last executing test programs: 23m36.739677604s ago: executing program 32 (id=82): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7f, 0xc1, &(0x7f00000001c0)='F', 0x1, 0x1, 0x7f, 0xfffffffe, 0x28, 0x1, 0x0}) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 22m44.417914119s ago: executing program 33 (id=169): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r1, 0x2, 0x1) getdents64(r1, 0x0, 0x25) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r0, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r6 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'w\x00'}, 0x8) 22m42.613687868s ago: executing program 34 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x1c0, 0x11, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1a}, [@nested={0x31, 0x5a, 0x0, 0x1, [@generic, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x9}, @generic="bccb0e37f3ca2a88d71c6f3cc76f7b06f875fd579cae523d05d7209975748427f9"]}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x2c, 0x14, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @fd}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0xfc, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0x9a}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x79, 0x52, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @u32=0x9}, @generic="b0d8cf5b7276e1cec049335bef4ac8d9caab935afaae1e8b68881920a0c410b20a5670dd00b5", @nested={0x4, 0xf6}, @nested={0x4, 0x11a}, @typed={0x5, 0x22, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xed}, @typed={0x8, 0x111, 0x0, 0x0, @uid}, @generic="895c1e078c0445f77950a9b112c1c27952697d985a456bdcf6edd72500a79a1f40488a", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x9}]}, @generic="7cc61b2bf00f73c50557f7819b00059af1d0549d8ad033bfe21e8046d0b3d349f52ce80c438bb19a04bf1771de6adea2198b6ac6a69e373a79fc9a8671c86ac6c059d80767dd4bb7e323733ba05d879bdda45867b0aea13fea73f8f8d610e1039be15a31ef1b43b1eea5cf1b8d17e07463dc815e28703089ebbb11b7796221fe83", @generic="6e655a97f2d030a3e1fb9669398b10b014c2897589a911222be27291b316effa17394b2b3a3b10529558e9f2ec0b0fb1462f4b05412fa1d831"]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008080}, 0x40081) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15m32.234451536s ago: executing program 35 (id=744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x22000, 0x153, 0x12}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x2c}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r3 = inotify_init1(0x800) r4 = inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) inotify_rm_watch(r3, r4) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x8, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r5, 0x0) modify_ldt$write(0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, &(0x7f00000001c0)) 10m44.987394266s ago: executing program 4 (id=1307): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xb0a0, 0x1, 0x3}, 0x15, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FMT(r1, 0x402c5839, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bdef18fa78bcb9616de723023034"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6, 0x1}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) sendfile(r7, r7, 0x0, 0x200000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) 10m38.293042754s ago: executing program 5 (id=1317): brk(0x55555ede6001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x1000000, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x158a, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1}) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) 10m37.367251194s ago: executing program 4 (id=1319): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) listen(r0, 0x20) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 10m37.001606217s ago: executing program 4 (id=1321): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r5, 0x5602, 0x0) r6 = fsmount(r4, 0x0, 0x1) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044ed22a9e8386696dd1ee786b4016bda39039d0887d78f33e9fea21803e7ae2559871a059db1482c03578c15881c2413115539974ecba0a767840449fd50ed9cefa617216c813af1d3d3f87832d1c38a1656", @ANYRES16=r7, @ANYBLOB="20000100000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r12, 0x1, 0x70bd29, 0x734, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 10m36.465041273s ago: executing program 5 (id=1322): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400000009060101000000000000000003000004740008800c00078008000a4000000433100007800a001100aaaaaaaaaabb00001c0007801800148014000240ff0100000000000000000000010000010c00078008001c4000000005100007800c0002800800014064010101100007800c00184000000000000000080c00078008001c4000000ec30c00078006000440"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r4 = getuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r4, &(0x7f00000000c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') read$FUSE(r6, &(0x7f0000001480)={0x2020}, 0x7b) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x4}, 0x4d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0xb, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m33.253121682s ago: executing program 8 (id=1325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 10m32.877733594s ago: executing program 8 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x56}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x5, 0x3, 0x0, 0x7fff, 0x7, 0x7ff}, {0x40000001, 0x0, 0x4, 0x7, 0x6, 0x4, 0x5}]}) 10m32.737838239s ago: executing program 5 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002640)=ANY=[@ANYBLOB], 0x1494}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 10m32.736777656s ago: executing program 7 (id=1330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000101a81, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000001f300"/69], 0x8c) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003200)=ANY=[@ANYBLOB="0180c20000000000000000000800450000200e000000000000e000000100004e20000c907841070001"], 0x0) 10m31.404739161s ago: executing program 5 (id=1332): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) 10m31.274712444s ago: executing program 7 (id=1333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) getgid() r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) unshare(0x20000400) select(0x40, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x700}, 0x0, &(0x7f0000000100)={0xffffffffffffffff}, &(0x7f0000000140)={0x77359400}) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) 10m31.173289471s ago: executing program 8 (id=1334): r0 = socket$inet6(0xa, 0x3, 0xff) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10m31.096193744s ago: executing program 5 (id=1335): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 10m30.967358167s ago: executing program 4 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m29.955507957s ago: executing program 7 (id=1338): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r1, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file5\x00', 0x125) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file5\x00', 0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e485a817a590647ef05d4f07693a9b8dd3ddf795d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5723fc89b68d3ccbb4ca7dc7d615408663367bd9841579fb79609bb1c09210e647997fb28086c16956d7ebcb68d9340268dd41e69546d26a2b92dc17b556d073d9edb46521b06e3c782b55e3c1da9355eb0449a44d114d050072cfe79fca56cc4c745d8f99cde07ccabc7bd7c5e3cb1e0963ef79", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000a322820eb2b2a300e100890c05339bdd70b5d8dc8f795ba6ac0cfdb2f7b39d0532f3fc7112538b0bcfbbd5a581c399ad3552e7f1a76a2690d28bef8a2bd4116b67ce29ebff5da46fe0af4af3"], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1a86f, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x780ebade, @mcast2, 0x880}, {0xa, 0x4e22, 0x5, @loopback, 0x4}, 0xffffffffffffffff, 0x3}}, 0x48) 10m29.643254282s ago: executing program 4 (id=1339): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400000009060101000000000000000003000004740008800c00078008000a4000000433100007800a001100aaaaaaaaaabb00001c0007801800148014000240ff0100000000000000000000010000010c00078008001c4000000005100007800c0002800800014064010101100007800c00184000000000000000080c00078008001c4000000ec30c00078006000440"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) r4 = getuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r4, &(0x7f00000000c0)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') read$FUSE(r6, &(0x7f0000001480)={0x2020}, 0x7b) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote, 0x4}, 0x4d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0xb, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m28.612579117s ago: executing program 7 (id=1341): socket$inet6(0xa, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xe, 0x0, 'queue0\x00', 0x200000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0xfffffffffffffffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r4) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') read$FUSE(r4, &(0x7f0000004000)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000001, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) 10m26.813214246s ago: executing program 7 (id=1342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x1494}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 10m26.208279213s ago: executing program 7 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 10m25.664656909s ago: executing program 8 (id=1345): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) 10m25.545039013s ago: executing program 4 (id=1346): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r5, 0x5602, 0x0) r6 = fsmount(r4, 0x0, 0x1) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044ed22a9e8386696dd1ee786b4016bda39039d0887d78f33e9fea21803e7ae2559871a059db1482c03578c15881c2413115539974ecba0a767840449fd50ed9cefa617216c813af1d3d3f87832d1c38a1656", @ANYRES16=r7, @ANYBLOB="20000100000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd29, 0x734, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 10m25.319183978s ago: executing program 8 (id=1347): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r0, 0x20) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 10m25.204628273s ago: executing program 5 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8e4d}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 10m24.542147976s ago: executing program 8 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}}, 0x0) 10m10.781525497s ago: executing program 36 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 10m10.308630241s ago: executing program 37 (id=1346): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r5, 0x5602, 0x0) r6 = fsmount(r4, 0x0, 0x1) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044ed22a9e8386696dd1ee786b4016bda39039d0887d78f33e9fea21803e7ae2559871a059db1482c03578c15881c2413115539974ecba0a767840449fd50ed9cefa617216c813af1d3d3f87832d1c38a1656", @ANYRES16=r7, @ANYBLOB="20000100000000000000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd29, 0x734, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 10m9.786584147s ago: executing program 38 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8e4d}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000) 10m9.265267652s ago: executing program 39 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}}, 0x0) 9m21.021271407s ago: executing program 6 (id=1406): syz_emit_ethernet(0x42, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @rand_addr=' \x01\x00', @local, @private1}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000580)) 9m20.957482714s ago: executing program 6 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 9m19.700047874s ago: executing program 6 (id=1408): unshare(0x22020600) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000240)) 9m19.635449598s ago: executing program 6 (id=1409): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) 9m16.521273717s ago: executing program 6 (id=1410): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000101a81, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000001f300"/70], 0x8c) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003200)=ANY=[@ANYBLOB="0180c20000000000000000000800450000200e000000000000e000000100004e20000c907841070001"], 0x0) 9m15.333876139s ago: executing program 6 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) 9m0.176196785s ago: executing program 40 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) 4m58.079577876s ago: executing program 0 (id=1740): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) 4m56.594183601s ago: executing program 0 (id=1742): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) 4m55.332612336s ago: executing program 0 (id=1745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x9, 0x7}, &(0x7f0000000080)=0x8) 4m53.957925774s ago: executing program 0 (id=1748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000540)=""/234, 0xea}], 0x2}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r1, 0x0, 0x4000090) 4m51.651018392s ago: executing program 0 (id=1755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@multicast, @remote, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "1d515b22b7a3a5f3"}}}}, 0x0) r4 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r4, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) openat(r8, &(0x7f0000000440)='./file0\x00', 0x30080, 0x80) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) 4m47.416053399s ago: executing program 0 (id=1762): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) sigaltstack(&(0x7f00000003c0)={0xffffffffffffffff, 0x80000002, 0xfe99}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x2}, &(0x7f00000002c0)={0x0}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 4m31.922030045s ago: executing program 41 (id=1762): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) sigaltstack(&(0x7f00000003c0)={0xffffffffffffffff, 0x80000002, 0xfe99}, 0x0) sigaltstack(&(0x7f00000001c0)={0x0, 0x2}, &(0x7f00000002c0)={0x0}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 3m43.262286899s ago: executing program 2 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 3m42.901101094s ago: executing program 2 (id=1898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000030100c0"]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$inet6(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4844) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYRES8=r7], 0x4c}}, 0x40000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x8, 0x0, [0x1000000, 0x5, 0x4, 0x9, 0x3, 0x8, 0xa, 0x80000000, 0x2, 0x2, 0x7bb, 0x7f, 0x11560, 0x7, 0xffffffff, 0x9]}], r11, 0x1, 0x1, 0x48}}, 0x20) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[@ANYBLOB="babc203a3ef55796a0a8517cd4328c2721a7ddeebb8ed35341a3c9c67c652788b143670508c4e10b3b42065aac911ee629b66913b71750257fab8986ab514b7156d99118d84672a98ca32e9b71328eff5d91245efa98506d6d998112982c05a041e1e4be9e0d74bcda", @ANYRES32=r7], 0x0) 3m39.555695255s ago: executing program 9 (id=1902): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000101a81, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="090000000a00004000000003ff020000000000000000000000000001f300"/70], 0x8c) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x14}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000003200)=ANY=[@ANYBLOB="0180c20000000000000000000800450000200e000000000000e000000100004e20000c907841070001"], 0x0) 3m39.226441736s ago: executing program 2 (id=1903): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000540)=""/234, 0xea}], 0x2}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x8c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 3m38.237052122s ago: executing program 9 (id=1904): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)=@getnexthop={0x20, 0x6a, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44080) cachestat(r0, &(0x7f0000000040)={0x19, 0x2}, &(0x7f000009de80), 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f200000000", 0x20) syz_emit_ethernet(0x200000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100", @ANYRESHEX], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'wg0\x00', 0x4}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0xe0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000280)={0xe0002, 0x0, [0x100000000001, 0x4, 0xffffffffffffffff, 0x1ff, 0x6, 0x8000000000000000, 