last executing test programs: 17m35.647378757s ago: executing program 32 (id=466): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16m52.76023623s ago: executing program 33 (id=582): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 13m59.794618691s ago: executing program 34 (id=905): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x7) brk(0x5d555ede6000) 13m57.867380272s ago: executing program 35 (id=910): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r4 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000adc000/0x2000)=nil, 0x2000, 0x3000002) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000040000100fcff07000400000001000000040048804800018044001080060009003a00000035007000c7ef3cd03cbbaaa1bb38ab417fddef6aeb666a23615877052e6058e1c561f99b256d7660d48907dc5a964bbacd4cd00c1d000000080002", @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 13m53.937929186s ago: executing program 36 (id=913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 13m51.062199218s ago: executing program 37 (id=915): socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d8", 0x8e}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) 13m50.797909021s ago: executing program 38 (id=919): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) 12m51.728471675s ago: executing program 39 (id=923): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x39d}, &(0x7f0000000100)=0x0, &(0x7f0000000900)=0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002ac0), 0x0, 0x0, 0x0) r7 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0xa3d8, &(0x7f0000000000)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0, 0xfe22}], 0x2, 0x0, 0x1, {0x2}}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000280)={{@my=0x0, 0x1}, 0x6, 0x8, 0x3, 0x6}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 12m1.524546115s ago: executing program 40 (id=1035): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000180)={0x9, 0x5}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), &(0x7f0000000100)='./cgroup\x00', 0x9, 0x1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c}, 0x14}}, 0x80) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m37.876583313s ago: executing program 7 (id=1375): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240)=r3, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000009aae00009500"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 9m36.500048355s ago: executing program 7 (id=1379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x5, 0x1, 0x1, 0x5, 0x4, 0x7, 0x9, 0xf, 0x7, 0xf, 0xc, 0x9, 0x4], 0xfe, [0x9, 0x2, 0x9, 0x9, 0x6, 0x80, 0x7, 0x2, 0x8, 0x4, 0x6, 0x3, 0x30, 0x9, 0x6, 0x5], [0xe5, 0x3, 0x3, 0x2, 0x10, 0xfff8, 0xf89b, 0x2427, 0xfffe, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0xea49]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2084850}, 0x40000) 9m34.16669555s ago: executing program 7 (id=1383): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 9m30.311033906s ago: executing program 7 (id=1392): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x2000c090) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 9m28.96482915s ago: executing program 7 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd32, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x0, 0x1, 0x5, 0x1, 0x1, 0x5, 0x4, 0x7, 0x9, 0xf, 0x7, 0xf, 0xc, 0x9, 0x4], 0xfe, [0x9, 0x2, 0x9, 0x9, 0x6, 0x80, 0x7, 0x2, 0x8, 0x4, 0x6, 0x3, 0x30, 0x9, 0x6, 0x5], [0xe5, 0x3, 0x3, 0x2, 0x10, 0xfff8, 0xf89b, 0x2427, 0xfffe, 0x9, 0x78, 0xbd, 0x7f, 0x4, 0x6, 0xea49]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2084850}, 0x40000) 9m26.692882893s ago: executing program 7 (id=1397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) 9m11.484977318s ago: executing program 41 (id=1397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) 8m50.985345848s ago: executing program 8 (id=1464): vmsplice(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)="109d6ec093a9ebc11b07a79fa9b21b6c1736134700f20fdbe92cff3e5ba0f99d14b6183ee6b5d5af2a6cdf31d99f53468ad1abf0a1c22f276a929f2ea55116c756eaaaf3257f8560d621", 0x4a}], 0x1, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8m50.121234975s ago: executing program 8 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m48.094829764s ago: executing program 8 (id=1472): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 8m43.997108172s ago: executing program 8 (id=1477): vmsplice(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000300)="109d6ec093a9ebc11b07a79fa9b21b6c1736134700f20fdbe92cff3e5ba0f99d14b6183ee6b5d5af2a6cdf31d99f53468ad1abf0a1c22f276a929f2ea55116c756eaaaf3257f8560d621", 0x4a}], 0x1, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8m42.797623688s ago: executing program 8 (id=1481): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x20000000) 8m41.63110584s ago: executing program 8 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8m26.331789265s ago: executing program 42 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m20.742035095s ago: executing program 0 (id=2107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x400, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x47, 0xd, 0x8, @time={0x100, 0x6}, {0x40, 0xff}, {0x10, 0x9}, @note={0xb4, 0x1, 0x6, 0x14, 0xc}}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0xd8f2}, {0x0, 0x7f}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100ed7a6ebe"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m19.970557549s ago: executing program 0 (id=2110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r0, 0x1) 2m17.713731077s ago: executing program 0 (id=2114): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 2m12.580493986s ago: executing program 0 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x400, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x47, 0xd, 0x8, @time={0x100, 0x6}, {0x40, 0xff}, {0x10, 0x9}, @note={0xb4, 0x1, 0x6, 0x14, 0xc}}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0xd8f2}, {0x0, 0x7f}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100ed7a6ebe"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 2m11.905933008s ago: executing program 0 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x51) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 2m9.379080556s ago: executing program 0 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r3, r3, 0x0, 0xff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x13, 0x0, &(0x7f00000000c0)) 1m52.401812427s ago: executing program 43 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r3, r3, 0x0, 0xff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x13, 0x0, &(0x7f00000000c0)) 1m48.145218679s ago: executing program 6 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 1m46.113750973s ago: executing program 6 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f540800"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000200000505000100070000000900020073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) 1m45.118888803s ago: executing program 6 (id=2167): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() syz_clone3(&(0x7f00000003c0)={0x1a0000280, 0x0, &(0x7f0000000100), &(0x7f0000000180), {0x15}, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m41.367252122s ago: executing program 6 (id=2171): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="181a000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m39.85297102s ago: executing program 6 (id=2174): pipe2$9p(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a300000000005000740080000001400000011000100"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c819}, 0x40) recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m39.457406666s ago: executing program 6 (id=2177): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, 0x0, 0x0, 0xa00}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 1m24.228773712s ago: executing program 44 (id=2177): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, 0x0, 0x0, 0xa00}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 1m4.55159456s ago: executing program 3 (id=2226): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mlock2(&(0x7f00002bd000/0x4000)=nil, 0x4000, 0x1) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ\xad\xc4\xb9Ut\xcda\x9b\x11X\x03\x00'/51, 0x7) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, 0x0) 1m2.625868779s ago: executing program 3 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x20008000) 1m0.83296811s ago: executing program 3 (id=2232): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) quotactl$Q_SETQUOTA(0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 56.772985953s ago: executing program 3 (id=2238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x6ebb, 0x0, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 48.750592942s ago: executing program 3 (id=2250): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x100000001, 0x0, 0x800, 0x8, 0x6, 0xfffffffffffffffd, 0x6}) 47.539741746s ago: executing program 3 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x400, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x47, 0xd, 0x8, @time={0x100, 0x6}, {0x40, 0xff}, {0x10, 0x9}, @note={0xb4, 0x1, 0x6, 0x14, 0xc}}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0xd8f2}, {0x0, 0x7f}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100ed7a6ebe"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 32.295408532s ago: executing program 45 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x400, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x47, 0xd, 0x8, @time={0x100, 0x6}, {0x40, 0xff}, {0x10, 0x9}, @note={0xb4, 0x1, 0x6, 0x14, 0xc}}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0xd8f2}, {0x0, 0x7f}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f00000005c0), 0x0) read$snapshot(0xffffffffffffffff, 0x0, 0xffffffbf) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100ed7a6ebe"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 31.060610499s ago: executing program 4 (id=2280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x6ebb, 0x0, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 30.329041826s ago: executing program 5 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 28.947166805s ago: executing program 5 (id=2284): bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x28, 0x6b}, 0x18) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67200000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 22.92714944s ago: executing program 4 (id=2293): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xd357, 0x80, 0x6, 0x210}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x0) syz_open_dev$media(0x0, 0x200, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd_index=0x4, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0xd, {0x7, 0x9}, 0x2}, 0x1) 18.817040373s ago: executing program 5 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 15.849990328s ago: executing program 9 (id=2303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x9, 0xd}, {0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x2, 0x4}, {0x4, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xd, 0x4}], 0x10, 0x5b8a}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x9, 0x0, 0x7fffffff, 0x80000000, 0xe000, 0x40, 0x1, 0x10001}, &(0x7f00000004c0)={0x1e, 0x9, 0x7, 0x1, 0x0, 0x4, 0x100000001, 0x3ff}, &(0x7f0000000500)={0x1, 0xff, 0x4, 0x80, 0x100000000, 0x3, 0x5, 0x1999}, &(0x7f0000001580)={r7, r8+10000000}, &(0x7f0000001600)={&(0x7f00000015c0)={[0xffff]}, 0x8}) recvfrom(r6, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x13, 0x0, &(0x7f00000000c0)) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 15.261481515s ago: executing program 5 (id=2304): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0181) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x6ebb, 0x0, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 13.940676583s ago: executing program 9 (id=2306): ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000dfff020000060900010073797a30000000000900020073797a3200000000300004802c0001800a00010071756f7461"], 0x84}, 0x1, 0x0, 0x0, 0x40040000}, 0x44000) 13.288527813s ago: executing program 9 (id=2309): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007911b00000000000851000000200000007000000009500a505000000000000070000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x6}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x2, 0x3, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', 0x0, 0x0, &(0x7f00000001c0)='discard') fsopen(&(0x7f0000000400)='befs\x00', 0x1) 11.581914957s ago: executing program 1 (id=2310): socket(0x80000000000000a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0x4}}, 0x11) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11.374993299s ago: executing program 5 (id=2311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="080002807235ab6208"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 11.297411251s ago: executing program 1 (id=2312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) 11.249907668s ago: executing program 9 (id=2313): r0 = socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) lsm_set_self_attr(0x66, 0x0, 0x21, 0x0) 10.400979963s ago: executing program 4 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sched_getaffinity(r0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x103000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1a) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 8.0715726s ago: executing program 2 (id=2316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40080a0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x100400) 6.818540989s ago: executing program 5 (id=2317): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0xf, 0x20000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmmsg$inet6(r2, &(0x7f0000003180), 0x0, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x0, 0xffffffff, {{0x18, 0x4, 0x1, 0x2e, 0x60, 0x66, 0x0, 0x40, 0x4, 0x0, @remote, @local, {[@generic={0x7, 0x9, "b1869e7688fc0f"}, @generic={0x83, 0x2}, @ssrr={0x89, 0x7, 0x30, [@multicast1]}, @generic={0x86, 0xc, "8d3be2e3c561e72626a8"}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x26, 0x3, [{0x0, 0xe, "2bf04c2a61c73d0f292997a3"}, {0x8d43432ef4f6fcd, 0x2}, {0x0, 0x2}, {0x6, 0xe, "e23d5eb964748b6e6c68add2"}]}]}}}}}) 5.586504868s ago: executing program 2 (id=2318): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x76) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000000), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 5.389058661s ago: executing program 1 (id=2319): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) geteuid() r4 = socket(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000600)={0x3, @null}) 5.300576436s ago: executing program 4 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mkdir(0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80000) 5.059053942s ago: executing program 2 (id=2321): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000480)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40000000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 3.961066104s ago: executing program 1 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 3.317223642s ago: executing program 4 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000280)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94) 3.075299429s ago: executing program 2 (id=2324): socket(0x80000000000000a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000050000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0x4}}, 0x11) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.940961721s ago: executing program 9 (id=2325): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) umount2(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x10, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.031064323s ago: executing program 4 (id=2326): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec331073010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x52, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x46, 0xc6, 0x42, 0x8, 0x413c, 0x81e4, 0x8029, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x9, 0x7, 0x40, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0xd6, 0x2a, 0x66, 0xd, [], [{{0x9, 0x5, 0x5, 0x11, 0x3ff, 0x5, 0x4, 0x5, [@generic={0x25, 0x5, "c2e87a11153a6d8bbe89e62a90b2065402405354e52ea22f5311af53b02cc8f3fb947f"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.843976926s ago: executing program 2 (id=2327): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60002) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) timer_create(0x3, &(0x7f0000000080)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000240)="bdeec35ed894c649af27de3ecf937d3f1a5c874a5d24f342d6feac97d422ba7b08f1d148b2f07a81a73baaeaea16cbb80520b963194745d2b2ebd5ab25de698588222839e67986e5d3265fe2c54c91cec3d02e8b3a92a3a243e071b1b6e1f887bb94d1dc7bf5ba0f226d7145e0b41b79b904cbd9702396b7d2108780000683ffa4ebd46c68248bcb6f90c536b2268a66d7d40ab780c9ff02a1480a7b681fce76fa", &(0x7f0000000300)="21b12dde831669ee21ad4931e4c4585cab018fe88ecd48cb90eab9603f2addc61a81c3af5c44e6028e21f43e"}}, &(0x7f0000000100)) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x0) 