ T6064] bridge_slave_1: left promiscuous mode [ 112.302175][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.403667][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.537134][ T6064] bond0: (slave bond_slave_0): Releasing backup interface [ 112.624464][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 112.979222][ T6074] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 113.269230][ T6064] bond0: (slave bond_slave_1): Releasing backup interface [ 113.382754][ T6064] team0: Port device team_slave_0 removed [ 113.471566][ T6064] team0: Port device team_slave_1 removed [ 113.472630][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.472654][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.524434][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.524462][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.590034][ T6064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.591035][ T6065] syzkaller0: entered promiscuous mode [ 113.591055][ T6065] syzkaller0: entered allmulticast mode [ 115.288889][ T5898] usb 4-1: USB disconnect, device number 3 [ 115.510168][ T6103] 9pnet_fd: Insufficient options for proto=fd [ 116.684519][ T37] audit: type=1326 audit(1764755232.319:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6097 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 116.684580][ T37] audit: type=1326 audit(1764755232.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6097 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 116.684621][ T37] audit: type=1326 audit(1764755232.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6097 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 116.801277][ T6112] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 117.494499][ T6121] bridge_slave_0: left allmulticast mode [ 117.494530][ T6121] bridge_slave_0: left promiscuous mode [ 117.494782][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.743388][ T6121] bridge_slave_1: left allmulticast mode [ 117.743415][ T6121] bridge_slave_1: left promiscuous mode [ 117.743625][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.892768][ T6121] bond0: (slave bond_slave_0): Releasing backup interface [ 118.027269][ T6121] bond0: (slave bond_slave_1): Releasing backup interface [ 118.158615][ T6121] team0: Port device team_slave_0 removed [ 118.346784][ T6121] team0: Port device team_slave_1 removed [ 118.353921][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.353952][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.442617][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.442647][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.514426][ T6121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.541484][ T6124] syzkaller0: entered promiscuous mode [ 118.541512][ T6124] syzkaller0: entered allmulticast mode [ 120.300664][ T1614] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.372126][ T6121] syz.3.59 (6121) used greatest stack depth: 16024 bytes left [ 120.460672][ T1614] usb 2-1: Using ep0 maxpacket: 8 [ 120.462543][ T1614] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.462575][ T1614] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.462600][ T1614] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.462624][ T1614] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.462666][ T1614] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.462689][ T1614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.544587][ T6164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.693812][ T1614] usb 2-1: usb_control_msg returned -32 [ 121.693842][ T1614] usbtmc 2-1:16.0: can't read capabilities [ 121.982980][ T1614] usb 2-1: USB disconnect, device number 2 [ 122.704196][ T6176] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 122.828166][ T37] audit: type=1326 audit(1764755238.279:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 122.828219][ T37] audit: type=1326 audit(1764755238.289:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 122.828256][ T37] audit: type=1326 audit(1764755238.289:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6168 comm="syz.1.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 123.886908][ T6191] Zero length message leads to an empty skb [ 124.230609][ T5983] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 124.431360][ T5983] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.431393][ T5983] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.431418][ T5983] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 124.431461][ T5983] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.431484][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.437218][ T6191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.652813][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.653462][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.046341][ T1232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.892343][ T5983] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 125.933267][ T5983] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 126.068820][ T1232] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 126.068857][ T1232] usb 2-1: config 0 has no interface number 0 [ 126.175417][ T1232] usb 2-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 126.175563][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.175586][ T1232] usb 2-1: Product: syz [ 126.175600][ T1232] usb 2-1: Manufacturer: syz [ 126.175615][ T1232] usb 2-1: SerialNumber: syz [ 127.177818][ T1232] usb 2-1: config 0 descriptor?? [ 127.481186][ T5983] usb 4-1: USB disconnect, device number 4 [ 127.481269][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 128.120279][ T6232] syz_tun: entered allmulticast mode [ 128.146954][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 128.356540][ T6232] syz_tun (unregistering): left allmulticast mode [ 128.736774][ T5958] usb 2-1: USB disconnect, device number 3 [ 129.839586][ T6236] virtio-fs: tag not found [ 129.840192][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 132.873221][ T5958] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.946457][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946552][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.011601][ T6115] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.740355][ T6270] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 134.770927][ T6285] syz_tun: entered allmulticast mode [ 134.771726][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 135.140398][ T6285] syz_tun (unregistering): left allmulticast mode [ 136.921121][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.100714][ T10] usb 2-1: device descriptor read/64, error -71 [ 137.654726][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.930824][ T10] usb 2-1: device descriptor read/64, error -71 [ 138.041599][ T10] usb usb2-port1: attempt power cycle [ 138.068099][ T5983] Process accounting resumed [ 138.480797][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.554401][ T6323] sg_write: process 61 (syz.0.121) changed security contexts after opening file descriptor, this is not allowed. [ 138.637607][ T10] usb 2-1: device descriptor read/8, error -71 [ 138.907341][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.942157][ T10] usb 2-1: device descriptor read/8, error -71 [ 139.051818][ T10] usb usb2-port1: unable to enumerate USB device [ 139.824021][ T37] audit: type=1326 audit(1764755255.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 139.824243][ T37] audit: type=1326 audit(1764755255.839:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 139.824576][ T37] audit: type=1326 audit(1764755255.839:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6335 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 140.300908][ T6338] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 144.648881][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.649636][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.076687][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.082529][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.540625][ T194] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.710656][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.710848][ T194] usb 1-1: Using ep0 maxpacket: 16 [ 145.716272][ T194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.716308][ T194] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.716330][ T194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.769963][ T194] usb 1-1: config 0 descriptor?? [ 145.860646][ T5955] usb 5-1: device descriptor read/64, error -71 [ 146.120920][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.174488][ T1410] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.184483][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.184590][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.184627][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.258417][ T194] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 146.282930][ T5955] usb 5-1: device descriptor read/64, error -71 [ 146.592880][ T5955] usb usb5-port1: attempt power cycle [ 146.852626][ T37] audit: type=1326 audit(1764755262.859:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.853129][ T37] audit: type=1326 audit(1764755262.859:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.853406][ T37] audit: type=1326 audit(1764755262.859:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.853804][ T37] audit: type=1326 audit(1764755262.859:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.854100][ T37] audit: type=1326 audit(1764755262.859:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.854376][ T37] audit: type=1326 audit(1764755262.859:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.854730][ T37] audit: type=1326 audit(1764755262.859:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.855013][ T37] audit: type=1326 audit(1764755262.859:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.855316][ T37] audit: type=1326 audit(1764755262.859:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 146.855618][ T37] audit: type=1326 audit(1764755262.859:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6383 comm="syz.1.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1989f749 code=0x7ffc0000 [ 147.457156][ T194] usb 1-1: USB disconnect, device number 2 [ 147.840602][ T5955] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.861530][ T5955] usb 5-1: device descriptor read/8, error -71 [ 147.956931][ T6399] netlink: 'syz.3.145': attribute type 5 has an invalid length. [ 147.956954][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 148.100685][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.125179][ T5955] usb 5-1: device descriptor read/8, error -71 [ 148.146046][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.146'. [ 148.146068][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 148.146081][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 148.147610][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'. [ 148.247979][ T5955] usb usb5-port1: unable to enumerate USB device [ 149.316370][ T6416] syz_tun: entered allmulticast mode [ 149.333199][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 149.882330][ T6419] netlink: 165 bytes leftover after parsing attributes in process `syz.3.151'. [ 149.915351][ T6416] syz_tun (unregistering): left allmulticast mode [ 150.899271][ T6426] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 151.232440][ T6430] input: syz1 as /devices/virtual/input/input6 [ 154.505095][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'. [ 154.505111][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 154.505118][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 154.505149][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 154.800752][ T1232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.964558][ T1232] usb 5-1: Using ep0 maxpacket: 32 [ 155.141145][ T1232] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.141174][ T1232] usb 5-1: config 0 has no interface number 0 [ 155.141214][ T1232] usb 5-1: config 0 interface 184 has no altsetting 0 [ 155.150790][ T1232] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.150817][ T1232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.150836][ T1232] usb 5-1: Product: syz [ 155.150849][ T1232] usb 5-1: Manufacturer: syz [ 155.150862][ T1232] usb 5-1: SerialNumber: syz [ 155.246072][ T1232] usb 5-1: config 0 descriptor?? [ 155.253792][ T1232] smsc75xx v1.0.0 [ 157.073490][ T6478] lo: entered allmulticast mode [ 157.183176][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 157.205705][ T1232] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 157.205724][ T1232] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 157.205744][ T1232] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 157.205911][ T1232] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.404426][ T1232] usb 5-1: USB disconnect, device number 6 [ 160.058941][ T5958] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 160.206516][ T5958] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 160.206548][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.206569][ T5958] usb 5-1: Product: syz [ 160.206583][ T5958] usb 5-1: Manufacturer: syz [ 160.206598][ T5958] usb 5-1: SerialNumber: syz [ 161.241000][ T5958] usb 5-1: config 0 descriptor?? [ 162.363569][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 162.535521][ T5958] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 162.535632][ T5958] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 162.605996][ T5958] usb 5-1: USB disconnect, device number 7 [ 162.690659][ T5798] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.899947][ T5814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.051901][ T5798] usb 4-1: device not accepting address 5, error -71 [ 165.060573][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 165.064247][ T5814] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 165.065472][ T5814] usb 3-1: config 0 has no interface number 0 [ 165.065535][ T5814] usb 3-1: config 0 interface 184 has no altsetting 0 [ 166.088353][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.088383][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.088404][ T5814] usb 3-1: Product: syz [ 167.054987][ T5814] usb 3-1: config 0 descriptor?? [ 167.572585][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 167.618947][ T5814] usb 3-1: can't set config #0, error -71 [ 168.050021][ T5814] usb 3-1: USB disconnect, device number 3 [ 169.090640][ T5983] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.130925][ T6546] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 169.245858][ T5983] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 169.245888][ T5983] usb 5-1: config 0 has no interface number 0 [ 169.248453][ T5983] usb 5-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 169.248480][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.248491][ T5983] usb 5-1: Product: syz [ 169.248499][ T5983] usb 5-1: Manufacturer: syz [ 169.248506][ T5983] usb 5-1: SerialNumber: syz [ 169.267869][ T5983] usb 5-1: config 0 descriptor?? [ 169.280610][ T6546] usb 4-1: Using ep0 maxpacket: 8 [ 169.310555][ T6546] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.310584][ T6546] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.310603][ T6546] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.310621][ T6546] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.310654][ T6546] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.310672][ T6546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.470628][ T5893] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.730617][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 169.735158][ T5893] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.735186][ T5893] usb 3-1: config 0 has no interface number 0 [ 169.735234][ T5893] usb 3-1: config 0 interface 184 has no altsetting 0 [ 169.738176][ T5893] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.738205][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.738225][ T5893] usb 3-1: Product: syz [ 169.738239][ T5893] usb 3-1: Manufacturer: syz [ 169.738251][ T5893] usb 3-1: SerialNumber: syz [ 169.746217][ T5893] usb 3-1: config 0 descriptor?? [ 169.761645][ T5893] smsc75xx v1.0.0 [ 169.786962][ T6546] usb 4-1: GET_CAPABILITIES returned 0 [ 169.787004][ T6546] usbtmc 4-1:16.0: can't read capabilities [ 169.994704][ T5983] usb 4-1: USB disconnect, device number 7 [ 170.874782][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 170.874802][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 170.874812][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 170.874978][ T5893] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 171.040686][ T5893] usb 3-1: USB disconnect, device number 4 [ 176.028882][ T5960] usb 5-1: USB disconnect, device number 8 [ 176.543022][ T6666] fuse: Bad value for 'fd' [ 181.343677][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 181.343780][ T37] audit: type=1326 audit(1764755296.789:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 181.343826][ T37] audit: type=1326 audit(1764755296.789:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 181.343866][ T37] audit: type=1326 audit(1764755296.789:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6675 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 181.379728][ T6687] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 183.755596][ T6716] fuse: Bad value for 'fd' [ 189.763723][ T6754] fuse: