last executing test programs: 13.458199133s ago: executing program 3 (id=376): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x228a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x4000033, r0, 0x6acfa000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000040)=0xbf) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="582f09fc010007000000000000006600000008000300", @ANYRES32=r4, @ANYBLOB="080026006c0900000800b70099000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) socket(0x10, 0x3, 0x6) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') read$FUSE(r8, &(0x7f0000005b00)={0x2020}, 0x2020) 13.335824596s ago: executing program 0 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0x0, 0x2}) ioctl$VT_RESIZE(r3, 0x5609, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) r7 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r7, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/20, 0x14}], 0x1, 0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 12.047744232s ago: executing program 0 (id=378): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0x0, 0x3}, 0x2}, 0x18) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3a, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_gettime(r2, &(0x7f0000000140)) timer_settime(r2, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r3) (async) keyctl$clear(0x7, r3) openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) keyctl$negate(0xd, r3, 0x100000001, r3) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x260800, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x260800, 0x0) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x8000) (async) r5 = open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x8000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r4, 0x8000000) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r4, 0x8000000) syz_io_uring_setup(0x34f3, &(0x7f0000000340)={0x0, 0xa3fd, 0x4, 0x0, 0x26, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)) (async) syz_io_uring_setup(0x34f3, &(0x7f0000000340)={0x0, 0xa3fd, 0x4, 0x0, 0x26, 0x0, r4}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x0, {0x0, r8}}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10, 0x400) (async) r10 = accept4$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10, 0x400) accept4(r10, &(0x7f0000000500)=@ethernet={0x0, @multicast}, &(0x7f0000000580)=0x80, 0x0) syz_open_dev$MSR(&(0x7f00000005c0), 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000005c0), 0x2, 0x0) recvmmsg(r10, &(0x7f0000003740)=[{{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/55, 0x37}], 0x3, &(0x7f0000000800)=""/118, 0x76}, 0x2}, {{&(0x7f0000000880)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000900)=""/254, 0xfe}], 0x1}, 0xafa4}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/77, 0x4d}, {&(0x7f0000000c00)=""/192, 0xc0}, {&(0x7f0000000cc0)=""/52, 0x34}], 0x5, &(0x7f0000000d80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001d80)=@caif, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/35, 0x23}, {&(0x7f0000001e40)=""/209, 0xd1}, {&(0x7f0000001f40)=""/78, 0x4e}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002000)=""/39, 0x27}, {&(0x7f0000002040)=""/7, 0x7}, {&(0x7f0000002080)=""/68, 0x44}, {&(0x7f0000002100)=""/37, 0x25}, {&(0x7f0000002140)=""/99, 0x63}, {&(0x7f00000021c0)=""/31, 0x1f}, {&(0x7f0000002200)=""/64, 0x40}], 0x7}, 0x1}, {{&(0x7f00000022c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002340)=""/125, 0x7d}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/43, 0x2b}, {&(0x7f0000003400)=""/194, 0xc2}], 0x4, &(0x7f0000003540)=""/117, 0x75}, 0x2782}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000035c0)=""/7, 0x7}], 0x1, &(0x7f0000003640)=""/229, 0xe5}, 0x4f672026}], 0x7, 0x10001, 0x0) keyctl$clear(0x7, r3) r12 = userfaultfd(0x800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003900), 0x40080, 0x0) (async) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003900), 0x40080, 0x0) ioctl$AUTOFS_IOC_READY(r13, 0x9360, 0x80000000) (async) ioctl$AUTOFS_IOC_READY(r13, 0x9360, 0x80000000) syz_io_uring_setup(0xc44, &(0x7f0000003940)={0x0, 0xfbbe, 0x6, 0x0, 0x343, 0x0, r4}, &(0x7f00000039c0), &(0x7f0000003a00)) ioctl$AUTOFS_IOC_CATATONIC(r11, 0x9362, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003b80)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd=r12, 0x3ff, &(0x7f0000003b40)="6fb1bbfc8eb1", 0x6, 0x4, 0x1, {0x0, r8}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003b80)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd=r12, 0x3ff, &(0x7f0000003b40)="6fb1bbfc8eb1", 0x6, 0x4, 0x1, {0x0, r8}}) 11.103725931s ago: executing program 4 (id=381): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=0x0], 0xfc}}, 0x4004004) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) write$sysctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x80000001}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x1, 0x81}, 0x9c) r5 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') ioctl$COMEDI_UNLOCK(r5, 0x6406) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 11.010823317s ago: executing program 0 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4104aec6, &(0x7f0000000380)={[{0x0, 0x6, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfb, 0xf4, 0xff, 0x0, 0x36, 0xfffffffffffffffc}, {0x31, 0x4, 0x7, 0x9, 0x6, 0xb, 0x4, 0x6, 0x9, 0x4, 0xe3, 0x10, 0xfffffffffffffffa}, {0x1, 0x8, 0x5a, 0x0, 0x2, 0x3, 0xaf, 0x7, 0xff, 0x6, 0x2, 0x5, 0xe}], 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xab49}, {0x6}]}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.835861155s ago: executing program 2 (id=384): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080028bd7000fddbdf2514000000500004804c00078008150300060000000800040005000000080002000000000008000400080000000800020003000000080002000700000008000300a1000000080004000a00000008000100140000000c00058007009d6669620000"], 0x70}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{'\x01\x00\x00\x00&'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_role}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 10.43699644s ago: executing program 2 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x10, &(0x7f0000019200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x5, 0xfffffffffffffff4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 10.29340663s ago: executing program 3 (id=386): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021"], 0x1c0}, 0x1, 0xba01}, 0x20048050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x49, 0xe, 0x0, 0xfffffffffffffff6) creat(&(0x7f0000001180)='./file0\x00', 0x8) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x3, 0x2}) 10.195960972s ago: executing program 2 (id=387): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x8000041, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000724be82516b5149c5ade3c5854fe9e16d0610ce2ed227580ce10564e814bcdc7f172e566f2757fe30caa4b694ec81b6e2e095ca08aca4c5950dec050eebf10ff31b4992833", @ANYRES16=r5, @ANYBLOB="010080000000fddbdf256600000008000300", @ANYRES32=r7, @ANYBLOB="0800b700690000000400b800"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bind$l2tp6(r1, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r10, 0x40187014, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 8.449743726s ago: executing program 2 (id=389): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x102) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40488d0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffb, 0x60082) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000300)={0xa0000000, 0x4, "6ff6ad4d49bf769c2fe25720ed5009622e709195057af5b6837b0b5f886643fa", 0x1, 0x2, 0x10000001, 0x8, 0x1, 0x87, 0x7fffffff, 0x0, [0xfffffffa, 0x10000, 0x1, 0x8]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast2, 0x15, 0x3, 'none\x00', 0x1, 0x4, 0x43}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x0, 0x12d5c, 0x12d5c}}, 0x44) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r6, 0x4, {0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x14, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x3]}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) syz_open_dev$hiddev(&(0x7f0000000100), 0x4, 0x4101) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090254000101000000090400000002060000052406000005240000000d496d941f9d28f19c00000000042413001524120000a317a88b045e4f01a607c0ffcb7e392a0905820200000000"], 0x0) 8.383895547s ago: executing program 3 (id=390): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x8801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r6) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x50}}, 0x85) 8.229926098s ago: executing program 0 (id=391): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905050200"], 0x0) 8.061448032s ago: executing program 4 (id=392): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"d7f0e6110c840ffa8f3fffe091eb339ede2c8d0ef20c52e7360ba30483b44864", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000003c0)={{r4}, "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"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000014c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x74, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4090}, 0x8011) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r1}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.739839439s ago: executing program 4 (id=393): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000020, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000080001090224000100000000090400000103000000092100000001220b00090581030000000000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "09a72734"}, @main, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b30000000000000000f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6924849e6098ed884e7cb51726b360fbb37b6fe034bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffd12}, {&(0x7f0000000040)="e1d4313b495283bdb83fb043a67a5e23"}, {&(0x7f00000002c0)="54c1ee4851c1d6ccd3be49c6a43997be020d8142d41acd5f82dd296c4fe48571b034b0d0c0c186b22ac7557fa53f020f80be950a87c577eee3d64c77569b01a8af33b356ab9b4fc9496cce90f65dc100265216fcdffc165d9b7bc3213a515cf38a8ceb0987b6a39d2bf8820cec5386c4020dbe2260735faee151e2ec1b57cdfd952973b09cb7a8639b0332be6f7677a57a22a7"}, {&(0x7f0000000540)="25d134f7ce589fad1e9c6b4946d3d774c02b253755ad8834aee2baf2d1f9e2d9ff957e2a53af"}, {&(0x7f0000000580)="a1692033a99dda4f0f7286eac91acae77e68b78cdd38a104d55ea9ed42cfacc4f9cb5d4e9744b01d10c2c26ecd022e06f120de5decfbf7c0b0caf61dba430d26b03aa372eaee15f2f45bc240187a41283600b76fc943cb3e81dd2b92f8a9d1b13b7d6331f6ffa68d9a560680cfc9bc09700212b7a8a4e5"}, {&(0x7f00000017c0)="b33e741480949fc02e0d88b5993ed8853d44026f0bd4c8fb44e9d67b0d2b40bd2f93aa6d0f320497c003d6ac714ce3ce3433bbb335c0e306ec0c93ea7cc2636dd54b956effdeb959bb3c8b926ac0e8cb052953962d5243765761e3997157c8228bc29acb4c1afc06956af31a213247b6ccd023f3a07cd57ba89c036c38619f8b48639d40cb39d2e6b41a657059ab256a45c77042d0ddf99ed2b20e7bc7f10b431ca80e0a2b93366987b5c8a25b680e09b02194a61ca08f3504ec91915c8d99bd30a9aeebb19ee731b9fc04fa16f01c669add75f2b7d61e574dd1648cab9374dfd947999939cf4095a5ccf6d8626e3f691ec31540cbf17be0aabe552ca475239c82cc39f3fa10cfaaea26e6bd06f268de890a4f55e9b2d0e813b1ca40f549827eff9c68f8499e2889e98d3a9851d9feff06f637e405ce35121902d7f17ad1cec1f8a182a038a77117b6bccd54712fed2ac355f1d4710e5e78eec6c4500a59a3be177d7fee97d6017629ae0d7ee83aa035f11cb9f88c4c414f1d9249ef307ecec379ee0a744f93066167b124b910d68c980e544ff0c7903cdfa4d77bd9cf088d774c32e3c810cd722211824fc6232a8d0f75db188481d10e5811fc7aeec72c9c06d808c142c5b80bd97cd8c4065288b3d013dd31e39a9459da02b3deddfaac6e46ba4a9fa96a58403e8bf66e3fdbba06fac9a3626380b737f721820598dd37cde8576093c105c5bdd82f42030649b438e50b4fce67faeb30ad07d721dd7db7bc5efb434d5c7b99ec735bfda0df32e9a444be1817a921809fe0f9b3d006d6d2b72a92ff9f0995404b984410017e7e1427d541c76a3fa9a8a983cf5f61b24d6078a169386a716910cf8d85767c5d8fe2dee1031aec8bc35fd1456000291aaa29f8cfc89c89c92a91e30152f43fbb3c144c03f634a14035329af26dfa9ca17c734362e3a3c24fcf81eaf81c3069e699b8d392a09fc8111a5443c984f41bc01deb4d19d210a6649e7ed7a3c304179b210fe269d6fbfb61be9a34b4757f45fd68f113fb33b01efd1c6c7a0ef5682338892016b40e2b8d6f8663f612f099713530e6fe22a3d8ad8ef7b721bfade9246000eb417d0aeb07af6295fac2c5c1d45f93e272688eb93b8006e21deaaa0cd238cd991e563c703605339af13945bf894b73a6c97e8c58b15078611544adef8c3375153cd5eda8406afb1121f6579a3ca5f3a1b1aaa17abb644f785394a9b51d68a5b53e01acb88d532339f9e23e4fb671a71161dd7e6b13352aece9bbd29b987bf4a829ffc500808f975fa3fd042ae5b98c0ad544a479d4d9e7a64a50af3a4f0dd0699d07b7d478345d2ef9d8bee081733f3d76eb0f1f8e60e71bcb6d78917304fabd203e358b0833b0e0cef5350df4481af0d25c57e1704af5c4fb9b669a3856d3f489224f83a1e68d594c1fe57041f341179763e6f1f39d3df88608953f5f9460bdf573fdbb5c2f5f050f33bc28d8ec8d9df11a85cb2ecc686e6e769a8ac826e846b38546c09cd61460bc209e88eacce43cdfd9a1db1aa05e73d87c2fb4fe640679a19322eebb3208b05936c7b287696a42fe9336816a462fb8e951395aa085592b87bcfa70e2b55080265a6ccb939a2061143945f91409ed0fad54dfde2fe95b4c5620f6951534b5c9cce26fa3a26e4eabd2bbfe650916d0e3f8e80d05a963ceb4e0160c0fb87e8291291ab011ed9c6d480a073f2146e2452cbb7f4f3b3e10561d1f7a06fbaa52c0b9612b6da1ab1d2df28de9dabf5433c494e120e974c8305c67f4c991f821a57d8fb76996023bb5c917566dc612d270687752694f4f56dbab14a93703af020ef281c20afdb1007d80add6c784a41ffbae37a9d337d3c3f9fb7006c816802dec669d22e4f6e0873018fc41e73665bdb9438f6eb188c2c173edfbf0ee042e4ba0045586c915a1ea2f4a049c446bd07cb2e92a6f071fec138855acc0097f3e30ccdb2a7aaf130dba3368cc94157636f1e8976e6ad0673e0360343eb850aa7bff47a3de49f313692aa29024cbe278a7e58e96ca0d79d2fbd617848a81c0643ecf0427f1d9508249ab9c057f5f8191c77408f6d526d3cfcd799352ac4ab6bfcd75691b3e0ff9ce06ace622b7fb9de51a31d43ea97434c7051c9fc657f152ea5b4eec936891e54bcf2e553b31ac984365d2094cc8e067a4e6100c1e671f0e423e47309e6150114ad0c395192200b957920fea2abdef3a9b70b6fa3aa1ec0c538cd7cfdb7c2cdfe02b1bdeeacdcc5ea986cb23b16239887e2f365b25a21e916ad74c4b138fae5422cab5028a845ed7dff8cc89998a5d1b0975364aec407899ffc700dcb8f95d2b2ff7d8a02547c645d5ad0a993a49a11439db34a27a1c51dbd5120c0548548e0859510be79d1318592cc41c5dbb7c5b78a712cd311c31b7eed133daed3ef000d52b5965415a831db741ce84ffbd114312ab22cf05c88c3c5af2737cc5881d30929e626899f466e58fb0d4d66279c992eed8feef083378d7f132fb4ee79e0a8ce3d769746a4b9912f0b7f4711ecf8c509febf432fc0a1b48b8a8fbe3549a76e2917891837e55296e5e3088208c5c59e1a04c89e119b3389c06b502e4cfa48be95cdc478ee3edc78ac7cba8c09b64bd9c1554a95c7845de975d57cb2b49b368cbcf8bbae4ff737c0fe4a33d47b4c365f9fea378a5611734bc6287e207be0b5b945acd09f2b6f8c307fc3d1fc3ae1361cc94fff3f1d3112b10dcc6029971365c2e98f5c10b4c9ebb03874093cc4f94b70516ca1bc4f8e38d021c88786520b24146701a91411835b87622be4ee6c417aef720c13fe2baed1a8c9cf5729a602a37c05720665638d15ca2b290e35c1433f2ee97d0a2c39cd8adb7900bb01c7941c3bca65803a17f2cff5a4f991889e5b2ab845edfae80f9f5cc5a762e87f89810a9ddd3e99791387b699dda7f1c04da29c049b25ef224d52a9fe02e2ba5f23cca6c53afa6f96f03d0aed58221e7d7237918c0b062f9e7553ade1a752219945404f6a3e8e582ff97aaf176dac329d4781293d06fb69cc70367928a5223ea6de615137643cf670ebf8318ee14f496cd317bfa9630cb83042d58e4cf5b8914ef9f2a3f41adc01bd1dba1dd8ab96292264bd46fe5adc72b1c31eebd4c6e5e8cdedfdf430b27e1801e4f7d4165e1155401feaa105d4fe650dc2e59ae5176eabe2a9ebd75d9261799df0702b4606149000cd4a9cb4cf9325409d054233777c59ce9a568c1fb47e8dc8a60b0f007e355270dd7f69c3b63b92534bdb1e4ed2c837305c7d5b381b0b844f0db7c12839b45b387b6a954bb88f6b99c59c5b7c38f4dfce18cf85953e815c68c193c102f910202086c055d5b2cae9601a37ca8a0077d6fcf752d06fc9719d66432ef4dced269933864e054958edc187e09b2f3a91fd6a77d6feef52448013a1a1c2cd5f0bada4477ca40f6b3c2ccb080c1f7201fa416d96671bd645672785a67f1f4e2ac9b034ab0535cc75595571c9317b9383be1858edcd9b49f3f7167ac2b8fadfea1f0aba640a144d841afa086e1358439a4ecc41c120c5a3f6a2a59d906d4f261aa8f95ae6c3d008a09d91a096df03312902764e3724231d86341bb3ea0a78c57aa780b91ec7e5c6ed7c563add46deeb20d8f5bbb47c0183c0d56f5fa3e6a752707ab7a69381d75ccd342ef9affdef508ae790edf13b2ed6aabdcef4cf16eb6676a5473aa10147fe6f0238bd96264c7f3a13a411e7c492fc104b32f4f152ea2d7f7392006558221b265dc469acf59fe49c4fd5a622c480dbd287f256d50fa734fcd293bda82a73037a8833b261044bb0d031c60cd80423694a65abc3cb45170cca2408ceefce08a7d15b96b60afa2d00f58ceb4989eb449ffaf3a1756b43e093013fe0a5906ee6c840ff60d2eaf92213750c5db198d56b5bb1b1016af46654d724d9983924e8e07f07036ad5d065eb9c1bc34a4844d967c4138caf4ebe40ecebdccf3b98a2e46b217852b6dd76f8e65d8c50904e970cbc16896b84681fc51af539423e45db9f2d0758cf4a6d2299718c79df26aa408f6934ff3ebdccfa20192566af87a1ab4bd7d3a64dd30f81d4591eedf2ff05d4f79d57