last executing test programs: 25.443430411s ago: executing program 0 (id=129): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100), 0x0, 0x20040000}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000240)={r3}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000002240)=[{{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f0000002380)=""/178, 0xb2}], 0x3, &(0x7f00000008c0)=""/120, 0x78}, 0x1}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/94, 0x5e}, {&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/77, 0x4d}], 0x3, &(0x7f0000000b80)=""/2, 0x2}, 0x2}, {{&(0x7f0000000bc0)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/182, 0xb6}, {&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/164, 0xa4}], 0x4, &(0x7f0000001000)=""/4096, 0x1000}, 0xffffff7f}, {{&(0x7f0000002000)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/112, 0x70}, {&(0x7f0000002100)=""/7, 0x7}], 0x2, &(0x7f0000002180)=""/190, 0xbe}, 0x2}], 0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49", 0xc4}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581", 0xc}], 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200"], 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), 0x4) 22.417627304s ago: executing program 3 (id=133): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000040)={0x18, r5}) 20.124665601s ago: executing program 3 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fanotify_init(0x20, 0x0) r4 = socket$inet6(0xa, 0x3, 0x88) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000001c0)={@empty}, &(0x7f0000000280)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) dup(0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x2) 19.137485192s ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r4, 0xe, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="2801000010000700000000000000000000000000000000000000004000000000e000000200000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) socket$nl_xfrm(0x10, 0x3, 0x6) 19.053700058s ago: executing program 1 (id=142): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c6173740000000018000280"], 0xfc}}, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[], 0x28}, 0x0) 18.688851809s ago: executing program 4 (id=143): syz_usb_connect(0x2, 0x239, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 17.497138595s ago: executing program 4 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10001, 0x20}, 0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x1}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="110725bd7000f9dbdf2504000700"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 12.968601607s ago: executing program 1 (id=147): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x9) socket$packet(0x11, 0x2, 0x300) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x398}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ffffe, 0x8, 0x1, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x231, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r9, &(0x7f0000000540)={0x0, 0xbc38, 0x400, 0x3, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd423, 0x100, 0x1, 0x8002ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x465, 0x9, 0x9c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x8000, 0x3, 0x800102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x2, 0x2, 0x21b, 0x0, r8}}], 0x4, 0x0, 0x0) 12.873945074s ago: executing program 4 (id=149): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="400c050000007d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 12.477815093s ago: executing program 3 (id=151): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006", 0xd, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @private2, 0x5}}, 0x4000, 0x2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) 11.724793077s ago: executing program 5 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 10.442661453s ago: executing program 5 (id=153): syz_usb_connect(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0xc1, 0x45, 0xff, 0x20, 0xc52, 0x2833, 0xd2c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0xe4, 0x110, 0x1, "", [{{0x9, 0x4, 0xab, 0x47, 0x1, 0x2, 0x6, 0x0, 0x52, [], [{{0x9, 0x5, 0xb, 0x1b, 0x3ff, 0x6, 0x3, 0x7, [@generic={0x9, 0x4, "00334011988c79"}]}}]}}]}}]}}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0}) 9.994024955s ago: executing program 0 (id=154): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100), 0x0, 0x20040000}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000240)={r3}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/66, 0x42}, 0x200}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f0000002380)=""/178, 0xb2}], 0x3, &(0x7f00000008c0)=""/120, 0x78}, 0x1}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/94, 0x5e}, {&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/77, 0x4d}], 0x3, &(0x7f0000000b80)=""/2, 0x2}, 0x2}, {{&(0x7f0000000bc0)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/182, 0xb6}, {&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/164, 0xa4}], 0x4, &(0x7f0000001000)=""/4096, 0x1000}, 0xffffff7f}, {{&(0x7f0000002000)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/112, 0x70}, {&(0x7f0000002100)=""/7, 0x7}], 0x2, &(0x7f0000002180)=""/190, 0xbe}, 0x2}], 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49", 0xc4}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581", 0xc}], 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200"], 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), 0x4) 9.714122559s ago: executing program 1 (id=155): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x2, 0x14010, 0x0, &(0x7f0000002000)}], 0x1}) 9.526362333s ago: executing program 2 (id=156): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='nat\x00'/23], 0x44) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) tkill(r5, 0x18) 8.410005939s ago: executing program 4 (id=157): syz_usb_connect(0x2, 0x239, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 8.358299276s ago: executing program 2 (id=158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) eventfd2(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 8.258235465s ago: executing program 3 (id=159): openat$uinput(0xffffffffffffff9c, &(0x7f00000035c0), 0x802, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000001c0)='lowerdir', 0x8) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x0, @thr={&(0x7f0000000200)="9a928038a29781e8e56ef0e8", &(0x7f0000000340)}}) 7.593740951s ago: executing program 5 (id=160): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000", 0x1b) 7.42201906s ago: executing program 4 (id=161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x8003}]}]}, 0xfc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_ublk_setup_io_uring(0x5885, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, 0x0, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x200}}, './file1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) syz_io_uring_setup(0xefe, &(0x7f00000004c0)={0x0, 