Bad value for 'fd' [ 189.970614][ T6115] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 190.373051][ T6115] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.373085][ T6115] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 190.373113][ T6115] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 190.373157][ T6115] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 190.373180][ T6115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.877386][ T6752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.024845][ T6115] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 192.058992][ T6115] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 193.607844][ T6115] usb 3-1: USB disconnect, device number 5 [ 193.607951][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 194.628422][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628494][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.235317][ T6790] sd 0:0:1:0: device reset [ 202.846595][ T6849] netlink: 120 bytes leftover after parsing attributes in process `syz.4.292'. [ 204.328124][ T194] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.966034][ T194] usb 1-1: Using ep0 maxpacket: 8 [ 205.586717][ T194] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 205.586747][ T194] usb 1-1: config 162 has an invalid descriptor of length 244, skipping remainder of the config [ 205.586767][ T194] usb 1-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 205.586790][ T194] usb 1-1: config 162 has no interface number 0 [ 205.586846][ T194] usb 1-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.586874][ T194] usb 1-1: config 162 interface 79 has no altsetting 0 [ 205.653862][ T194] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 205.653892][ T194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.653913][ T194] usb 1-1: Product: syz [ 205.653927][ T194] usb 1-1: Manufacturer: syz [ 205.653941][ T194] usb 1-1: SerialNumber: syz [ 206.244676][ T37] audit: type=1326 audit(1764755322.279:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6869 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 206.245009][ T37] audit: type=1326 audit(1764755322.279:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6869 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 206.245264][ T37] audit: type=1326 audit(1764755322.279:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6869 comm="syz.4.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa706c0f749 code=0x7ffc0000 [ 207.333298][ T6877] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 207.655010][ T194] pl2303 1-1:162.79: required endpoints missing [ 207.945686][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 207.976260][ T194] usb 1-1: USB disconnect, device number 3 [ 209.078612][ T6900] netlink: 120 bytes leftover after parsing attributes in process `syz.2.306'. [ 211.510800][ T5960] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.665062][ T5960] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 211.665090][ T5960] usb 4-1: config 0 has no interface number 0 [ 211.679422][ T5960] usb 4-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 211.679451][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.679471][ T5960] usb 4-1: Product: syz [ 211.679486][ T5960] usb 4-1: Manufacturer: syz [ 211.679500][ T5960] usb 4-1: SerialNumber: syz [ 211.713500][ T5960] usb 4-1: config 0 descriptor?? [ 212.130647][ T5955] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.290633][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 212.294070][ T5955] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 212.294097][ T5955] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 212.294112][ T5955] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 212.294123][ T5955] usb 5-1: config 162 has no interface number 0 [ 212.294150][ T5955] usb 5-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.294165][ T5955] usb 5-1: config 162 interface 79 has no altsetting 0 [ 212.364704][ T5955] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 212.364733][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.364752][ T5955] usb 5-1: Product: syz [ 212.364765][ T5955] usb 5-1: Manufacturer: syz [ 212.364778][ T5955] usb 5-1: SerialNumber: syz [ 212.439159][ T6940] netlink: 120 bytes leftover after parsing attributes in process `syz.0.317'. [ 212.561760][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 212.561831][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 212.562569][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 212.563426][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 212.624090][ T5955] pl2303 5-1:162.79: required endpoints missing [ 212.630035][ T5955] usb 5-1: USB disconnect, device number 9 [ 214.656879][ T37] audit: type=1326 audit(1764755330.659:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 214.657264][ T37] audit: type=1326 audit(1764755330.659:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 214.657579][ T37] audit: type=1326 audit(1764755330.669:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6955 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3a3199f749 code=0x7ffc0000 [ 215.303763][ T6962] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 216.902648][ T6988] fuse: Bad value for 'fd' [ 217.031283][ T5958] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 217.211038][ T194] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.093806][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.093873][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.093902][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.093928][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.093949][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.247086][ T194] usb 3-1: Using ep0 maxpacket: 32 [ 218.258048][ T194] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 218.277921][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.277990][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.278017][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.278043][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.278070][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.291463][ T5958] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.291518][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.291545][ T5958] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.291570][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.291596][ T5958] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.295788][ T194] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.295816][ T194] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.295836][ T194] usb 3-1: Product: syz [ 218.295850][ T194] usb 3-1: Manufacturer: syz [ 218.295864][ T194] usb 3-1: SerialNumber: syz [ 218.305100][ T194] usb 3-1: config 0 descriptor?? [ 218.306267][ T6986] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 218.340634][ T5958] usb 5-1: string descriptor 0 read error: -22 [ 218.340787][ T5958] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.340811][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.857440][ T5958] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 219.299042][ T5958] usb 4-1: USB disconnect, device number 8 [ 219.362699][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 220.674858][ T194] usb 5-1: USB disconnect, device number 10 [ 220.750645][ T5983] usb 3-1: USB disconnect, device number 6 [ 221.589875][ T7030] syz.1.346 (7030) used greatest stack depth: 15616 bytes left [ 221.988086][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 223.539409][ T5983] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 223.835911][ T5983] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 223.835940][ T5983] usb 4-1: config 0 has no interface number 0 [ 223.857348][ T5983] usb 4-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 223.857377][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.857398][ T5983] usb 4-1: Product: syz [ 223.857413][ T5983] usb 4-1: Manufacturer: syz [ 223.857427][ T5983] usb 4-1: SerialNumber: syz [ 223.904311][ T5983] usb 4-1: config 0 descriptor?? [ 225.634048][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 225.729874][ T7076] Bluetooth: MGMT ver 1.23 [ 227.143877][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'. [ 230.295413][ T6546] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 230.597571][ T6546] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 230.597631][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 230.597658][ T6546] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.597673][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 230.597687][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.679433][ T6546] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.679484][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.679506][ T6546] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.679527][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.679548][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.682255][ T6546] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 231.682339][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 231.682367][ T6546] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.682392][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 231.682419][ T6546] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 231.731463][ T5814] usb 4-1: USB disconnect, device number 9 [ 231.787478][ T6546] usb 5-1: string descriptor 0 read error: -22 [ 231.787647][ T6546] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.787670][ T6546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.894659][ T6546] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 232.237731][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.471483][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 232.801598][ T5814] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 232.801629][ T5814] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 232.801650][ T5814] usb 1-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 232.801671][ T5814] usb 1-1: config 162 has no interface number 0 [ 232.801728][ T5814] usb 1-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.801756][ T5814] usb 1-1: config 162 interface 79 has no altsetting 0 [ 232.816251][ T5814] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 232.816279][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.816299][ T5814] usb 1-1: Product: syz [ 232.816313][ T5814] usb 1-1: Manufacturer: syz [ 232.816328][ T5814] usb 1-1: SerialNumber: syz [ 232.924007][ T6115] usb 5-1: USB disconnect, device number 11 [ 233.132710][ T5814] pl2303 1-1:162.79: required endpoints missing [ 233.198607][ T5814] usb 1-1: USB disconnect, device number 4 [ 236.470843][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 236.691129][ T6115] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 236.691419][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 236.721810][ T5893] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 236.721853][ T5893] usb 4-1: config 0 has no interface number 0 [ 236.755570][ T5893] usb 4-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 236.755600][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.755620][ T5893] usb 4-1: Product: syz [ 236.755634][ T5893] usb 4-1: Manufacturer: syz [ 236.755648][ T5893] usb 4-1: SerialNumber: syz [ 236.769413][ T7155] capability: warning: `syz.1.388' uses 32-bit capabilities (legacy support in use) [ 236.770058][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.388'. [ 236.820667][ T6115] usb 3-1: device descriptor read/64, error -32 [ 236.861673][ T5893] usb 4-1: config 0 descriptor?? [ 237.070610][ T6115] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 237.222732][ T6115] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.222784][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.222799][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.222813][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.222826][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.223697][ T6115] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.223727][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.223741][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.223754][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.223768][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.224633][ T6115] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 237.224661][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 237.224675][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.224688][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 237.224702][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 237.227808][ T6115] usb 3-1: string descriptor 0 read error: -22 [ 237.228001][ T6115] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 237.228025][ T6115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.391268][ T6115] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 237.962074][ T5893] usb 3-1: USB disconnect, device number 8 [ 242.021110][ T7185] sd 0:0:1:0: device reset [ 243.213488][ T6115] kernel read not supported for file /video37 (pid: 6115 comm: kworker/0:9) [ 244.988622][ T6115] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 246.030641][ T6115] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 246.030702][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.030730][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.089141][ T6115] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 246.089274][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.089303][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.126239][ T6115] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 246.126302][ T6115] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 246.126329][ T6115] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.181561][ T6115] usb 3-1: string descriptor 0 read error: -22 [ 246.181659][ T6115] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 246.181673][ T6115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.218146][ T6115] adutux 3-1:168.0: interrupt endpoints not found [ 247.425428][ T7228] sd 0:0:1:0: device reset [ 248.039266][ T5814] usb 3-1: USB disconnect, device number 9 [ 248.470623][ T1614] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 248.606442][ T7233] syzkaller0: entered promiscuous mode [ 248.606471][ T7233] syzkaller0: entered allmulticast mode [ 248.795074][ T1614] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 248.795106][ T1614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.795126][ T1614] usb 1-1: Product: syz [ 248.795140][ T1614] usb 1-1: Manufacturer: syz [ 248.795154][ T1614] usb 1-1: SerialNumber: syz [ 248.907283][ T1614] usb 1-1: config 0 descriptor?? [ 249.123438][ T1614] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 249.810913][ T5814] usb 4-1: USB disconnect, device number 10 [ 249.894661][ T6115] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.943195][ T7249] netlink: 68 bytes leftover after parsing attributes in process `syz.4.419'. [ 250.170601][ T6115] usb 3-1: Using ep0 maxpacket: 32 [ 250.174957][ T6115] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 250.174984][ T6115] usb 3-1: config 0 has no interface number 0 [ 250.261970][ T6115] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 250.262003][ T6115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.262023][ T6115] usb 3-1: Product: syz [ 250.262036][ T6115] usb 3-1: Manufacturer: syz [ 250.262050][ T6115] usb 3-1: SerialNumber: syz [ 250.326275][ T6115] usb 3-1: config 0 descriptor?? [ 250.340061][ T6115] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.856945][ T1614] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 250.861815][ T1614] usb 1-1: USB disconnect, device number 5 [ 250.902451][ T6115] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 251.201818][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 251.235306][ T6115] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 251.305910][ T6115] usb 3-1: USB disconnect, device number 10 [ 251.338514][ T6115] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 251.367915][ T6115] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 251.369025][ T6115] quatech2 3-1:0.51: device disconnected [ 252.384108][ T6546] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 252.946721][ T6546] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 252.946779][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.946804][ T6546] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.946829][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.946854][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 252.985786][ T6546] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 252.985846][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 252.985873][ T6546] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.985899][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 252.985925][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 253.070634][ T6546] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 253.070713][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 253.070739][ T6546] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.070765][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 253.070810][ T6546] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 253.080140][ T6546] usb 1-1: string descriptor 0 read error: -22 [ 253.080254][ T6546] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 253.080267][ T6546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.210893][ T6546] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 253.850616][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 254.013182][ T10] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 254.013211][ T10] usb 4-1: config 0 has no interface number 0 [ 254.020155][ T10] usb 4-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 254.020185][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.020205][ T10] usb 4-1: Product: syz [ 254.020220][ T10] usb 4-1: Manufacturer: syz [ 254.020234][ T10] usb 4-1: SerialNumber: syz [ 254.082100][ T10] usb 4-1: config 0 descriptor?? [ 254.320589][ T6115] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.471431][ T6115] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 254.535821][ T6115] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 254.535852][ T6115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.564137][ T6115] usb 5-1: config 0 descriptor?? [ 255.539072][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.722247][ T5898] usb 1-1: USB disconnect, device number 6 [ 255.777659][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.777703][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.122910][ T5814] usb 5-1: USB disconnect, device number 12 [ 257.738616][ T7327] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 259.009503][ T7330] syzkaller0: entered promiscuous mode [ 259.009521][ T7330] syzkaller0: entered allmulticast mode [ 259.433754][ T7337] lo speed is unknown, defaulting to 1000 [ 259.440604][ T7337] lo speed is unknown, defaulting to 1000 [ 259.507300][ T7337] lo speed is unknown, defaulting to 1000 [ 259.648758][ T7337] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.931006][ T7337] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 259.986295][ T7337] lo speed is unknown, defaulting to 1000 [ 259.990050][ T7337] lo speed is unknown, defaulting to 1000 [ 259.993301][ T7337] lo speed is unknown, defaulting to 1000 [ 259.998316][ T7337] lo speed is unknown, defaulting to 1000 [ 260.010784][ T7337] lo speed is unknown, defaulting to 1000 [ 261.810334][ T6546] usb 4-1: USB disconnect, device number 11 [ 267.775852][ T7400] syzkaller0: entered promiscuous mode [ 267.775882][ T7400] syzkaller0: entered allmulticast mode [ 268.020697][ T6242] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 268.696241][ T6242] usb 4-1: Using ep0 maxpacket: 8 [ 268.698809][ T6242] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 268.698837][ T6242] usb 4-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 268.698857][ T6242] usb 4-1: config 162 has no interface number 0 [ 268.698908][ T6242] usb 4-1: config 162 interface 79 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 268.698937][ T6242] usb 4-1: config 162 interface 79 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.698965][ T6242] usb 4-1: config 162 interface 79 has no altsetting 0 [ 268.702481][ T6242] usb 4-1: Dual-Role OTG device on HNP port [ 268.702815][ T6242] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 268.702840][ T6242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.702860][ T6242] usb 4-1: Product: syz [ 268.702874][ T6242] usb 4-1: Manufacturer: syz [ 268.702888][ T6242] usb 4-1: SerialNumber: syz [ 268.710381][ T7399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.082906][ T6242] pl2303 4-1:162.79: required endpoints missing [ 270.086842][ T6242] usb 4-1: USB disconnect, device number 12 [ 271.100664][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 272.153012][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 272.153073][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.153101][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.153128][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.153155][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.215996][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 272.216103][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.216130][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.216155][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.216180][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.280351][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 272.280423][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 272.287306][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.287342][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 272.287369][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 272.340042][ T9] usb 1-1: string descriptor 0 read error: -22 [ 272.340299][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 272.340323][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.424678][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 275.551871][ T49] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 275.711025][ T5997] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 275.713916][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.713965][ T49] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 275.713990][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.724607][ T49] usb 5-1: config 0 descriptor?? [ 276.427220][ T10] usb 1-1: USB disconnect, device number 7 [ 276.491127][ T5997] usb 4-1: Using ep0 maxpacket: 8 [ 276.504782][ T5997] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 276.504813][ T5997] usb 4-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 276.504835][ T5997] usb 4-1: config 162 has no interface number 0 [ 276.504941][ T5997] usb 4-1: config 162 interface 79 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 276.504974][ T5997] usb 4-1: config 162 interface 79 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.505000][ T5997] usb 4-1: config 162 interface 79 has no altsetting 0 [ 276.523478][ T5997] usb 4-1: Dual-Role OTG device on HNP port [ 276.523908][ T5997] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 276.523934][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.523955][ T5997] usb 4-1: Product: syz [ 276.523969][ T5997] usb 4-1: Manufacturer: syz [ 276.523984][ T5997] usb 4-1: SerialNumber: syz [ 277.429826][ T7475] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 277.574745][ T7463] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 277.631967][ T7476] lo speed is unknown, defaulting to 1000 [ 277.913863][ T5997] pl2303 4-1:162.79: required endpoints missing [ 277.991578][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.992592][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.058965][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.079497][ T5997] usb 4-1: USB disconnect, device number 13 [ 278.282022][ T49] usbhid 5-1:0.0: can't add hid device: -71 [ 278.282103][ T49] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.338911][ T49] usb 5-1: USB disconnect, device number 13 [ 281.765942][ T7513] 9pnet_fd: Insufficient options for proto=fd [ 282.860620][ T49] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.014548][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 283.528998][ T49] usb 3-1: config 162 has an invalid interface number: 79 but max is 1 [ 283.529027][ T49] usb 3-1: config 162 has an invalid descriptor of length 129, skipping remainder of the config [ 283.529046][ T49] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 283.529066][ T49] usb 3-1: config 162 has no interface number 0 [ 283.529097][ T49] usb 3-1: config 162 interface 79 has no altsetting 0 [ 283.532479][ T49] usb 3-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 283.532508][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.532527][ T49] usb 3-1: Product: syz [ 283.532541][ T49] usb 3-1: Manufacturer: syz [ 283.532555][ T49] usb 3-1: SerialNumber: syz [ 283.962621][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 284.022416][ T49] pl2303 3-1:162.79: required endpoints missing [ 285.029069][ T49] usb 3-1: USB disconnect, device number 11 [ 285.830533][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 285.832832][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 285.832871][ T5898] usb 4-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 285.832895][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.838497][ T5898] usb 4-1: config 0 descriptor?? [ 286.724398][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.813424][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.935219][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 286.935334][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 286.956762][ T5898] usb 4-1: USB disconnect, device number 14 [ 286.973619][ T49] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 287.085981][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.251722][ T49] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 287.275900][ T49] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.275931][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.983988][ T49] usb 3-1: config 0 descriptor?? [ 288.059130][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.091715][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.231037][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.325712][ T49] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 288.326703][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 288.495777][ T49] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 288.495805][ T49] [drm] Initialized udl on minor 2 [ 288.520195][ T49] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.524696][ T1614] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 288.559824][ T49] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.604577][ T49] usb 3-1: USB disconnect, device number 12 [ 288.628073][ T5898] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.702585][ T1614] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.702616][ T1614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.702645][ T1614] usb 1-1: Product: syz [ 288.702659][ T1614] usb 1-1: Manufacturer: syz [ 288.702673][ T1614] usb 1-1: SerialNumber: syz [ 288.714251][ T1614] usb 1-1: config 0 descriptor?? [ 289.183907][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.564628][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.877260][ T1614] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 289.877372][ T1614] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 290.352347][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.486615][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.709452][ T6546] usb 1-1: USB disconnect, device number 8 [ 292.030571][ T1614] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 292.256716][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.293744][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.366285][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.455025][ T1614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.613873][ T1614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.613989][ T1614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.614381][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.673075][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.756980][ T1614] usb 3-1: config 0 descriptor?? [ 292.803249][ T1614] pwc: Askey VC010 type 2 USB webcam detected. [ 293.170232][ T1614] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.172862][ T1614] pwc: recv_control_msg error -32 req 02 val 2700 [ 293.175080][ T1614] pwc: recv_control_msg error -32 req 02 val 2c00 [ 293.200724][ T1614] pwc: recv_control_msg error -32 req 04 val 1000 [ 293.211554][ T1614] pwc: recv_control_msg error -32 req 04 val 1300 [ 293.212685][ T1614] pwc: recv_control_msg error -32 req 04 val 1400 [ 293.214157][ T1614] pwc: recv_control_msg error -32 req 02 val 2000 [ 293.215536][ T1614] pwc: recv_control_msg error -32 req 02 val 2100 [ 293.216420][ T1614] pwc: recv_control_msg error -32 req 04 val 1500 [ 293.217415][ T1614] pwc: recv_control_msg error -32 req 02 val 2500 [ 293.219033][ T1614] pwc: recv_control_msg error -32 req 02 val 2400 [ 293.421845][ T1614] pwc: recv_control_msg error -71 req 02 val 2900 [ 293.422383][ T1614] pwc: recv_control_msg error -71 req 02 val 2800 [ 293.501340][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.540644][ T1614] pwc: recv_control_msg error -71 req 04 val 1100 [ 293.545506][ T1614] pwc: recv_control_msg error -71 req 04 val 1200 [ 294.626580][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.676423][ T1614] pwc: Registered as video103. [ 294.718375][ T1614] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 294.894716][ T1614] usb 3-1: USB disconnect, device number 13 [ 297.070127][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.279458][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.999265][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.414156][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.042015][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.169373][ T7659] fuse: Bad value for 'fd' [ 300.083823][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.221760][ T7671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 300.221783][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 300.221797][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 300.221853][ T7671] netlink: 316 bytes leftover after parsing attributes in process `syz.3.549'. [ 301.927720][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.490688][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.840780][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 303.275576][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.424599][ T5814] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 303.424630][ T5814] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 303.424651][ T5814] usb 1-1: config 162 has no interface number 0 [ 303.424668][ T5814] usb 1-1: config 162 has no interface number 1 [ 303.425721][ T5814] usb 1-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.425768][ T5814] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 303.425798][ T5814] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 303.425824][ T5814] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 303.425852][ T5814] usb 1-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 303.425874][ T5814] usb 1-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 303.425901][ T5814] usb 1-1: config 162 interface 79 has no altsetting 0 [ 303.425919][ T5814] usb 1-1: config 162 interface 183 has no altsetting 0 [ 303.476788][ T5814] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 303.476831][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.476850][ T5814] usb 1-1: Product: syz [ 303.476863][ T5814] usb 1-1: Manufacturer: syz [ 303.476876][ T5814] usb 1-1: SerialNumber: syz [ 303.956975][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.994939][ T5814] pl2303 1-1:162.79: required endpoints missing [ 304.890723][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.895672][ T5814] pl2303 1-1:162.183: required interrupt-in endpoint missing [ 304.936648][ T5814] usb 1-1: USB disconnect, device number 9 [ 305.928526][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.145180][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.910366][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.192256][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.342216][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.568087][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 307.568110][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 307.568122][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 307.568624][ T7734] netlink: 316 bytes leftover after parsing attributes in process `syz.3.568'. [ 307.720693][ T1614] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 307.893088][ T1614] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 307.893146][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.893173][ T1614] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.893199][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.893225][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 307.894485][ T1614] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 307.894541][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.894569][ T1614] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.894596][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.894622][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 307.896250][ T1614] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 307.896303][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 307.896331][ T1614] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 307.896357][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 307.896381][ T1614] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 308.203281][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.381690][ T7746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.307621][ T1614] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 312.307642][ T1614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.405211][ T1614] usb 1-1: can't set config #168, error -71 [ 312.626658][ T1614] usb 1-1: USB disconnect, device number 10 [ 314.120675][ T1614] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 314.266657][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 314.266682][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 314.266697][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 314.266750][ T7790] netlink: 316 bytes leftover after parsing attributes in process `syz.3.585'. [ 314.280601][ T1614] usb 1-1: Using ep0 maxpacket: 32 [ 314.305743][ T1614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 314.305778][ T1614] usb 1-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 314.305791][ T1614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.309589][ T1614] usb 1-1: config 0 descriptor?? [ 316.252756][ T1614] usbhid 1-1:0.0: can't add hid device: -71 [ 316.252878][ T1614] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.281795][ T1614] usb 1-1: USB disconnect, device number 11 [ 317.207380][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.207452][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.277681][ T7824] siw: device registration error -23 [ 320.808499][ T7847] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 322.955618][ T7864] program syz.2.