a2ed80015391355ced7f6624ff572e66b25bdd9630dc71390037bad26ce2a35a2621d2036754c6b82e509b0e118d69cc8461e38c2c715b237df1b251d677a008320bd4ac7404c55eb9e061e6839869f91c055f0bddf30f910d420b05b632ae687152e8fcf939ef09fe1c162ecfc7e09de8e8b52965f6631b24fe9a688c9f4e391cd1030274bdc6812f22a0952e3cd4d697de8c197703d856c176472ea040cf35d62e990154ffa41665dbf7e54d7a95dd2d78fe687039e470a9e51829563e3e6f188edd798671c8c07c971b0458bb5a30318373f27b7808b53405940f76a13323ba0e5cdaca71bf8c35732a0d6e108809c280df449c0d514227dcedcec5de695e17b1f1cd0a0a99d3c66eac0dddcabe8ad409186d48228c5625e33b1a90f0eaef4c11bb817cd83ee1a3b7de4e64343f709e451b820156a551afcf3e9c494054047a5356a29307d7d1c8b53c53631e660f1a7ab96ac2b0740f625df249ab26848a445efa506ec8107f14af42605dd84dc4c635cc85f2992e8b49c3b238e35093c315eb3f9a391d3b6fedc8bc4282ff92c8b140837416c07e96c2e52f78a941a61f4c3392475e9e10927aca3526eca8e8a0816ce4940b71f09993411571c0921a90d0ceee59ac50cce5a08a9ab8884d067f5e8951c872b8954dccca48a3d9c4070bf142ee6858c05f3d9ecc3eb8e867103a2724d43d30b61ddb4f7fbb7ed6d5e4ab9661df9d9588e93e01636590b330ffd1a0de9f78c5f058263456bd431a89e147e6686128326317c598543916b9ce0843be867ede2aee64b8c0ca622eddcd793ebf5c1205b22a7c0bf12760e9e81123fa425d52d886fc16b5d4b7cb114af07618fcaa7c1d0bf80d617ed872f1a0d98d36e621e53b2cdff120a6df81af43013273e6a84933dac9414cdbe4d1d3b64d1d2824f9675c0b9430a961a01a82ba32f7d4d495ecf778ec1f288734dba311034ac2249b4f703a5e2f2de475dfeb698b1169f36a69edcdfa7bfeb5b96fe539b130037985f854501f7bf1e44af31747d6861350618bd6763949b4707d5f76e0be9a9eea7d5c657c311710a3d5eaeef9b79cf668c026392ce4dc73a7475508f97cb3021484da5fc77a098313198ccbcee19018507e5825ea9ec0c4bd4f5b15fe64ca12cb5a6adca03b184bcb2c53afb7ece1c2420b61495fda7a9a2bfad7c04f55d73bcf9ea0ae13136c93e8eef636b8416f3bbc342a5cd310cfdd2470c598dc097b4a120507c43f885e3354b9e313f29bc8d95891b352135bc194d8851de5e38281c0b9023a4a8a801af10c0a811b141a41977b8babfa53d366095e9df37d911032025f9df0bfb7eceb7186897e86c9a58d8f111eebae385add43cd36e62dc3a75fd79fbff06c76fc75c5c277e25335dd7445eeb92021618b8f59ba908d7606eaaf4763d3d5a2a6e4d01ca99ff608c886ddd6d28cc4aaf38cd391eae90cd787e2582e635d5431ab2d8e6fc4ccc925ab041d83d102de86a0945fba1dadd21518d560fe91b246caee8fdc9d8f05f334d9f560cb55b9b2c3acff78a71809e54c16d82718e7263891ff6db5ca09e769aea624016dad9f2c3636fc416e074e7fa967a813101a5bbce05d3b36f433e1b3d012bd4161b2733d3a27574de6878dc0acd1fadf776fc77fde407804926f3aa3fba35cc1312cdb17ec64f69c1c287cf"}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401b2800c00180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc040) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0), &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x9}, 0x94) 5.65993829s ago: executing program 1 (id=396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @p_u8=&(0x7f0000000200)=0xc}}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(r1, 0x409, 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff, 0x308}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040490}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='net/hci\x00') epoll_pwait(r8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x6, 0x5, &(0x7f00000005c0)={[0x1]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000011d6b4ed59a19f1600010027bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 5.605746235s ago: executing program 0 (id=397): syz_open_dev$sndctrl(&(0x7f0000002800), 0x1f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x85}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x4c}}, 0x40000) 5.156568898s ago: executing program 3 (id=398): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000080)={0x2, @short={0x2, 0x1, 0xffff}}, 0x31) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x18) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x439ac2, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0x5}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000140)=[':#,\x00'], 0x4}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x400, @none, 0x0, 0x1}, 0xe) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) 4.763689308s ago: executing program 1 (id=399): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) getpid() socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @remote, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) 3.696021574s ago: executing program 3 (id=400): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x10) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.523933074s ago: executing program 1 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x90, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1ff, 0x8000000000000000, 0x3, 0x5, 0x8}, &(0x7f0000000200)={0x4, 0xfffffffffffffffe, 0x1, 0x5, 0x7, 0x6, 0x3, 0x8}, &(0x7f0000000280)={0xc, 0x5e, 0x7, 0x8956, 0x4, 0x800, 0x1, 0xffffffffffff8000}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000300)={[0x8000]}, 0x8}) ioprio_set$uid(0x3, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2.523284637s ago: executing program 3 (id=402): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) getuid() getuid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000400), 0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e6", 0xed) r5 = syz_genetlink_get_family_id$nl802154(0x0, r3) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x90) r8 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) fallocate(r8, 0x3, 0x9100, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x34, r10, 0x2, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000080)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r11, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) r12 = syz_open_dev$I2C(0x0, 0x1, 0x402) syz_usb_control_io(r11, 0x0, 0x0) readv(r12, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000041}, 0x44880) tee(r0, r2, 0x10001, 0x1) 2.328508143s ago: executing program 1 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="02"], 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2.00599679s ago: executing program 1 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000480, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.6919111s ago: executing program 4 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) getgid() r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000000)={0x2, 0x0, 0x2023, 0x1, 0x0, {0x8}, 0x1}) fcntl$setlease(r4, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.661348933s ago: executing program 1 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a00000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0x7, 0xb, 0x0, 0x80, 0x10}, @alu={0x4, 0x0, 0x3, 0x9, 0x2, 0x1, 0x10}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 1.396792918s ago: executing program 2 (id=407): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000c31a040000000007000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x8040600) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x34, &(0x7f0000000140)={0x0, 0x0}, 0x10) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x3, @win={{0x0, 0x9, 0xe46, 0xe}, 0x0, 0xc0000, 0x0, 0x2, 0x0, 0x7f}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x28, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES64=r4, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r5, 0x0, 0xb9b}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x0, 0x0}) 371.101393ms ago: executing program 4 (id=408): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="a3000000d4fd218446beb15518e72f77e427014bc608bc964779892b7f664a3fddb976301bbd8aef6e23c5a8cb0d953132", @ANYRESDEC=r0, @ANYBLOB="01002abd7000fedbdf25250000000c009900ff7f00000a0000000800a100090000000800220117010000080026006c0900000800a00002000000050019010a0000000800a000000000000800270003000000050018011c000000050018013500000008002201bc00000008002700000000000c006e800400010004000100090007007d5823f4c200000010006e800400010004000200040002000800370002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x2004c0c4) 150.747289ms ago: executing program 0 (id=409): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), 0x10) setsockopt$sock_int(r1, 0x1, 0x3, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000fff704000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffbc02000000000000b703000000000000850000007300000018afde4924dd6c8e4e84468900ac962adc5026216fe8b884044ab5b0bbbddf555a580cd6c0bcc1a4807bc9fec862dcd59befcd3f483c47b36e10d117db8947b2b6a9471c92d37d58e271dca7ded23250dfe51bce9e88", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdd2, &(0x7f00000006c0), 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa069c49d}, 0x50) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r5, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000180)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) openat$incfs(0xffffffffffffffff, 0x0, 0x2100c0, 0x140) pwritev2(r2, &(0x7f00000001c0), 0x176, 0x9, 0x200, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) 129.997574ms ago: executing program 4 (id=410): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9400000044000701fcffffff00000000017c0000800004807a001280a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28b4b4513d200e3c56c2dfd37d0f42fb34dc316d5a7f005f6bfe5993e5c04528fba03ac92ee6ed1d968a7554517590de2c19000000000e00de80d3915f12712a643d496600000000a495dc9a3ddbc372833ea48443fa3f2e3d61bf119629e40aafe9b6a58c49cf6624b98af030789fa41786cff8bbb4216ac968590dcdb0378ac465087885d553"], 0x94}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept(r0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x4, 0x5, 0x49, 0x3ff, 0x5, 0x156, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x401, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x1, 0x4, 0x2, 0xcdc, 0x8, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x100000000000004, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb0, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) 0s ago: executing program 2 (id=411): syz_emit_ethernet(0x4e, &(0x7f0000000bc0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xb, 0x3ff, @empty}}}}}}, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="360656bc1ffd96e1a0b9d4da089fdeb2e143f0f43cfa330a6bde1ef4242a867eb90b3daf96690da10c05fd66fe26585325b519ba5d42c73acba53edfd4760ad72eda41a57ff0a89bd38d90f999a9374a7d7b64c83417e75d478cfc6bd89862518f3cc993d4298b766405ed", 0x6b}, {&(0x7f0000000200)="53d41f87516c3965994a44cce12735031583df7fc4e9b3709eb4661e9babb1d469e0f77c39a4e5beabf27a680f385ef101102a94e790a54bb45d3b089cd0dde1becffb7e219ab6c8d0acceeb04214b947078d30ef1d3b67648bf4cc4c43167722605e61bc0b9d27cd4bf39d9f567907d9b5ff850484cf3ad7b1e38de504c85acb7e61b76d9fc4dab5b1557f08b6bde83ccf1c69428f3604614", 0x99}], 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb) (async) r2 = epoll_create(0x10000e9) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) (async) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x30000009}) (async) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2085}}) (async) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)) kernel console output (not intermixed with test programs): ace will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.509495][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.520535][ T51] Bluetooth: hci1: command tx timeout [ 87.546170][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.610621][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.618394][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.625651][ T5849] bridge_slave_0: entered allmulticast mode [ 87.633971][ T5849] bridge_slave_0: entered promiscuous mode [ 87.703922][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.711238][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.719781][ T5846] bridge_slave_0: entered allmulticast mode [ 87.727025][ T5846] bridge_slave_0: entered promiscuous mode [ 87.734583][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.744920][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.752160][ T5849] bridge_slave_1: entered allmulticast mode [ 87.760289][ T5849] bridge_slave_1: entered promiscuous mode [ 87.772171][ T5842] hsr_slave_0: entered promiscuous mode [ 87.779977][ T5842] hsr_slave_1: entered promiscuous mode [ 87.786171][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.794050][ T5842] Cannot create hsr debugfs directory [ 87.815222][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.822539][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.830026][ T5846] bridge_slave_1: entered allmulticast mode [ 87.837219][ T5846] bridge_slave_1: entered promiscuous mode [ 87.847819][ T51] Bluetooth: hci2: command tx timeout [ 87.918175][ T51] Bluetooth: hci3: command tx timeout [ 87.928415][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.942064][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.989708][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.007906][ T51] Bluetooth: hci4: command tx timeout [ 88.052362][ T5849] team0: Port device team_slave_0 added [ 88.066340][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.120591][ T5849] team0: Port device team_slave_1 added [ 88.129624][ T5846] team0: Port device team_slave_0 added [ 88.168041][ T5846] team0: Port device team_slave_1 added [ 88.200616][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.208312][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.215510][ T5852] bridge_slave_0: entered allmulticast mode [ 88.223102][ T5852] bridge_slave_0: entered promiscuous mode [ 88.230669][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.246242][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.288921][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.296075][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.303764][ T5852] bridge_slave_1: entered allmulticast mode [ 88.314075][ T5852] bridge_slave_1: entered promiscuous mode [ 88.321103][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.354323][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.361507][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.388128][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.426958][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.444929][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.451986][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.478711][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.490568][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.498093][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.524084][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.544966][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.575841][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.583305][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.609359][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.632041][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.769622][ T5849] hsr_slave_0: entered promiscuous mode [ 88.776293][ T5849] hsr_slave_1: entered promiscuous mode [ 88.783189][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.791572][ T5849] Cannot create hsr debugfs directory [ 88.801081][ T5852] team0: Port device team_slave_0 added [ 88.813934][ T5846] hsr_slave_0: entered promiscuous mode [ 88.820351][ T5846] hsr_slave_1: entered promiscuous mode [ 88.826473][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.834149][ T5846] Cannot create hsr debugfs directory [ 88.866265][ T5852] team0: Port device team_slave_1 added [ 88.941942][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.949087][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.975492][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.022488][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.029797][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.056913][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.188406][ T5852] hsr_slave_0: entered promiscuous mode [ 89.194935][ T5852] hsr_slave_1: entered promiscuous mode [ 89.200570][ T51] Bluetooth: hci0: command tx timeout [ 89.207012][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.215773][ T5852] Cannot create hsr debugfs directory [ 89.224348][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.242648][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.291531][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.306198][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.597908][ T51] Bluetooth: hci1: command tx timeout [ 