0x9, 0x9721]}) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 3m37.313643983s ago: executing program 2 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) pipe2(&(0x7f0000000240), 0x84000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2c}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x1, 0x1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x840) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000240)) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000300000008000002000000000500000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x2, 0x0, 0x0}) 3m36.033390645s ago: executing program 9 (id=1908): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_rm_watch(r2, r1) 3m36.00579529s ago: executing program 2 (id=1909): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2cbd7000ffdfdf251500000008000100", @ANYRES32=0x0, @ANYBLOB="0900140023292e2d21000000"], 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [{0x2, 0x1}], {0x4, 0x4}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') writev(r7, &(0x7f00000002c0)=[{0x0, 0x2b}, {&(0x7f0000000080)='-', 0x1}], 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000"/52], 0x0) 3m33.551812743s ago: executing program 2 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000030100c0"]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$inet6(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4844) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYRES8=r8], 0x4c}}, 0x40000) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x8, 0x0, [0x1000000, 0x5, 0x4, 0x9, 0x3, 0x8, 0xa, 0x80000000, 0x2, 0x2, 0x7bb, 0x7f, 0x11560, 0x7, 0xffffffff, 0x9]}], r12, 0x1, 0x1, 0x48}}, 0x20) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[@ANYBLOB="babc203a3ef55796a0a8517cd4328c2721a7ddeebb8ed35341a3c9c67c652788b143670508c4e10b3b42065aac911ee629b66913b71750257fab8986ab514b7156d99118d84672a98ca32e9b71328eff5d91245efa98506d6d998112982c05a041e1e4be9e0d74bcda", @ANYRES32=r8], 0x0) 3m33.374563467s ago: executing program 9 (id=1914): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000540)=""/234, 0xea}], 0x2}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x8c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 3m32.245883695s ago: executing program 9 (id=1915): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3m28.652781795s ago: executing program 9 (id=1918): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)=@getnexthop={0x20, 0x6a, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44080) cachestat(r0, &(0x7f0000000040)={0x19, 0x2}, &(0x7f000009de80), 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f200000000", 0x20) syz_emit_ethernet(0x200000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100", @ANYRESHEX], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'wg0\x00', 0x4}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0xe0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000280)={0xe0002, 0x0, [0x100000000001, 0x4, 0xffffffffffffffff, 0x1ff, 0x6, 0x8000000000000000, 0x9, 0x9721]}) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 3m18.392373399s ago: executing program 42 (id=1912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000030100c0"]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$inet6(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4844) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYRES8=r8], 0x4c}}, 0x40000) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x8, 0x0, [0x1000000, 0x5, 0x4, 0x9, 0x3, 0x8, 0xa, 0x80000000, 0x2, 0x2, 0x7bb, 0x7f, 0x11560, 0x7, 0xffffffff, 0x9]}], r12, 0x1, 0x1, 0x48}}, 0x20) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[@ANYBLOB="babc203a3ef55796a0a8517cd4328c2721a7ddeebb8ed35341a3c9c67c652788b143670508c4e10b3b42065aac911ee629b66913b71750257fab8986ab514b7156d99118d84672a98ca32e9b71328eff5d91245efa98506d6d998112982c05a041e1e4be9e0d74bcda", @ANYRES32=r8], 0x0) 3m13.044345068s ago: executing program 43 (id=1918): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)=@getnexthop={0x20, 0x6a, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44080) cachestat(r0, &(0x7f0000000040)={0x19, 0x2}, &(0x7f000009de80), 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f200000000", 0x20) syz_emit_ethernet(0x200000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100", @ANYRESHEX], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'wg0\x00', 0x4}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0xe0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000280)={0xe0002, 0x0, [0x100000000001, 0x4, 0xffffffffffffffff, 0x1ff, 0x6, 0x8000000000000000, 0x9, 0x9721]}) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 11.82513112s ago: executing program 1 (id=2162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/111, 0x6f}, {0x0}, {&(0x7f0000000e40)=""/168, 0xa8}], 0x4}, 0xd0000}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/233, 0xe9}, {&(0x7f00000011c0)=""/191, 0xbf}], 0x2, &(0x7f0000001280)=""/210, 0xd2}, 0x7}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/86, 0x56}], 0x2, &(0x7f0000001540)=""/2, 0x2}, 0x170}], 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x65, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 9.531820297s ago: executing program 3 (id=2164): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20f8ff"], 0x0, 0x0, 0x0, 0x0}) 8.444640515s ago: executing program 1 (id=2165): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) getrlimit(0xd, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 7.050766279s ago: executing program 1 (id=2166): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.189523258s ago: executing program 3 (id=2167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000540)=""/234, 0xea}], 0x2}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0xb4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "a2c0e65c8aff33ca12e6da5c34fcbc612568664388995054e7be98eb9d621688d32a7efcb2edcdf126"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 5.757175672s ago: executing program 1 (id=2168): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010022) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010040", 0x7) 4.797803461s ago: executing program 3 (id=2169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x2, 0x1, 0x0, "fb04"}, @main=@item_4={0x3, 0x0, 0x8, "8778ff48"}, @local=@item_4={0x3, 0x2, 0x1, "d0656e3f"}, @main=@item_4={0x3, 0x0, 0x9, "41a83425"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "09007a15"}, @global=@item_4={0x3, 0x1, 0x2, "c7f85dac"}]}}, 0x0}, 0x0) 4.458144678s ago: executing program 1 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x7e0}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 2.857267725s ago: executing program 3 (id=2171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 2.597750698s ago: executing program 1 (id=2172): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x22, 0xce, {0xce, 0x9, "c320a1a7eced090c3042b5741295b921e6f3df8056263af2a33a197beb14a1d2b76dc5969055953e085a1e385df8063b899c9cd139154b8353068b5fc8ee591ac9ca3d68d8ae523d558cde4ec1acc16262516a0c75c1ac77244ba594e37128087b86dadcf122945508178e316790f8157fe265495302e9cd92726c39f1970f0baf9ecd68a72784302ca2e54268956830c9d2c1163fa68810511b4ffdd3b4941fa20373f40477bb816541d814d2fd9d6e53477147e357e8fc1d92fa3c981d3c128d81b50f2e5cd62a7068c833"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xa0a}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.427969706s ago: executing program 3 (id=2173): socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) getrlimit(0xd, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 0s ago: executing program 3 (id=2174): setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r1) kernel console output (not intermixed with test programs): tting 0 [ 1175.492839][T11817] usb 10-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1175.492867][T11817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.492888][T11817] usb 10-1: Product: syz [ 1175.492903][T11817] usb 10-1: Manufacturer: syz [ 1175.492916][T11817] usb 10-1: SerialNumber: syz [ 1175.498559][T11817] usb 10-1: config 0 descriptor?? [ 1176.321830][T11817] comedi comedi5: could not switch to alternate setting 1 [ 1176.321853][T11817] usbduxfast 10-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1176.332672][T11817] usb 10-1: USB disconnect, device number 2 [ 1176.980830][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1499'. [ 1179.407536][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 1179.463304][T12257] hub 9-0:1.0: USB hub found [ 1179.472748][T12257] hub 9-0:1.0: 1 port detected [ 1180.536953][T12273] binder: BINDER_SET_CONTEXT_MGR already set [ 1180.536963][T12273] binder: 12272:12273 ioctl 4018620d 200000000040 returned -16 [ 1181.632679][T12025] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1181.817266][T12025] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1181.817284][T12025] usb 4-1: config 0 has no interface number 0 [ 1181.817362][T12025] usb 4-1: config 0 interface 120 has no altsetting 0 [ 1181.822163][T12025] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1181.822181][T12025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.822191][T12025] usb 4-1: Product: syz [ 1181.822198][T12025] usb 4-1: Manufacturer: syz [ 1181.822205][T12025] usb 4-1: SerialNumber: syz [ 1181.833709][T12025] usb 4-1: config 0 descriptor?? [ 1182.245197][T12025] comedi comedi5: could not switch to alternate setting 1 [ 1182.245220][T12025] usbduxfast 4-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1182.287958][T12025] usb 4-1: USB disconnect, device number 15 [ 1182.574854][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.574932][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.213521][T12303] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1515'. [ 1184.442641][ T5852] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1184.610936][ T5852] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1184.610964][ T5852] usb 4-1: config 0 has no interface number 0 [ 1184.615995][ T5852] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1184.616024][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.616043][ T5852] usb 4-1: Product: syz [ 1184.616056][ T5852] usb 4-1: Manufacturer: syz [ 1184.616070][ T5852] usb 4-1: SerialNumber: syz [ 1184.689131][ T5852] usb 4-1: config 0 descriptor?? [ 1185.035651][ T5852] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1185.067736][ T5852] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1185.068177][ T5852] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1185.068232][ T5852] usb 4-1: media controller created [ 1185.198851][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1186.238184][ T5852] usb 4-1: USB disconnect, device number 16 [ 1188.292578][T12072] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1188.475267][T12072] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.475294][T12072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1188.495922][T12072] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1188.495941][T12072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.495952][T12072] usb 3-1: Product: syz [ 1188.495959][T12072] usb 3-1: Manufacturer: syz [ 1188.495966][T12072] usb 3-1: SerialNumber: syz [ 1188.755695][T12072] usb 3-1: 0:2 : does not exist [ 1189.624095][T12072] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1190.267199][T12349] Malformed UNC in devname [ 1190.267199][T12349] [ 1190.267527][T12349] CIFS: VFS: Malformed UNC in devname [ 1190.963388][ T6083] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1190.997226][T12072] usb 3-1: USB disconnect, device number 4 [ 1191.051474][T12340] hub 9-0:1.0: USB hub found [ 1191.054163][T12340] hub 9-0:1.0: 1 port detected [ 1191.254378][ T6083] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 1191.254395][ T6083] usb 10-1: config 0 has no interface number 0 [ 1191.254413][ T6083] usb 10-1: config 0 interface 120 has no altsetting 0 [ 1191.256496][ T6083] usb 10-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1191.256513][ T6083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.256523][ T6083] usb 10-1: Product: syz [ 1191.256531][ T6083] usb 10-1: Manufacturer: syz [ 1191.256538][ T6083] usb 10-1: SerialNumber: syz [ 1191.268087][ T6083] usb 10-1: config 0 descriptor?? [ 1191.823260][ T6083] comedi comedi5: could not switch to alternate setting 1 [ 1191.823276][ T6083] usbduxfast 10-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1191.836825][ T6083] usb 10-1: USB disconnect, device number 3 [ 1192.357822][T12357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.082689][ T5852] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1194.242580][ T5852] usb 10-1: Using ep0 maxpacket: 16 [ 1194.244393][ T5852] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 1194.244409][ T5852] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1194.244420][ T5852] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1194.244431][ T5852] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 1194.244440][ T5852] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1194.244451][ T5852] usb 10-1: config 0 has no interface number 0 [ 1194.244488][ T5852] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1194.244502][ T5852] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1194.244514][ T5852] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1194.244534][ T5852] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1194.244549][ T5852] usb 10-1: config 0 interface 125 has no altsetting 0 [ 1194.244558][ T5852] usb 10-1: config 0 interface 125 has no altsetting 2 [ 1194.246504][ T5852] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1194.246522][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.246532][ T5852] usb 10-1: Product: syz [ 1194.246539][ T5852] usb 10-1: Manufacturer: syz [ 1194.246546][ T5852] usb 10-1: SerialNumber: syz [ 1194.249571][ T5852] usb 10-1: config 0 descriptor?? [ 1194.413706][ T5852] usb 10-1: selecting invalid altsetting 2 [ 1194.732650][ T6083] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1194.912542][ T6083] usb 2-1: Using ep0 maxpacket: 8 [ 1194.915950][ T6083] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1194.915983][ T6083] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1194.916008][ T6083] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1194.916031][ T6083] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.916074][ T6083] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1194.916098][ T6083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.286622][ T6083] usb 2-1: GET_CAPABILITIES returned 0 [ 1195.286677][ T6083] usbtmc 2-1:16.0: can't read capabilities [ 1195.447482][ T5852] get_1284_register timeout [ 1195.448780][ C0] usb 10-1: async_complete: urb error -104 [ 1195.448969][ C0] usb 10-1: async_complete: urb error -104 [ 1195.449067][ C0] usb 10-1: async_complete: urb error -104 [ 1195.449166][ C0] usb 10-1: async_complete: urb error -104 [ 1195.449232][ T5852] uss720 10-1:0.125: probe with driver uss720 failed with error -5 [ 1195.633910][T12370] loop7: detected capacity change from 0 to 16384 [ 1197.943834][T12377] loop7: detected capacity change from 16384 to 0 [ 1197.950974][T12379] overlayfs: missing 'workdir' [ 1198.041102][ T6083] usb 2-1: USB disconnect, device number 2 [ 1198.079262][T12072] usb 10-1: USB disconnect, device number 4 [ 1199.213483][ T5852] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1200.038819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.437668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.473279][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.525426][ T5852] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 1200.525443][ T5852] usb 10-1: config 0 has no interface number 0 [ 1200.525463][ T5852] usb 10-1: config 0 interface 120 has no altsetting 0 [ 1200.527434][ T5852] usb 10-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1200.527448][ T5852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.527459][ T5852] usb 10-1: Product: syz [ 1200.527466][ T5852] usb 10-1: Manufacturer: syz [ 1200.527474][ T5852] usb 10-1: SerialNumber: syz [ 1200.547502][ T5852] usb 10-1: config 0 descriptor?? [ 1200.760820][ T5852] comedi comedi5: could not switch to alternate setting 1 [ 1200.760835][ T5852] usbduxfast 10-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1200.804965][ T5852] usb 10-1: USB disconnect, device number 5 [ 1201.552660][ T5852] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1201.808585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.832630][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 1201.837864][ T5852] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1201.837884][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1201.837897][ T5852] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1201.837909][ T5852] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.837932][ T5852] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1201.837951][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.170759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1202.180917][ T5852] usb 2-1: GET_CAPABILITIES returned 0 [ 1202.180945][ T5852] usbtmc 2-1:16.0: can't read capabilities [ 1204.506999][T12072] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1204.665162][T12072] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.665190][T12072] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1204.668516][T12072] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.668544][T12072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.668564][T12072] usb 4-1: Product: syz [ 1204.668577][T12072] usb 4-1: Manufacturer: syz [ 1204.668592][T12072] usb 4-1: SerialNumber: syz [ 1204.872903][ T5852] usb 2-1: USB disconnect, device number 3 [ 1204.943573][T12072] usb 4-1: 0:2 : does not exist [ 1204.951105][T12072] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1205.003591][T12072] usb 4-1: USB disconnect, device number 17 [ 1205.305487][ T37] audit: type=1326 audit(1757810969.772:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12442 comm="syz.0.1560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f627b31eba9 code=0x0 [ 1206.423032][T12462] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1562'. [ 1206.835108][T12459] Driver unsupported XDP return value 0 on prog (id 219) dev N/A, expect packet loss! [ 1210.050847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.095611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.156599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.228457][ T5931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1210.657994][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.679780][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1210.679815][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1210.679859][ T5931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1210.679882][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.923749][ T5931] usb 3-1: config 0 descriptor?? [ 1211.371745][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.372171][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.417236][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.417665][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.557666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.147815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.152627][ T5931] ath6kl: Failed to submit usb control message: -71 [ 1212.152677][ T5931] ath6kl: unable to send the bmi data to the device: -71 [ 1212.152691][ T5931] ath6kl: Unable to send get target info: -71 [ 1212.155224][ T5931] ath6kl: Failed to init ath6kl core: -71 [ 1212.156561][ T5931] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1212.182872][ T5931] usb 3-1: USB disconnect, device number 5 [ 1212.321355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.224783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.474162][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.200431][T11848] Bluetooth: hci2: command 0x0406 tx timeout [ 1216.200682][T11848] Bluetooth: hci3: command 0x0406 tx timeout [ 1216.200739][T11848] Bluetooth: hci1: command 0x0406 tx timeout [ 1216.200793][T11848] Bluetooth: hci0: command 0x0406 tx timeout [ 1217.284375][T12071] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1217.563036][T12071] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1217.563071][T12071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1217.563115][T12071] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1217.563148][T12071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.568390][T12071] usb 3-1: config 0 descriptor?? [ 1217.788004][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.788420][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.812340][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.826670][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.862604][T12071] ath6kl: Failed to submit usb control message: -71 [ 1217.862656][T12071] ath6kl: unable to send the bmi data to the device: -71 [ 1217.862671][T12071] ath6kl: Unable to send get target info: -71 [ 1217.863621][T12071] ath6kl: Failed to init ath6kl core: -71 [ 1217.865080][T12071] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1217.943808][T12071] usb 3-1: USB disconnect, device number 6 [ 1217.985800][T12550] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1220.208730][T12582] tmpfs: Unsupported parameter 'huge' [ 1220.391320][ T5931] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1220.677030][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1220.678186][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1220.678222][ T5931] usb 2-1: can't read configurations, error -71 [ 1221.099190][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'. [ 1221.099205][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 1224.314174][T12613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1611'. [ 1225.758478][T12622] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1226.113395][T12624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1612'. [ 1226.148845][T11846] Bluetooth: hci4: command 0x0406 tx timeout [ 1226.962830][ T6083] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1227.443516][ T6083] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 1227.443545][ T6083] usb 4-1: config 0 has no interface number 0 [ 1227.443878][ T6083] usb 4-1: config 0 interface 120 has no altsetting 0 [ 1227.543925][ T6083] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1227.544017][ T6083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.544062][ T6083] usb 4-1: Product: syz [ 1227.544100][ T6083] usb 4-1: Manufacturer: syz [ 1227.544139][ T6083] usb 4-1: SerialNumber: syz [ 1227.666963][T11836] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1227.985093][ T6083] usb 4-1: config 0 descriptor?? [ 1228.077168][T11836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1228.078269][T11836] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1228.078301][T11836] usb 2-1: can't read configurations, error -71 [ 1228.635659][ T6083] comedi comedi5: could not switch to alternate setting 1 [ 1228.635681][ T6083] usbduxfast 4-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1228.666439][ T6083] usb 4-1: USB disconnect, device number 18 [ 1228.700962][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1623'. [ 1229.503715][T12656] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1231.376561][T11836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1231.573573][T11836] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1231.573601][T11836] usb 3-1: config 0 has no interface number 0 [ 1231.573633][T11836] usb 3-1: config 0 interface 120 has no altsetting 0 [ 1231.583848][T11836] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1231.583880][T11836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.583901][T11836] usb 3-1: Product: syz [ 1231.583914][T11836] usb 3-1: Manufacturer: syz [ 1231.583927][T11836] usb 3-1: SerialNumber: syz [ 1231.589728][T11836] usb 3-1: config 0 descriptor?? [ 1231.928746][T11836] comedi comedi5: could not switch to alternate setting 1 [ 1231.928761][T11836] usbduxfast 3-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 1232.004770][T11836] usb 3-1: USB disconnect, device number 7 [ 1234.267986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.434450][T12707] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1234.445933][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.998059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.822604][T12050] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1238.915360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.002899][T12050] usb 3-1: Using ep0 maxpacket: 16 [ 1239.107178][T12050] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1239.107204][T12050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1239.126421][T12050] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1239.126450][T12050] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.126469][T12050] usb 3-1: Product: syz [ 1239.126483][T12050] usb 3-1: Manufacturer: syz [ 1239.126496][T12050] usb 3-1: SerialNumber: syz [ 1239.131867][T12050] usb 3-1: config 0 descriptor?? [ 1239.147585][T12050] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1239.147620][T12050] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1240.470282][T12050] em28xx 3-1:0.0: chip ID is em28174 [ 1240.807624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.861605][ T6020] usb 3-1: USB disconnect, device number 8 [ 1240.864053][ T6020] em28xx 3-1:0.0: Disconnecting em28xx [ 1240.957977][ T6020] em28xx 3-1:0.0: Freeing device [ 1240.986868][T12754] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1244.315899][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.315947][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.923388][T12050] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1255.916458][T12854] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 1258.090021][ T37] audit: type=1326 audit(1757811022.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.090071][ T37] audit: type=1326 audit(1757811022.552:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.090113][ T37] audit: type=1326 audit(1757811022.552:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.090153][ T37] audit: type=1326 audit(1757811022.552:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.090194][ T37] audit: type=1326 audit(1757811022.552:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.108976][ T37] audit: type=1326 audit(1757811022.552:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.112078][ T37] audit: type=1326 audit(1757811022.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.486633][ T37] audit: type=1326 audit(1757811022.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.487289][ T37] audit: type=1326 audit(1757811022.572:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1258.487553][ T37] audit: type=1326 audit(1757811022.572:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12869 comm="syz.3.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1261.902909][ T6083] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1262.054264][ T6083] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.054282][ T6083] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1262.058482][ T6083] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1262.058500][ T6083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.058511][ T6083] usb 4-1: Product: syz [ 1262.058518][ T6083] usb 4-1: Manufacturer: syz [ 1262.058525][ T6083] usb 4-1: SerialNumber: syz [ 1262.339992][ T6083] usb 4-1: 0:2 : does not exist [ 1262.354459][ T6083] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1262.849389][ T6083] usb 4-1: USB disconnect, device number 19 [ 1263.387450][T12920] random: crng reseeded on system resumption [ 1264.983755][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 1265.835829][T12943] input: syz1 as /devices/virtual/input/input12 [ 1269.651971][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 1269.853993][ T5931] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1269.854013][ T5931] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1272.002628][ T5931] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1272.002654][ T5931] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1272.082735][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1275.124737][ T5931] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1275.124763][ T5931] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1275.125941][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 1278.377631][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1278.473242][ T5931] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1278.473260][ T5931] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1278.674176][ T6138] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1279.742506][ T6138] usb 2-1: device descriptor read/64, error -71 [ 1280.584573][ T6138] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1283.210133][ T5931] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1283.210169][ T5931] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1283.375803][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 1288.516323][T13131] hub 9-0:1.0: USB hub found [ 1288.522722][T13131] hub 9-0:1.0: 1 port detected [ 1297.346847][T11836] IPVS: starting estimator thread 0... [ 1297.443800][T13195] IPVS: using max 13 ests per chain, 31200 per kthread [ 1304.152783][T13220] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1304.305738][T13220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.305772][T13220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.305812][T13220] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1304.305834][T13220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.366202][T13220] usb 3-1: config 0 descriptor?? [ 1304.895623][T13220] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 1304.895664][T13220] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 1304.895693][T13220] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 1304.895721][T13220] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 1304.895749][T13220] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 1304.993179][T13220] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1305.161096][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1784'. [ 1305.161171][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1784'. [ 1305.161304][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1784'. [ 1305.161667][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1784'. [ 1305.584162][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.584237][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.665245][T11836] usb 3-1: USB disconnect, device number 10 [ 1314.741622][T11846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.824454][T11846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.843567][T11846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.872817][T11846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.873553][T11846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1314.890946][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1314.909399][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1314.909845][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1314.910970][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1314.913518][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1315.189175][T13336] random: crng reseeded on system resumption [ 1315.262659][ T5842] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1317.209674][ T5854] Bluetooth: hci3: command tx timeout [ 1317.451727][ T5842] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 1317.451755][ T5842] usb 4-1: config 0 has no interface number 1 [ 1317.451828][ T5842] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1317.451850][ T5842] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1317.451875][ T5842] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 1317.451902][ T5842] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1317.451941][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1317.451965][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1317.707489][ T5842] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1317.707522][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.707541][ T5842] usb 4-1: Product: syz [ 1317.707555][ T5842] usb 4-1: Manufacturer: syz [ 1317.707569][ T5842] usb 4-1: SerialNumber: syz [ 1317.754837][ T5842] usb 4-1: config 0 descriptor?? [ 1317.757513][T13332] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1317.778887][ T5842] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1317.806672][ T5842] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1317.879307][ T5842] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1317.895409][ T5842] usb 4-1: USB disconnect, device number 20 [ 1318.391495][T12071] IPVS: starting estimator thread 0... [ 1318.734127][T13362] IPVS: using max 7 ests per chain, 16800 per kthread [ 1319.602625][ T5854] Bluetooth: hci3: command tx timeout [ 1320.429866][T13388] random: crng reseeded on system resumption [ 1321.721462][ T5854] Bluetooth: hci3: command tx timeout [ 1321.918431][ T3574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.892908][ T3574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.960338][T13325] chnl_net:caif_netlink_parms(): no params data found [ 1323.782606][ T5854] Bluetooth: hci3: command tx timeout [ 1324.352369][ T3574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.610522][ T3574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.720680][ T5910] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1328.875482][ T5910] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1328.878815][ T5910] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1328.878845][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.878866][ T5910] usb 2-1: Product: syz [ 1328.878880][ T5910] usb 2-1: Manufacturer: syz [ 1328.878894][ T5910] usb 2-1: SerialNumber: syz [ 1329.842946][ T5910] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1330.001879][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.035448][T13325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.041132][T13325] bridge_slave_0: entered allmulticast mode [ 1330.064088][T13325] bridge_slave_0: entered promiscuous mode [ 1330.091529][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.091668][T13325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.091904][T13325] bridge_slave_1: entered allmulticast mode [ 1330.096624][T13325] bridge_slave_1: entered promiscuous mode [ 1331.499254][T13325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.512150][T13325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.599739][ T5842] usb 2-1: USB disconnect, device number 10 [ 1332.604611][ T5842] usblp0: removed [ 1334.033456][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 1334.058892][T13325] team0: Port device team_slave_0 added [ 1334.078167][T13507] syz_tun: entered promiscuous mode [ 1334.097769][T13325] team0: Port device team_slave_1 added [ 1335.493330][T13325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.493348][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.493372][T13325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.495599][T13325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.495608][T13325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.495622][T13325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.799724][ T3574] bridge_slave_1: left allmulticast mode [ 1335.799753][ T3574] bridge_slave_1: left promiscuous mode [ 1335.799976][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.025071][ T3574] bridge_slave_0: left allmulticast mode [ 1336.025092][ T3574] bridge_slave_0: left promiscuous mode [ 1336.025265][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.279861][T13529] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1337.279948][T13529] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1337.284971][T13529] vhci_hcd vhci_hcd.0: Device attached [ 1337.947751][T13530] vhci_hcd: connection closed [ 1337.951521][T10755] vhci_hcd: stop threads [ 1337.951540][T10755] vhci_hcd: release socket [ 1337.951573][T10755] vhci_hcd: disconnect device [ 1338.182607][ T5842] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1338.400005][ T5842] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1339.094433][ T5842] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1339.094465][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.094483][ T5842] usb 10-1: Product: syz [ 1339.094496][ T5842] usb 10-1: Manufacturer: syz [ 1339.094508][ T5842] usb 10-1: SerialNumber: syz [ 1339.240859][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 1340.403236][ T5842] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1341.979543][T13220] usb 10-1: USB disconnect, device number 6 [ 1341.982081][T13220] usblp0: removed [ 1345.312625][T12071] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1345.533743][T12071] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.533769][T12071] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.536236][T12071] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.536262][T12071] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.536282][T12071] usb 10-1: Product: syz [ 1345.536296][T12071] usb 10-1: Manufacturer: syz [ 1345.536310][T12071] usb 10-1: SerialNumber: syz [ 1345.941262][T12071] usb 10-1: 0:2 : does not exist [ 1345.951920][T12071] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1346.133218][T13596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 1346.133270][T13596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1878'. [ 1346.133294][T13596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 1346.133403][T13596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 1347.233721][T12071] usb 10-1: USB disconnect, device number 7 [ 1349.182884][T11836] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1349.355220][T11836] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1349.360255][T11836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1349.360284][T11836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.360303][T11836] usb 4-1: Product: syz [ 1349.360317][T11836] usb 4-1: Manufacturer: syz [ 1349.360330][T11836] usb 4-1: SerialNumber: syz [ 1349.514204][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.823494][T11836] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1349.823694][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.980731][ T3574] bond0 (unregistering): Released all slaves [ 1350.633854][T13325] hsr_slave_0: entered promiscuous mode [ 1350.635193][T13325] hsr_slave_1: entered promiscuous mode [ 1351.402953][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1888'. [ 1351.403004][T13632] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1888'. [ 1351.403045][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1888'. [ 1351.403086][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1888'. [ 1352.098009][T12025] usb 4-1: USB disconnect, device number 21 [ 1352.100471][T12025] usblp0: removed [ 1356.236133][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 1358.021488][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1899'. [ 1358.021512][T13668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1899'. [ 1358.021530][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1899'. [ 1358.021571][T13668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1899'. [ 1359.132703][ T5842] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1359.285378][ T5842] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1359.288598][ T5842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1359.288626][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.288645][ T5842] usb 2-1: Product: syz [ 1359.288658][ T5842] usb 2-1: Manufacturer: syz [ 1359.288672][ T5842] usb 2-1: SerialNumber: syz [ 1359.592593][T11836] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1360.533684][ T5842] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1360.549980][T11836] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1360.697202][T11836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1360.697234][T11836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.697253][T11836] usb 4-1: Product: syz [ 1360.697265][T11836] usb 4-1: Manufacturer: syz [ 1360.697278][T11836] usb 4-1: SerialNumber: syz [ 1360.968497][ T3574] hsr_slave_0: left promiscuous mode [ 1360.983598][ T3574] hsr_slave_1: left promiscuous mode [ 1360.985337][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.988753][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.042655][T12072] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1361.049475][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.049507][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.176634][T11836] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1361.187235][ T3574] veth1_macvtap: left promiscuous mode [ 1361.187353][ T3574] veth0_macvtap: left promiscuous mode [ 1361.187632][ T3574] veth1_vlan: left promiscuous mode [ 1361.187829][ T3574] veth0_vlan: left promiscuous mode [ 1361.213328][T12072] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1361.213361][T12072] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1361.213403][T12072] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1361.213425][T12072] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.224474][T12072] usb 10-1: config 0 descriptor?? [ 1361.453517][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.455374][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.466582][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.470862][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.496606][T12072] ath6kl: Failed to submit usb control message: -71 [ 1361.496656][T12072] ath6kl: unable to send the bmi data to the device: -71 [ 1361.496669][T12072] ath6kl: Unable to send get target info: -71 [ 1361.539148][T12072] ath6kl: Failed to init ath6kl core: -71 [ 1361.540862][T12072] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1361.564087][T12072] usb 10-1: USB disconnect, device number 8 [ 1362.752949][T12025] usb 2-1: USB disconnect, device number 11 [ 1362.763967][T12025] usblp0: removed [ 1362.768401][ T5910] usb 4-1: USB disconnect, device number 22 [ 1362.808150][ T5910] usblp1: removed [ 1365.743808][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 1367.563210][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.563256][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.072588][T12025] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1369.225180][T12025] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1369.227804][T12025] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1369.227823][T12025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.227834][T12025] usb 2-1: Product: syz [ 1369.227841][T12025] usb 2-1: Manufacturer: syz [ 1369.227848][T12025] usb 2-1: SerialNumber: syz [ 1369.584698][T11846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1369.616866][T11846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1369.619048][T11846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1369.639341][T12025] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1369.654846][T11846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1369.655700][T11846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1370.651353][ T5910] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1371.786181][T11846] Bluetooth: hci5: command tx timeout [ 1371.826762][ T986] usb 2-1: USB disconnect, device number 12 [ 1371.852271][ T986] usblp0: removed [ 1371.911140][ T5910] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1371.911173][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1371.911215][ T5910] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1371.911238][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.943388][ T5910] usb 10-1: config 0 descriptor?? [ 1372.436874][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.437405][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.440842][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.441458][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.118228][ T5910] ath6kl: Failed to submit usb control message: -110 [ 1373.118563][ T5910] ath6kl: unable to send the bmi data to the device: -110 [ 1373.118606][ T5910] ath6kl: Unable to send get target info: -110 [ 1373.328905][ T5910] ath6kl: Failed to init ath6kl core: -110 [ 1373.373720][ T5910] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1373.852535][T11846] Bluetooth: hci5: command tx timeout [ 1375.941540][T11846] Bluetooth: hci5: command tx timeout [ 1377.212900][T13782] Falling back ldisc for ttyS3. [ 1378.002550][T11846] Bluetooth: hci5: command tx timeout [ 1378.103428][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1378.923143][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1380.532607][T13220] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1380.745278][T13220] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1380.763242][T13220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1380.763273][T13220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.763291][T13220] usb 4-1: Product: syz [ 1380.763304][T13220] usb 4-1: Manufacturer: syz [ 1380.763318][T13220] usb 4-1: SerialNumber: syz [ 1381.178309][T13220] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1381.243878][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1381.270748][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1381.286765][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1381.288260][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1381.314828][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1383.386951][ T5854] Bluetooth: hci6: command tx timeout [ 1383.670519][T12025] usb 4-1: USB disconnect, device number 23 [ 1383.678322][T12025] usblp0: removed [ 1385.792753][ T5854] Bluetooth: hci6: command tx timeout [ 1387.089614][T11846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1387.101941][T11846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1387.113359][T11846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1387.114592][T11846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1387.116214][T11846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1387.843997][ T5854] Bluetooth: hci6: command tx timeout [ 1389.336162][ T5854] Bluetooth: hci7: command tx timeout [ 1389.888442][T12025] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1389.941573][ T5854] Bluetooth: hci6: command tx timeout [ 1390.155883][T12025] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.155910][T12025] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1390.155949][T12025] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1390.155972][T12025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.206245][T12025] usb 4-1: config 0 descriptor?? [ 1391.363960][ T5854] Bluetooth: hci7: command tx timeout [ 1391.901895][T12025] usb 10-1: USB disconnect, device number 9 [ 1392.099330][T13720] syz_tun (unregistering): left promiscuous mode [ 1392.492715][ T5910] usb 4-1: USB disconnect, device number 24 [ 1393.454909][ T5854] Bluetooth: hci7: command tx timeout [ 1395.522553][ T5854] Bluetooth: hci7: command tx timeout [ 1397.723596][T13841] chnl_net:caif_netlink_parms(): no params data found [ 1397.768393][T13810] chnl_net:caif_netlink_parms(): no params data found [ 1398.081884][T13912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1959'. [ 1398.160909][ T3574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.478497][T13741] chnl_net:caif_netlink_parms(): no params data found [ 1399.643936][ T5910] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1399.672215][ T3574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.794285][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 1399.797111][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1399.797145][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1399.797171][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1399.797193][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.797236][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1399.797258][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.126571][ T5910] usb 2-1: GET_CAPABILITIES returned 0 [ 1400.126687][ T5910] usbtmc 2-1:16.0: can't read capabilities [ 1400.815131][ T3574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.421933][ T3574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.193999][T13841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.194194][T13841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.194437][T13841] bridge_slave_0: entered allmulticast mode [ 1402.197851][T13841] bridge_slave_0: entered promiscuous mode [ 1402.216052][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.216298][T13810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.216545][T13810] bridge_slave_0: entered allmulticast mode [ 1402.225040][T13810] bridge_slave_0: entered promiscuous mode [ 1402.239155][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.239290][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.239495][T13741] bridge_slave_0: entered allmulticast mode [ 1402.283714][T13741] bridge_slave_0: entered promiscuous mode [ 1402.289938][T13841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.290087][T13841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.290298][T13841] bridge_slave_1: entered allmulticast mode [ 1402.293557][T13841] bridge_slave_1: entered promiscuous mode [ 1402.302939][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.303078][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.306161][T13810] bridge_slave_1: entered allmulticast mode [ 1402.315200][T13810] bridge_slave_1: entered promiscuous mode [ 1402.351014][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.351155][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.351395][T13741] bridge_slave_1: entered allmulticast mode [ 1402.374490][T13741] bridge_slave_1: entered promiscuous mode [ 1402.435007][T12025] usb 2-1: USB disconnect, device number 13 [ 1403.728185][T13841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.865282][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.870015][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.884364][T13841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.077544][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.079755][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.195672][T13841] team0: Port device team_slave_0 added [ 1406.227536][T13810] team0: Port device team_slave_0 added [ 1406.229950][T13741] team0: Port device team_slave_0 added [ 1406.245868][T13841] team0: Port device team_slave_1 added [ 1406.247336][T13810] team0: Port device team_slave_1 added [ 1406.249665][T13741] team0: Port device team_slave_1 added [ 1407.841451][ T3574] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.455698][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.455716][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.455742][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.552457][T13841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.552475][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.552499][T13841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.553754][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.553763][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.553777][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.555360][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.555369][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.555383][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.043115][ T3574] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.145831][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.145843][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1409.145859][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.244202][T13841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.244218][T13841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1409.244242][T13841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.736034][ T3574] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.119209][T13741] hsr_slave_0: entered promiscuous mode [ 1410.120836][T13741] hsr_slave_1: entered promiscuous mode [ 1410.122141][T13741] debugfs: 'hsr0' already exists in 'hsr' [ 1410.122167][T13741] Cannot create hsr debugfs directory [ 1410.330459][ T3574] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.033780][T13810] hsr_slave_0: entered promiscuous mode [ 1411.034791][T13810] hsr_slave_1: entered promiscuous mode [ 1411.035323][T13810] debugfs: 'hsr0' already exists in 'hsr' [ 1411.035343][T13810] Cannot create hsr debugfs directory [ 1411.091097][T13841] hsr_slave_0: entered promiscuous mode [ 1411.122701][T13841] hsr_slave_1: entered promiscuous mode [ 1411.138966][T13841] debugfs: 'hsr0' already exists in 'hsr' [ 1411.138995][T13841] Cannot create hsr debugfs directory [ 1412.639892][T13992] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1415.187843][ T3574] bridge_slave_1: left allmulticast mode [ 1415.187876][ T3574] bridge_slave_1: left promiscuous mode [ 1415.188135][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.336030][ T5854] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1415.624590][ T3574] bridge_slave_0: left allmulticast mode [ 1415.624623][ T3574] bridge_slave_0: left promiscuous mode [ 1415.624906][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.582129][ T3574] bridge_slave_1: left allmulticast mode [ 1416.582160][ T3574] bridge_slave_1: left promiscuous mode [ 1416.582329][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.683775][ T3574] bridge_slave_0: left allmulticast mode [ 1416.683796][ T3574] bridge_slave_0: left promiscuous mode [ 1416.683952][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.959771][ T3574] bridge_slave_1: left allmulticast mode [ 1416.959795][ T3574] bridge_slave_1: left promiscuous mode [ 1416.959948][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.038154][ T3574] bridge_slave_0: left allmulticast mode [ 1417.038176][ T3574] bridge_slave_0: left promiscuous mode [ 1417.038342][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.582691][T12025] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1418.605948][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.683633][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.735160][T12025] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1418.735205][T12025] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1418.735330][T12025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.741413][T12025] usb 4-1: config 0 descriptor?? [ 1418.777508][ T3574] bond0 (unregistering): Released all slaves [ 1419.463117][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1419.463137][ T37] audit: type=1326 audit(1757811183.922:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.463305][ T37] audit: type=1326 audit(1757811183.932:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.464091][ T37] audit: type=1326 audit(1757811183.932:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.464411][ T37] audit: type=1326 audit(1757811183.932:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.464553][ T37] audit: type=1326 audit(1757811183.932:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.464773][ T37] audit: type=1326 audit(1757811183.932:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.464936][ T37] audit: type=1326 audit(1757811183.932:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.465095][ T37] audit: type=1326 audit(1757811183.932:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.465308][ T37] audit: type=1326 audit(1757811183.932:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1419.465481][ T37] audit: type=1326 audit(1757811183.932:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14021 comm="syz.1.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1421.412799][T13220] usb 4-1: USB disconnect, device number 25 [ 1421.970292][T14035] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1422.233368][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1422.233815][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1422.234253][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1422.234556][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1422.234757][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1422.234877][ T3649] Bluetooth: hci0: Frame reassembly failed (-84) [ 1423.471359][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1423.471409][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1423.471479][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1423.471801][T14042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1989'. [ 1424.203091][T11846] Bluetooth: hci0: command 0x1003 tx timeout [ 1424.207606][ T5854] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1425.742838][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.833194][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.903100][ T3574] bond0 (unregistering): Released all slaves [ 1427.749721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.030179][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.086396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.086476][T11836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1428.187014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.289409][T11836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1428.290837][T11836] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1428.290873][T11836] usb 2-1: can't read configurations, error -71 [ 1428.332200][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.332276][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.550835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.745342][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.913899][T11846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1428.968049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.970973][T11846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1428.998069][T11846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1428.999541][T11846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1429.001117][T11846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1429.082823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.182694][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.302953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.585622][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.800818][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.902185][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.163545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.414936][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.487345][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.511104][ T3574] bond0 (unregistering): Released all slaves [ 1430.682721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.022005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1431.122615][ T5854] Bluetooth: hci0: command tx timeout [ 1431.181261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.164105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.232857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.672063][ C0] vkms_vblank_simulate: vblank timer overrun [ 1433.228427][ T5854] Bluetooth: hci0: command tx timeout [ 1435.072482][T12050] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1435.261651][T12050] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1435.264047][T12050] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1435.264083][T12050] usb 4-1: can't read configurations, error -71 [ 1435.292552][ T5854] Bluetooth: hci0: command tx timeout [ 1436.274581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1436.691681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.005368][ T3574] hsr_slave_0: left promiscuous mode [ 1437.042861][ T3574] hsr_slave_1: left promiscuous mode [ 1437.043710][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.078624][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.262717][ T3574] hsr_slave_0: left promiscuous mode [ 1437.292665][ T3574] hsr_slave_1: left promiscuous mode [ 1437.293593][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.293623][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.343714][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.343745][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.362553][ T5854] Bluetooth: hci0: command tx timeout [ 1437.548117][ T3574] hsr_slave_0: left promiscuous mode [ 1437.592777][ T3574] hsr_slave_1: left promiscuous mode [ 1437.593710][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1437.593737][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1437.659669][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1437.659703][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1437.852707][ T986] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1437.880236][ T3574] veth1_macvtap: left promiscuous mode [ 1437.880365][ T3574] veth0_macvtap: left promiscuous mode [ 1437.880715][ T3574] veth1_vlan: left promiscuous mode [ 1437.880923][ T3574] veth0_vlan: left promiscuous mode [ 1437.993054][ T3574] veth1_macvtap: left promiscuous mode [ 1437.993191][ T3574] veth0_macvtap: left promiscuous mode [ 1437.993485][ T3574] veth1_vlan: left promiscuous mode [ 1437.993695][ T3574] veth0_vlan: left promiscuous mode [ 1438.012640][ T986] usb 4-1: Using ep0 maxpacket: 8 [ 1438.018071][ T986] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1438.018114][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.018133][ T986] usb 4-1: Product: syz [ 1438.018146][ T986] usb 4-1: Manufacturer: syz [ 1438.018155][ T986] usb 4-1: SerialNumber: syz [ 1438.023732][ T986] usb 4-1: config 0 descriptor?? [ 1438.028779][ T986] usbtest 4-1:0.0: FX2 device [ 1438.028797][ T986] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1438.237798][ T986] usb 4-1: USB disconnect, device number 28 [ 1439.146645][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.298880][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 1440.298897][ T37] audit: type=1326 audit(1757811204.762:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.299183][ T37] audit: type=1326 audit(1757811204.762:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.299762][ T37] audit: type=1326 audit(1757811204.762:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.300754][ T37] audit: type=1326 audit(1757811204.762:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.301068][ T37] audit: type=1326 audit(1757811204.762:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.301354][ T37] audit: type=1326 audit(1757811204.762:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.301688][ T37] audit: type=1326 audit(1757811204.762:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.302054][ T37] audit: type=1326 audit(1757811204.762:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.302096][ T37] audit: type=1326 audit(1757811204.762:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.305827][ T37] audit: type=1326 audit(1757811204.762:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14122 comm="syz.1.