1.792047092s ago: executing program 1 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080002807235ab6208"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 212.239118ms ago: executing program 9 (id=2329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40080a0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x100400) 211.740403ms ago: executing program 2 (id=2330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(r1, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 0s ago: executing program 1 (id=2331): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xfffffffffffffffd, 0x20003, 0x3}}) kernel console output (not intermixed with test programs): 925.842174][ T5901] usb 3-1: config 0 descriptor?? [ 925.872222][ T7244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.883239][T12701] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 925.895213][ T7244] bond0 (unregistering): Released all slaves [ 925.897309][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 925.922301][ T5901] hub 3-1:0.0: USB hub found [ 925.930543][T12558] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.949779][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.978203][T12558] bridge_slave_0: entered allmulticast mode [ 925.992391][T12558] bridge_slave_0: entered promiscuous mode [ 926.003710][T12558] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.013585][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.023844][T12558] bridge_slave_1: entered allmulticast mode [ 926.037328][ T5908] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 926.038273][T12558] bridge_slave_1: entered promiscuous mode [ 926.221416][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 926.254380][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 926.262776][ T9] usb 1-1: config 0 has no interface number 0 [ 926.290800][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 926.307209][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.328095][ T9] usb 1-1: Product: syz [ 926.337471][ T9] usb 1-1: Manufacturer: syz [ 926.356179][ T9] usb 1-1: SerialNumber: syz [ 926.367641][ T5908] usb 7-1: device descriptor read/64, error -71 [ 926.378056][T12558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.392203][ T5901] hub 3-1:0.0: 1 port detected [ 926.403855][ T9] usb 1-1: config 0 descriptor?? [ 926.419955][T12558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.436810][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 926.455344][ T9] usb 1-1: selecting invalid altsetting 1 [ 926.462078][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 926.476547][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 926.488118][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 926.498498][ T5908] usb usb7-port1: attempt power cycle [ 926.507042][ T9] usb 1-1: media controller created [ 926.543502][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.872332][ T7244] hsr_slave_0: left promiscuous mode [ 926.893132][ T7244] hsr_slave_1: left promiscuous mode [ 926.907409][ T5908] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 926.908364][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.934209][ T7244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.948518][ T5908] usb 7-1: device descriptor read/8, error -71 [ 927.197436][ T5908] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 928.095871][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 928.441881][ T7244] team0 (unregistering): Port device team_slave_1 removed [ 929.099432][ T7244] team0 (unregistering): Port device team_slave_0 removed [ 930.397509][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 930.437689][T12714] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 930.578628][ T1208] usb 3-1: reset full-speed USB device number 16 using dummy_hcd [ 930.603076][ T5908] usb 7-1: device not accepting address 20, error -71 [ 930.630158][ T5908] usb usb7-port1: unable to enumerate USB device [ 930.649147][ T9] usb 1-1: USB disconnect, device number 17 [ 931.095706][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.637386][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.644380][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1652'. [ 931.706286][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'. [ 932.042268][ T5901] usb 3-1: USB disconnect, device number 16 [ 933.410651][T12558] team0: Port device team_slave_0 added [ 933.449702][T12558] team0: Port device team_slave_1 added [ 933.617480][ T1208] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 933.807532][ T1208] usb 7-1: Using ep0 maxpacket: 32 [ 933.831672][ T1208] usb 7-1: config 0 has no interfaces? [ 933.841154][ T1208] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 934.064348][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 934.726115][ T1208] usb 7-1: Product: syz [ 934.743381][ T1208] usb 7-1: Manufacturer: syz [ 934.779706][ T1208] usb 7-1: SerialNumber: syz [ 934.799495][ T1208] usb 7-1: config 0 descriptor?? [ 934.867565][T12558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.877670][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.077942][T12759] fuse: Unknown parameter 'grou00000000000000000000' [ 935.127391][T12558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.174288][ T792] usb 7-1: USB disconnect, device number 21 [ 935.354778][T12558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.381280][T12558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.467262][T12558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.941969][T12778] syzkaller0: entered promiscuous mode [ 937.256606][T12797] random: crng reseeded on system resumption [ 939.349660][ T792] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 939.809540][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 939.833169][ T792] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 939.850767][ T792] usb 7-1: config 0 has no interface number 0 [ 939.925289][ T792] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 939.952932][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.551242][ T792] usb 7-1: Product: syz [ 940.566145][ T792] usb 7-1: Manufacturer: syz [ 940.571630][ T792] usb 7-1: SerialNumber: syz [ 940.619305][ T792] usb 7-1: config 0 descriptor?? [ 940.670944][ T792] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 940.687384][ T792] usb 7-1: selecting invalid altsetting 1 [ 940.693196][ T792] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 940.833463][ T792] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 940.850869][ T792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 940.861569][ T792] usb 7-1: media controller created [ 940.907856][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.949763][T12799] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 941.999257][ T792] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 942.006603][ T792] zl10353_read_register: readreg error (reg=127, ret==-32) [ 942.292822][ T792] usb 7-1: USB disconnect, device number 22 [ 944.378516][T12558] hsr_slave_0: entered promiscuous mode [ 944.397393][T12558] hsr_slave_1: entered promiscuous mode [ 944.407454][T12558] debugfs: 'hsr0' already exists in 'hsr' [ 944.423803][T12558] Cannot create hsr debugfs directory [ 944.647767][T12811] team0 (unregistering): Port device team_slave_0 removed [ 944.682835][T12811] team0 (unregistering): Port device team_slave_1 removed [ 944.710766][T12818] : entered promiscuous mode [ 944.845475][T12438] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 944.929940][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1672'. [ 944.957006][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 945.043095][T12438] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.183945][ T1208] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 945.437410][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 945.475160][ T1208] usb 6-1: config 0 has no interfaces? [ 945.507738][ T1208] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 945.537907][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 945.575439][ T1208] usb 6-1: Product: syz [ 945.596944][ T1208] usb 6-1: Manufacturer: syz [ 945.614368][ T1208] usb 6-1: SerialNumber: syz [ 945.700764][ T1208] usb 6-1: config 0 descriptor?? [ 946.034353][T12824] fuse: Unknown parameter 'grou00000000000000000000' [ 946.277642][ T9] usb 6-1: USB disconnect, device number 18 [ 948.707602][T12438] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.227324][ T792] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 949.572370][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 949.831021][ T792] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 949.988871][ T792] usb 7-1: config 0 has no interface number 0 [ 950.124682][ T792] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 950.157433][T12438] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 950.170642][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.200484][ T792] usb 7-1: Product: syz [ 950.204733][ T792] usb 7-1: Manufacturer: syz [ 950.243021][ T792] usb 7-1: SerialNumber: syz [ 950.850281][ T792] usb 7-1: config 0 descriptor?? [ 950.973428][ T792] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 950.984314][T12849] libceph: resolve '96.' (ret=-3): failed [ 951.027308][ T792] usb 7-1: selecting invalid altsetting 1 [ 951.037335][ T792] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 951.068116][ T792] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 951.109162][ T792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 951.158914][ T792] usb 7-1: media controller created [ 951.261234][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.056543][T12872] tipc: Started in network mode [ 952.094154][T12872] tipc: Node identity e2b6baf29307, cluster identity 4711 [ 952.148330][T12872] tipc: Enabled bearer , priority 0 [ 952.318353][T12843] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 952.439074][ T792] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 952.464576][ T792] zl10353_read_register: readreg error (reg=127, ret==-32) [ 952.535107][T12867] tipc: Disabling bearer [ 952.708995][ T792] usb 7-1: USB disconnect, device number 23 [ 955.566993][T12558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 955.704857][T12558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 957.135108][T12558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 957.283856][T12558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 957.361363][ T7082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 957.371291][ T7082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 957.388813][ T7082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 957.465856][ T7082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 957.487817][ T7082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 958.078725][T12911] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1692'. [ 959.247278][ T5909] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 959.866477][ T5834] Bluetooth: hci4: command tx timeout [ 960.103341][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 960.193890][ T5909] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.253730][ T5909] usb 7-1: config 0 has no interface number 0 [ 960.356784][ T5909] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 960.408389][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.416501][ T5909] usb 7-1: Product: syz [ 960.440898][ T5909] usb 7-1: Manufacturer: syz [ 960.445666][ T5909] usb 7-1: SerialNumber: syz [ 960.583655][T12902] chnl_net:caif_netlink_parms(): no params data found [ 961.276076][ T5909] usb 7-1: config 0 descriptor?? [ 961.298931][ T5909] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 961.308206][ T5909] usb 7-1: selecting invalid altsetting 1 [ 961.314142][ T5909] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 961.325562][ T5909] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 961.336962][ T5909] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 961.345712][ T5909] usb 7-1: media controller created [ 961.421146][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 962.158509][ T5834] Bluetooth: hci4: command tx timeout [ 962.317799][T12956] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1703'. [ 963.057780][T12923] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 963.107754][ T5909] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 963.115370][ T5909] zl10353_read_register: readreg error (reg=127, ret==-32) [ 964.227596][ T5834] Bluetooth: hci4: command tx timeout [ 965.063149][ T5909] usb 7-1: USB disconnect, device number 24 [ 965.861671][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.892119][T12902] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.083450][T12902] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.091300][T12902] bridge_slave_0: entered allmulticast mode [ 966.217330][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 966.300737][ T5834] Bluetooth: hci4: command tx timeout [ 966.329086][T12902] bridge_slave_0: entered promiscuous mode [ 967.097428][T12902] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.120784][T12902] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.137548][T12902] bridge_slave_1: entered allmulticast mode [ 967.194855][T12902] bridge_slave_1: entered promiscuous mode [ 967.237681][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 967.797371][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40 [ 967.821618][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 967.847323][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 967.904817][T12558] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.917537][ T9] usb 7-1: Product: syz [ 967.921762][ T9] usb 7-1: Manufacturer: syz [ 967.952393][ T9] usb 7-1: SerialNumber: syz [ 968.172809][ T9] usb 7-1: config 0 descriptor?? [ 968.506759][T12989] 9p: Bad value for 'rfdno' [ 968.948249][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.973134][ T9] usb 7-1: can't set config #0, error -71 [ 969.038503][ T9] usb 7-1: USB disconnect, device number 25 [ 969.358653][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.590638][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'. [ 970.322502][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 971.729257][T12902] team0: Port device team_slave_0 added [ 971.780517][T12902] team0: Port device team_slave_1 added [ 972.839395][ T7082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 972.849254][ T7082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 972.859278][ T7082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 972.869331][ T7082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 972.891773][ T7082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 973.019898][ T7214] bridge_slave_1: left allmulticast mode [ 973.215745][ T7214] bridge_slave_1: left promiscuous mode [ 973.238792][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.348096][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 974.054984][ T7214] bridge_slave_0: left allmulticast mode [ 974.101884][ T7214] bridge_slave_0: left promiscuous mode [ 974.167275][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 974.320777][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.329950][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 974.347270][ T9] usb 3-1: config 0 has no interface number 0 [ 974.964054][ T792] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 974.989296][ T7082] Bluetooth: hci2: command tx timeout [ 975.207617][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 975.252548][ T792] usb 7-1: config 0 has no interfaces? [ 975.286308][ T792] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 975.300040][ T792] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 975.318518][ T792] usb 7-1: Product: syz [ 975.322977][ T792] usb 7-1: Manufacturer: syz [ 975.332931][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 975.357265][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.365441][ T9] usb 3-1: Product: syz [ 975.458597][ T792] usb 7-1: SerialNumber: syz [ 975.713618][ T792] usb 7-1: config 0 descriptor?? [ 976.316396][ T9] usb 3-1: Manufacturer: syz [ 976.348149][ T9] usb 3-1: SerialNumber: syz [ 976.348501][T13021] fuse: Unknown parameter 'group_i00000000000000000000' [ 976.785282][ T29] usb 7-1: USB disconnect, device number 26 [ 977.068039][ T7082] Bluetooth: hci2: command tx timeout [ 977.141693][ T9] usb 3-1: config 0 descriptor?? [ 977.176191][ T9] usb 3-1: can't set config #0, error -71 [ 977.434815][ T9] usb 3-1: USB disconnect, device number 17 [ 978.431002][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.456302][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.472754][ T7214] bond0 (unregistering): Released all slaves [ 978.537370][T12902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.554735][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.630441][T12902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.657493][T12902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.713366][T12902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.742647][T13035] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 978.939967][T12902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.777318][ T7082] Bluetooth: hci2: command tx timeout [ 980.917396][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 981.417284][ T7214] hsr_slave_0: left promiscuous mode [ 981.787327][ T7082] Bluetooth: hci2: command tx timeout [ 983.167630][ T7214] hsr_slave_1: left promiscuous mode [ 983.389513][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 983.604553][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.133511][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.417401][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 990.547064][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 990.559446][ T9] usb 6-1: config 0 has no interfaces? [ 990.578274][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 991.547492][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 991.708513][ T9] usb 6-1: Product: syz [ 991.751511][ T9] usb 6-1: Manufacturer: syz [ 991.790670][ T9] usb 6-1: SerialNumber: syz [ 991.878551][ T9] usb 6-1: config 0 descriptor?? [ 991.907701][ T9] usb 6-1: can't set config #0, error -71 [ 991.939226][ T9] usb 6-1: USB disconnect, device number 19 [ 991.955316][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 992.513155][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.970893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.019579][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 993.961724][T12902] hsr_slave_0: entered promiscuous mode [ 994.018070][T12902] hsr_slave_1: entered promiscuous mode [ 994.053154][T12902] debugfs: 'hsr0' already exists in 'hsr' [ 994.086239][T12902] Cannot create hsr debugfs directory [ 1002.995727][ T792] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1005.217431][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 1005.306767][ T792] usb 3-1: device descriptor read/all, error -71 [ 1007.938841][T13148] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1009.657651][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1009.830754][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1009.904889][T13005] chnl_net:caif_netlink_parms(): no params data found [ 1009.950437][ T9] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1010.028289][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.101706][ T9] usb 6-1: Product: syz [ 1010.139598][ T9] usb 6-1: Manufacturer: syz [ 1010.181292][ T9] usb 6-1: SerialNumber: syz [ 1010.350950][ T9] usb 6-1: config 0 descriptor?? [ 1010.471715][ T9] as10x_usb: device has been detected [ 1010.523168][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1010.578416][T13158] random: crng reseeded on system resumption [ 1010.694025][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1010.889948][ T9] as10x_usb: error during firmware upload part1 [ 1010.937502][ T9] Registered device Sky IT Digital Key (green led) [ 1011.111163][T13167] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 1011.243250][ T9] usb 6-1: USB disconnect, device number 20 [ 1011.389824][ T9] Unregistered device Sky IT Digital Key (green led) [ 1011.398417][ T5909] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1011.462011][ T9] as10x_usb: device has been disconnected [ 1011.600577][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 1011.617072][ T5909] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1011.703324][T13177] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1012.501231][ T5909] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1012.592150][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1012.637558][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.638222][ T5909] usb 1-1: config 1 has no interface number 0 [ 1012.644782][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.717453][ T5909] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.749600][T13005] bridge_slave_0: entered allmulticast mode [ 1012.757281][ T5909] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1012.783500][T13005] bridge_slave_0: entered promiscuous mode [ 1012.821632][ T5909] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1012.824965][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.848022][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.852837][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.855743][T13005] bridge_slave_1: entered allmulticast mode [ 1012.873963][T13005] bridge_slave_1: entered promiscuous mode [ 1013.020193][ T7214] bridge_slave_1: left allmulticast mode [ 1013.025894][ T7214] bridge_slave_1: left promiscuous mode [ 1013.099883][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.108169][ T5909] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1013.164005][ T7214] bridge_slave_0: left allmulticast mode [ 1013.189972][T13186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1750'. [ 1013.214110][ T7214] bridge_slave_0: left promiscuous mode [ 1013.224966][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.576652][ T5909] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1013.817300][ T5901] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1014.087330][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 1014.323186][ T1208] usb 1-1: USB disconnect, device number 18 [ 1014.333869][ T5901] usb 6-1: config 0 has no interfaces? [ 1014.346670][ T5901] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1015.306299][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1015.327254][ T5901] usb 6-1: Product: syz [ 1015.331442][ T5901] usb 6-1: Manufacturer: syz [ 1015.336040][ T5901] usb 6-1: SerialNumber: syz [ 1015.402578][ T5909] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1016.341395][ T1208] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1017.262652][ T5901] usb 6-1: config 0 descriptor?? [ 1017.281597][ T5901] usb 6-1: can't set config #0, error -71 [ 1017.307767][ T5901] usb 6-1: USB disconnect, device number 21 [ 1018.556259][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1018.566079][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1018.575746][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1018.585163][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1018.593898][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1018.629022][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.647313][ T1208] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1018.667010][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.683752][ T7214] bond0 (unregistering): Released all slaves [ 1018.939504][ T1208] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1018.957318][ T1208] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1019.287875][ T1208] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1019.303918][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.322652][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.332790][ T1208] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1019.342146][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1019.377696][ T1208] usb 1-1: Product: syz [ 1019.394254][ T1208] usb 1-1: Manufacturer: syz [ 1019.482843][ T1208] usb 1-1: SerialNumber: syz [ 1019.669535][ T1208] usb 1-1: config 0 descriptor?? [ 1019.696789][ T7214] hsr_slave_0: left promiscuous mode [ 1019.706927][ T1208] hub 1-1:0.0: bad descriptor, ignoring hub [ 1019.716715][ T7214] hsr_slave_1: left promiscuous mode [ 1019.722251][ T1208] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1019.745428][ T1208] usb 1-1: selecting invalid altsetting 0 [ 1019.749459][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.795812][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.273998][ T1208] usb 1-1: USB disconnect, device number 19 [ 1020.738862][ T5834] Bluetooth: hci3: command tx timeout [ 1020.868818][T13133] udevd[13133]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.605718][ T7214] team0 (unregistering): Port device team_slave_1 removed [ 1022.595740][ T7214] team0 (unregistering): Port device team_slave_0 removed [ 1022.665044][T13221] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1022.747336][ T5834] Bluetooth: hci3: command tx timeout [ 1022.970809][T13227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1768'. [ 1025.146329][ T5834] Bluetooth: hci3: command tx timeout [ 1025.412169][T13005] team0: Port device team_slave_0 added [ 1025.739130][T13005] team0: Port device team_slave_1 added [ 1026.147723][ T1208] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1027.237559][ T5834] Bluetooth: hci3: command tx timeout [ 1028.229596][ T1208] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.023089][ T1208] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1029.032316][ T1208] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1029.041529][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.078495][ T1208] usb 1-1: config 0 descriptor?? [ 1029.247203][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.277241][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.357320][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.362377][ T1208] usb 1-1: can't set config #0, error -71 [ 1029.450940][ T1208] usb 1-1: USB disconnect, device number 20 [ 1031.556279][ T7082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1031.575569][ T7082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1031.604408][ T7082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1031.658808][ T7082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1031.680635][ T7082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1031.709823][T13199] chnl_net:caif_netlink_parms(): no params data found [ 1032.145962][T13270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1779'. [ 1033.779511][T13277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 1034.622132][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 1034.952722][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1035.139513][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.161134][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.180649][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.208264][ T10] usb 6-1: config 0 descriptor?? [ 1036.681025][ T7082] Bluetooth: hci5: command tx timeout [ 1037.108929][ T5909] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1037.485338][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.512193][ T10] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1037.530351][ T5909] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1038.357548][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0007/input/input16 [ 1038.427427][ T5909] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1038.484690][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.572786][ T5909] usb 3-1: config 0 descriptor?? [ 1038.767330][ T7082] Bluetooth: hci5: command tx timeout [ 1039.261169][ T10] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1039.301786][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.328450][ T10] usb 6-1: USB disconnect, device number 22 [ 1039.337827][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.375524][T13199] bridge_slave_0: entered allmulticast mode [ 1039.433393][T13199] bridge_slave_0: entered promiscuous mode [ 1039.522454][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.561243][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.602382][T13199] bridge_slave_1: entered allmulticast mode [ 1039.616918][T13199] bridge_slave_1: entered promiscuous mode [ 1039.739246][T13319] fido_id[13319]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1039.985324][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.035676][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.265647][T13199] team0: Port device team_slave_0 added [ 1040.368482][T13199] team0: Port device team_slave_1 added [ 1040.387295][ T1208] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1040.550115][T13199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.574440][ T1208] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1040.608629][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.636616][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1791'. [ 1040.648146][ T1208] usb 6-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1040.681100][ T1208] usb 6-1: Product: syz [ 1040.692379][ T5909] usb 3-1: USB disconnect, device number 20 [ 1040.700525][ T1208] usb 6-1: Manufacturer: syz [ 1040.746606][ T1208] usb 6-1: SerialNumber: syz [ 1040.776407][T13199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.825692][ T1208] usb 6-1: config 0 descriptor?? [ 1040.859970][ T1208] cp210x 6-1:0.0: cp210x converter detected [ 1040.907433][ T7082] Bluetooth: hci5: command tx timeout [ 1040.935478][T13199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.370570][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.427601][T13199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.738438][ T1208] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1041.832096][ T1208] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1042.003533][ T10] usb 6-1: USB disconnect, device number 23 [ 1042.068713][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1042.116546][ T10] cp210x 6-1:0.0: device disconnected [ 1042.235179][T13199] hsr_slave_0: entered promiscuous mode [ 1042.279882][T13199] hsr_slave_1: entered promiscuous mode [ 1042.320072][T13199] debugfs: 'hsr0' already exists in 'hsr' [ 1042.338085][T13199] Cannot create hsr debugfs directory [ 1042.409226][T13260] chnl_net:caif_netlink_parms(): no params data found [ 1043.017540][ T7082] Bluetooth: hci5: command tx timeout [ 1043.868378][T13356] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1046.193760][ T7240] bridge_slave_1: left allmulticast mode [ 1046.287027][ T7240] bridge_slave_1: left promiscuous mode [ 1046.315151][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.612977][ T7240] bridge_slave_0: left allmulticast mode [ 1047.414099][ T7240] bridge_slave_0: left promiscuous mode [ 1047.464416][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.614983][ T5909] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1047.982777][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.021125][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.047633][ T7240] bond0 (unregistering): Released all slaves [ 1048.121322][T13401] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1804'. [ 1048.627894][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.651827][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1048.665462][ T5909] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.675484][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.011332][ T5909] usb 6-1: config 0 descriptor?? [ 1049.354149][ T5909] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1049.814917][ T5901] usb 6-1: USB disconnect, device number 24 [ 1050.191237][ T7240] hsr_slave_0: left promiscuous mode [ 1050.207069][ T7240] hsr_slave_1: left promiscuous mode [ 1050.241812][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.273521][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.820121][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 1050.916174][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 1052.107437][T13431] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1052.184588][T13260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.265578][T13260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.354990][T13260] bridge_slave_0: entered allmulticast mode [ 1052.387781][T13260] bridge_slave_0: entered promiscuous mode [ 1052.558102][T13260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.599273][T13260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.645127][T13260] bridge_slave_1: entered allmulticast mode [ 1052.713163][T13260] bridge_slave_1: entered promiscuous mode [ 1053.861681][T13470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1054.198873][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.205300][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.640065][T13260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.821246][T13260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.171976][T13260] team0: Port device team_slave_0 added [ 1058.273085][ T7240] bridge_slave_1: left allmulticast mode [ 