89.614584][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.633441][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.644872][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.669033][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.681914][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.751208][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.786359][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.793703][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.811814][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.836118][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.863464][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.870655][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.883171][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.895931][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.917775][ T51] Bluetooth: hci2: command tx timeout [ 89.998507][ T51] Bluetooth: hci3: command tx timeout [ 90.020200][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.069608][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.077746][ T51] Bluetooth: hci4: command tx timeout [ 90.095490][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.131108][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.185766][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.213738][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.281535][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.295123][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.302299][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.331680][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.347230][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.354480][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.396778][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.426326][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.433537][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.492674][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.499923][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.552891][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.592823][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.599986][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.625454][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.632616][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.692566][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.873732][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.003207][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.053687][ T5836] veth0_vlan: entered promiscuous mode [ 91.079007][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.086185][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.117139][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.124403][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.165339][ T5836] veth1_vlan: entered promiscuous mode [ 91.222581][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.280107][ T51] Bluetooth: hci0: command tx timeout [ 91.289163][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.299820][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.405630][ T5836] veth0_macvtap: entered promiscuous mode [ 91.458959][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.473041][ T5836] veth1_macvtap: entered promiscuous mode [ 91.500764][ T5842] veth0_vlan: entered promiscuous mode [ 91.549401][ T5842] veth1_vlan: entered promiscuous mode [ 91.569608][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.590324][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.622006][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.654799][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.666851][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675942][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.686908][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.687793][ T51] Bluetooth: hci1: command tx timeout [ 91.773810][ T5842] veth0_macvtap: entered promiscuous mode [ 91.802825][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.844721][ T5849] veth0_vlan: entered promiscuous mode [ 91.853502][ T5846] veth0_vlan: entered promiscuous mode [ 91.866069][ T5842] veth1_macvtap: entered promiscuous mode [ 91.923458][ T5846] veth1_vlan: entered promiscuous mode [ 91.952899][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.986421][ T5849] veth1_vlan: entered promiscuous mode [ 91.998073][ T51] Bluetooth: hci2: command tx timeout [ 92.008105][ T3093] cfg80211: failed to load regulatory.db [ 92.017046][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.037166][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055047][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.064708][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.076731][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088938][ T51] Bluetooth: hci3: command tx timeout [ 92.116549][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.154896][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.170059][ T51] Bluetooth: hci4: command tx timeout [ 92.310348][ T5849] veth0_macvtap: entered promiscuous mode [ 92.321931][ T5846] veth0_macvtap: entered promiscuous mode [ 92.331526][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.339940][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.378445][ T5846] veth1_macvtap: entered promiscuous mode [ 92.385978][ T5849] veth1_macvtap: entered promiscuous mode [ 92.479531][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.491125][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.506225][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.523152][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.526169][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.548622][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.576061][ T5852] veth0_vlan: entered promiscuous mode [ 92.595076][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.629493][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.668420][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.677205][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.719378][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748315][ T5852] veth1_vlan: entered promiscuous mode [ 92.770591][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.785347][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794359][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.807096][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.821064][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831122][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911501][ T5852] veth0_macvtap: entered promiscuous mode [ 93.018199][ T5852] veth1_macvtap: entered promiscuous mode [ 93.089377][ T5886] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.104620][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.120419][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.134664][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.146264][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.150327][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.230921][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.260581][ T5886] usb 1-1: device descriptor read/64, error -71 [ 93.274631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.288182][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.309597][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.323965][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334337][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.347176][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.357909][ T51] Bluetooth: hci0: command tx timeout [ 93.423155][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.436563][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518348][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.646861][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.650199][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.694896][ T5886] usb 1-1: device descriptor read/64, error -71 [ 93.743930][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.758207][ T51] Bluetooth: hci1: command tx timeout [ 93.802004][ T30] audit: type=1800 audit(1751984545.880:2): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 93.830819][ T5886] usb usb1-port1: attempt power cycle [ 93.903475][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.938229][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.078408][ T51] Bluetooth: hci2: command tx timeout [ 94.108114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.151638][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.163407][ T51] Bluetooth: hci3: command tx timeout [ 94.197743][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.238124][ T51] Bluetooth: hci4: command tx timeout [ 94.247207][ T5886] usb 1-1: device descriptor read/8, error -71 [ 94.306590][ T5974] mmap: syz.1.8 (5974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.350680][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.362397][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.384581][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.388033][ T5921] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 94.441837][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.467718][ T5948] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.477771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.507644][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.540433][ T5921] usb 4-1: config 0 descriptor?? [ 94.554083][ T5886] usb 1-1: device descriptor read/8, error -71 [ 94.638706][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 94.648249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.672783][ T5948] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.688656][ T5886] usb usb1-port1: unable to enumerate USB device [ 94.697097][ T5948] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.725319][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 94.744600][ T5948] usb 3-1: config 1 has no interface number 0 [ 94.752244][ T5948] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.777552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.818739][ T5948] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 94.844217][ T5948] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 94.862905][ T5948] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.872824][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.915732][ T5967] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 94.991106][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 94.995895][ T5948] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 95.022283][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 95.069364][ T5921] usb 4-1: USB disconnect, device number 2 [ 95.087825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.225517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.338044][ T5987] warning: `syz.4.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.526926][ T5948] snd_usb_pod 3-1:1.1: set_interface failed [ 95.562280][ T5948] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 95.571911][ T5948] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 95.587854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.641774][ T5948] usb 3-1: USB disconnect, device number 2 [ 95.868709][ T5993] Zero length message leads to an empty skb [ 96.008054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.027958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.203051][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 96.264570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.369409][ T6003] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 96.392352][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.408462][ T6003] bridge_slave_1: left allmulticast mode [ 96.414239][ T6003] bridge_slave_1: left promiscuous mode [ 96.421549][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.801062][ T6009] binder: 5996:6009 ioctl c0306201 200000000480 returned -14 [ 96.854511][ T6003] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 97.198893][ T51] Bluetooth: hci4: command tx timeout [ 97.273998][ T6014] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 98.235745][ T6023] ======================================================= [ 98.235745][ T6023] WARNING: The mand mount option has been deprecated and [ 98.235745][ T6023] and is ignored by this kernel. Remove the mand [ 98.235745][ T6023] option from the mount to silence this warning. [ 98.235745][ T6023] ======================================================= [ 98.293328][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21'. [ 98.303721][ T890] kernel write not supported for file /18/attr/exec (pid: 890 comm: kworker/0:2) [ 98.418553][ T6027] bond0: invalid ARP target 0.0.0.0 specified for addition [ 98.426095][ T6027] bond0: option arp_ip_target: invalid value (0) [ 98.448199][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'. [ 98.518454][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'. [ 98.527427][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'. [ 99.310938][ T6056] syz.4.26: attempt to access beyond end of device [ 99.310938][ T6056] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 99.324024][ T6056] EXT4-fs (nbd4): unable to read superblock [ 100.339853][ T6067] syz.4.32: attempt to access beyond end of device [ 100.339853][ T6067] nbd4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 100.474089][ T5921] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 100.595878][ T5894] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.650398][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.665054][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 100.754211][ T5894] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.763803][ T5894] usb 4-1: config 0 has no interface number 0 [ 100.775441][ T5894] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 100.794390][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.803248][ T5894] usb 4-1: Product: syz [ 100.807457][ T5894] usb 4-1: Manufacturer: syz [ 100.816425][ T5894] usb 4-1: SerialNumber: syz [ 100.831366][ T5894] usb 4-1: config 0 descriptor?? [ 100.862502][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.887598][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 101.464934][ T30] audit: type=1107 audit(1751984553.540:3): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='æ9“C<Í EC‚ÚÝä){óTn‘°v²œA­"¿f(ÝtàÌ"Ä{L‹ÚÙŸ#üÏŬ[ë'gfŸoº¤Çhmm‰ž¡_“L‚FÐ"ñ²sM~åU+ŠÁð ú@Ö4l8zÞøøZü,£I+[3­:1Åþå:ŽÔZWìçzÿƒ±qÝ|ˆÜ—È Æ ' [ 101.469718][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.631068][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.640809][ T5921] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.649167][ T5921] usb 1-1: Manufacturer: syz [ 101.684250][ T5921] usb 1-1: config 0 descriptor?? [ 101.918103][ T5894] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 102.004772][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.017201][ T5921] rc_core: IR keymap rc-hauppauge not found [ 102.038783][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 102.071574][ T6083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 102.099351][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.126691][ T5921] Registered IR keymap rc-empty [ 102.241292][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.628221][ T5847] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 102.677627][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 102.683358][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 102.693148][ T5894] usb 4-1: USB disconnect, device number 3 [ 103.215506][ T5847] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 104.498846][ T5847] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 104.508261][ T43] usb 5-1: device descriptor read/all, error -71 [ 104.514725][ T5847] usb 2-1: config 128 has no interface number 0 [ 104.523487][ T5921] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 104.536625][ T5847] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 104.548485][ T5847] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.560838][ T5847] usb 2-1: config 128 interface 127 has no altsetting 0 [ 104.571796][ T5847] usb 2-1: string descriptor 0 read error: -71 [ 104.578240][ T5847] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 104.587364][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.631321][ T5921] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 104.718463][ T5847] usb 2-1: can't set config #128, error -71 [ 104.758151][ T5847] usb 2-1: USB disconnect, device