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1440.411866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.742840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.802483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.019912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.183112][ T986] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1441.382670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.488895][ T986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1441.490045][ T986] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1441.490080][ T986] usb 4-1: can't read configurations, error -71 [ 1441.492589][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.659833][T11846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1441.683416][T11846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1441.689497][T11846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1441.711217][T11846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1441.712224][T11846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1441.722139][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1441.923495][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1442.031856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.111612][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.182607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.632051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.780521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.951946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.016618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.781250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.782851][ T5854] Bluetooth: hci2: command tx timeout [ 1444.580330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1444.875700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1444.975645][ C0] vkms_vblank_simulate: vblank timer overrun [ 1444.992544][ T5931] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1445.065268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.129210][ C0] vkms_vblank_simulate: vblank timer overrun [ 1445.287193][ T5931] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1445.287221][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.287238][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1445.287282][ T5931] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.289285][ T5931] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1445.289313][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1445.289332][ T5931] usb 2-1: Product: syz [ 1445.289345][ T5931] usb 2-1: Manufacturer: syz [ 1445.297238][ T5931] cdc_wdm 2-1:1.0: skipping garbage [ 1445.297276][ T5931] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1446.373628][ T5854] Bluetooth: hci2: command tx timeout [ 1446.414244][ T37] kauditd_printk_skb: 36 callbacks suppressed [ 1446.414260][ T37] audit: type=1326 audit(1757811210.872:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.415197][ T37] audit: type=1326 audit(1757811210.882:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.416876][ T37] audit: type=1326 audit(1757811210.882:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.417415][ T37] audit: type=1326 audit(1757811210.882:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.417697][ T37] audit: type=1326 audit(1757811210.882:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.418017][ T37] audit: type=1326 audit(1757811210.882:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.421399][ T37] audit: type=1326 audit(1757811210.882:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.421807][ T37] audit: type=1326 audit(1757811210.882:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.421864][ T37] audit: type=1326 audit(1757811210.882:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1446.552802][ T5931] usb 2-1: USB disconnect, device number 16 [ 1446.881698][ T37] audit: type=1326 audit(1757811210.882:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14155 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1447.935289][T11846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1447.953539][T11846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1447.959776][T11846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1447.964197][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1447.970005][T11846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1447.970763][T11846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1448.308063][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1448.309172][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1448.309207][ T5931] usb 4-1: can't read configurations, error -71 [ 1448.403283][ T5854] Bluetooth: hci2: command tx timeout [ 1449.583350][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1450.013472][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1450.082790][ T5854] Bluetooth: hci3: command tx timeout [ 1450.553076][ T5854] Bluetooth: hci2: command tx timeout [ 1451.832749][T11836] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1452.009106][T11836] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1452.009134][T11836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.009153][T11836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1452.009203][T11836] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1452.011734][T11836] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1452.011762][T11836] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1452.011781][T11836] usb 2-1: Product: syz [ 1452.011794][T11836] usb 2-1: Manufacturer: syz [ 1452.023159][T11836] cdc_wdm 2-1:1.0: skipping garbage [ 1452.023199][T11836] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1452.162466][ T5854] Bluetooth: hci3: command tx timeout [ 1452.631547][ T5931] usb 2-1: USB disconnect, device number 17 [ 1453.512754][T11836] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1453.699291][T11836] usb 2-1: Using ep0 maxpacket: 8 [ 1453.720528][T11836] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1453.720560][T11836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.720579][T11836] usb 2-1: Product: syz [ 1453.720593][T11836] usb 2-1: Manufacturer: syz [ 1453.720606][T11836] usb 2-1: SerialNumber: syz [ 1453.756371][T11836] usb 2-1: config 0 descriptor?? [ 1453.758952][T11836] usbtest 2-1:0.0: FX2 device [ 1453.758964][T11836] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1453.966401][T11836] usb 2-1: USB disconnect, device number 18 [ 1454.242524][ T5854] Bluetooth: hci3: command tx timeout [ 1456.322586][ T5854] Bluetooth: hci3: command tx timeout [ 1456.442847][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1456.632742][T14194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2033'. [ 1457.494044][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1457.882143][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1461.613031][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1461.614176][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 1461.614202][ T5931] usb 2-1: chopping to 0 config(s) [ 1461.614227][ T5931] usb 2-1: can't read configurations, error -32 [ 1463.302732][T14075] chnl_net:caif_netlink_parms(): no params data found [ 1464.182858][T11836] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1464.324037][T14218] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2039'. [ 1464.344901][T11836] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1464.344928][T11836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.344947][T11836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1464.344995][T11836] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1464.347267][T11836] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1464.347294][T11836] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1464.347312][T11836] usb 4-1: Product: syz [ 1464.347325][T11836] usb 4-1: Manufacturer: syz [ 1464.356199][T11836] cdc_wdm 4-1:1.0: skipping garbage [ 1464.356240][T11836] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1465.149307][T12050] usb 4-1: USB disconnect, device number 33 [ 1465.247890][T14075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.248218][T14075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.267427][T14075] bridge_slave_0: entered allmulticast mode [ 1465.281834][T14075] bridge_slave_0: entered promiscuous mode [ 1465.309561][T14075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.309704][T14075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.309902][T14075] bridge_slave_1: entered allmulticast mode [ 1465.360765][T14075] bridge_slave_1: entered promiscuous mode [ 1466.252518][T12050] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1467.369400][T12050] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1467.382197][T12050] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1467.382237][T12050] usb 4-1: can't read configurations, error -71 [ 1467.965337][T14075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1468.330155][T14075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.925149][T14075] team0: Port device team_slave_0 added [ 1469.084859][T14075] team0: Port device team_slave_1 added [ 1471.613946][T14075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.613963][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.613989][T14075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.723521][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033619800: rx timeout, send abort [ 1471.723631][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033618c00: rx timeout, send abort [ 1471.723755][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033619800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1471.723843][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033618c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1472.141668][T14075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.141684][T14075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.141710][T14075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.255043][T14165] chnl_net:caif_netlink_parms(): no params data found [ 1472.379468][T14131] chnl_net:caif_netlink_parms(): no params data found [ 1472.511586][T14262] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2049'. [ 1474.005655][ T3574] IPVS: stop unused estimator thread 0... [ 1474.054240][T14075] hsr_slave_0: entered promiscuous mode [ 1474.055607][T14075] hsr_slave_1: entered promiscuous mode [ 1474.342616][T12050] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1474.506605][T14275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2052'. [ 1475.212751][ T1053] Bluetooth: hci5: Frame reassembly failed (-84) [ 1475.289403][T12050] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1475.290449][T12050] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1475.290490][T12050] usb 4-1: can't read configurations, error -71 [ 1475.474106][T14165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.474349][T14165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.474566][T14165] bridge_slave_0: entered allmulticast mode [ 1475.478259][T14165] bridge_slave_0: entered promiscuous mode [ 1475.559466][T14165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.559599][T14165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.559773][T14165] bridge_slave_1: entered allmulticast mode [ 1475.561410][T14165] bridge_slave_1: entered promiscuous mode [ 1476.093356][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.093563][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.093813][T14131] bridge_slave_0: entered allmulticast mode [ 1476.096690][T14131] bridge_slave_0: entered promiscuous mode [ 1476.273091][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.273239][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.273488][T14131] bridge_slave_1: entered allmulticast mode [ 1476.281762][T14131] bridge_slave_1: entered promiscuous mode [ 1476.327812][T14165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.488115][T14165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.882699][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1477.196702][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.953635][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.134680][T14165] team0: Port device team_slave_0 added [ 1479.430956][T14165] team0: Port device team_slave_1 added [ 1479.621877][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed74800: rx timeout, send abort [ 1479.622053][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed76000: rx timeout, send abort [ 1479.622241][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ed74800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1479.622419][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ed76000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1479.853915][T14131] team0: Port device team_slave_0 added [ 1481.239945][T14131] team0: Port device team_slave_1 added [ 1481.570235][T14165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.570252][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.570278][T14165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.886226][T14165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.886243][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.886269][T14165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.541768][ T3649] Bluetooth: hci5: Frame reassembly failed (-84) [ 1484.289433][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.289450][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.289475][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.318456][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.318472][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.318495][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.815643][T14165] hsr_slave_0: entered promiscuous mode [ 1484.816953][T14165] hsr_slave_1: entered promiscuous mode [ 1484.817874][T14165] debugfs: 'hsr0' already exists in 'hsr' [ 1484.817899][T14165] Cannot create hsr debugfs directory [ 1485.133306][T14075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1485.211390][T14131] hsr_slave_0: entered promiscuous mode [ 1485.221381][T14131] hsr_slave_1: entered promiscuous mode [ 1485.223210][T14131] debugfs: 'hsr0' already exists in 'hsr' [ 1485.223235][T14131] Cannot create hsr debugfs directory [ 1485.340691][T14075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1485.484270][T14075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1485.522468][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1486.205008][T14075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1489.044283][T14075] kthread_run failed with err -4 [ 1489.125341][ T3574] bridge_slave_1: left allmulticast mode [ 1489.125375][ T3574] bridge_slave_1: left promiscuous mode [ 1489.129044][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.232145][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aeb6000: rx timeout, send abort [ 1489.232347][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801aeb4800: rx timeout, send abort [ 1489.232748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801aeb6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1489.232887][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801aeb4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1489.280649][ T3574] bridge_slave_0: left allmulticast mode [ 1489.280683][ T3574] bridge_slave_0: left promiscuous mode [ 1489.280967][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.390596][ T3574] bridge_slave_1: left allmulticast mode [ 1489.390630][ T3574] bridge_slave_1: left promiscuous mode [ 1489.390872][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.510892][T11846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1489.528519][T11846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1489.530883][T11846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1489.535430][T11846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1489.632920][T11846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1489.664274][ T3574] bridge_slave_0: left allmulticast mode [ 1489.664307][ T3574] bridge_slave_0: left promiscuous mode [ 1489.664559][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.779609][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.779686][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.027252][ T3574] bridge_slave_1: left allmulticast mode [ 1490.027287][ T3574] bridge_slave_1: left promiscuous mode [ 1490.027542][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.131762][ T3574] bridge_slave_0: left allmulticast mode [ 1490.131796][ T3574] bridge_slave_0: left promiscuous mode [ 1490.132064][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.781135][ T5854] Bluetooth: hci5: command tx timeout [ 1491.943569][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.023345][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.087327][ T3574] bond0 (unregistering): Released all slaves [ 1492.583415][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.715113][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.957861][ T3574] bond0 (unregistering): Released all slaves [ 1492.971264][T10755] Bluetooth: hci0: Frame reassembly failed (-84) [ 1493.673372][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.768679][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.842610][T11846] Bluetooth: hci5: command tx timeout [ 1493.862116][ T3574] bond0 (unregistering): Released all slaves [ 1495.243617][T11846] Bluetooth: hci0: command 0x1003 tx timeout [ 1495.243911][ T5854] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1495.966365][ T5854] Bluetooth: hci5: command tx timeout [ 1498.114994][ T5854] Bluetooth: hci5: command tx timeout [ 1498.313823][ T3574] hsr_slave_0: left promiscuous mode [ 1498.338004][ T3574] hsr_slave_1: left promiscuous mode [ 1498.342114][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.373879][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.512603][ T3574] hsr_slave_0: left promiscuous mode [ 1498.533699][ T3574] hsr_slave_1: left promiscuous mode [ 1498.534754][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.573960][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.731017][ T3574] hsr_slave_0: left promiscuous mode [ 1498.742708][ T3574] hsr_slave_1: left promiscuous mode [ 1498.743757][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.796112][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.816738][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 1502.897349][T11846] Bluetooth: hci0: command 0x1003 tx timeout [ 1502.912285][ T5854] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1503.117216][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1503.538943][T11846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1503.992872][T11846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1504.027640][T11846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1504.123627][T11846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1504.149847][T11846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1504.513346][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1506.403107][T11846] Bluetooth: hci0: command tx timeout [ 1507.863179][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1508.084514][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1508.512427][T11846] Bluetooth: hci0: command tx timeout [ 1508.788394][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1508.794155][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1508.809161][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1508.852086][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1508.859749][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1510.562902][T11846] Bluetooth: hci0: command tx timeout [ 1510.840146][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 1510.962878][ T5854] Bluetooth: hci6: command tx timeout [ 1511.433424][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1511.583681][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1512.642865][ T5854] Bluetooth: hci0: command tx timeout [ 1512.802989][T11846] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1513.352190][ T5854] Bluetooth: hci6: command tx timeout [ 1515.322571][ T5910] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1515.455099][ T5854] Bluetooth: hci6: command tx timeout [ 1515.504973][ T5910] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1515.505002][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.505020][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1515.505070][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1515.507331][ T5910] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1515.507357][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1515.507377][ T5910] usb 4-1: Product: syz [ 1515.507390][ T5910] usb 4-1: Manufacturer: syz [ 1515.524625][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 1515.524665][ T5910] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1516.204935][T14346] chnl_net:caif_netlink_parms(): no params data found [ 1516.253304][T11836] usb 4-1: USB disconnect, device number 38 [ 1516.651149][T14412] chnl_net:caif_netlink_parms(): no params data found [ 1516.667883][T14437] chnl_net:caif_netlink_parms(): no params data found [ 1517.533101][ T5854] Bluetooth: hci6: command tx timeout [ 1519.810817][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.810972][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.811235][T14346] bridge_slave_0: entered allmulticast mode [ 1519.820802][T14346] bridge_slave_0: entered promiscuous mode [ 1521.240738][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.240906][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.241103][T14346] bridge_slave_1: entered allmulticast mode [ 1521.264988][T14346] bridge_slave_1: entered promiscuous mode [ 1521.612542][ T5854] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1521.903386][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.307309][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.307667][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.307775][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.307899][T14437] bridge_slave_0: entered allmulticast mode [ 1522.311064][T14437] bridge_slave_0: entered promiscuous mode [ 1522.425572][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.425652][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.425800][T14412] bridge_slave_0: entered allmulticast mode [ 1522.427552][T14412] bridge_slave_0: entered promiscuous mode [ 1522.584039][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.584249][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.584460][T14437] bridge_slave_1: entered allmulticast mode [ 1522.586314][T14437] bridge_slave_1: entered promiscuous mode [ 1522.589947][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.590031][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.590199][T14412] bridge_slave_1: entered allmulticast mode [ 1522.594461][T14412] bridge_slave_1: entered promiscuous mode [ 1523.080484][T14346] team0: Port device team_slave_0 added [ 1523.966843][T14346] team0: Port device team_slave_1 added [ 1524.538590][T14517] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1524.947326][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.977243][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.143703][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.146458][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.434133][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.434145][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.434159][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.696332][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.696348][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.696373][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.699280][T14437] team0: Port device team_slave_0 added [ 1525.806382][T14412] team0: Port device team_slave_0 added [ 1525.829012][T14437] team0: Port device team_slave_1 added [ 1525.907245][T14412] team0: Port device team_slave_1 added [ 1526.962660][T11846] Bluetooth: hci2: command 0x1003 tx timeout [ 1526.968608][ T5854] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1527.006568][T12071] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1527.152458][T12071] usb 4-1: Using ep0 maxpacket: 8 [ 1527.155151][T12071] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1527.155182][T12071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1527.155213][T12071] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1527.155236][T12071] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1527.155279][T12071] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1527.155301][T12071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.986004][T12071] usb 4-1: GET_CAPABILITIES returned 0 [ 1527.986051][T12071] usbtmc 4-1:16.0: can't read capabilities [ 1528.359720][T12050] usb 4-1: USB disconnect, device number 39 [ 1528.412991][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.413008][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.413035][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.074841][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.074857][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.074881][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.076660][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.076672][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.076695][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.122797][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.122813][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.122837][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.228506][T14346] hsr_slave_0: entered promiscuous mode [ 1529.231259][T14346] hsr_slave_1: entered promiscuous mode [ 1529.235979][T14346] debugfs: 'hsr0' already exists in 'hsr' [ 1529.236006][T14346] Cannot create hsr debugfs directory [ 1531.795108][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'. [ 1532.609765][T14437] hsr_slave_0: entered promiscuous mode [ 1532.614543][T14437] hsr_slave_1: entered promiscuous mode [ 1532.622720][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 1532.622746][T14437] Cannot create hsr debugfs directory [ 1532.803738][T14412] hsr_slave_0: entered promiscuous mode [ 1532.805059][T14412] hsr_slave_1: entered promiscuous mode [ 1532.816206][T14412] debugfs: 'hsr0' already exists in 'hsr' [ 1532.816234][T14412] Cannot create hsr debugfs directory [ 1533.387056][T14556] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1535.522692][ T5854] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1537.447591][ T3574] bridge_slave_1: left allmulticast mode [ 1537.447626][ T3574] bridge_slave_1: left promiscuous mode [ 1537.447934][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.494755][ T3574] bridge_slave_0: left allmulticast mode [ 1537.494787][ T3574] bridge_slave_0: left promiscuous mode [ 1537.495060][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.559451][ T3574] bridge_slave_1: left allmulticast mode [ 1537.559484][ T3574] bridge_slave_1: left promiscuous mode [ 1537.559726][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.634287][ T3574] bridge_slave_0: left allmulticast mode [ 1537.634322][ T3574] bridge_slave_0: left promiscuous mode [ 1537.634586][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.730726][ T3574] bridge_slave_1: left allmulticast mode [ 1537.730760][ T3574] bridge_slave_1: left promiscuous mode [ 1537.731019][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.276907][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1538.323936][ T3574] bridge_slave_0: left allmulticast mode [ 1538.323969][ T3574] bridge_slave_0: left promiscuous mode [ 1538.324224][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.053429][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.143289][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.228110][ T3574] bond0 (unregistering): Released all slaves [ 1540.693803][T14594] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1541.728862][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.892889][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.974502][ T3574] bond0 (unregistering): Released all slaves [ 1542.533035][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.613589][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.691133][ T3574] bond0 (unregistering): Released all slaves [ 1542.817711][ T5854] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1544.052736][ T3574] hsr_slave_0: left promiscuous mode [ 1544.312507][ T3574] hsr_slave_1: left promiscuous mode [ 1544.313472][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.357471][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.562705][ T3574] hsr_slave_0: left promiscuous mode [ 1544.584633][ T3574] hsr_slave_1: left promiscuous mode [ 1544.585589][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.693415][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.852572][ T3574] hsr_slave_0: left promiscuous mode [ 1544.902568][ T3574] hsr_slave_1: left promiscuous mode [ 1544.903585][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.963399][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.853707][ T5854] Bluetooth: hci2: command 0x1003 tx timeout [ 1545.868483][T14558] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1547.713374][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1547.896029][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1548.000427][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'. [ 1549.363791][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1549.363809][ T37] audit: type=1326 audit(1757811313.832:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.364752][ T37] audit: type=1326 audit(1757811313.832:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.366832][ T37] audit: type=1326 audit(1757811313.832:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.367959][ T37] audit: type=1326 audit(1757811313.832:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.368245][ T37] audit: type=1326 audit(1757811313.832:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.368531][ T37] audit: type=1326 audit(1757811313.832:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.369147][ T37] audit: type=1326 audit(1757811313.832:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.370515][ T37] audit: type=1326 audit(1757811313.832:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.370559][ T37] audit: type=1326 audit(1757811313.832:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1549.370613][ T37] audit: type=1326 audit(1757811313.832:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14627 comm="syz.3.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1550.370618][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1550.392614][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1550.396485][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1550.402660][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1550.407871][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1550.408946][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1550.603523][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1551.209144][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.209222][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.954564][T14644] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1551.957535][T12465] Bluetooth: hci3: Frame reassembly failed (-84) [ 1552.101274][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1552.303263][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1552.572465][ T5854] Bluetooth: hci2: command tx timeout [ 1554.003857][ T5854] Bluetooth: hci3: command 0x1003 tx timeout [ 1554.004002][T14558] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1554.367811][T14412] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1554.469269][T14412] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1554.676569][T14558] Bluetooth: hci2: command tx timeout [ 1554.825673][T14412] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1555.010296][T14658] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.2145'. [ 1556.017320][T14412] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1557.110177][T14558] Bluetooth: hci2: command tx timeout [ 1558.298738][T14633] chnl_net:caif_netlink_parms(): no params data found [ 1558.555521][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 1558.555539][ T37] audit: type=1326 audit(1757811323.022:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.555584][ T37] audit: type=1326 audit(1757811323.022:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.555625][ T37] audit: type=1326 audit(1757811323.022:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.555663][ T37] audit: type=1326 audit(1757811323.022:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.555704][ T37] audit: type=1326 audit(1757811323.022:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.557153][ T37] audit: type=1326 audit(1757811323.022:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.557515][ T37] audit: type=1326 audit(1757811323.022:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.565336][ T37] audit: type=1326 audit(1757811323.032:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.566069][ T37] audit: type=1326 audit(1757811323.032:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1558.566284][ T37] audit: type=1326 audit(1757811323.032:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14675 comm="syz.1.