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.640638][ T5959] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 326.734355][ T7895] program syz.4.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.793776][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.793827][ T5959] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.793851][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.839617][ T5959] usb 3-1: config 0 descriptor?? [ 327.696909][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.141739][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.142277][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.156362][ T7910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.699707][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.962582][ T7942] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.924886][ T5959] usbhid 3-1:0.0: can't add hid device: -32 [ 331.925017][ T5959] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 333.093462][ T5898] usb 3-1: USB disconnect, device number 14 [ 335.270669][ T5959] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 335.424362][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 335.469086][ T5959] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 335.469114][ T5959] usb 4-1: config 0 has no interface number 0 [ 335.469148][ T5959] usb 4-1: config 0 interface 249 has no altsetting 0 [ 335.497345][ T5959] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 335.497365][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.497388][ T5959] usb 4-1: Product: syz [ 335.497396][ T5959] usb 4-1: Manufacturer: syz [ 335.497403][ T5959] usb 4-1: SerialNumber: syz [ 335.564019][ T5959] usb 4-1: config 0 descriptor?? [ 335.752927][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 335.752952][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 335.752966][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 335.753020][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 338.090293][ T7974] program syz.4.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.609955][ T7976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.188121][ T5959] usb 4-1: USB disconnect, device number 15 [ 339.846462][ T7991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.287861][ T8003] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 343.883107][ T8023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.435521][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 344.435544][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 344.435558][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 344.435616][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'. [ 344.716212][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.776446][ T8035] sd 0:0:1:0: device reset [ 344.967208][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.196489][ T5814] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 346.198297][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.492552][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.567123][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.580740][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 346.612210][ T5814] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 346.612238][ T5814] usb 5-1: config 0 has no interface number 0 [ 346.612286][ T5814] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 346.612309][ T5814] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 346.612331][ T5814] usb 5-1: config 0 interface 41 has no altsetting 0 [ 346.615855][ T5814] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 346.615884][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.615909][ T5814] usb 5-1: Product: syz [ 346.615923][ T5814] usb 5-1: Manufacturer: syz [ 346.615937][ T5814] usb 5-1: SerialNumber: syz [ 346.652115][ T5814] usb 5-1: config 0 descriptor?? [ 346.699987][ T8039] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 346.707084][ T5814] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 346.718464][ T5814] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 347.046335][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.090613][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.147996][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.253167][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.682453][ T8056] siw: device registration error -23 [ 348.123194][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.233278][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.315632][ T5798] usb 5-1: USB disconnect, device number 14 [ 348.529685][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.899689][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.929318][ T8069] program syz.0.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.630598][ T194] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 352.852513][ T194] usb 1-1: Using ep0 maxpacket: 16 [ 352.867452][ T194] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 352.867479][ T194] usb 1-1: config 0 has no interface number 0 [ 352.867529][ T194] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 352.867554][ T194] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.867576][ T194] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 352.867600][ T194] usb 1-1: config 0 interface 41 has no altsetting 0 [ 352.930925][ T194] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 352.930957][ T194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.930978][ T194] usb 1-1: Product: syz [ 352.930993][ T194] usb 1-1: Manufacturer: syz [ 352.931008][ T194] usb 1-1: SerialNumber: syz [ 352.988205][ T194] usb 1-1: config 0 descriptor?? [ 352.998976][ T8090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.016490][ T194] dm9601 1-1:0.41: probe with driver dm9601 failed with error -22 [ 353.037715][ T194] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22 [ 354.952265][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.042127][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.346567][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.421419][ T1614] usb 1-1: USB disconnect, device number 12 [ 355.790559][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.915704][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.089087][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.478364][ T8141] program syz.4.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.895032][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.946307][ T8150] sd 0:0:1:0: device reset [ 357.430591][ T194] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 357.608174][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.429567][ T8160] syz.4.706 (8160) used greatest stack depth: 14984 bytes left [ 359.280665][ T194] usb 3-1: Using ep0 maxpacket: 16 [ 359.283487][ T194] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 359.283513][ T194] usb 3-1: config 0 has no interface number 0 [ 359.283562][ T194] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 359.283586][ T194] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.283667][ T194] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 359.283691][ T194] usb 3-1: config 0 interface 41 has no altsetting 0 [ 359.287336][ T194] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 359.287365][ T194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.287385][ T194] usb 3-1: Product: syz [ 359.287399][ T194] usb 3-1: Manufacturer: syz [ 359.287414][ T194] usb 3-1: SerialNumber: syz [ 359.299271][ T194] usb 3-1: config 0 descriptor?? [ 359.301955][ T8156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 359.305897][ T194] dm9601 3-1:0.41: probe with driver dm9601 failed with error -22 [ 359.307500][ T194] sr9700 3-1:0.41: probe with driver sr9700 failed with error -22 [ 359.311445][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.368012][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.652921][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.064994][ T194] usb 3-1: USB disconnect, device number 15 [ 360.585799][ T8184] 9pnet_fd: Insufficient options for proto=fd [ 362.708334][ T8196] tipc: Started in network mode [ 362.708365][ T8196] tipc: Node identity de0b33e8d8eb, cluster identity 4711 [ 362.748888][ T8196] tipc: Enabled bearer , priority 0 [ 362.759057][ T8196] syzkaller0: entered promiscuous mode [ 362.759083][ T8196] syzkaller0: entered allmulticast mode [ 363.034232][ T8201] tipc: Resetting bearer [ 364.084549][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.184311][ T8195] tipc: Resetting bearer [ 364.461215][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.621599][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.786668][ T8195] tipc: Disabling bearer [ 365.691054][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.713945][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.162866][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.315602][ T8222] siw: device registration error -23 [ 367.112789][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.124175][ T194] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 367.341060][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.362376][ T194] usb 4-1: Using ep0 maxpacket: 32 [ 367.412151][ T5814] tipc: Node number set to 115356648 [ 367.471674][ T194] usb 4-1: device descriptor read/all, error -71 [ 367.998019][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.051045][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.581779][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.655922][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.307254][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.816506][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.186548][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.212925][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.265271][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.669384][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.459695][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.284963][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.876241][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.284745][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.465754][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.857143][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.163200][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.163273][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.198392][ T8324] siw: device registration error -23 [ 383.620741][ T8365] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 384.993559][ T8377] siw: device registration error -23 [ 385.174053][ T5810] Bluetooth: hci4: connection err: -111 [ 385.178084][ T5810] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 385.179192][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 386.248305][ T8386] SQUASHFS error: Failed to read block 0x0: -5 [ 388.400504][ T8409] siw: device registration error -23 [ 389.203822][ T5810] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 389.203987][ T5810] Bluetooth: hci4: Injecting HCI hardware error event [ 389.206337][ T5822] Bluetooth: hci4: hardware error 0x00 [ 390.108934][ T8430] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 390.687537][ T5810] Bluetooth: hci4: connection err: -111 [ 390.687925][ T5810] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 390.687945][ T5810] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 391.440581][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 391.907281][ T8447] sd 0:0:1:0: device reset [ 393.660631][ T5798] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 393.813580][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 393.816051][ T5798] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 393.816076][ T5798] usb 1-1: config 0 has no interface number 0 [ 393.816111][ T5798] usb 1-1: config 0 interface 249 has no altsetting 0 [ 393.818586][ T5798] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 393.818615][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.818636][ T5798] usb 1-1: Product: syz [ 393.818651][ T5798] usb 1-1: Manufacturer: syz [ 393.818666][ T5798] usb 1-1: SerialNumber: syz [ 393.852095][ T5798] usb 1-1: config 0 descriptor?? [ 394.172554][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.314130][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.150681][ T8474] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 395.150710][ T8474] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 395.150741][ T8474] CPU: 0 UID: 0 PID: 8474 Comm: syz.0.805 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.150766][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.150781][ T8474] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 395.150810][ T8474] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 fd ed f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 fd ed f9 4d 8b 24 24 48 83 c3 [ 395.150828][ T8474] RSP: 0018:ffffc90004acfa40 EFLAGS: 00010206 [ 395.150854][ T8474] RAX: 0000000000000005 RBX: ffff88801ffef000 RCX: 0000000000080000 [ 395.150869][ T8474] RDX: ffffc90011205000 RSI: 00000000000003cc RDI: 00000000000003cd [ 395.150883][ T8474] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 395.150896][ T8474] R10: dffffc0000000000 R11: ffffffff88334340 R12: 0000000000000028 [ 395.150912][ T8474] R13: dffffc0000000000 R14: ffff88802ef55000 R15: dffffc0000000000 [ 395.150928][ T8474] FS: 00007f3a2f7996c0(0000) GS:ffff888126d83000(0000) knlGS:0000000000000000 [ 395.150948][ T8474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.150962][ T8474] CR2: 0000000000000000 CR3: 000000002a758000 CR4: 00000000003526f0 [ 395.150997][ T8474] Call Trace: [ 395.151013][ T8474] [ 395.151024][ T8474] pcl818_detach+0x66/0xd0 [ 395.151045][ T8474] comedi_device_detach_locked+0x178/0x750 [ 395.151081][ T8474] comedi_unlocked_ioctl+0xce4/0x1020 [ 395.151105][ T8474] ? kasan_quarantine_put+0xdd/0x220 [ 395.151139][ T8474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 395.151170][ T8474] ? smack_log+0xef/0x3f0 [ 395.151193][ T8474] ? __pfx_smack_log+0x10/0x10 [ 395.151216][ T8474] ? smk_access+0x14c/0x4e0 [ 395.151241][ T8474] ? smk_tskacc+0x2fc/0x370 [ 395.151265][ T8474] ? smack_file_ioctl+0x24d/0x340 [ 395.151292][ T8474] ? __pfx_smack_file_ioctl+0x10/0x10 [ 395.151324][ T8474] ? __fget_files+0x3a6/0x420 [ 395.151345][ T8474] ? __fget_files+0x2a/0x420 [ 395.151368][ T8474] ? bpf_lsm_file_ioctl+0x9/0x20 [ 395.151391][ T8474] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 395.151415][ T8474] __se_sys_ioctl+0xff/0x170 [ 395.151444][ T8474] do_syscall_64+0xfa/0xf80 [ 395.151468][ T8474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.151489][ T8474] ? clear_bhb_loop+0x60/0xb0 [ 395.151512][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.151532][ T8474] RIP: 0033:0x7f3a3199f749 [ 395.151557][ T8474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.151573][ T8474] RSP: 002b:00007f3a2f799038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.151594][ T8474] RAX: ffffffffffffffda RBX: 00007f3a31bf6270 RCX: 00007f3a3199f749 [ 395.151610][ T8474] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000007 [ 395.151623][ T8474] RBP: 00007f3a31a23f91 R08: 0000000000000000 R09: 0000000000000000 [ 395.151637][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.151649][ T8474] R13: 00007f3a31bf6308 R14: 00007f3a31bf6270 R15: 00007ffec1ec0398 [ 395.151674][ T8474] [ 395.151681][ T8474] Modules linked in: [ 395.151695][ T8474] ---[ end trace 0000000000000000 ]--- [ 395.151708][ T8474] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 395.151729][ T8474] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 fd ed f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 fd ed f9 4d 8b 24 24 48 83 c3 [ 395.151746][ T8474] RSP: 0018:ffffc90004acfa40 EFLAGS: 00010206 [ 395.151764][ T8474] RAX: 0000000000000005 RBX: ffff88801ffef000 RCX: 0000000000080000 [ 395.151778][ T8474] RDX: ffffc90011205000 RSI: 00000000000003cc RDI: 00000000000003cd [ 395.151792][ T8474] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 395.151804][ T8474] R10: dffffc0000000000 R11: ffffffff88334340 R12: 0000000000000028 [ 395.151819][ T8474] R13: dffffc0000000000 R14: ffff88802ef55000 R15: dffffc0000000000 [ 395.151836][ T8474] FS: 00007f3a2f7996c0(0000) GS:ffff888126d83000(0000) knlGS:0000000000000000 [ 395.151854][ T8474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.151870][ T8474] CR2: 0000000000000000 CR3: 000000002a758000 CR4: 00000000003526f0 [ 395.151888][ T8474] Kernel panic - not syncing: Fatal exception [ 395.152258][ T8474] Kernel Offset: disabled