number 2 [ 104.781235][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.837057][ T6099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.867592][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.890542][ T6101] fuseblk: Bad value for 'fd' [ 104.898685][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 104.989893][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 105.013205][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.212087][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.237679][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.287752][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.407777][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.459304][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.488571][ T5921] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 105.524542][ T5921] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.544697][ T5921] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.582446][ T5921] usb 1-1: USB disconnect, device number 6 [ 105.867745][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.043914][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 106.110862][ T5847] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 106.128004][ T5847] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 106.145094][ T5847] usb 3-1: can't read configurations, error -61 [ 106.614695][ T5847] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.771673][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 107.835800][ T5847] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 107.881898][ T5847] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.892162][ T5847] usb 3-1: can't read configurations, error -61 [ 107.925383][ T5847] usb usb3-port1: attempt power cycle [ 108.267657][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.340266][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 108.355058][ T5847] usb 3-1: too many configurations: 167, using maximum allowed: 8 [ 108.409131][ T5847] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.416763][ T5847] usb 3-1: can't read configurations, error -71 [ 108.616071][ T6153] fuse: Unknown parameter 'blMsize¹‰5Üc' [ 108.707623][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.917720][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 108.930704][ T5921] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 108.955111][ T5921] usb 2-1: config 0 has no interface number 0 [ 109.023517][ T5921] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 109.038547][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.057116][ T5921] usb 2-1: Product: syz [ 109.063687][ T5921] usb 2-1: Manufacturer: syz [ 109.104551][ T5921] usb 2-1: SerialNumber: syz [ 109.171859][ T5921] usb 2-1: config 0 descriptor?? [ 109.210162][ T5921] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 109.387688][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.550909][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 109.585361][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.611098][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 109.638113][ T5847] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.656817][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 109.698885][ T5847] usb 3-1: Using ep0 maxpacket: 16 [ 109.709133][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.711402][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 109.724142][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.739574][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.753910][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.765738][ T5847] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.783594][ T5921] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 109.793300][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.803781][ T5894] usb 5-1: config 0 descriptor?? [ 109.818720][ T5921] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 109.830753][ T6164] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 109.834943][ T5847] usb 3-1: config 0 descriptor?? [ 109.863704][ T5894] hub 5-1:0.0: USB hub found [ 109.959930][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 109.969243][ T5921] usb 2-1: USB disconnect, device number 3 [ 110.012271][ T5921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 110.069888][ T5894] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 110.079197][ T5921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 110.185495][ T5921] quatech2 2-1:0.51: device disconnected [ 110.266672][ T6162] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.418477][ T6162] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 110.543830][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.808605][ T5847] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 110.865083][ T5847] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 111.052016][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 111.263696][ T43] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 111.289897][ T43] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.340286][ T5847] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 111.361909][ T5894] usbhid 5-1:0.0: can't add hid device: -71 [ 111.365977][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.375887][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.409552][ T5894] usb 5-1: USB disconnect, device number 4 [ 111.425504][ T5847] microsoft 0003:045E:07DA.0001: no inputs found [ 111.454371][ T43] usb 1-1: New USB device found, idVendor=1477, idProduct=fb24, bcdDevice= 0.5d [ 111.486381][ T5847] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 111.495299][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.534288][ T5847] usb 3-1: USB disconnect, device number 6 [ 111.559428][ T43] usb 1-1: config 0 descriptor?? [ 112.547155][ T6200] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 112.555116][ T6200] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.65'. [ 113.109899][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.123726][ T6192] fido_id[6192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 113.158338][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.314630][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 113.343369][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.398835][ T43] usb 1-1: USB disconnect, device number 7 [ 113.412999][ T6209] dvmrp0: entered allmulticast mode [ 113.488361][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.662100][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 113.680257][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 113.701175][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25871, setting to 1024 [ 113.718283][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.727852][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.749081][ T5847] usb 2-1: config 0 descriptor?? [ 113.776664][ T6205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 113.802067][ T5847] hub 2-1:0.0: USB hub found [ 114.098682][ T5847] hub 2-1:0.0: 1 port detected [ 114.199805][ T6219] /dev/nullb0: Can't open blockdev [ 114.288613][ T5948] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.379869][ T5894] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.579977][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 114.614613][ T5894] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 114.644226][ T5894] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.670122][ T5894] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.677270][ T5894] usb 1-1: New USB device found, idVendor=1477, idProduct=fb24, bcdDevice= 0.5d [ 114.711297][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.754249][ T5894] usb 1-1: config 0 descriptor?? [ 114.810688][ T30] audit: type=1326 audit(1751984566.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.2.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x0 [ 114.893297][ T6234] hugetlbfs: syz.2.76 (6234): Using mlock ulimits for SHM_HUGETLB is obsolete [ 115.009946][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.027823][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.137809][ T890] usb 2-1: USB disconnect, device number 4 [ 115.204423][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 115.244712][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.314985][ T5894] usb 1-1: USB disconnect, device number 8 [ 115.929627][ T6239] netlink: 'syz.1.78': attribute type 2 has an invalid length. [ 115.937945][ T6239] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.78'. [ 116.668081][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.696197][ T6248] netlink: 'syz.1.80': attribute type 39 has an invalid length. [ 116.928720][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.945798][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 116.997613][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.010975][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.024119][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.036533][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 117.050710][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 117.070830][ T43] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 117.081063][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.427065][ T43] usb 1-1: Product: syz [ 117.432750][ T43] usb 1-1: Manufacturer: syz [ 117.438007][ T43] usb 1-1: SerialNumber: syz [ 117.458022][ T43] usb 1-1: config 0 descriptor?? [ 117.566288][ T6263] syz.1.83: attempt to access beyond end of device [ 117.566288][ T6263] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 117.580319][ T6263] qnx6: unable to read the first superblock [ 117.591345][ T6263] syz.1.83: attempt to access beyond end of device [ 117.591345][ T6263] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 117.611030][ T6263] qnx6: unable to read the first superblock [ 117.617265][ T6263] qnx6: unable to read the first superblock [ 118.003547][ T6264] process 'syz.4.85' launched './file2' with NULL argv: empty string added [ 118.055800][ T6264] fuse: Bad value for 'user_id' [ 118.060904][ T6264] fuse: Bad value for 'user_id' [ 118.082941][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.127788][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 118.144410][ T24] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 118.154626][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.164323][ T24] usb 4-1: Product: syz [ 118.249882][ T24] usb 4-1: Manufacturer: syz [ 118.254691][ T24] usb 4-1: SerialNumber: syz [ 118.297607][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 118.304386][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.320002][ T24] usb 4-1: config 0 descriptor?? [ 118.356082][ T5847] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.381909][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 118.415574][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.456928][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.473643][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.493074][ T5847] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.539176][ T5847] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.574037][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.815640][ T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 118.823406][ T24] sq905 4-1:0.0: probe with driver sq905 failed with error -32 [ 118.833908][ T5847] usb 3-1: GET_CAPABILITIES returned 0 [ 118.841871][ T5847] usbtmc 3-1:16.0: can't read capabilities [ 118.850471][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.928813][ T6268] netlink: 'syz.4.86': attribute type 10 has an invalid length. [ 118.995975][ T6268] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.041553][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.053575][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.062711][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.071809][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.084491][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.093646][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.102777][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.123745][ T43] usb 1-1: ucan: probing device on interface #0 [ 119.123971][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.145056][ T43] usb 1-1: ucan: invalid endpoint configuration [ 119.161686][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.167284][ T43] usb 1-1: ucan: probe failed; try to update the device firmware [ 119.170824][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.177810][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.197042][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.238555][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.249018][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.259242][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.269456][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.287609][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.303285][ T24] usb 3-1: USB disconnect, device number 8 [ 119.432971][ T43] usb 1-1: USB disconnect, device number 9 [ 120.169963][ T5948] usb 4-1: USB disconnect, device number 4 [ 120.265912][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 120.309339][ T5894] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.354425][ T5894] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.386551][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.386601][ T5894] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 120.386626][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.402134][ T6287] 9pnet_fd: Insufficient options for proto=fd [ 120.405220][ T6287] netlink: 84 bytes leftover after parsing attributes in process `syz.0.91'. [ 120.412532][ T5894] usb 2-1: config 0 descriptor?? [ 120.432356][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 120.432671][ T6287] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'. [ 120.497655][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.550469][ T6285] tty tty24: ldisc open failed (-12), clearing slot 23 [ 121.445265][ T5908] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 121.460063][ T5908] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 121.471063][ T5908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 121.482792][ T5894] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 121.499073][ T5908] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 121.517673][ T5894] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 121.525305][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.533914][ T5894] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 121.575685][ T5908] usb 5-1: Product: syz [ 121.587771][ T5908] usb 5-1: Manufacturer: syz [ 121.592484][ T5908] usb 5-1: SerialNumber: syz [ 121.601031][ T5894] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 121.630892][ T5908] usb 5-1: config 0 descriptor?? [ 121.675413][ T5894] steelseries 0003:1038:1410.0002: unknown main item tag 0x0 [ 121.722833][ T5894] steelseries 0003:1038:1410.0002: missing HID_OUTPUT_REPORT 0 [ 121.794371][ T6302] netlink: 76 bytes leftover after parsing attributes in process `syz.0.95'. [ 121.826201][ T5894] usb 2-1: USB disconnect, device number 5 [ 121.865899][ T10] usb 5-1: USB disconnect, device number 5 [ 122.167582][ T890] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.438300][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.523756][ T890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.557623][ T890] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.582065][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.630528][ T890] usb 1-1: config 0 descriptor?? [ 122.652697][ T890] pwc: Askey VC010 type 2 USB webcam detected. [ 122.669917][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.697989][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.727801][ T5908] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 122.758564][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.783059][ T5908] usb 3-1: config 0 descriptor?? [ 122.897744][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 123.063714][ T890] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.074423][ T890] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.092356][ T890] pwc: recv_control_msg error -32 req 02 val 2c00 [ 123.108815][ T890] pwc: recv_control_msg error -32 req 04 val 1000 [ 123.117241][ T890] pwc: recv_control_msg error -32 req 04 val 1300 [ 123.148891][ T890] pwc: recv_control_msg error -32 req 04 val 1400 [ 123.157053][ T890] pwc: recv_control_msg error -32 req 02 val 2000 [ 123.169673][ T890] pwc: recv_control_msg error -32 req 02 val 2100 [ 123.251476][ T890] pwc: recv_control_msg error -32 req 04 val 1500 [ 123.419716][ T5908] steelseries 0003:1038:12B6.0003: reserved main item tag 0xe [ 123.430596][ T890] pwc: recv_control_msg error -32 req 02 val 2500 [ 123.786739][ T890] pwc: recv_control_msg error -32 req 02 val 2400 [ 124.073470][ T5908] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 124.102450][ T890] pwc: recv_control_msg error -32 req 02 val 2600 [ 124.178865][ T890] pwc: recv_control_msg error -32 req 02 val 2900 [ 124.424069][ T890] pwc: recv_control_msg error -71 req 04 val 1100 [ 124.499348][ T890] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.537924][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.563333][ T890] pwc: Registered as video103. [ 124.578339][ T24] usb 3-1: USB disconnect, device number 9 [ 124.592352][ T890] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 124.710586][ T43] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 124.737700][ T890] usb 1-1: USB disconnect, device number 10 [ 124.743400][ T43] usb 5-1: config 0 has no interface number 0 [ 124.764255][ T43] usb 5-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 124.803738][ T43] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 124.823379][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.839871][ T43] usb 5-1: Product: syz [ 124.848829][ T43] usb 5-1: Manufacturer: syz [ 124.854026][ T43] usb 5-1: SerialNumber: syz [ 124.866306][ T43] usb 5-1: config 0 descriptor?? [ 124.876981][ T6334] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 125.099826][ T43] usb 5-1: USB disconnect, device number 6 [ 128.205350][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 128.266765][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 128.267612][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 128.306057][ T6381] geneve3: entered promiscuous mode [ 128.311681][ T6381] geneve3: entered allmulticast mode [ 128.680479][ T24] usb 5-1: config 7 has an invalid interface number: 219 but max is 0 [ 129.076467][ T890] libceph: connect (1)[c::]:6789 error -101 [ 129.088255][ T890] libceph: mon0 (1)[c::]:6789 connect error [ 129.117403][ T24] usb 5-1: config 7 has no interface number 0 [ 129.136766][ T24] usb 5-1: config 7 interface 219 altsetting 49 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 129.149334][ T24] usb 5-1: config 7 interface 219 has no altsetting 0 [ 129.158090][ T24] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=77.a1 [ 129.168230][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.187413][ T6375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.236822][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.118'. [ 129.249674][ T6388] ceph: No mds server is up or the cluster is laggy [ 129.615224][ T24] usb 5-1: string descriptor 0 read error: -71 [ 129.941613][ T24] ems_usb 5-1:7.219 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 130.013881][ T24] ems_usb 5-1:7.219: probe with driver ems_usb failed with error -22 [ 130.027199][ T24] usb 5-1: USB disconnect, device number 7 [ 130.307975][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.491418][ T5894] usb 2-1: device descriptor read/64, error -71 [ 130.747668][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.897894][ T5894] usb 2-1: device descriptor read/64, error -71 [ 131.025067][ T5894] usb usb2-port1: attempt power cycle [ 131.117804][ T5158] Bluetooth: hci4: command 0x0405 tx timeout [ 131.409365][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.455456][ T5894] usb 2-1: device descriptor read/8, error -71 [ 131.730272][ T5894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.770525][ T5894] usb 2-1: device descriptor read/8, error -71 [ 131.794853][ T6404] netlink: 136 bytes leftover after parsing attributes in process `syz.2.124'. [ 131.807443][ T6404] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 131.888234][ T5894] usb usb2-port1: unable to enumerate USB device [ 132.301566][ T51] Bluetooth: hci2: connection err: -111 [ 133.136921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.143617][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.650264][ T6420] netlink: 'syz.0.127': attribute type 39 has an invalid length. [ 134.026053][ T6422] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.034735][ T6422] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.097578][ T5847] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.599381][ T5847] usb 1-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 134.794227][ T5847] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.830765][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.857949][ T5847] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.867109][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.876818][ T5847] usb 1-1: Product: syz [ 134.881596][ T5847] usb 1-1: Manufacturer: syz [ 134.886236][ T5847] usb 1-1: SerialNumber: syz [ 134.908801][ T5847] cdc_ether 1-1:1.0: skipping garbage [ 134.914941][ T5847] usb 1-1: bad CDC descriptors [ 135.070510][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.097044][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.146507][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 135.170242][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.207631][ T6434] sp0: Synchronizing with TNC [ 135.213775][ T10] usb 5-1: Product: syz [ 135.223452][ T10] usb 5-1: Manufacturer: syz [ 135.251301][ T10] usb 5-1: SerialNumber: syz [ 135.295010][ T10] cdc_subset 5-1:1.0: probe with driver cdc_subset failed with error -22 [ 135.326151][ T10] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 135.356251][ T10] cdc_ncm 5-1:1.0: bind() failure [ 135.387861][ T10] cdc_subset 5-1:1.1: probe with driver cdc_subset failed with error -22 [ 135.410704][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 135.423701][ T10] cdc_ncm 5-1:1.1: bind() failure [ 135.477852][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.499030][ T10] usb 5-1: USB disconnect, device number 8 [ 135.876512][ T10] usb 1-1: USB disconnect, device number 11 [ 135.907880][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.059955][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.070998][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.080925][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.107552][ T5847] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.116806][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.157832][ T43] usb 4-1: device descriptor read/64, error -71 [ 136.178192][ T5847] usb 2-1: config 0 descriptor?? [ 136.280559][ T6443] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.305851][ T6444] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.417916][ T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.556453][ T6451] loop0: Can't mount, would change RO state [ 136.598178][ T43] usb 4-1: device descriptor read/64, error -71 [ 136.702147][ T6456] Bluetooth: MGMT ver 1.23 [ 136.853175][ T43] usb usb4-port1: attempt power cycle [ 137.421992][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.454565][ T5847] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.490575][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.550963][ T5847] usb 2-1: USB disconnect, device number 10 [ 137.740731][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.798914][ T43] usb 4-1: device descriptor read/8, error -71 [ 137.827592][ T890] IPVS: starting estimator thread 0... [ 137.918169][ T43] usb usb4-port1: unable to enumerate USB device [ 137.937725][ T6475] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.080913][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 138.170988][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.265379][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 138.272338][ T5894] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 138.286738][ T5894] usb 1-1: config 0 has no interface number 0 [ 138.293043][ T5894] usb 1-1: New USB device found, idVendor=0664, idProduct=0306, bcdDevice=eb.63 [ 138.302365][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.313235][ T5894] usb 1-1: config 0 descriptor?? [ 138.356933][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.375082][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.385140][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.410017][ T5847] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.428818][ T43] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 138.441817][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.463752][ T5847] usb 3-1: config 0 descriptor?? [ 138.522276][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 138.551839][ T5894] usb 1-1: USB disconnect, device number 12 [ 138.603935][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 138.619374][ T43] usb 2-1: config index 0 descriptor too short (expected 25632, got 95) [ 138.634406][ T43] usb 2-1: config 112 has too many interfaces: 101, using maximum allowed: 32 [ 138.644281][ T43] usb 2-1: config 112 has an invalid descriptor of length 48, skipping remainder of the config [ 138.662612][ T43] usb 2-1: config 112 has 0 interfaces, different from the descriptor's value: 101 [ 138.677351][ T43] usb 2-1: language id specifier not provided by device, defaulting to English [ 138.698441][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.709502][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.882234][ T6488] netlink: 'syz.3.145': attribute type 39 has an invalid length. [ 139.171419][ T43] usb 2-1: USB disconnect, device number 11 [ 139.360883][ T5847] usbhid 3-1:0.0: can't add hid device: -71 [ 139.377659][ T5847] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 139.388019][ T5894] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.426845][ T5847] usb 3-1: USB disconnect, device number 10 [ 139.670482][ T5894] usb 4-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 139.716730][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 139.795881][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.835886][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.881688][ T5894] usb 4-1: Product: syz [ 139.891303][ T5894] usb 4-1: Manufacturer: syz [ 139.895960][ T5894] usb 4-1: SerialNumber: syz [ 139.939628][ T5894] cdc_ether 4-1:1.0: skipping garbage [ 139.981304][ T5894] usb 4-1: bad CDC descriptors [ 141.330480][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.361704][ T6516] 8021q: VLANs not supported on gre0 [ 141.408761][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.435671][ T6516] 8021q: VLANs not supported on gre0 [ 141.456250][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.478486][ T6516] 8021q: VLANs not supported on gre0 [ 141.563355][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.608677][ T6516] 8021q: VLANs not supported on gre0 [ 141.612025][ T5847] usb 4-1: USB disconnect, device number 9 [ 141.614623][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.671723][ T6516] 8021q: VLANs not supported on gre0 [ 141.704755][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.762354][ T6516] 8021q: VLANs not supported on gre0 [ 141.776864][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.814395][ T6516] 8021q: VLANs not supported on gre0 [ 141.843329][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.868025][ T6516] 8021q: VLANs not supported on gre0 [ 141.873772][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.901257][ T6516] 8021q: VLANs not supported on gre0 [ 141.908526][ T6516] netlink: 96 bytes leftover after parsing attributes in process `syz.4.152'. [ 141.921314][ T6516] 8021q: VLANs not supported on gre0 [ 141.954404][ T6516] 8021q: VLANs not supported on gre0 [ 141.978197][ T6516] 8021q: VLANs not supported on gre0 [ 141.984245][ T6516] 8021q: VLANs not supported on gre0 [ 141.998141][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.012165][ T6516] 8021q: VLANs not supported on gre0 [ 142.058995][ T6516] 8021q: VLANs not supported on gre0 [ 142.068550][ T6516] 8021q: VLANs not supported on gre0 [ 142.098580][ T6516] 8021q: VLANs not supported on gre0 [ 142.182417][ T43] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 142.212699][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.222097][ T43] usb 3-1: Product: syz [ 142.231747][ T43] usb 3-1: Manufacturer: syz [ 142.236653][ T43] usb 3-1: SerialNumber: syz [ 142.247820][ T43] usb 3-1: config 0 descriptor?? [ 142.348351][ T6530] tipc: Started in network mode [ 142.363835][ T6530] tipc: Node identity 265ca67e2a06, cluster identity 4711 [ 142.382544][ T5847] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 142.393767][ T6530] tipc: Enabled bearer , priority 0 [ 142.460244][ T43] hso 3-1:0.0: Failed to find BULK IN ep [ 142.538767][ T6536] syzkaller0: entered promiscuous mode [ 142.546993][ T6536] syzkaller0: entered allmulticast mode [ 142.570439][ T6536] tipc: Resetting bearer [ 142.578480][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 142.600082][ T5847] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.620807][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.620882][ T6529] tipc: Resetting bearer [ 142.641312][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.663762][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.687419][ T5847] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.698337][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.718031][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.726078][ T5847] usb 1-1: Product: syz [ 142.805477][ T43] usb 3-1: USB disconnect, device number 11 [ 142.903420][ T5847] usb 1-1: Manufacturer: syz [ 143.030249][ T5847] usb 1-1: SerialNumber: syz [ 143.307954][ T30] audit: type=1326 audit(1886202323.391:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.349583][ T30] audit: type=1326 audit(1886202323.391:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.385536][ T30] audit: type=1326 audit(1886202323.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.445993][ T30] audit: type=1326 audit(1886202323.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.467274][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.481650][ T30] audit: type=1326 audit(1886202323.391:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.514921][ T30] audit: type=1326 audit(1886202323.391:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.516059][ T890] tipc: Node number set to 207267454 [ 143.544199][ T30] audit: type=1326 audit(1886202323.391:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.565505][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.633485][ T6552] devpts: Bad value for 'max' [ 143.636640][ T30] audit: type=1326 audit(1886202323.