1058.287382][ T5901] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1058.300834][ T7240] bridge_slave_1: left promiscuous mode [ 1058.318739][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.363973][ T7240] bridge_slave_0: left allmulticast mode [ 1058.373025][ T7240] bridge_slave_0: left promiscuous mode [ 1058.384056][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.474011][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.490859][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1058.557271][ T5901] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1058.590881][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.629191][ T5901] usb 7-1: config 0 descriptor?? [ 1058.653113][ T5901] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1059.174731][ T7240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.359532][ T7240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.450576][ T7240] bond0 (unregistering): Released all slaves [ 1059.497102][T13260] team0: Port device team_slave_1 added [ 1059.737463][T13260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.744521][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.765294][T13516] loop5: detected capacity change from 0 to 256 [ 1059.796985][T13516] FAT-fs (loop5): Directory bread(block 64) failed [ 1059.803867][T13516] FAT-fs (loop5): Directory bread(block 65) failed [ 1059.810715][T13516] FAT-fs (loop5): Directory bread(block 66) failed [ 1059.817369][T13516] FAT-fs (loop5): Directory bread(block 67) failed [ 1059.824029][T13516] FAT-fs (loop5): Directory bread(block 68) failed [ 1059.830938][T13516] FAT-fs (loop5): Directory bread(block 69) failed [ 1059.837687][T13516] FAT-fs (loop5): Directory bread(block 70) failed [ 1059.838494][T13260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.844270][T13516] FAT-fs (loop5): Directory bread(block 71) failed [ 1059.862039][T13516] FAT-fs (loop5): Directory bread(block 72) failed [ 1059.868940][T13516] FAT-fs (loop5): Directory bread(block 73) failed [ 1059.909413][T13516] syz.5.1824: attempt to access beyond end of device [ 1059.909413][T13516] loop5: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 1059.923328][T13516] syz.5.1824: attempt to access beyond end of device [ 1059.923328][T13516] loop5: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 1059.930003][ T7240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.945781][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1059.945806][ T30] audit: type=1800 audit(1774596791.966:542): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1824" name="file0" dev="loop5" ino=1049241 res=0 errno=0 [ 1060.357389][T13518] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1060.367920][T13518] FAT-fs (loop5): Filesystem has been set read-only [ 1061.256356][ T10] usb 7-1: USB disconnect, device number 27 [ 1061.444795][T13524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.843848][ T7240] team0 (unregistering): Port device team_slave_1 removed [ 1062.002325][ T7240] team0 (unregistering): Port device team_slave_0 removed [ 1062.111675][T13520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1062.503155][T13260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.528583][T13260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.602136][T13260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.410624][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1827'. [ 1063.757112][T13260] hsr_slave_0: entered promiscuous mode [ 1063.788345][T13260] hsr_slave_1: entered promiscuous mode [ 1063.803139][T13260] debugfs: 'hsr0' already exists in 'hsr' [ 1063.817663][T13260] Cannot create hsr debugfs directory [ 1064.086062][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1833'. [ 1065.204190][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1833'. [ 1068.197414][ T1208] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1068.393971][ T1208] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.489916][ T1208] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1068.654806][ T1208] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1068.825206][ T1208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.063222][ T1208] usb 7-1: config 0 descriptor?? [ 1069.123076][ T1208] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1069.246910][T13199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1069.744158][T13199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1069.834822][T13199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1069.924636][T13199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1070.370950][T13600] tipc: Enabled bearer , priority 0 [ 1070.511732][T13599] tipc: Disabling bearer [ 1070.721124][T13604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1841'. [ 1071.052735][ T5901] usb 7-1: USB disconnect, device number 28 [ 1071.329398][ T29] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1071.398263][T13260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1072.542176][T13260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1072.733060][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.761138][T13260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1072.818994][T13260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1072.920474][T13199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.981971][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.989222][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.050153][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.057447][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.206321][T13199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1073.443820][T13260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.544909][T13260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.630699][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.637927][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.715249][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.722546][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.272063][T13199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.785539][T13658] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1849'. [ 1074.822986][T13199] veth0_vlan: entered promiscuous mode [ 1074.898852][T13199] veth1_vlan: entered promiscuous mode [ 1074.907898][ T5909] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1075.177327][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 1075.181994][T13199] veth0_macvtap: entered promiscuous mode [ 1075.202034][ T5909] usb 3-1: config 0 has no interfaces? [ 1075.218510][ T5909] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1075.237358][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1075.277102][ T5909] usb 3-1: Product: syz [ 1075.292430][T13199] veth1_macvtap: entered promiscuous mode [ 1075.304786][ T5909] usb 3-1: Manufacturer: syz [ 1075.328648][ T5909] usb 3-1: SerialNumber: syz [ 1075.360526][ T5909] usb 3-1: config 0 descriptor?? [ 1075.427466][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1075.440600][T13199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1075.483169][T13199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1075.525334][T13260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.569541][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.597595][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.613363][T13654] fuse: Bad value for 'fd' [ 1075.616885][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.619075][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1075.664512][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.705693][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1075.763031][ T5909] usb 3-1: USB disconnect, device number 21 [ 1075.772255][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1075.834212][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1075.904373][ T10] usb 1-1: config 1 has no interface number 0 [ 1075.944980][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.974871][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1076.046347][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1076.088541][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.134653][T13260] veth0_vlan: entered promiscuous mode [ 1076.185408][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1076.255894][ T7240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.307358][ T7240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.402999][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 1076.549324][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1077.629579][ T9] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1078.455299][T13260] veth1_vlan: entered promiscuous mode [ 1078.528041][ T10] usb 1-1: USB disconnect, device number 21 [ 1078.550372][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1078.754953][T13682] tipc: Started in network mode [ 1078.775257][T13682] tipc: Node identity f66d54febbb4, cluster identity 4711 [ 1078.833104][T13682] tipc: Enabled bearer , priority 0 [ 1079.038665][T13681] tipc: Disabling bearer [ 1079.257442][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1079.508035][T13260] veth0_macvtap: entered promiscuous mode [ 1079.896413][T13260] veth1_macvtap: entered promiscuous mode [ 1079.917293][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.939225][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1079.976531][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1079.988543][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1080.007308][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1080.009441][ T5908] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1080.041492][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1080.067896][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1080.127276][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.223095][T13703] netlink: 'syz.6.1858': attribute type 10 has an invalid length. [ 1080.967472][T13260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.006237][T13260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.021478][ T5908] usb 3-1: config 0 descriptor?? [ 1081.083064][ T5908] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1081.187309][T10346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.432926][T13710] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1860'. [ 1081.449077][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.189171][ T5834] Bluetooth: hci2: command tx timeout [ 1084.411336][ T5834] Bluetooth: hci2: command tx timeout [ 1084.837473][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.854849][T10346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.277817][ T5804] usb 3-1: USB disconnect, device number 22 [ 1085.787352][ T5909] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1085.867616][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.909098][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.968136][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 1085.981375][ T5909] usb 3-1: config 0 has no interfaces? [ 1085.998588][ T5909] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1086.010136][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1086.020601][ T5909] usb 3-1: Product: syz [ 1086.025870][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.037515][ T29] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1086.045329][ T5909] usb 3-1: Manufacturer: syz [ 1086.060174][ T5909] usb 3-1: SerialNumber: syz [ 1086.086384][ T5909] usb 3-1: config 0 descriptor?? [ 1086.207275][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 1086.244834][ T29] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1086.294676][ T29] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1086.356328][T13728] fuse: Bad value for 'fd' [ 1086.358071][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1086.432034][ T29] usb 7-1: config 1 has no interface number 0 [ 1086.456845][ T29] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.492429][ T29] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1086.515625][ T5834] Bluetooth: hci2: command tx timeout [ 1086.522938][ T5908] usb 3-1: USB disconnect, device number 23 [ 1086.549399][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1086.577606][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.616648][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.631851][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1086.807371][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.824640][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.859418][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1087.009244][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.074017][ T1208] usb 7-1: USB disconnect, device number 29 [ 1087.101163][ T1208] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1087.329249][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.474184][T13699] chnl_net:caif_netlink_parms(): no params data found [ 1087.516450][T13758] 9pnet_fd: Insufficient options for proto=fd [ 1087.642665][T13761] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1872'. [ 1088.457549][ T5804] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1088.587334][ T5834] Bluetooth: hci2: command tx timeout [ 1088.845327][ T5804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.010958][ T5804] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1089.158525][ T5804] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1089.200560][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.270619][ T5804] usb 7-1: config 0 descriptor?? [ 1090.341296][ T5804] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1090.524016][ T29] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1090.549898][T13699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.585287][T13788] Bluetooth: MGMT ver 1.23 [ 1090.596794][T13699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.616628][T13699] bridge_slave_0: entered allmulticast mode [ 1090.654261][T13699] bridge_slave_0: entered promiscuous mode [ 1090.729164][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1090.766736][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1090.793049][T13699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.846549][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.856421][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1090.893936][T13699] bridge_slave_1: entered allmulticast mode [ 1090.908803][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1090.941513][T13699] bridge_slave_1: entered promiscuous mode [ 1090.962493][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1091.030703][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1091.137408][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.371229][T13699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.401533][ T13] bridge_slave_1: left allmulticast mode [ 1091.421567][ T13] bridge_slave_1: left promiscuous mode [ 1091.458402][ T29] usb 4-1: usb_control_msg returned -32 [ 1091.467953][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.482499][ T29] usbtmc 4-1:16.0: can't read capabilities [ 1091.513023][ T13] bridge_slave_0: left allmulticast mode [ 1091.561344][ T13] bridge_slave_0: left promiscuous mode [ 1091.577641][ T29] usb 4-1: USB disconnect, device number 20 [ 1091.594938][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.648521][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1091.827705][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1091.852598][ T24] usb 1-1: config 0 has no interfaces? [ 1091.887318][ T24] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1091.918948][ T24] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1091.990766][ T24] usb 1-1: Product: syz [ 1092.016126][ T24] usb 1-1: Manufacturer: syz [ 1092.036960][ T24] usb 1-1: SerialNumber: syz [ 1092.069910][ T24] usb 1-1: config 0 descriptor?? [ 1092.331389][T13798] fuse: Bad value for 'fd' [ 1092.355344][ T5909] usb 7-1: USB disconnect, device number 30 [ 1092.519510][ T5908] usb 1-1: USB disconnect, device number 22 [ 1092.869862][ T5909] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 1093.045950][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.089319][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1093.127375][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1093.153642][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.159640][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.210801][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1093.235631][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1093.235948][ T13] bond0 (unregistering): Released all slaves [ 