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95a0d1eba9 code=0x7ffc0000 [ 1559.123789][T14558] Bluetooth: hci2: command tx timeout [ 1559.460056][T14437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1559.627121][T14437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1559.737651][T14437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1559.842644][T14437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1560.231986][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.232203][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.242817][T14633] bridge_slave_0: entered allmulticast mode [ 1560.248505][T14633] bridge_slave_0: entered promiscuous mode [ 1560.262673][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.262832][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.263070][T14633] bridge_slave_1: entered allmulticast mode [ 1560.273821][T14633] bridge_slave_1: entered promiscuous mode [ 1560.471964][T14700] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1561.269772][T14633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.316934][T14633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.628123][T14633] team0: Port device team_slave_0 added [ 1561.677689][T14633] team0: Port device team_slave_1 added [ 1562.392572][T14633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.392588][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.392613][T14633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.403438][T14633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.403453][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.403478][T14633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.482756][ T5854] Bluetooth: hci3: command 0x1003 tx timeout [ 1562.483005][T14558] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1563.136890][T14633] hsr_slave_0: entered promiscuous mode [ 1563.138604][T14633] hsr_slave_1: entered promiscuous mode [ 1563.166132][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.183058][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.190872][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.245069][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.250071][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1564.459164][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 1564.459180][ T37] audit: type=1326 audit(1757811328.922:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.459723][ T37] audit: type=1326 audit(1757811328.922:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.460017][ T37] audit: type=1326 audit(1757811328.922:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.460658][ T37] audit: type=1326 audit(1757811328.922:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.460931][ T37] audit: type=1326 audit(1757811328.922:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.461109][ T37] audit: type=1326 audit(1757811328.922:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.461301][ T37] audit: type=1326 audit(1757811328.922:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.461407][ T37] audit: type=1326 audit(1757811328.922:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.461577][ T37] audit: type=1326 audit(1757811328.922:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1564.461723][ T37] audit: type=1326 audit(1757811328.922:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14719 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4253eba9 code=0x7ffc0000 [ 1565.288026][T14558] Bluetooth: hci3: command tx timeout [ 1565.351232][ T3574] bridge_slave_1: left allmulticast mode [ 1565.351263][ T3574] bridge_slave_1: left promiscuous mode [ 1565.351517][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.667587][ T3574] bridge_slave_0: left allmulticast mode [ 1565.667621][ T3574] bridge_slave_0: left promiscuous mode [ 1565.667962][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.362480][T14558] Bluetooth: hci3: command tx timeout [ 1567.549240][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.633704][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.706316][ T3574] bond0 (unregistering): Released all slaves [ 1567.732528][ T44] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1567.915054][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.915081][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1567.919634][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1567.919672][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.919691][ T44] usb 4-1: Product: syz [ 1567.919705][ T44] usb 4-1: Manufacturer: syz [ 1567.919719][ T44] usb 4-1: SerialNumber: syz [ 1568.302766][ T44] usb 4-1: 0:2 : does not exist [ 1568.302822][ T44] usb 4-1: unit 6 not found! [ 1568.390781][ T44] usb 4-1: USB disconnect, device number 40 [ 1568.892855][ T3574] hsr_slave_0: left promiscuous mode [ 1569.329528][ T3574] hsr_slave_1: left promiscuous mode [ 1569.330454][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.383384][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.442550][T14558] Bluetooth: hci3: command tx timeout [ 1569.586615][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1569.599898][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1569.616218][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1569.617279][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1569.619210][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1569.842619][ T986] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1570.023001][ T986] usb 4-1: Using ep0 maxpacket: 32 [ 1570.053530][ T986] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1570.053548][ T986] usb 4-1: config 0 has no interface number 0 [ 1570.053576][ T986] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1570.055525][ T986] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1570.055541][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.055551][ T986] usb 4-1: Product: syz [ 1570.055558][ T986] usb 4-1: Manufacturer: syz [ 1570.055565][ T986] usb 4-1: SerialNumber: syz [ 1570.058698][ T986] usb 4-1: config 0 descriptor?? [ 1570.062373][ T986] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1570.062406][ T986] em28xx 4-1:0.89: Video interface 89 found: bulk [ 1570.776913][ T986] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1571.677842][T14558] Bluetooth: hci3: command tx timeout [ 1571.682551][T14558] Bluetooth: hci0: command tx timeout [ 1572.053369][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1572.125576][ T986] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1572.125605][ T986] em28xx 4-1:0.89: board has no eeprom [ 1572.182481][ T986] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1572.182507][ T986] em28xx 4-1:0.89: analog set to bulk mode. [ 1572.188751][T12025] em28xx 4-1:0.89: Registering V4L2 extension [ 1572.232537][ T986] usb 4-1: USB disconnect, device number 41 [ 1572.234948][ T986] em28xx 4-1:0.89: Disconnecting em28xx [ 1572.287900][T12025] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1572.287923][T12025] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1572.287935][T12025] em28xx 4-1:0.89: No AC97 audio processor [ 1572.344987][T12025] usb 4-1: Decoder not found [ 1572.345006][T12025] em28xx 4-1:0.89: failed to create media graph [ 1572.345056][T12025] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1572.352161][T12025] em28xx 4-1:0.89: Registering snapshot button... [ 1572.384882][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1572.450338][T12025] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input16 [ 1572.474881][T12025] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1572.475065][ T986] em28xx 4-1:0.89: Closing input extension [ 1572.476324][ T986] em28xx 4-1:0.89: Deregistering snapshot button [ 1572.641386][ T986] em28xx 4-1:0.89: Freeing device [ 1573.376394][T14764] Bluetooth: MGMT ver 1.23 [ 1573.763302][T14558] Bluetooth: hci0: command tx timeout [ 1574.592563][ T986] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1574.772420][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 1574.774811][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.774843][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.774865][ T986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1574.774906][ T986] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1574.774928][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.780286][ T986] usb 4-1: config 0 descriptor?? [ 1575.231317][ T986] microsoft 0003:045E:07DA.0010: unbalanced delimiter at end of report description [ 1575.232665][ T986] microsoft 0003:045E:07DA.0010: parse failed [ 1575.232767][ T986] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 1575.403406][T12025] usb 4-1: USB disconnect, device number 42 [ 1575.844207][T14558] Bluetooth: hci0: command tx timeout [ 1575.980563][T14633] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1576.079126][T14633] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1576.114343][T14633] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1576.238662][T14633] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1576.282640][ T5910] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1576.432581][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 1576.436453][ T5910] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1576.436479][ T5910] usb 4-1: config 0 has no interface number 0 [ 1576.439233][ T5910] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1576.439261][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.439280][ T5910] usb 4-1: Product: syz [ 1576.439289][ T5910] usb 4-1: Manufacturer: syz [ 1576.439296][ T5910] usb 4-1: SerialNumber: syz [ 1576.492737][ T5910] usb 4-1: config 0 descriptor?? [ 1576.510362][ T5910] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1576.582468][ T986] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1576.716237][T14710] chnl_net:caif_netlink_parms(): no params data found [ 1576.734220][ T986] usb 2-1: Using ep0 maxpacket: 32 [ 1576.738814][ T986] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1576.738843][ T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.753962][ T986] usb 2-1: config 0 descriptor?? [ 1576.799624][ T986] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1576.816803][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1576.862943][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1576.912856][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1576.914031][ T5910] usb 4-1: USB disconnect, device number 43 [ 1576.950625][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1576.970325][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1576.972102][ T5910] quatech2 4-1:0.51: device disconnected [ 1578.743504][T14558] Bluetooth: hci0: command tx timeout [ 1578.745780][ T986] gspca_sunplus: reg_w_riv err -110 [ 1578.745899][ T986] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1579.036722][T14746] chnl_net:caif_netlink_parms(): no params data found [ 1579.757285][T14791] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1579.757307][T14791] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 14791, name: syz.1.2172 [ 1579.757324][T14791] preempt_count: 0, expected: 0 [ 1579.757333][T14791] RCU nest depth: 0, expected: 0 [ 1579.757355][T14791] 1 lock held by syz.1.2172/14791: [ 1579.757367][T14791] #0: ffff888027e0c058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 1579.757432][T14791] irq event stamp: 866 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1579.757440][T14791] hardirqs last enabled at (865): [] _raw_spin_unlock_irq+0x23/0x50 [ 1579.757472][T14791] hardirqs last disabled at (866): [] dummy_dequeue+0x151/0x480 [ 1579.757497][T14791] softirqs last enabled at (0): [] copy_process+0x979/0x3ae0 [ 1579.757525][T14791] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 1579.757551][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.1.2172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1579.757573][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1579.757584][T14791] Call Trace: [ 1579.757592][T14791] [ 1579.757601][T14791] dump_stack_lvl+0x189/0x250 [ 1579.757635][T14791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.757672][T14791] ? print_lock_name+0xde/0x100 [ 1579.757707][T14791] __might_resched+0x44b/0x5d0 [ 1579.757736][T14791] ? __pfx___might_resched+0x10/0x10 [ 1579.757756][T14791] ? dummy_dequeue+0x164/0x480 [ 1579.757792][T14791] rt_spin_lock+0xc7/0x2c0 [ 1579.757815][T14791] ? _raw_spin_unlock_irq+0x23/0x50 [ 1579.757846][T14791] ? __pfx_rt_spin_lock+0x10/0x10 [ 1579.757874][T14791] ? rcu_is_watching+0x15/0xb0 [ 1579.757905][T14791] dummy_dequeue+0x164/0x480 [ 1579.757937][T14791] ? __pfx_dummy_dequeue+0x10/0x10 [ 1579.757958][T14791] ? __pfx_schedule_timeout+0x10/0x10 [ 1579.757983][T14791] ? __pfx___wait_for_common+0x10/0x10 [ 1579.758025][T14791] usb_ep_dequeue+0x66/0x250 [ 1579.758051][T14791] raw_process_ep0_io+0x435/0x980 [ 1579.758086][T14791] raw_ioctl+0x2609/0x3ba0 [ 1579.758116][T14791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1579.758142][T14791] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1579.758169][T14791] ? do_vfs_ioctl+0xbeb/0x1440 [ 1579.758195][T14791] ? __pfx_raw_ioctl+0x10/0x10 [ 1579.758219][T14791] ? __pfx_smack_log+0x10/0x10 [ 1579.758249][T14791] ? smk_access+0x14c/0x4e0 [ 1579.758284][T14791] ? smk_tskacc+0x2fc/0x370 [ 1579.758317][T14791] ? smack_file_ioctl+0x2ac/0x340 [ 1579.758341][T14791] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1579.758374][T14791] ? __fget_files+0x2a/0x420 [ 1579.758401][T14791] ? __fget_files+0x3a6/0x420 [ 1579.758428][T14791] ? __fget_files+0x2a/0x420 [ 1579.758459][T14791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1579.758483][T14791] ? __pfx_raw_ioctl+0x10/0x10 [ 1579.758508][T14791] __se_sys_ioctl+0xff/0x170 [ 1579.758535][T14791] do_syscall_64+0xfa/0x3b0 [ 1579.758553][T14791] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.758582][T14791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.758602][T14791] ? clear_bhb_loop+0x60/0xb0 [ 1579.758627][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.758647][T14791] RIP: 0033:0x7f95a0d1e7ab [ 1579.758664][T14791] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1579.758688][T14791] RSP: 002b:00007f959ef62f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1579.758710][T14791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f95a0d1e7ab [ 1579.758725][T14791] RDX: 00007f959ef62fe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 1579.758739][T14791] RBP: 00007f95a0da1e19 R08: 0000000000000000 R09: 0000000000000000 [ 1579.758752][T14791] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f959ef62fe8 [ 1579.758766][T14791] R13: 0000000000000000 R14: 00007f95a0f66090 R15: 00007ffff483df98 [ 1579.758799][T14791] [ 1579.841199][ T5910] usb 2-1: USB disconnect, device number 21 [ 1580.933746][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.933896][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.934136][T14710] bridge_slave_0: entered allmulticast mode [ 1580.937023][T14710] bridge_slave_0: entered promiscuous mode [ 1583.973008][ T3574] bridge_slave_1: left allmulticast mode [ 1583.973050][ T3574] bridge_slave_1: left promiscuous mode [ 1583.973340][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.034220][ T3574] bridge_slave_0: left allmulticast mode [ 1584.034254][ T3574] bridge_slave_0: left promiscuous mode [ 1584.034530][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.107884][ T3574] bridge_slave_1: left allmulticast mode [ 1584.107917][ T3574] bridge_slave_1: left promiscuous mode [ 1584.108170][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.175665][ T3574] bridge_slave_0: left allmulticast mode [ 1584.175698][ T3574] bridge_slave_0: left promiscuous mode [ 1584.175953][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.073630][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.173509][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.239125][ T3574] bond0 (unregistering): Released all slaves [ 1585.796476][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.883139][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.946828][ T3574] bond0 (unregistering): Released all slaves [ 1586.442541][ T3574] hsr_slave_0: left promiscuous mode [ 1586.482453][ T3574] hsr_slave_1: left promiscuous mode [ 1586.483371][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.514750][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.712723][ T3574] hsr_slave_0: left promiscuous mode [ 1586.732460][ T3574] hsr_slave_1: left promiscuous mode [ 1586.733094][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.785510][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.563348][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1587.723295][ T3574] team0 (unregistering): Port device team_slave_0 removed [ 1589.112964][ T3574] team0 (unregistering): Port device team_slave_1 removed [ 1589.263258][ T3574] team0 (unregistering): Port device team_slave_0 removed