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.668051][ T30] audit: type=1326 audit(1886202323.391:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.691492][ T30] audit: type=1326 audit(1886202323.391:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 143.714125][ T5847] usb 1-1: 0:2 : does not exist [ 143.898282][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.080758][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 144.141441][ T43] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 144.157697][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.204080][ T43] usb 3-1: Product: syz [ 144.213711][ T43] usb 3-1: Manufacturer: syz [ 144.222118][ T43] usb 3-1: SerialNumber: syz [ 144.243797][ T43] usb 3-1: config 0 descriptor?? [ 144.257763][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 144.422323][ T10] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 144.433146][ T10] usb 2-1: config 0 has no interface number 0 [ 144.442968][ T10] usb 2-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 144.454201][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.464212][ T10] usb 2-1: Product: syz [ 144.468869][ T10] usb 2-1: Manufacturer: syz [ 144.473559][ T10] usb 2-1: SerialNumber: syz [ 144.481900][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.492024][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.502818][ T10] usb 2-1: config 0 descriptor?? [ 144.522959][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 144.531887][ T43] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 144.564590][ T43] usb 3-1: USB disconnect, device number 12 [ 144.975315][ T5847] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 145.010159][ T6561] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 145.083666][ T5847] usb 1-1: USB disconnect, device number 13 [ 145.135646][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.164355][ T6293] udevd[6293]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.199257][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.233513][ T10] gspca_sn9c20x: Write register 1001 failed -110 [ 145.244827][ T10] gspca_sn9c20x: Device initialization failed [ 145.257848][ T10] gspca_sn9c20x 2-1:0.217: probe with driver gspca_sn9c20x failed with error -110 [ 145.693900][ T6571] netlink: 'syz.0.166': attribute type 11 has an invalid length. [ 145.769078][ T6572] netlink: 'syz.2.165': attribute type 39 has an invalid length. [ 146.071151][ T5847] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.123989][ T6529] tipc: Disabling bearer [ 146.179304][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.187561][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.230499][ T5847] usb 3-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 146.231308][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.248245][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.256592][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.256764][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.263890][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.455478][ T6561] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 146.480440][ T6562] bridge_slave_1: left allmulticast mode [ 146.493055][ T6562] bridge_slave_1: left promiscuous mode [ 147.240439][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.253134][ T5847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.265637][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.276310][ T5847] usb 3-1: Product: syz [ 147.279977][ T6562] bridge_slave_0: left allmulticast mode [ 147.281551][ T5847] usb 3-1: Manufacturer: syz [ 147.291160][ T5847] usb 3-1: SerialNumber: syz [ 147.301647][ T6579] __nla_validate_parse: 9 callbacks suppressed [ 147.301664][ T6579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 147.318544][ T6562] bridge_slave_0: left promiscuous mode [ 147.320324][ T5847] cdc_ether 3-1:1.0: skipping garbage [ 147.329741][ T5847] usb 3-1: bad CDC descriptors [ 147.342958][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.432856][ T6562] bond0: (slave bridge0): Releasing backup interface [ 147.602791][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.4.168'. [ 147.676583][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.4.168'. [ 147.687170][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.787242][ T10] usb 2-1: USB disconnect, device number 12 [ 147.900978][ T5908] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 147.909907][ T5908] usb 5-1: config 0 has no interface number 0 [ 147.916244][ T5908] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 147.928566][ T5908] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 147.944796][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.033031][ T5908] usb 5-1: config 0 descriptor?? [ 148.049010][ T5908] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input8 [ 148.102396][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.294617][ T5847] usb 4-1: device descriptor read/64, error -71 [ 148.604285][ T5886] usb 5-1: USB disconnect, device number 9 [ 148.677679][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.847687][ T5847] usb 4-1: device descriptor read/64, error -71 [ 148.933730][ T5908] usb 3-1: USB disconnect, device number 13 [ 148.974175][ T5847] usb usb4-port1: attempt power cycle [ 149.340272][ T5847] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.357643][ T5908] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.405062][ T5847] usb 4-1: device descriptor read/8, error -71 [ 149.547649][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 149.561142][ T5908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 149.596179][ T5908] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 149.645110][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.684267][ T5908] usb 3-1: Product: syz [ 149.707869][ T5908] usb 3-1: Manufacturer: syz [ 149.732002][ T5908] usb 3-1: SerialNumber: syz [ 149.754796][ T5908] usb 3-1: config 0 descriptor?? [ 149.797667][ T890] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.806097][ T5908] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 149.843104][ T5908] usb 3-1: Detected FT232R [ 149.978010][ T890] usb 5-1: Using ep0 maxpacket: 16 [ 149.987545][ T5847] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.990229][ T890] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.014322][ T5908] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 150.014790][ T5847] usb 4-1: device descriptor read/8, error -71 [ 150.032343][ T890] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.053403][ T890] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 150.078039][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.111993][ T890] usb 5-1: Product: syz [ 150.116305][ T890] usb 5-1: Manufacturer: syz [ 150.131097][ T890] usb 5-1: SerialNumber: syz [ 150.144700][ T890] usb 5-1: config 0 descriptor?? [ 150.149058][ T5847] usb usb4-port1: unable to enumerate USB device [ 150.192333][ T6618] capability: warning: `syz.0.181' uses deprecated v2 capabilities in a way that may be insecure [ 150.255174][ T5908] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 150.608603][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.647940][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.674899][ T6610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.686397][ T6610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.706229][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.0.185'. [ 151.747036][ T5847] usb 3-1: USB disconnect, device number 14 [ 151.793647][ T5847] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 151.820354][ T5847] ftdi_sio 3-1:0.0: device disconnected [ 152.043766][ T6638] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 152.287892][ T5847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 152.452795][ T5847] usb 4-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 152.510190][ T5847] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.541337][ T890] usb_8dev 5-1:0.0 can0: sending command message failed [ 152.568316][ T890] usb_8dev 5-1:0.0 can0: can't get firmware version [ 152.685637][ T6643] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 152.777905][ T5847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.792014][ T890] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 152.797589][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.810319][ T5847] usb 4-1: Product: syz [ 152.814657][ T5847] usb 4-1: Manufacturer: syz [ 152.819337][ T5847] usb 4-1: SerialNumber: syz [ 152.924506][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.016910][ T5847] cdc_ether 4-1:1.0: skipping garbage [ 153.233225][ T5847] usb 4-1: bad CDC descriptors [ 153.514498][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 153.546038][ T890] usb 5-1: USB disconnect, device number 10 [ 153.585655][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 154.587148][ T5847] usb 4-1: USB disconnect, device number 14 [ 154.634900][ T6676] program syz.2.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.682206][ T6674] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 154.691500][ T6674] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.999553][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 155.117420][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 155.148902][ T10] usb 5-1: device descriptor read/64, error -71 [ 155.217537][ T890] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 155.392213][ T890] usb 3-1: No LPM exit latency info found, disabling LPM. [ 155.406539][ T890] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 155.420528][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.432901][ T890] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.474883][ T890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.496244][ T890] usb 3-1: string descriptor 0 read error: -22 [ 155.503835][ T890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.513363][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.537134][ T890] usb 3-1: 0:2 : does not exist [ 155.577963][ T10] usb 5-1: device descriptor read/64, error -71 [ 155.584436][ T5908] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.688432][ T10] usb usb5-port1: attempt power cycle [ 155.756729][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.769458][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 155.788150][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.804662][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 155.824460][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.849543][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.857659][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.870521][ T5847] usb 3-1: USB disconnect, device number 15 [ 155.876968][ T5908] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.971375][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.981025][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.993812][ T5908] usb 1-1: Product: syz [ 156.001203][ T5908] usb 1-1: Manufacturer: syz [ 156.006053][ T5908] usb 1-1: SerialNumber: syz [ 156.047803][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 156.073646][ T10] usb 5-1: device descriptor read/8, error -71 [ 156.317648][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.369612][ T10] usb 5-1: device descriptor read/8, error -71 [ 156.437912][ T5908] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 156.501068][ T10] usb usb5-port1: unable to enumerate USB device [ 157.137786][ T890] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.447645][ T890] usb 4-1: device descriptor read/64, error -71 [ 157.680323][ T5908] usb 1-1: current rate 9338450 is different from the runtime rate 9338507 [ 157.697973][ T890] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 157.847963][ T890] usb 4-1: device descriptor read/64, error -71 [ 158.239056][ T890] usb usb4-port1: attempt power cycle [ 158.335552][ T5908] usb 1-1: USB disconnect, device number 14 [ 158.415450][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.587780][ T890] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 158.608191][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 158.608210][ T30] audit: type=1326 audit(1886202338.681:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.646682][ T890] usb 4-1: device descriptor read/8, error -71 [ 158.654610][ T30] audit: type=1326 audit(1886202338.681:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.662645][ T6733] netlink: 'syz.4.211': attribute type 39 has an invalid length. [ 158.681470][ T30] audit: type=1326 audit(1886202338.681:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.710097][ T30] audit: type=1326 audit(1886202338.681:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.734717][ T30] audit: type=1326 audit(1886202338.681:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.756793][ T30] audit: type=1326 audit(1886202338.681:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.809450][ T30] audit: type=1326 audit(1886202338.681:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.868004][ T30] audit: type=1326 audit(1886202338.681:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.893976][ T30] audit: type=1326 audit(1886202338.681:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.915296][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.928295][ T890] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.930522][ T30] audit: type=1326 audit(1886202338.681:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.1.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 158.958581][ T890] usb 4-1: device descriptor read/8, error -71 [ 159.067605][ T5847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 159.068081][ T890] usb usb4-port1: unable to enumerate USB device [ 159.537834][ T5847] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 159.558410][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.598188][ T890] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.936504][ T890] usb 1-1: Using ep0 maxpacket: 16 [ 160.258277][ T890] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 160.275901][ T890] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.292624][ T890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 160.299747][ T890] usb 1-1: New USB device found, idVendor=1477, idProduct=fb24, bcdDevice= 0.5d [ 160.330704][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.370468][ T890] usb 1-1: config 0 descriptor?? [ 160.505686][ T6747] can0: slcan on ttyS3. [ 160.547118][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.585266][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.593863][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.615828][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.637030][ T5847] usb 5-1: Product: syz [ 160.647187][ T5847] usb 5-1: Manufacturer: syz [ 160.659716][ T5847] usb 5-1: SerialNumber: syz [ 160.681532][ T5847] cdc_ether 5-1:1.0: skipping garbage [ 160.688692][ T5847] usb 5-1: bad CDC descriptors [ 160.773799][ T890] usbhid 1-1:0.0: can't add hid device: -71 [ 160.801225][ T6747] can0 (unregistered): slcan off ttyS3. [ 160.807705][ T890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 160.842985][ T890] usb 1-1: USB disconnect, device number 15 [ 160.899531][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a984000: rx timeout, send abort [ 160.909825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a984000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.338470][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 162.186350][ T890] usb 5-1: USB disconnect, device number 15 [ 162.787996][ T890] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.960107][ T890] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.042821][ T890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.070879][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.091104][ T890] usb 2-1: SerialNumber: syz [ 163.145587][ T6802] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 163.617548][ T30] kauditd_printk_skb: 506 callbacks suppressed [ 163.617565][ T30] audit: type=1326 audit(1886202343.691:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 163.757924][ T30] audit: type=1326 audit(1886202343.731:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 163.779463][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.924681][ T30] audit: type=1326 audit(1886202343.731:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 163.946163][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.127763][ T30] audit: type=1326 audit(1886202343.731:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 164.149210][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.257580][ T5847] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 164.429845][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.605005][ T30] audit: type=1326 audit(1886202343.731:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 164.687871][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 164.707994][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 164.728253][ T5847] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.747994][ T5886] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 164.766782][ T30] audit: type=1326 audit(1886202343.731:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 164.799381][ T5847] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.809372][ T5886] usb 3-1: config 0 has no interface number 0 [ 164.840448][ T5886] usb 3-1: config 0 interface 92 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 164.850470][ T5894] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 164.907674][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.914406][ T5847] usb 4-1: New USB device found, idVendor=1477, idProduct=fb24, bcdDevice= 0.5d [ 164.943090][ T30] audit: type=1326 audit(1886202343.731:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 164.964529][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.982496][ T5886] usb 3-1: config 0 