1093.294640][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1093.315222][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1093.371154][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.419532][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1093.455741][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1093.471358][T13699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.499412][ T5909] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1093.522919][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1093.558711][ T5909] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1093.608027][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1093.678104][ T5909] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1093.702063][T13699] team0: Port device team_slave_0 added [ 1093.733146][ T5909] usb 4-1: string descriptor 0 read error: -22 [ 1093.751619][ T5909] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1093.777528][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.797803][T13699] team0: Port device team_slave_1 added [ 1093.899954][ T5909] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1095.103740][ T5909] usb 4-1: USB disconnect, device number 21 [ 1096.484518][T13699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.595630][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.687297][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1096.712565][T13699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.857919][T13699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.864891][T13699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.967403][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1097.015412][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1097.020237][T13699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.062065][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1097.124549][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1097.144980][ T13] hsr_slave_0: left promiscuous mode [ 1097.154921][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.187219][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1097.209638][ T13] hsr_slave_1: left promiscuous mode [ 1097.220099][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1097.249423][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.282626][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.287549][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1097.291962][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1097.342631][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.347250][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1097.351879][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.378711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.399018][ T29] usb 4-1: config 0 descriptor?? [ 1097.411522][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.441773][ T29] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1097.491923][ T13] veth1_macvtap: left promiscuous mode [ 1097.511018][ T13] veth0_macvtap: left promiscuous mode [ 1097.516668][ T13] veth1_vlan: left promiscuous mode [ 1097.537393][ T13] veth0_vlan: left promiscuous mode [ 1097.688035][ T10] usb 6-1: usb_control_msg returned -32 [ 1097.717902][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1097.759450][ T10] usb 6-1: USB disconnect, device number 26 [ 1099.126786][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1099.214995][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1100.097347][ T10] usb 4-1: USB disconnect, device number 22 [ 1101.182760][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 1101.192646][T13910] openvswitch: netlink: Tunnel attr 112 out of range max 16 [ 1101.558668][T13909] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1101.586265][T13904] netlink: 'syz.6.1908': attribute type 2 has an invalid length. [ 1101.654059][T13904] netlink: 'syz.6.1908': attribute type 1 has an invalid length. [ 1102.047523][T13699] hsr_slave_0: entered promiscuous mode [ 1102.080294][T13699] hsr_slave_1: entered promiscuous mode [ 1102.086878][T13699] debugfs: 'hsr0' already exists in 'hsr' [ 1102.100122][T13699] Cannot create hsr debugfs directory [ 1103.321409][T13930] affs: No valid root block on device nullb0 [ 1103.604562][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1911'. [ 1103.687381][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1103.857272][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1103.866104][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1103.890688][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1103.912439][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1103.974595][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1104.041603][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1104.101902][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.145072][T13934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1914'. [ 1104.379865][ T10] usb 3-1: usb_control_msg returned -32 [ 1104.408416][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1104.448710][ T10] usb 3-1: USB disconnect, device number 24 [ 1104.633562][T13938] syzkaller0: entered promiscuous mode [ 1104.652633][T13938] syzkaller0: entered allmulticast mode [ 1104.681686][T13942] tipc: Started in network mode [ 1104.696901][T13942] tipc: Node identity ae02740a1144, cluster identity 4711 [ 1104.717919][T13942] tipc: Enabled bearer , priority 0 [ 1104.797855][T13937] tipc: Resetting bearer [ 1104.872759][T13937] tipc: Disabling bearer [ 1106.316875][T13699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1106.384555][T13699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1106.585260][T13699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1107.058088][T13699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1109.820272][T13699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.893236][T13699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.933287][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.940550][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.045273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.052515][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.686918][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1927'. [ 1111.269479][ T1208] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1111.487476][ T1208] usb 6-1: Using ep0 maxpacket: 8 [ 1111.523751][ T1208] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1111.571705][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1111.662885][ T1208] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1111.715413][ T1208] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1111.781148][ T1208] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1111.797994][T13699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.837038][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.093145][T13699] veth0_vlan: entered promiscuous mode [ 1112.153963][ T1208] usb 6-1: GET_CAPABILITIES returned 0 [ 1112.173717][T13699] veth1_vlan: entered promiscuous mode [ 1112.179757][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1112.189694][ T1208] usbtmc 6-1:16.0: can't read capabilities [ 1112.375572][T14015] syzkaller0: entered promiscuous mode [ 1112.387836][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1112.399071][T14015] syzkaller0: entered allmulticast mode [ 1112.399499][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1112.419658][T13699] veth0_macvtap: entered promiscuous mode [ 1112.441720][ T5909] usb 6-1: USB disconnect, device number 27 [ 1112.454712][T13699] veth1_macvtap: entered promiscuous mode [ 1112.469955][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1112.494254][T14015] tipc: Started in network mode [ 1112.497315][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1112.514746][T14015] tipc: Node identity 9622408170c2, cluster identity 4711 [ 1112.538040][T14015] tipc: Enabled bearer , priority 0 [ 1112.542589][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.568565][T14014] tipc: Resetting bearer [ 1112.585736][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1112.607344][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.634059][T14014] tipc: Disabling bearer [ 1112.737529][T13699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.773716][T13699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.841840][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.858303][ T9] usb 1-1: usb_control_msg returned -32 [ 1112.877911][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1112.879705][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.922671][T10346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.938225][T10346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.948250][ T9] usb 1-1: USB disconnect, device number 23 [ 1113.182880][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.214438][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.326166][ T7240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.350308][ T7240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.896185][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1939'. [ 1115.530516][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.537041][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.440431][T14082] mkiss: ax0: crc mode is auto. [ 1118.810821][ T5834] Bluetooth: hci8: unexpected event for opcode 0x080f [ 1120.083239][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1947'. [ 1121.496433][ T5909] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1121.831312][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1122.090570][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1122.310149][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1122.344483][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1947'. [ 1122.533201][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.607643][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.827281][ T5834] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 1122.837951][ T5834] Bluetooth: hci8: Injecting HCI hardware error event [ 1122.846957][ T7082] Bluetooth: hci8: hardware error 0x00 [ 1122.852754][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1122.852790][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.651943][ T5909] usb 2-1: usb_control_msg returned -32 [ 1123.661977][ T5909] usbtmc 2-1:16.0: can't read capabilities [ 1123.696026][ T5909] usb 2-1: USB disconnect, device number 14 [ 1124.981508][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 1126.079238][ T7082] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1126.145130][ T29] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1126.392397][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1957'. [ 1126.507292][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 1126.546701][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.595014][ T29] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1126.650349][ T29] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1126.679244][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1126.700745][ T29] usb 4-1: Product: syz [ 1126.704966][ T29] usb 4-1: Manufacturer: syz [ 1126.710933][ T29] usb 4-1: SerialNumber: syz [ 1126.963532][ T29] usb 4-1: config 0 descriptor?? [ 1127.644984][ T29] usb 4-1: USB disconnect, device number 23 [ 1128.945431][T14174] binder: 14172:14174 ioctl c0306201 0 returned -14 [ 1129.010718][T14174] binder: 14172:14174 ioctl c0306201 0 returned -14 [ 1129.579400][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1129.917347][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1129.968423][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1130.077456][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1130.271581][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1130.319863][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.579742][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1130.610765][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.017860][T14191] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1131.303870][ T9] usb 4-1: usb_control_msg returned -32 [ 1131.309765][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1132.493028][ T9] usb 4-1: USB disconnect, device number 24 [ 1133.811347][T14215] syz.5.1970 (14215): drop_caches: 2 [ 1134.508059][ T29] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1134.747338][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1134.826666][ T29] usb 6-1: config 0 has no interfaces? [ 1134.872653][ T29] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1134.923799][ T29] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1134.971612][ T29] usb 6-1: Product: syz [ 1135.580714][ T29] usb 6-1: Manufacturer: syz [ 1135.607276][ T29] usb 6-1: SerialNumber: syz [ 1135.653171][ T29] usb 6-1: config 0 descriptor?? [ 1135.816061][T14232] team0 (unregistering): Port device team_slave_0 removed [ 1135.906405][T14224] fuse: Bad value for 'rootmode' [ 1136.027321][ T5908] usb 6-1: USB disconnect, device number 28 [ 1136.115398][T14232] team0 (unregistering): Port device team_slave_1 removed [ 1141.008799][T14284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.018288][T14284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.197377][T11700] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1142.430241][T11700] usb 1-1: Using ep0 maxpacket: 8 [ 1142.452628][T11700] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1142.505440][T11700] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1142.572409][T11700] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.607283][T11700] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.736863][T11700] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1142.800995][T11700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.115709][T11700] usb 1-1: GET_CAPABILITIES returned 0 [ 1143.456665][T11700] usbtmc 1-1:16.0: can't read capabilities [ 1143.518095][T14295] syz.3.1986 (14295): drop_caches: 2 [ 1143.959816][T11700] usb 1-1: USB disconnect, device number 24 [ 1145.034980][T14313] team0 (unregistering): Port device team_slave_0 removed [ 1145.426271][T14313] team0 (unregistering): Port device team_slave_1 removed [ 1146.517724][T12640] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1148.007294][T12640] usb 6-1: Using ep0 maxpacket: 32 [ 1148.032832][T12640] usb 6-1: config 0 has no interfaces? [ 1148.042579][T12640] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1148.105724][T12640] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1148.200598][T12640] usb 6-1: Product: syz [ 1148.262532][T12640] usb 6-1: Manufacturer: syz [ 1148.309457][T12640] usb 6-1: SerialNumber: syz [ 1148.337427][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1148.559256][T12640] usb 6-1: config 0 descriptor?? [ 1148.584535][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1148.607165][ C0] hrtimer: interrupt took 61900 ns [ 1148.723615][ T10] usb 3-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1148.851064][T14330] fuse: Bad value for 'rootmode' [ 1148.874798][ T10] usb 3-1: Product: syz [ 1148.940448][ T10] usb 3-1: Manufacturer: syz [ 1148.987302][T12640] usb 6-1: USB disconnect, device number 29 [ 1149.025216][ T10] usb 3-1: SerialNumber: syz [ 1149.251491][ T10] usb 3-1: config 0 descriptor?? [ 1149.317850][ T10] cp210x 3-1:0.0: cp210x converter detected [ 1149.673877][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1149.771199][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1149.933586][ T5909] usb 3-1: USB disconnect, device number 25 [ 1150.004337][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1150.092260][ T5909] cp210x 3-1:0.0: device disconnected [ 1150.582598][T12640] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1150.797832][T12640] usb 4-1: Using ep0 maxpacket: 8 [ 1150.834766][T14381] tipc: Enabling of bearer rejected, failed to enable media [ 1150.870602][T12640] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1151.006272][T12640] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1151.069651][T12640] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1151.129558][T12640] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.211122][T12640] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1151.254107][T12640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.581981][T12640] usb 4-1: GET_CAPABILITIES returned 0 [ 1151.618704][T12640] usbtmc 4-1:16.0: can't read capabilities [ 1151.814128][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1151.823769][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1151.833081][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1151.849397][ T5909] usb 4-1: USB disconnect, device number 25 [ 1152.736045][T14366] syz.5.2002 (14366): drop_caches: 2 [ 