interface 92 has no altsetting 0 [ 165.005161][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.005197][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.032907][ T5886] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 165.053592][ T5847] usb 4-1: config 0 descriptor?? [ 165.071246][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.095558][ T30] audit: type=1326 audit(1886202343.731:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 165.117769][ T5886] usb 3-1: Product: syz [ 165.118127][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.121978][ T5886] usb 3-1: Manufacturer: syz [ 165.122010][ T5886] usb 3-1: SerialNumber: syz [ 165.147010][ T5886] usb 3-1: config 0 descriptor?? [ 165.167057][ T30] audit: type=1326 audit(1886202343.731:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 165.198040][ T6824] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 165.266215][ T30] audit: type=1326 audit(1886202343.731:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7fc00000 [ 165.268200][ T5894] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 165.333682][ T6822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.375892][ T6822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.443952][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.515530][ T5894] usb 1-1: config 0 descriptor?? [ 165.519070][ T5847] usbhid 4-1:0.0: can't add hid device: -71 [ 165.548880][ T5886] redrat3 3-1:0.92: Couldn't find all endpoints [ 165.563203][ T5847] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.598230][ T5886] usb 3-1: USB disconnect, device number 16 [ 165.665713][ T5847] usb 4-1: USB disconnect, device number 19 [ 166.018042][ T6839] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 166.274747][ T6846] syz.2.235 uses obsolete (PF_INET,SOCK_PACKET) [ 166.315185][ T890] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 166.356394][ T890] usb 2-1: USB disconnect, device number 13 [ 166.531165][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.553748][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.101825][ T6870] netlink: 'syz.4.236': attribute type 39 has an invalid length. [ 167.407604][ T5847] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.657727][ T5894] usb 1-1: USB disconnect, device number 16 [ 167.702328][ T5847] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 167.726248][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.795323][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.819091][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.828490][ T5847] usb 5-1: Product: syz [ 167.838924][ T5847] usb 5-1: Manufacturer: syz [ 167.852333][ T5847] usb 5-1: SerialNumber: syz [ 167.905255][ T5847] cdc_ether 5-1:1.0: skipping garbage [ 167.921093][ T5847] usb 5-1: bad CDC descriptors [ 168.227763][ T890] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 168.399513][ T890] usb 1-1: Using ep0 maxpacket: 16 [ 168.434408][ T890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.476318][ T890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.503322][ T890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.517008][ T890] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.541680][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.584060][ T890] usb 1-1: config 0 descriptor?? [ 168.748395][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 168.928272][ T6886] netlink: 'syz.2.247': attribute type 13 has an invalid length. [ 169.962267][ T5847] usb 5-1: USB disconnect, device number 16 [ 170.005570][ T6477] wlan1: Trigger new scan to find an IBSS to join [ 170.148787][ T6886] gretap0: refused to change device tx_queue_len [ 170.155947][ T6886] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.247554][ T890] usbhid 1-1:0.0: can't add hid device: -71 [ 170.253827][ T890] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 170.270467][ T890] usb 1-1: USB disconnect, device number 17 [ 171.171256][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.254'. [ 171.985952][ T6944] evm: overlay not supported [ 172.274023][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 172.274042][ T30] audit: type=1326 audit(1886202352.341:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.378335][ T30] audit: type=1326 audit(1886202352.341:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.488775][ T30] audit: type=1326 audit(1886202352.341:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.491541][ T6959] overlayfs: upper fs does not support file handles, falling back to index=off. [ 172.562459][ T30] audit: type=1326 audit(1886202352.341:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.626075][ T30] audit: type=1326 audit(1886202352.341:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.647537][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.685386][ T30] audit: type=1326 audit(1886202352.341:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.728779][ T30] audit: type=1326 audit(1886202352.341:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.791128][ T30] audit: type=1326 audit(1886202352.351:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.817983][ T30] audit: type=1326 audit(1886202352.351:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 172.847161][ T30] audit: type=1326 audit(1886202352.351:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.1.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc69038e929 code=0x7fc00000 [ 173.609628][ T13] wlan1: Trigger new scan to find an IBSS to join [ 173.727978][ T6970] netlink: 'syz.0.260': attribute type 39 has an invalid length. [ 174.327728][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.806664][ T43] usb 1-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 174.878888][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 174.939256][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.998819][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.027732][ T43] usb 1-1: Product: syz [ 175.047784][ T43] usb 1-1: Manufacturer: syz [ 175.052545][ T43] usb 1-1: SerialNumber: syz [ 175.220261][ T3008] wlan1: Creating new IBSS network, BSSID 1a:31:68:14:a2:46 [ 175.360714][ T6999] vivid-003: disconnect [ 175.429537][ T6997] vivid-003: reconnect [ 176.269599][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 176.536670][ T43] usb 1-1: can't set config #1, error -71 [ 176.588508][ T43] usb 1-1: USB disconnect, device number 19 [ 176.677616][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 177.137629][ T7072] netlink: 'syz.0.278': attribute type 2 has an invalid length. [ 177.145625][ T7072] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.278'. [ 179.029559][ T7089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.282'. [ 179.538102][ T5847] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 179.780710][ T5847] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 179.975457][ T5847] usb 5-1: config 0 has no interface number 0 [ 180.150638][ T5847] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 180.202862][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.288111][ T5847] usb 5-1: Product: syz [ 180.292427][ T5847] usb 5-1: Manufacturer: syz [ 180.293311][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 180.318088][ T7102] nbd: must specify a size in bytes for the device [ 180.327828][ T7076] netlink: 'syz.3.279': attribute type 21 has an invalid length. [ 180.337694][ T7076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.279'. [ 180.346891][ T5847] usb 5-1: SerialNumber: syz [ 180.356367][ T7076] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 180.369007][ T5847] usb 5-1: config 0 descriptor?? [ 180.389470][ T5847] qmi_wwan 5-1:0.207: bogus CDC Union: master=0, slave=1 [ 180.405608][ T7104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.421623][ T7102] kvm: Disabled LAPIC found during irq injection [ 180.521357][ T7102] trusted_key: syz.0.286 sent an empty control message without MSG_MORE. [ 180.718518][ T5847] qmi_wwan 5-1:0.207: probe with driver qmi_wwan failed with error -22 [ 180.741337][ T5847] usb 5-1: USB disconnect, device number 17 [ 180.809723][ T7115] xt_socket: unknown flags 0x8 [ 181.996364][ T7127] netlink: 'syz.4.291': attribute type 2 has an invalid length. [ 182.004547][ T7127] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.291'. [ 182.947817][ T5948] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 182.980983][ T7145] input: syz0 as /devices/virtual/input/input9 [ 183.160811][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 183.185519][ T5948] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 183.250838][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.270013][ T5948] usb 5-1: Product: syz [ 183.281131][ T5948] usb 5-1: Manufacturer: syz [ 183.313139][ T5948] usb 5-1: SerialNumber: syz [ 183.336789][ T5948] usb 5-1: config 0 descriptor?? [ 183.461151][ T5948] viperboard 5-1:0.0: version 0.00 found at bus 005 address 018 [ 183.554099][ T5948] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 183.595582][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 183.595602][ T30] audit: type=1800 audit(1886202363.661:845): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.296" name="file1" dev="overlay" ino=362 res=0 errno=0 [ 183.650385][ T5948] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 183.972984][ T5948] usb 5-1: USB disconnect, device number 18 [ 184.183582][ T7163] FAULT_INJECTION: forcing a failure. [ 184.183582][ T7163] name failslab, interval 1, probability 0, space 0, times 1 [ 184.197044][ T7163] CPU: 1 UID: 0 PID: 7163 Comm: syz.2.300 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 184.197072][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.197092][ T7163] Call Trace: [ 184.197105][ T7163] [ 184.197114][ T7163] dump_stack_lvl+0x189/0x250 [ 184.197151][ T7163] ? irqentry_exit+0x74/0x90 [ 184.197184][ T7163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.197227][ T7163] should_fail_ex+0x414/0x560 [ 184.197261][ T7163] should_failslab+0xa8/0x100 [ 184.197294][ T7163] __kmalloc_cache_noprof+0x70/0x3d0 [ 184.197323][ T7163] ? io_ring_ctx_alloc+0x53/0xae0 [ 184.197354][ T7163] io_ring_ctx_alloc+0x53/0xae0 [ 184.197379][ T7163] ? io_uring_fill_params+0x3f9/0x7e0 [ 184.197412][ T7163] io_uring_create+0x130/0xb60 [ 184.197467][ T7163] __se_sys_io_uring_setup+0x264/0x270 [ 184.197493][ T7163] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 184.197540][ T7163] ? do_syscall_64+0xbe/0x3b0 [ 184.197563][ T7163] do_syscall_64+0xfa/0x3b0 [ 184.197579][ T7163] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.197608][ T7163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.197627][ T7163] ? clear_bhb_loop+0x60/0xb0 [ 184.197651][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.197670][ T7163] RIP: 0033:0x7f2e5a18e929 [ 184.197695][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.197711][ T7163] RSP: 002b:00007f2e57ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 184.197737][ T7163] RAX: ffffffffffffffda RBX: 00007f2e5a3b6160 RCX: 00007f2e5a18e929 [ 184.197751][ T7163] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000001de0 [ 184.197764][ T7163] RBP: 00007f2e57ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.197776][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.197787][ T7163] R13: 0000000000000000 R14: 00007f2e5a3b6160 R15: 00007fff2ec809a8 [ 184.197818][ T7163] [ 184.391824][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.054886][ T7170] capability: warning: `syz.2.302' uses 32-bit capabilities (legacy support in use) [ 185.070043][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 185.203731][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.213768][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 185.225539][ T5847] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 185.390270][ T7180] random: crng reseeded on system resumption [ 185.548598][ T5886] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 185.687886][ T5970] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 185.737950][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 185.750029][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.779436][ T5886] usb 5-1: can't read configurations, error -61 [ 185.867968][ T5970] usb 3-1: device descriptor read/64, error -71 [ 185.947842][ T5886] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.138037][ T5970] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 186.157748][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 186.169181][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 186.192811][ T5886] usb 5-1: can't read configurations, error -61 [ 186.213146][ T5886] usb usb5-port1: attempt power cycle [ 186.297848][ T5970] usb 3-1: device descriptor read/64, error -71 [ 186.440200][ T5970] usb usb3-port1: attempt power cycle [ 186.578117][ T5886] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.622431][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 186.819627][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 186.829629][ T5886] usb 5-1: can't read configurations, error -61 [ 186.867919][ T5970] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 187.009216][ T5886] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 187.012527][ T5970] usb 3-1: device descriptor read/8, error -71 [ 187.036848][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 187.044342][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 187.044393][ T5886] usb 5-1: can't read configurations, error -61 [ 187.044996][ T5886] usb usb5-port1: unable to enumerate USB device [ 187.288073][ T5970] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 187.344957][ T5970] usb 3-1: device descriptor read/8, error -71 [ 187.440360][ T5847] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 187.447588][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.464300][ T5847] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 187.477820][ T5970] usb usb3-port1: unable to enumerate USB device [ 188.637658][ T5894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 188.757662][ T5908] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 188.897532][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 189.223061][ T5908] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.238654][ T5894] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 189.301112][ T5908] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.332599][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.405764][ T5908] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.427729][ T5894] usb 1-1: Product: syz [ 189.432040][ T5894] usb 1-1: Manufacturer: syz [ 189.436735][ T5894] usb 1-1: SerialNumber: syz [ 189.476467][ T5908] usb 5-1: config 220 has no interface number 2 [ 189.516830][ T5908] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.555290][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 189.565155][ T5894] r8152-cfgselector 1-1: config 0 descriptor?? [ 189.586078][ T5908] usb 5-1: config 220 interface 0 has no altsetting 0 [ 189.617364][ T5908] usb 5-1: config 220 interface 76 has no altsetting 0 [ 189.638745][ T5908] usb 5-1: config 220 interface 1 has no altsetting 0 [ 189.747662][ T5908] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.774142][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.782086][ T5847] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 189.789255][ T5847] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 189.870998][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.912166][ T5908] usb 5-1: Product: syz [ 189.925018][ T5908] usb 5-1: Manufacturer: syz [ 189.957668][ T5908] usb 5-1: SerialNumber: syz [ 189.967829][ T30] audit: type=1326 audit(1886202370.041:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 189.979672][ T7263] x_tables: duplicate underflow at hook 2 [ 190.004243][ T30] audit: type=1326 audit(1886202370.051:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e5a18d290 code=0x7ffc0000 [ 190.102841][ T30] audit: type=1326 audit(1886202370.051:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 190.187795][ T30] audit: type=1326 audit(1886202370.051:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 190.241799][ T7227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.251689][ T7227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.338210][ T7271] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[7271] [ 190.338337][ T5970] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 190.559015][ T30] audit: type=1326 audit(1886202370.051:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 190.640831][ T5970] usb 3-1: Using ep0 maxpacket: 16 [ 190.910949][ T5970] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 191.139312][ T30] audit: type=1326 audit(1886202370.051:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 191.149932][ T5970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.162042][ T30] audit: type=1326 audit(1886202370.051:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 191.247518][ T7278] netlink: 'syz.3.324': attribute type 39 has an invalid length. [ 191.883615][ T30] audit: type=1326 audit(1886202370.051:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 191.884842][ T5908] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 191.915117][ T30] audit: type=1326 audit(1886202370.051:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 191.940878][ T5970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.945010][ T5908] usb 5-1: No valid video chain found. [ 191.955834][ T5908] usb 5-1: selecting invalid altsetting 0 [ 191.963405][ T30] audit: type=1326 audit(1886202370.051:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7262 comm="syz.2.