1153.327331][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1154.874666][T14398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1155.437395][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1155.577636][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1155.628494][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1155.647421][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1155.687274][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1155.716880][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1155.737804][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.973842][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 1155.979707][ T10] usbtmc 6-1:16.0: can't read capabilities [ 1156.272031][ T10] usb 6-1: USB disconnect, device number 30 [ 1158.242163][T14461] tipc: Enabling of bearer rejected, failed to enable media [ 1158.507982][ T7082] Bluetooth: hci5: command 0x0406 tx timeout [ 1159.813005][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2025'. [ 1159.899838][T11700] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1160.467555][T11700] usb 2-1: Using ep0 maxpacket: 8 [ 1160.493174][T11700] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1161.317500][T11700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1161.373121][T14487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.423890][T11700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1161.492290][T11700] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.716943][T11700] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1161.727353][T11700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.721143][T11700] usb 2-1: can't set config #16, error -71 [ 1162.817814][T11700] usb 2-1: USB disconnect, device number 15 [ 1163.693790][T11700] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1164.167286][T11700] usb 2-1: Using ep0 maxpacket: 8 [ 1164.222768][T11700] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1164.288344][T11700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1164.312390][T11700] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.357576][T11700] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.390751][T14491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.408437][T11700] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.471017][T11700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.820542][T11700] usb 2-1: GET_CAPABILITIES returned 0 [ 1164.845634][T11700] usbtmc 2-1:16.0: can't read capabilities [ 1165.102984][T12640] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1165.996286][ T10] usb 2-1: USB disconnect, device number 16 [ 1166.096181][T12640] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1166.149278][T12640] usb 4-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1166.201577][T12640] usb 4-1: Product: syz [ 1166.234499][T12640] usb 4-1: Manufacturer: syz [ 1166.270077][T12640] usb 4-1: SerialNumber: syz [ 1166.326585][T12640] usb 4-1: config 0 descriptor?? [ 1166.385998][T12640] cp210x 4-1:0.0: cp210x converter detected [ 1166.783363][T12640] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1167.056109][T12640] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1167.885131][T12640] usb 4-1: USB disconnect, device number 26 [ 1168.074620][T12640] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1168.206408][T12640] cp210x 4-1:0.0: device disconnected [ 1168.422957][T14562] vivid-001: disconnect [ 1168.537329][ T1208] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1169.069322][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 1169.208680][T14555] vivid-001: reconnect [ 1169.280867][ T1208] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1169.376834][ T1208] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1169.447291][ T1208] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1169.480367][ T1208] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.696051][ T1208] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1169.807070][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.141192][ T1208] usb 2-1: GET_CAPABILITIES returned 0 [ 1170.175538][ T1208] usbtmc 2-1:16.0: can't read capabilities [ 1170.398165][ T5909] usb 2-1: USB disconnect, device number 17 [ 1174.227333][T11700] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1174.473276][T14617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2061'. [ 1174.538562][T11700] usb 7-1: Using ep0 maxpacket: 8 [ 1174.648610][T11700] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1174.684760][T11700] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1174.729557][T11700] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.781231][T11700] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.822562][T11700] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1174.858810][T11700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.277555][T11700] usb 7-1: GET_CAPABILITIES returned 0 [ 1175.325911][T11700] usbtmc 7-1:16.0: can't read capabilities [ 1175.571277][T11700] usb 7-1: USB disconnect, device number 31 [ 1176.834428][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.840895][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.243917][T11700] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1178.108426][T11700] usb 6-1: Using ep0 maxpacket: 8 [ 1178.124947][T11700] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1178.200159][T11700] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1178.307249][T11700] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1178.374976][T11700] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.517326][T11700] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1179.091276][T14642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.106637][T11700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.625408][T11700] usb 6-1: usb_control_msg returned -71 [ 1181.587606][T11700] usbtmc 6-1:16.0: can't read capabilities [ 1181.603830][T11700] usb 6-1: USB disconnect, device number 31 [ 1184.530234][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1185.653460][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1185.717291][ T792] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1186.048526][ T792] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1186.132079][ T792] usb 4-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1186.179480][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 1186.191658][ T792] usb 4-1: Product: syz [ 1186.210492][ T792] usb 4-1: Manufacturer: syz [ 1186.397600][ T792] usb 4-1: SerialNumber: syz [ 1186.828808][ T792] usb 4-1: config 0 descriptor?? [ 1186.876489][ T792] cp210x 4-1:0.0: cp210x converter detected [ 1186.987263][T14715] fido_id[14715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1188.927941][ T792] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1188.935499][ T792] cp210x 4-1:0.0: querying part number failed [ 1190.820216][ T792] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1190.842866][ T792] usb 4-1: USB disconnect, device number 27 [ 1191.307731][ T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1191.316192][ T792] cp210x 4-1:0.0: device disconnected [ 1191.348624][T14733] mkiss: ax0: crc mode is auto. [ 1196.006374][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 1198.434155][ T5909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1199.996309][T14806] syz.2.2108 (14806): drop_caches: 2 [ 1200.177311][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1200.186409][ T5909] usb 4-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1200.351055][ T5909] usb 4-1: Product: syz [ 1200.355290][ T5909] usb 4-1: Manufacturer: syz [ 1201.777454][ T5909] usb 4-1: SerialNumber: syz [ 1201.969856][ T5909] usb 4-1: config 0 descriptor?? [ 1202.341281][ T5909] usb 4-1: can't set config #0, error -71 [ 1202.352742][ T5909] usb 4-1: USB disconnect, device number 28 [ 1202.799210][ T792] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1203.487273][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 1203.705361][ T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.722012][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.614114][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.667307][T14823] Bluetooth: hci2: command 0x0406 tx timeout [ 1204.726496][ T792] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1204.797651][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.930858][ T792] usb 2-1: config 0 descriptor?? [ 1205.225839][T14839] 9p: Bad value for 'rfdno' [ 1205.577514][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 1205.608805][ T792] usbhid 2-1:0.0: can't add hid device: -71 [ 1205.645384][ T792] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1205.733626][ T792] usb 2-1: USB disconnect, device number 18 [ 1207.469402][T14853] syz.2.2124 (14853): drop_caches: 2 [ 1210.127264][T12640] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1211.591136][T12640] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1211.746168][T12640] usb 3-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1211.830329][T12640] usb 3-1: Product: syz [ 1211.834563][T12640] usb 3-1: Manufacturer: syz [ 1211.913912][T12640] usb 3-1: SerialNumber: syz [ 1211.974127][T12640] usb 3-1: config 0 descriptor?? [ 1212.128820][T12640] cp210x 3-1:0.0: cp210x converter detected [ 1213.587344][T12640] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1213.594917][T12640] cp210x 3-1:0.0: querying part number failed [ 1213.739633][T12640] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1213.948993][T12640] usb 3-1: USB disconnect, device number 26 [ 1214.413798][T12640] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1214.434262][T12640] cp210x 3-1:0.0: device disconnected [ 1214.959057][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2136'. [ 1215.666024][T14906] syz.2.2137 (14906): drop_caches: 2 [ 1215.832058][T14903] Can't find ip_set type hash€ [ 1222.934422][T14955] syz.3.2150 (14955): drop_caches: 2 [ 1229.920753][T14823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1229.961153][T14823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1229.979172][T14823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1230.058118][T14823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1230.073067][T14823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1232.108685][ T5834] Bluetooth: hci3: command tx timeout [ 1235.177701][ T5834] Bluetooth: hci3: command tx timeout [ 1235.645196][ T58] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.951259][ T58] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.280592][ T58] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.031598][ T58] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.227634][ T5834] Bluetooth: hci3: command tx timeout [ 1238.135661][T14989] chnl_net:caif_netlink_parms(): no params data found [ 1238.274017][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.297338][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.617282][ T1208] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1239.017384][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 1239.303943][ T1208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.317251][ T5834] Bluetooth: hci3: command tx timeout [ 1239.327644][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.338684][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.357693][ T1208] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1239.366869][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.437726][ T1208] usb 2-1: config 0 descriptor?? [ 1239.743938][ T58] bridge_slave_1: left allmulticast mode [ 1239.771944][ T58] bridge_slave_1: left promiscuous mode [ 1239.800321][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.897979][ T58] bridge_slave_0: left allmulticast mode [ 1239.931153][ T58] bridge_slave_0: left promiscuous mode [ 1239.950120][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.986646][ T1208] usbhid 2-1:0.0: can't add hid device: -71 [ 1239.999409][ T1208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1240.052110][ T1208] usb 2-1: USB disconnect, device number 19 [ 1242.080808][T15070] 9p: Bad value for 'rfdno' [ 1245.578006][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.634538][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1245.685071][ T58] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1245.716940][ T58] bond0 (unregistering): Released all slaves [ 1245.858007][T14989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.865213][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.953133][T14989] bridge_slave_0: entered allmulticast mode [ 1245.993939][T14989] bridge_slave_0: entered promiscuous mode [ 1246.011725][T14989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.019601][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.026915][T14989] bridge_slave_1: entered allmulticast mode [ 1246.038002][T14989] bridge_slave_1: entered promiscuous mode [ 1246.061794][ T58] : left promiscuous mode [ 1246.630648][T14989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.699744][T14989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.144535][T14989] team0: Port device team_slave_0 added [ 1247.162315][T14989] team0: Port device team_slave_1 added [ 1247.211758][T14989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.219351][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.285343][T14989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.368140][T14989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.375126][T14989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.837975][T14989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.162047][T14989] hsr_slave_0: entered promiscuous mode [ 1250.169189][T14989] hsr_slave_1: entered promiscuous mode [ 1250.175939][T14989] debugfs: 'hsr0' already exists in 'hsr' [ 1250.203784][T14989] Cannot create hsr debugfs directory [ 1250.677701][T12640] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1251.647259][T12640] usb 3-1: Using ep0 maxpacket: 32 [ 1251.654498][T12640] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1251.681485][T12640] usb 3-1: config 0 has no interface number 0 [ 1251.749815][T12640] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1251.767419][T12640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.775468][T12640] usb 3-1: Product: syz [ 1251.797422][T12640] usb 3-1: Manufacturer: syz [ 1251.807251][T12640] usb 3-1: SerialNumber: syz [ 1251.818376][T12640] usb 3-1: config 0 descriptor?? [ 1251.843969][T12640] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1251.869432][T12640] usb 3-1: selecting invalid altsetting 1 [ 1251.875410][T12640] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1251.902704][T12640] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1251.924680][T12640] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1251.938233][T12640] usb 3-1: media controller created [ 1251.961091][T12640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.047570][T12640] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1252.066995][T12640] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1252.097602][T12640] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1252.226095][T12640] usb 3-1: USB disconnect, device number 27 [ 1252.442619][ T58] hsr_slave_0: left promiscuous mode [ 1252.456137][ T58] hsr_slave_1: left promiscuous mode [ 1252.473048][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.482565][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.504637][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.527239][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.554335][ T58] veth1_macvtap: left promiscuous mode [ 1252.562303][ T58] veth0_macvtap: left promiscuous mode [ 1252.582782][ T58] veth1_vlan: left promiscuous mode [ 1252.603106][ T58] veth0_vlan: left promiscuous mode [ 1254.485995][T14823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1254.495733][T14823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1254.508772][T14823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1254.531913][T14823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1254.546889][T14823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1256.708836][T14823] Bluetooth: hci0: command tx timeout [ 1258.748119][T14823] Bluetooth: hci0: command tx timeout [ 1260.828445][T14823] Bluetooth: hci0: command tx timeout [ 1260.837815][T15150] chnl_net:caif_netlink_parms(): no params data found [ 1261.297537][T12640] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1261.517471][T12640] usb 6-1: Using ep0 maxpacket: 32 [ 1261.833790][T12640] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1261.862346][T12640] usb 6-1: config 0 has no interface number 0 [ 1261.890125][T12640] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1261.909724][T12640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.934737][T12640] usb 6-1: Product: syz [ 1261.951598][T12640] usb 6-1: Manufacturer: syz [ 1261.956243][T12640] usb 6-1: SerialNumber: syz [ 1262.505052][T12640] usb 6-1: config 0 descriptor?? [ 1262.598095][T12640] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1262.617366][T12640] usb 6-1: selecting invalid altsetting 1 [ 1262.623142][T12640] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1262.838338][T12640] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1262.894463][T12640] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1262.911746][T14823] Bluetooth: hci0: command tx timeout [ 1262.977421][T12640] usb 6-1: media controller created [ 1263.042760][T12640] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1263.077335][T14989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1263.125112][T12640] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1263.145351][T12640] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1263.176344][T12640] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1263.449000][T12640] usb 6-1: USB disconnect, device number 32 [ 1264.590736][T14989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1264.626983][ T29] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1264.825357][ T29] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1265.646925][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.658298][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.665610][T15150] bridge_slave_0: entered allmulticast mode [ 1265.678226][T15150] bridge_slave_0: entered promiscuous mode [ 1265.755490][T14989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1265.793842][T14989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1265.843310][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.896369][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.943177][T15150] bridge_slave_1: entered allmulticast mode [ 1266.014884][T15150] bridge_slave_1: entered promiscuous mode [ 1266.061971][T15212] fido_id[15212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1267.059726][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.198222][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.489928][T15150] team0: Port device team_slave_0 added [ 1267.580173][T15150] team0: Port device team_slave_1 added [ 1268.525390][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.547039][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.603237][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.660613][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.686594][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.745046][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.017679][T15150] hsr_slave_0: entered promiscuous mode [ 1269.032399][T15150] hsr_slave_1: entered promiscuous mode [ 1271.028702][T14989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.052898][T14989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.118366][T14989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1271.129134][T14989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.336045][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.343237][ T7214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.400839][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.408085][ T7214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.667685][ T1208] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1271.838815][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 1271.846725][ T1208] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1271.855593][ T1208] usb 6-1: config 0 has no interface number 0 [ 1271.883977][ T1208] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1271.893765][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.902270][ T1208] usb 6-1: Product: syz [ 1271.906618][ T1208] usb 6-1: Manufacturer: syz [ 1271.911333][ T1208] usb 6-1: SerialNumber: syz [ 1271.920837][ T1208] usb 6-1: config 0 descriptor?? [ 1271.929553][ T1208] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1271.939435][ T1208] usb 6-1: selecting invalid altsetting 1 [ 1271.945158][ T1208] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1271.975318][ T1208] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1271.986288][ T1208] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1272.009215][ T1208] usb 6-1: media controller created [ 1272.049710][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1272.140935][ T1208] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1272.167936][ T1208] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1272.186603][ T1208] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1272.290440][ T1208] usb 6-1: USB disconnect, device number 33 [ 1272.614134][T14989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.261788][T15150] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1277.301319][T15150] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1277.574261][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 1278.194474][T15150] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1278.277549][T15150] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1278.447736][T14989] veth0_vlan: entered promiscuous mode [ 1278.543273][T14989] veth1_vlan: entered promiscuous mode [ 1278.635245][T14989] veth0_macvtap: entered promiscuous mode [ 1278.675621][T14989] veth1_macvtap: entered promiscuous mode [ 1278.739300][T14989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.786827][T14989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.872344][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.901763][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.952459][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.981754][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.923662][T15150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.267062][T15150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.314027][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.321280][T10346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.428528][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.435729][T10346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.620364][ T792] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1281.677360][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.693651][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.788197][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 1281.837831][ T792] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1281.845878][ T792] usb 6-1: config 0 has no interface number 0 [ 1281.883369][T15150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1281.919228][ T792] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1281.942202][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.969154][ T792] usb 6-1: Product: syz [ 1281.978977][ T792] usb 6-1: Manufacturer: syz [ 1281.997597][ T792] usb 6-1: SerialNumber: syz [ 1282.009088][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.034333][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.048142][ T792] usb 6-1: config 0 descriptor?? [ 1282.076451][ T792] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1282.115514][ T792] usb 6-1: selecting invalid altsetting 1 [ 1282.151862][ T792] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1282.267325][ T792] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1282.357416][ T792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1282.365774][ T792] usb 6-1: media controller created [ 1282.581595][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.640822][T15334] mkiss: ax0: crc mode is auto. [ 1282.846975][ T792] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1282.897288][ T792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1282.947452][ T792] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1283.208500][ T792] usb 6-1: USB disconnect, device number 34 [ 1285.207879][T15150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.138754][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2243'. [ 1288.080030][T15375] netlink: 'syz.4.2246': attribute type 10 has an invalid length. [ 1288.094863][T15375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.104339][T15375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1288.118346][T15375] loop5: detected capacity change from 0 to 7 [ 1288.129424][T15375] Dev loop5: unable to read RDB block 7 [ 1288.135032][T15375] loop5: AHDI p1 [ 1288.138955][T15375] loop5: partition table partially beyond EOD, truncated [ 1290.926544][ T792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1291.046807][T15150] veth0_vlan: entered promiscuous mode [ 1291.097749][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 1291.130848][T15150] veth1_vlan: entered promiscuous mode [ 1291.142120][ T792] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.174289][ T792] usb 5-1: config 0 has no interface number 0 [ 1291.223388][ T792] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1291.263717][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.311390][ T792] usb 5-1: Product: syz [ 1291.332551][ T792] usb 5-1: Manufacturer: syz [ 1291.351447][T15150] veth0_macvtap: entered promiscuous mode [ 1291.367752][ T792] usb 5-1: SerialNumber: syz [ 1291.428919][T15150] veth1_macvtap: entered promiscuous mode [ 1291.460204][ T792] usb 5-1: config 0 descriptor?? [ 1291.520871][ T792] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1291.565652][T15150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.574908][ T792] usb 5-1: selecting invalid altsetting 1 [ 1293.090954][ T792] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1293.580203][ T792] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1293.597633][ T792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1293.614738][ T792] usb 5-1: media controller created [ 1293.620823][T15150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.695560][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.702245][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1293.718003][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.742297][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.768826][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.871714][ T792] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1293.917353][ T792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1293.952273][ T792] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1294.077352][T10346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.085212][T10346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.234893][ T792] usb 5-1: USB disconnect, device number 7 [ 1294.297383][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1294.346677][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1294.483353][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.565015][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1294.772649][ T10] usb 2-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1295.044845][ T10] usb 2-1: Product: syz [ 1295.192317][ T10] usb 2-1: Manufacturer: syz [ 1295.197145][ T10] usb 2-1: SerialNumber: syz [ 1295.254721][ T10] usb 2-1: config 0 descriptor?? [ 1295.279766][ T10] cp210x 2-1:0.0: cp210x converter detected [ 1295.679509][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1295.707307][ T10] cp210x 2-1:0.0: querying part number failed [ 1295.730359][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1297.122155][ T5804] usb 2-1: USB disconnect, device number 20 [ 1297.836391][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1297.846814][ T5804] cp210x 2-1:0.0: device disconnected [ 1298.219379][ T5190] Dev loop5: unable to read RDB block 7 [ 1298.226644][ T5190] loop5: AHDI p1 [ 1298.231118][ T5190] loop5: partition table partially beyond EOD, truncated [ 1299.549193][T15470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2263'. [ 1299.558424][T15470] openvswitch: netlink: Tunnel attr 112 out of range max 16 [ 1299.978222][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.980168][T15469] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1299.985505][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.237621][T15461] mkiss: ax0: crc mode is auto. [ 1300.294152][T15478] fuse: Unknown parameter 'user_id00000000000000000000' [ 1301.274940][ T5190] Dev loop5: unable to read RDB block 7 [ 1301.280756][ T5190] loop5: AHDI p1 [ 1301.435384][ T5190] loop5: partition table partially beyond EOD, truncated [ 1301.799629][ T5190] Dev loop5: unable to read RDB block 7 [ 1301.805226][ T5190] loop5: AHDI p1 [ 1302.635910][ T5190] loop5: partition table partially beyond EOD, truncated [ 1302.757284][T15416] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1302.928206][ T5190] Dev loop5: unable to read RDB block 7 [ 1302.958723][ T5190] loop5: AHDI p1 [ 1302.980847][ T5190] loop5: partition table partially beyond EOD, truncated [ 1303.161447][T15416] usb 2-1: Using ep0 maxpacket: 32 [ 1303.169356][T15416] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1303.196243][T15416] usb 2-1: config 0 has no interface number 0 [ 1303.226949][T15416] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1303.323462][T15416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.995964][T15416] usb 2-1: Product: syz [ 1304.007228][T15416] usb 2-1: Manufacturer: syz [ 1304.037290][T15416] usb 2-1: SerialNumber: syz [ 1304.045896][T15416] usb 2-1: config 0 descriptor?? [ 1304.146123][T15416] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1304.203862][T15416] usb 2-1: selecting invalid altsetting 1 [ 1304.217344][ T5190] Dev loop5: unable to read RDB block 7 [ 1304.330443][T15416] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1304.349110][ T5190] loop5: AHDI p1 [ 1304.352278][T15416] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1304.352896][ T5190] loop5: partition table partially beyond EOD, [ 1304.377596][T15416] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1304.441302][T15416] usb 2-1: media controller created [ 1304.735709][T15416] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1304.747591][ T5190] truncated [ 1305.040933][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1305.407404][T15416] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1305.450906][T15416] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1305.477355][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1305.531352][T15416] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1305.639562][ T24] usb 6-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1305.686736][ T24] usb 6-1: Product: syz [ 1305.710515][ T24] usb 6-1: Manufacturer: syz [ 1305.715179][ T24] usb 6-1: SerialNumber: syz [ 1305.819150][ T24] usb 6-1: config 0 descriptor?? [ 1305.889183][ T24] cp210x 6-1:0.0: cp210x converter detected [ 1306.002876][T15416] usb 2-1: USB disconnect, device number 21 [ 1306.022602][T15528] fuse: Bad value for 'fd' [ 1306.211863][ T24] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1306.958773][ T24] cp210x 6-1:0.0: querying part number failed [ 1307.078100][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1307.630382][ T1208] usb 6-1: USB disconnect, device number 35 [ 1307.718775][ T1208] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1307.782033][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1307.799239][ T1208] cp210x 6-1:0.0: device disconnected [ 1307.832468][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1307.847085][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1307.856307][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1307.866337][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1308.098933][T12640] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1308.937294][T12640] usb 10-1: Using ep0 maxpacket: 8 [ 1308.944668][T12640] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1309.076527][T12640] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1309.211746][T12640] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1309.480754][T12640] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.822836][T12640] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1309.891753][T12640] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.175385][T14823] Bluetooth: hci4: command tx timeout [ 1310.577845][T12640] usb 10-1: usb_control_msg returned -71 [ 1310.583573][T12640] usbtmc 10-1:16.0: can't read capabilities [ 1310.657068][T12640] usb 10-1: USB disconnect, device number 7 [ 1312.290117][T14823] Bluetooth: hci4: command tx timeout [ 1313.101503][ T5190] Dev loop5: unable to read RDB block 7 [ 1313.144313][ T5190] loop5: AHDI p1 [ 1313.156727][ T5190] loop5: partition table partially beyond EOD, truncated [ 1313.467305][T11700] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1314.357337][T14823] Bluetooth: hci4: command tx timeout [ 1314.547645][T11700] usb 3-1: Using ep0 maxpacket: 32 [ 1314.555177][T11700] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1314.627781][T11700] usb 3-1: config 0 has no interface number 0 [ 