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e5a18e929 code=0x7ffc0000 [ 191.999380][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.000075][ T5908] usb 5-1: selecting invalid altsetting 0 [ 192.010510][ T5847] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 192.013542][ T5908] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 192.017288][ T5847] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 192.070795][ T5970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.072184][ T5908] usb 5-1: USB disconnect, device number 23 [ 192.112266][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.137610][ T5886] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 192.158098][ T5894] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 192.162525][ T5970] usb 3-1: Product: syz [ 192.175106][ T5970] usb 3-1: Manufacturer: syz [ 192.182542][ T5970] usb 3-1: SerialNumber: syz [ 192.600014][ T5886] usb 4-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 192.641114][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.676428][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.694943][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.717524][ T5886] usb 4-1: Product: syz [ 192.721799][ T5886] usb 4-1: Manufacturer: syz [ 192.754694][ T5886] usb 4-1: SerialNumber: syz [ 192.784564][ T5970] usb 3-1: 0:2 : does not exist [ 192.806002][ T5886] cdc_ether 4-1:1.0: skipping garbage [ 192.847805][ T5886] usb 4-1: bad CDC descriptors [ 192.954981][ T7293] xt_bpf: check failed: parse error [ 193.718134][ T7263] macvlan1: entered promiscuous mode [ 193.755347][ T7263] ipvlan0: entered promiscuous mode [ 193.793414][ T7263] ipvlan0: left promiscuous mode [ 193.883951][ T7263] macvlan1: left promiscuous mode [ 194.115307][ T24] usb 4-1: USB disconnect, device number 21 [ 194.137340][ T5970] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 194.237928][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 194.247721][ T5847] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 194.254215][ T5847] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 194.320064][ T5970] usb 3-1: USB disconnect, device number 21 [ 194.402955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.409735][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.775507][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.993058][ T7344] sctp: failed to load transform for md5: -2 [ 197.046723][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 197.337723][ T5908] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 197.511283][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.621247][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 29, changing to 8 [ 197.837711][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 25121, setting to 1024 [ 197.873674][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.891100][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.255725][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.300698][ T5908] usb 4-1: config 0 descriptor?? [ 198.728435][ T5908] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 198.790654][ T5908] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 198.931425][ T7393] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.339633][ T7384] sctp: failed to load transform for md5: -2 [ 199.572018][ T5908] usb 4-1: USB disconnect, device number 22 [ 199.683979][ T7395] fido_id[7395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 200.868499][ T5908] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 201.007015][ T7439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.357'. [ 201.040679][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 201.059500][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.108700][ T5908] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.192641][ T5908] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.378890][ T7448] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.358'. [ 201.536777][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.893221][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.922441][ T5908] usb 1-1: Product: syz [ 201.936335][ T5908] usb 1-1: Manufacturer: syz [ 201.946067][ T5908] usb 1-1: SerialNumber: syz [ 202.412038][ T5908] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 202.433974][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.445679][ T7464] team0: Port device batadv1 added [ 203.718453][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.727334][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.749238][ T7480] loop6: detected capacity change from 0 to 1 [ 203.787699][ T7480] Dev loop6: unable to read RDB block 1 [ 203.793758][ T7480] loop6: unable to read partition table [ 203.874237][ T7480] loop6: partition table beyond EOD, truncated [ 203.917534][ T7480] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.653774][ T5908] usb 1-1: USB disconnect, device number 21 [ 206.077679][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 206.243760][ T7504] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 206.388734][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 206.407079][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.441456][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.468409][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.495570][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 206.524991][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.538812][ T7493] mmap: syz.2.369 (7493): VmData 25972736 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 206.554887][ T10] usb 5-1: config 0 descriptor?? [ 208.020289][ T10] wacom 0003:056A:0057.0006: unknown main item tag 0x2 [ 208.874475][ T5847] usb 5-1: USB disconnect, device number 24 [ 208.995472][ T7544] veth1_to_bond: entered allmulticast mode [ 209.071324][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 209.224060][ T7553] veth1_to_bond: entered promiscuous mode [ 209.742576][ T7542] veth1_to_bond: left promiscuous mode [ 209.773496][ T7542] veth1_to_bond: left allmulticast mode [ 210.512859][ T7568] netlink: 308 bytes leftover after parsing attributes in process `syz.3.386'. [ 210.522516][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 210.536505][ T7568] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 212.063658][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 212.103213][ T7579] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 212.132026][ T7579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.158138][ T5970] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 212.371068][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 212.379163][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.393677][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 212.451005][ T5970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.480568][ T5970] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.537275][ T5970] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.567641][ T5970] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 212.630906][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.781464][ T5970] usb 1-1: config 0 descriptor?? [ 212.916649][ T7593] netlink: 'syz.2.389': attribute type 39 has an invalid length. [ 213.007583][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 213.052150][ T5847] usb 1-1: USB disconnect, device number 22 [ 213.169095][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 213.221123][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.238014][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.292518][ T43] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 213.320426][ T43] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 213.349512][ T43] usb 5-1: Product: syz [ 213.509805][ T43] usb 5-1: config 0 descriptor?? [ 213.538824][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 214.434690][ T10] usb 3-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 214.498145][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.534267][ T43] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 214.571521][ T7616] sctp: [Deprecated]: syz.0.397 (pid 7616) Use of int in maxseg socket option. [ 214.571521][ T7616] Use struct sctp_assoc_value instead [ 214.774632][ T43] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 214.782717][ T43] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 214.811582][ T7614] batman_adv: batadv0: Adding interface: ip6gretap1 [ 214.818388][ T7614] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.844215][ T7614] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 214.944869][ T7619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.393'. [ 215.274683][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 215.727003][ T7624] block device autoloading is deprecated and will be removed. [ 215.794665][ T43] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 217.655372][ T7634] overlayfs: failed to clone upperpath [ 217.958235][ T5970] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 218.158029][ T5970] usb 4-1: Using ep0 maxpacket: 8 [ 218.170359][ T5970] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 218.182255][ T5970] usb 4-1: config 0 has no interface number 0 [ 218.189187][ T10] usb 3-1: string descriptor 0 read error: -71 [ 218.195628][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.208281][ T5970] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 218.217706][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.241060][ T7641] 9pnet_fd: Insufficient options for proto=fd [ 218.251068][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.255671][ T5970] usb 4-1: Product: syz [ 218.263398][ T5970] usb 4-1: Manufacturer: syz [ 218.318413][ T10] usb 3-1: can't set config #1, error -71 [ 218.323254][ T5970] usb 4-1: SerialNumber: syz [ 218.346925][ T10] usb 3-1: USB disconnect, device number 22 [ 218.354307][ T5970] usb 4-1: config 0 descriptor?? [ 218.594349][ T5970] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 219.041009][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.133361][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.554461][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.606024][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.654394][ T5886] usb 5-1: USB disconnect, device number 25 [ 219.695112][ T5970] peak_usb 4-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 219.719385][ T5970] peak_usb 4-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 219.809228][ T5970] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -71 [ 219.861284][ T5970] usb 4-1: USB disconnect, device number 23 [ 220.103199][ T7660] No buffer was provided with the request [ 221.741691][ T7665] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 221.753654][ T7665] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 221.762097][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.2.411 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 221.772281][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.782368][ T7665] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 221.787541][ T7665] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 a4 2e ca f9 49 8b 1f 31 ff 48 89 [ 221.807178][ T7665] RSP: 0018:ffffc9000b757c00 EFLAGS: 00010206 [ 221.813292][ T7665] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 221.821828][ T7665] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 221.829829][ T7665] RBP: ffffc9000b757d60 R08: ffff8880563f501f R09: 1ffff1100ac7ea03 [ 221.837831][ T7665] R10: dffffc0000000000 R11: ffffffff88574ce0 R12: 0000000000000001 [ 221.845841][ T7665] R13: ffffc9000b757e00 R14: dffffc0000000000 R15: 0000000000000108 [ 221.853853][ T7665] FS: 00007f2e5af1a6c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 221.862814][ T7665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.869432][ T7665] CR2: 00007f2e5af19f98 CR3: 0000000032232000 CR4: 00000000003526f0 [ 221.877432][ T7665] DR0: 0000000000000005 DR1: 0000000000000047 DR2: 0000000000000007 [ 221.885430][ T7665] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 221.893434][ T7665] Call Trace: [ 221.896739][ T7665] [ 221.899706][ T7665] ? __pfx_bcsp_recv+0x10/0x10 [ 221.904506][ T7665] ? rcu_read_lock_any_held+0xb3/0x120 [ 221.910005][ T7665] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 221.915932][ T7665] ? tty_audit_push+0x7c/0x250 [ 221.920730][ T7665] hci_uart_tty_receive+0x194/0x220 [ 221.925960][ T7665] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 221.931713][ T7665] tiocsti+0x23c/0x2c0 [ 221.935816][ T7665] ? __pfx_tiocsti+0x10/0x10 [ 221.940437][ T7665] ? __fget_files+0x2a/0x420 [ 221.945058][ T7665] ? __fget_files+0x3a0/0x420 [ 221.949763][ T7665] ? __fget_files+0x2a/0x420 [ 221.954383][ T7665] tty_ioctl+0x626/0xde0 [ 221.958652][ T7665] ? __pfx_tty_ioctl+0x10/0x10 [ 221.963462][ T7665] __se_sys_ioctl+0xf9/0x170 [ 221.968084][ T7665] do_syscall_64+0xfa/0x3b0 [ 221.972617][ T7665] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.977857][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.983953][ T7665] ? clear_bhb_loop+0x60/0xb0 [ 221.988660][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.994583][ T7665] RIP: 0033:0x7f2e5a18e929 [ 221.999027][ T7665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.018664][ T7665] RSP: 002b:00007f2e5af1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.027126][ T7665] RAX: ffffffffffffffda RBX: 00007f2e5a3b6080 RCX: 00007f2e5a18e929 [ 222.035140][ T7665] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 222.043161][ T7665] RBP: 00007f2e5a210b39 R08: 0000000000000000 R09: 0000000000000000 [ 222.051176][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.059179][ T7665] R13: 0000000000000001 R14: 00007f2e5a3b6080 R15: 00007fff2ec809a8 [ 222.067200][ T7665] [ 222.070250][ T7665] Modules linked in: [ 222.074282][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.081021][ T7665] ---[ end trace 0000000000000000 ]--- [ 223.015361][ T7665] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 223.021006][ T7665] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 a4 2e ca f9 49 8b 1f 31 ff 48 89 [ 223.041640][ T7665] RSP: 0018:ffffc9000b757c00 EFLAGS: 00010206 [ 223.047922][ T7665] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 223.111786][ T7665] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 223.122776][ T7665] RBP: ffffc9000b757d60 R08: ffff8880563f501f R09: 1ffff1100ac7ea03 [ 223.131426][ T7665] R10: dffffc0000000000 R11: ffffffff88574ce0 R12: 0000000000000001 [ 223.140042][ T7665] R13: ffffc9000b757e00 R14: dffffc0000000000 R15: 0000000000000108 [ 223.148558][ T7665] FS: 00007f2e5af1a6c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 223.157819][ T7665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.164579][ T7665] CR2: 0000000000000000 CR3: 0000000032232000 CR4: 00000000003526f0 [ 223.173151][ T7665] DR0: 0000000000000005 DR1: 0000000000000047 DR2: 0000000000000007 [ 223.181878][ T7665] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 223.190239][ T7665] Kernel panic - not syncing: Fatal exception [ 223.196693][ T7665] Kernel Offset: disabled [ 223.201074][ T7665] Rebooting in 86400 seconds..