1314.698491][T11700] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1314.749998][T11700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.834139][T11700] usb 3-1: Product: syz [ 1314.850370][T15596] fuse: Bad value for 'fd' [ 1314.907979][T11700] usb 3-1: Manufacturer: syz [ 1314.916312][T11700] usb 3-1: SerialNumber: syz [ 1315.007626][T11700] usb 3-1: config 0 descriptor?? [ 1315.020176][T15546] chnl_net:caif_netlink_parms(): no params data found [ 1315.063768][T11700] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1315.167240][T11700] usb 3-1: selecting invalid altsetting 1 [ 1315.203018][T11700] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1315.298009][T11700] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1315.367720][T11700] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1315.437664][T11700] usb 3-1: media controller created [ 1315.444945][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2294'. [ 1315.570902][T11700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1315.781861][T11700] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1315.809408][T11700] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1315.850868][T11700] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1316.133761][T11700] usb 3-1: USB disconnect, device number 28 [ 1316.190677][T15546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.271039][T15546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.467295][T14823] Bluetooth: hci4: command tx timeout [ 1317.142131][T15546] bridge_slave_0: entered allmulticast mode [ 1317.186534][T15546] bridge_slave_0: entered promiscuous mode [ 1317.880569][T15546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.920856][T15546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.477757][T15546] bridge_slave_1: entered allmulticast mode [ 1318.510748][T15546] bridge_slave_1: entered promiscuous mode [ 1319.002868][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.037388][ T5190] Dev loop5: unable to read RDB block 7 [ 1320.043003][ T5190] loop5: AHDI p1 [ 1320.046643][ T5190] loop5: partition table partially beyond EOD, truncated [ 1324.149826][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.408948][T15660] fuse: Bad value for 'fd' [ 1324.418998][T15661] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2306'. [ 1324.513430][T15546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.057555][T15416] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1326.707268][T15416] usb 3-1: Using ep0 maxpacket: 32 [ 1326.756269][T15416] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1326.806772][T15416] usb 3-1: config 0 has no interface number 0 [ 1326.849459][T15416] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1326.909496][T15416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.987552][T15416] usb 3-1: Product: syz [ 1327.017399][T15416] usb 3-1: Manufacturer: syz [ 1327.039976][T15416] usb 3-1: SerialNumber: syz [ 1327.141468][T15416] usb 3-1: config 0 descriptor?? [ 1327.184302][T15416] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1327.240376][T15416] usb 3-1: selecting invalid altsetting 1 [ 1327.265388][T15416] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1327.317862][T15416] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1327.363718][T15416] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1327.430965][T15416] usb 3-1: media controller created [ 1327.506949][T15416] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.662244][T15416] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1327.700433][T15416] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1327.748864][T15416] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1328.321312][T15416] usb 3-1: USB disconnect, device number 29 [ 1329.761654][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.154621][T15546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.237560][ T5190] Dev loop5: unable to read RDB block 7 [ 1330.477268][ T5190] loop5: AHDI p1 [ 1331.221345][ T5190] loop5: partition table partially beyond EOD, truncated [ 1331.997341][ T5190] Dev loop5: unable to read RDB block 7 [ 1332.048924][ T5190] loop5: AHDI p1 [ 1332.079516][ T5190] loop5: partition table partially beyond EOD, truncated [ 1332.548741][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.762136][T15546] team0: Port device team_slave_0 added [ 1332.865407][T15546] team0: Port device team_slave_1 added [ 1334.761171][T15546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.807235][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.002935][T15546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.057405][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1335.385846][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2322'. [ 1336.078344][T15546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.146370][T15546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.530009][T15546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.857339][ T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1338.430943][ T792] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1338.497700][ T792] usb 5-1: New USB device strings: Mfr=51, Product=16, SerialNumber=115 [ 1338.605192][T15771] ================================================================== [ 1338.613304][T15771] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 1338.620980][T15771] Read of size 8 at addr ffff88802b69e018 by task syz.9.2329/15771 [ 1338.628905][T15771] [ 1338.631224][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.9.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.631261][T15771] Tainted: [L]=SOFTLOCKUP [ 1338.631270][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1338.631284][T15771] Call Trace: [ 1338.631296][T15771] [ 1338.631306][T15771] dump_stack_lvl+0xe8/0x150 [ 1338.631348][T15771] print_report+0xba/0x230 [ 1338.631381][T15771] ? dvb_device_open+0xc4/0x350 [ 1338.631415][T15771] kasan_report+0x117/0x150 [ 1338.631445][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1338.631477][T15771] ? dvb_device_open+0xc4/0x350 [ 1338.631519][T15771] dvb_device_open+0xc4/0x350 [ 1338.631551][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1338.631580][T15771] chrdev_open+0x4cd/0x5e0 [ 1338.631613][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 1338.631643][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1338.631672][T15771] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1338.631702][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 1338.631732][T15771] do_dentry_open+0x785/0x14e0 [ 1338.631777][T15771] vfs_open+0x3b/0x340 [ 1338.631809][T15771] ? path_openat+0x2df0/0x3860 [ 1338.631837][T15771] path_openat+0x2e08/0x3860 [ 1338.631878][T15771] ? rcu_is_watching+0x15/0xb0 [ 1338.631915][T15771] ? __schedule+0x15f3/0x52d0 [ 1338.631944][T15771] ? __pfx_path_openat+0x10/0x10 [ 1338.631983][T15771] do_file_open+0x23e/0x4a0 [ 1338.632009][T15771] ? __pfx___schedule+0x10/0x10 [ 1338.632037][T15771] ? __pfx_do_file_open+0x10/0x10 [ 1338.632082][T15771] ? _raw_spin_unlock+0x3f/0x50 [ 1338.632105][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1338.632134][T15771] ? alloc_fd+0x64b/0x6c0 [ 1338.632176][T15771] do_sys_openat2+0x113/0x200 [ 1338.632212][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1338.632240][T15771] ? __se_sys_futex+0x3a8/0x450 [ 1338.632273][T15771] ? __pfx_do_sys_openat2+0x10/0x10 [ 1338.632313][T15771] ? rcu_is_watching+0x15/0xb0 [ 1338.632351][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1338.632383][T15771] __x64_sys_openat+0x138/0x170 [ 1338.632425][T15771] do_syscall_64+0x14d/0xf80 [ 1338.632455][T15771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.632482][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.632503][T15771] RIP: 0033:0x7f2c81b5cfce [ 1338.632521][T15771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1338.632539][T15771] RSP: 002b:00007f2c82ad4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1338.632559][T15771] RAX: ffffffffffffffda RBX: 00007f2c82ad56c0 RCX: 00007f2c81b5cfce [ 1338.632575][T15771] RDX: 0000000000100400 RSI: 00007f2c82ad4c00 RDI: ffffffffffffff9c [ 1338.632590][T15771] RBP: 00007f2c82ad4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1338.632603][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1338.632617][T15771] R13: 00007f2c81e16128 R14: 00007f2c81e16090 R15: 00007fffa07f5e18 [ 1338.632642][T15771] [ 1338.632649][T15771] [ 1338.919092][T15771] Allocated by task 1: [ 1338.923139][T15771] kasan_save_track+0x3e/0x80 [ 1338.927811][T15771] __kasan_kmalloc+0x93/0xb0 [ 1338.932399][T15771] __kmalloc_cache_noprof+0x31c/0x660 [ 1338.937763][T15771] dvb_register_device+0x2fd/0x21e0 [ 1338.942958][T15771] dvb_register_frontend+0x649/0x950 [ 1338.948239][T15771] vidtv_bridge_probe+0x9aa/0xf80 [ 1338.953266][T15771] platform_probe+0xf9/0x190 [ 1338.957883][T15771] really_probe+0x267/0xaf0 [ 1338.962408][T15771] __driver_probe_device+0x18c/0x320 [ 1338.967693][T15771] driver_probe_device+0x4f/0x240 [ 1338.972736][T15771] __driver_attach+0x34c/0x640 [ 1338.977492][T15771] bus_for_each_dev+0x23b/0x2c0 [ 1338.982325][T15771] bus_add_driver+0x345/0x670 [ 1338.986986][T15771] driver_register+0x23a/0x320 [ 1338.991787][T15771] vidtv_bridge_init+0x28/0x50 [ 1338.996552][T15771] do_one_initcall+0x250/0x8d0 [ 1339.001491][T15771] do_initcall_level+0x104/0x190 [ 1339.006430][T15771] do_initcalls+0x59/0xa0 [ 1339.010755][T15771] kernel_init_freeable+0x2a6/0x3e0 [ 1339.017813][T15771] kernel_init+0x1d/0x1d0 [ 1339.022201][T15771] ret_from_fork+0x51e/0xb90 [ 1339.026787][T15771] ret_from_fork_asm+0x1a/0x30 [ 1339.031547][T15771] [ 1339.033852][T15771] Freed by task 15733: [ 1339.038086][T15771] kasan_save_track+0x3e/0x80 [ 1339.042754][T15771] kasan_save_free_info+0x46/0x50 [ 1339.047782][T15771] __kasan_slab_free+0x5c/0x80 [ 1339.052534][T15771] kfree+0x1c1/0x630 [ 1339.056412][T15771] dvb_device_open+0x2cd/0x350 [ 1339.061183][T15771] chrdev_open+0x4cd/0x5e0 [ 1339.065590][T15771] do_dentry_open+0x785/0x14e0 [ 1339.070469][T15771] vfs_open+0x3b/0x340 [ 1339.074559][T15771] path_openat+0x2e08/0x3860 [ 1339.079139][T15771] do_file_open+0x23e/0x4a0 [ 1339.083629][T15771] do_sys_openat2+0x113/0x200 [ 1339.088302][T15771] __x64_sys_openat+0x138/0x170 [ 1339.093152][T15771] do_syscall_64+0x14d/0xf80 [ 1339.097732][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.103622][T15771] [ 1339.105922][T15771] The buggy address belongs to the object at ffff88802b69e000 [ 1339.105922][T15771] which belongs to the cache kmalloc-256 of size 256 [ 1339.119954][T15771] The buggy address is located 24 bytes inside of [ 1339.119954][T15771] freed 256-byte region [ffff88802b69e000, ffff88802b69e100) [ 1339.133647][T15771] [ 1339.135955][T15771] The buggy address belongs to the physical page: [ 1339.142346][T15771] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b69e [ 1339.151091][T15771] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1339.159575][T15771] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1339.167103][T15771] page_type: f5(slab) [ 1339.171068][T15771] raw: 00fff00000000040 ffff88813fea5b40 dead000000000100 dead000000000122 [ 1339.179668][T15771] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1339.188238][T15771] head: 00fff00000000040 ffff88813fea5b40 dead000000000100 dead000000000122 [ 1339.196891][T15771] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1339.205544][T15771] head: 00fff00000000001 ffffea0000ada781 00000000ffffffff 00000000ffffffff [ 1339.214545][T15771] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1339.223194][T15771] page dumped because: kasan: bad access detected [ 1339.229619][T15771] page_owner tracks the page as allocated [ 1339.235487][T15771] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18028302873, free_ts 0 [ 1339.255212][T15771] post_alloc_hook+0x231/0x280 [ 1339.260162][T15771] get_page_from_freelist+0x24dc/0x2580 [ 1339.265737][T15771] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1339.271556][T15771] allocate_slab+0x77/0x660 [ 1339.276071][T15771] refill_objects+0x331/0x3c0 [ 1339.280754][T15771] __pcs_replace_empty_main+0x2e6/0x730 [ 1339.286308][T15771] __kmalloc_cache_noprof+0x392/0x660 [ 1339.291678][T15771] bus_add_driver+0x162/0x670 [ 1339.296361][T15771] driver_register+0x23a/0x320 [ 1339.301133][T15771] usb_register_driver+0x1e4/0x390 [ 1339.306252][T15771] pvr_init+0x4c/0xb0 [ 1339.310242][T15771] do_one_initcall+0x250/0x8d0 [ 1339.315008][T15771] do_initcall_level+0x104/0x190 [ 1339.319943][T15771] do_initcalls+0x59/0xa0 [ 1339.324271][T15771] kernel_init_freeable+0x2a6/0x3e0 [ 1339.329473][T15771] kernel_init+0x1d/0x1d0 [ 1339.333808][T15771] page_owner free stack trace missing [ 1339.339153][T15771] [ 1339.341544][T15771] Memory state around the buggy address: [ 1339.347247][T15771] ffff88802b69df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1339.355305][T15771] ffff88802b69df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1339.363354][T15771] >ffff88802b69e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1339.371405][T15771] ^ [ 1339.376232][T15771] ffff88802b69e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1339.384279][T15771] ffff88802b69e100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1339.392407][T15771] ================================================================== [ 1339.403702][T15771] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1339.410915][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.9.2329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.421845][T15771] Tainted: [L]=SOFTLOCKUP [ 1339.426147][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1339.436193][T15771] Call Trace: [ 1339.439460][T15771] [ 1339.442375][T15771] vpanic+0x56c/0xa60 [ 1339.446384][T15771] ? __pfx_vpanic+0x10/0x10 [ 1339.451150][T15771] ? __pfx___schedule+0x10/0x10 [ 1339.455999][T15771] panic+0xc5/0xd0 [ 1339.459724][T15771] ? __pfx_panic+0x10/0x10 [ 1339.464148][T15771] ? preempt_schedule_thunk+0x16/0x30 [ 1339.469553][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.475282][T15771] ? dvb_device_open+0xc4/0x350 [ 1339.480145][T15771] check_panic_on_warn+0x89/0xb0 [ 1339.485077][T15771] ? dvb_device_open+0xc4/0x350 [ 1339.489929][T15771] end_report+0x73/0x180 [ 1339.494350][T15771] ? dvb_device_open+0xc4/0x350 [ 1339.499202][T15771] kasan_report+0x128/0x150 [ 1339.503875][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.509516][T15771] ? dvb_device_open+0xc4/0x350 [ 1339.514376][T15771] dvb_device_open+0xc4/0x350 [ 1339.519057][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1339.524276][T15771] chrdev_open+0x4cd/0x5e0 [ 1339.528702][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 1339.533653][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.539292][T15771] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1339.545622][T15771] ? __pfx_chrdev_open+0x10/0x10 [ 1339.550564][T15771] do_dentry_open+0x785/0x14e0 [ 1339.555352][T15771] vfs_open+0x3b/0x340 [ 1339.559420][T15771] ? path_openat+0x2df0/0x3860 [ 1339.564179][T15771] path_openat+0x2e08/0x3860 [ 1339.568775][T15771] ? rcu_is_watching+0x15/0xb0 [ 1339.573541][T15771] ? __schedule+0x15f3/0x52d0 [ 1339.578211][T15771] ? __pfx_path_openat+0x10/0x10 [ 1339.583164][T15771] do_file_open+0x23e/0x4a0 [ 1339.587661][T15771] ? __pfx___schedule+0x10/0x10 [ 1339.592507][T15771] ? __pfx_do_file_open+0x10/0x10 [ 1339.597609][T15771] ? _raw_spin_unlock+0x3f/0x50 [ 1339.602549][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.608276][T15771] ? alloc_fd+0x64b/0x6c0 [ 1339.612617][T15771] do_sys_openat2+0x113/0x200 [ 1339.617295][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.622923][T15771] ? __se_sys_futex+0x3a8/0x450 [ 1339.627765][T15771] ? __pfx_do_sys_openat2+0x10/0x10 [ 1339.632964][T15771] ? rcu_is_watching+0x15/0xb0 [ 1339.637723][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1339.643343][T15771] __x64_sys_openat+0x138/0x170 [ 1339.648207][T15771] do_syscall_64+0x14d/0xf80 [ 1339.652788][T15771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.658841][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.664812][T15771] RIP: 0033:0x7f2c81b5cfce [ 1339.669218][T15771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1339.688988][T15771] RSP: 002b:00007f2c82ad4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1339.697400][T15771] RAX: ffffffffffffffda RBX: 00007f2c82ad56c0 RCX: 00007f2c81b5cfce [ 1339.705393][T15771] RDX: 0000000000100400 RSI: 00007f2c82ad4c00 RDI: ffffffffffffff9c [ 1339.713376][T15771] RBP: 00007f2c82ad4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1339.721337][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1339.729294][T15771] R13: 00007f2c81e16128 R14: 00007f2c81e16090 R15: 00007fffa07f5e18 [ 1339.737275][T15771] [ 1339.740673][T15771] Kernel Offset: disabled [ 1339.744984][T15771] Rebooting in 86400 seconds..