0x56a6, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x1000) syz_io_uring_modify_offsets$flags(0x0, r6, 0x38, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 7.296599699s ago: executing program 0 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a0200000000011801000020207825"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.289709142s ago: executing program 2 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fanotify_init(0x20, 0x0) r4 = socket$inet6(0xa, 0x3, 0x88) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000001c0)={@empty}, &(0x7f0000000280)=0x14) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) dup(0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x2) 6.167795704s ago: executing program 1 (id=164): openat$uinput(0xffffffffffffff9c, &(0x7f00000035c0), 0x802, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r3, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000001c0)='lowerdir', 0x8) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x80000010, 0x0, @thr={&(0x7f0000000200)="9a928038a29781e8e56ef0e8", &(0x7f0000000340)}}) 6.074415566s ago: executing program 2 (id=165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x7b8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x78c, 0x2, [@TCA_BPF_ACT={0x788, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9e, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x10c, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe2, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x3c4, 0x13, 0x0, 0x0, {{0x7}, {0x284, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc5, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd924c944673"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb"}}, @TCA_IPT_TARG={0xa9, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x119, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.11992476s ago: executing program 0 (id=166): userfaultfd(0x80801) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080), 0x0) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x2, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x3, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x3, 0x2, 0x36c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x20, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.850517613s ago: executing program 2 (id=167): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x59e, 0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x20002008}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000210001002cbd7000f7dbdf2505"], 0x14}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0xb8a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008006}, 0x4000840) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) 4.21806694s ago: executing program 5 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02000000000118"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.096330225s ago: executing program 3 (id=169): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000040)={0x18}) 3.224200232s ago: executing program 1 (id=170): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='nat\x00'/23], 0x44) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) tkill(r5, 0x18) 2.713525211s ago: executing program 4 (id=171): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006", 0xd, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xfffffffe, @private2, 0x5}}, 0x4000, 0x2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0x0) 2.635664912s ago: executing program 5 (id=172): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r4) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe000095069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) 1.989343779s ago: executing program 3 (id=173): syz_usb_connect(0x2, 0x239, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 1.863240015s ago: executing program 2 (id=174): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005100), 0x0, 0x20040000}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000240)={r3}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="17", 0x1d}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/66, 0x42}, 0x200}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f0000002380)=""/178, 0xb2}], 0x3, &(0x7f00000008c0)=""/120, 0x78}, 0x1}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/94, 0x5e}, {&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/77, 0x4d}], 0x3, &(0x7f0000000b80)=""/2, 0x2}, 0x2}, {{&(0x7f0000000bc0)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/206, 0xce}, {&(0x7f0000000d40)=""/182, 0xb6}, {&(0x7f0000000e00)=""/217, 0xd9}, {&(0x7f0000000f00)=""/164, 0xa4}], 0x4, &(0x7f0000001000)=""/4096, 0x1000}, 0xffffff7f}, {{&(0x7f0000002000)=@generic, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)=""/112, 0x70}, {&(0x7f0000002100)=""/7, 0x7}], 0x2, &(0x7f0000002180)=""/190, 0xbe}, 0x2}], 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49", 0xc4}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581", 0xc}], 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200"], 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), 0x4) 1.325690978s ago: executing program 1 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00', 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000006440), 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x3, 0x91c, 0x218b}, 'syz0\x00', 0x13}) ioctl$UI_DEV_DESTROY(r3, 0x5502) 1.252413969s ago: executing program 0 (id=176): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10d"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0x7, 0x1, 0x0}) 0s ago: executing program 5 (id=177): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 79.353305][ T5607] cgroup: Unknown subsys name 'net' [ 79.447846][ T5607] cgroup: Unknown subsys name 'cpuset' [ 79.457873][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.931363][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.587120][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.607985][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.617885][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.627609][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.639207][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.644183][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.646843][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.653990][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.664511][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.668781][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.677584][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.686492][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.689840][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.703078][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.712216][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.714862][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.719906][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.726678][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.734141][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.741138][ T5646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.749291][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.754962][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.762472][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.769829][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.775441][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.785428][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.790766][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.796123][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.811181][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.825747][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.874279][ T5630] Bluetooth: hci0: command tx timeout [ 85.881970][ T5632] Bluetooth: hci2: command tx timeout [ 85.882043][ T5626] Bluetooth: hci4: command tx timeout [ 85.890278][ T51] Bluetooth: hci5: command tx timeout [ 85.894062][ T5638] Bluetooth: hci1: command tx timeout [ 85.905253][ T5640] Bluetooth: hci3: command tx timeout [ 85.992698][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.007601][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.016409][ T5621] bridge_slave_0: entered allmulticast mode [ 86.025781][ T5621] bridge_slave_0: entered promiscuous mode [ 86.124987][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.132481][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.139741][ T5621] bridge_slave_1: entered allmulticast mode [ 86.147739][ T5621] bridge_slave_1: entered promiscuous mode [ 86.209374][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.216789][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.223994][ T5625] bridge_slave_0: entered allmulticast mode [ 86.231824][ T5625] bridge_slave_0: entered promiscuous mode [ 86.324606][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.332089][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.339614][ T5625] bridge_slave_1: entered allmulticast mode [ 86.347559][ T5625] bridge_slave_1: entered promiscuous mode [ 86.384007][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.453087][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.475943][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.483142][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.490901][ T5620] bridge_slave_0: entered allmulticast mode [ 86.498482][ T5620] bridge_slave_0: entered promiscuous mode [ 86.567864][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.575098][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.582233][ T5620] bridge_slave_1: entered allmulticast mode [ 86.589908][ T5620] bridge_slave_1: entered promiscuous mode [ 86.611954][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.669804][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.677098][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.685331][ T5623] bridge_slave_0: entered allmulticast mode [ 86.694136][ T5623] bridge_slave_0: entered promiscuous mode [ 86.704282][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.739576][ T5621] team0: Port device team_slave_0 added [ 86.745764][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.752904][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.760473][ T5624] bridge_slave_0: entered allmulticast mode [ 86.768073][ T5624] bridge_slave_0: entered promiscuous mode [ 86.787783][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.795169][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.802281][ T5623] bridge_slave_1: entered allmulticast mode [ 86.810154][ T5623] bridge_slave_1: entered promiscuous mode [ 86.828912][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.836238][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.843361][ T5622] bridge_slave_0: entered allmulticast mode [ 86.851029][ T5622] bridge_slave_0: entered promiscuous mode [ 86.860975][ T5621] team0: Port device team_slave_1 added [ 86.866868][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.874130][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.881254][ T5624] bridge_slave_1: entered allmulticast mode [ 86.888885][ T5624] bridge_slave_1: entered promiscuous mode [ 86.898623][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.921894][ T5625] team0: Port device team_slave_0 added [ 86.927728][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.935064][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.942624][ T5622] bridge_slave_1: entered allmulticast mode [ 86.950131][ T5622] bridge_slave_1: entered promiscuous mode [ 86.984087][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.007608][ T5625] team0: Port device team_slave_1 added [ 87.064628][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.099162][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.106407][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.132769][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.147820][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.172438][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.197541][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.207833][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.214813][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.240733][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.254377][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.265746][ T5620] team0: Port device team_slave_0 added [ 87.284397][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.291411][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.317352][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.331390][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.363465][ T5620] team0: Port device team_slave_1 added [ 87.382006][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.389065][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.415236][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.484684][ T5623] team0: Port device team_slave_0 added [ 87.504222][ T5622] team0: Port device team_slave_0 added [ 87.512198][ T5624] team0: Port device team_slave_0 added [ 87.540108][ T5623] team0: Port device team_slave_1 added [ 87.572378][ T5622] team0: Port device team_slave_1 added [ 87.579898][ T5624] team0: Port device team_slave_1 added [ 87.586141][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.593154][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.619548][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.691759][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.699079][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.725983][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.756775][ T5621] hsr_slave_0: entered promiscuous mode [ 87.763384][ T5621] hsr_slave_1: entered promiscuous mode [ 87.776895][ T5625] hsr_slave_0: entered promiscuous mode [ 87.783376][ T5625] hsr_slave_1: entered promiscuous mode [ 87.791161][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 87.802723][ T5625] Cannot create hsr debugfs directory [ 87.841273][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.848295][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.875304][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.888012][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.895189][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.921146][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.941396][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.948382][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.954151][ T5626] Bluetooth: hci4: command tx timeout [ 87.975508][ T5630] Bluetooth: hci0: command tx timeout [ 87.980060][ T5640] Bluetooth: hci3: command tx timeout [ 87.985346][ T5632] Bluetooth: hci2: command tx timeout [ 87.985739][ T51] Bluetooth: hci5: command tx timeout [ 87.991202][ T5638] Bluetooth: hci1: command tx timeout [ 87.996809][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.020293][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.040792][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.066987][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.078906][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.086650][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.117540][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.131393][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.139781][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.166212][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.348383][ T5620] hsr_slave_0: entered promiscuous mode [ 88.356220][ T5620] hsr_slave_1: entered promiscuous mode [ 88.362457][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 88.368376][ T5620] Cannot create hsr debugfs directory [ 88.432671][ T5623] hsr_slave_0: entered promiscuous mode [ 88.439308][ T5623] hsr_slave_1: entered promiscuous mode [ 88.445608][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 88.451346][ T5623] Cannot create hsr debugfs directory [ 88.526993][ T5622] hsr_slave_0: entered promiscuous mode [ 88.533435][ T5622] hsr_slave_1: entered promiscuous mode [ 88.539868][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 88.546195][ T5622] Cannot create hsr debugfs directory [ 88.558146][ T5624] hsr_slave_0: entered promiscuous mode [ 88.565091][ T5624] hsr_slave_1: entered promiscuous mode [ 88.571221][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.577148][ T5624] Cannot create hsr debugfs directory [ 89.142563][ T5625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.156450][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.186321][ T5625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.197147][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.236386][ T5625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.247767][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.264327][ T5625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.274498][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.331994][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.343152][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.351785][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.362946][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.371419][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.381563][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.390078][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.400149][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.510549][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.520921][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.535178][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.546712][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.554875][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.565584][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.579595][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.589899][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.701126][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.712471][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.728473][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.738688][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.746988][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.758607][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.774711][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.786745][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.797858][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.906669][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.922021][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.932217][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.940254][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.951095][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.971499][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.982228][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.992813][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.000289][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.033833][ T5638] Bluetooth: hci0: command tx timeout [ 90.038798][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.039290][ T5640] Bluetooth: hci2: command tx timeout [ 90.046230][ T51] Bluetooth: hci4: command tx timeout [ 90.051743][ T5626] Bluetooth: hci5: command tx timeout [ 90.056825][ T5630] Bluetooth: hci1: command tx timeout [ 90.056860][ T5630] Bluetooth: hci3: command tx timeout [ 90.057595][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.086044][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.097489][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.104657][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.189452][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.232958][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.240105][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.260352][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.271321][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.292999][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.302872][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.311315][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.323055][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.331216][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.341419][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.352374][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.359540][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.413157][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.520830][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.570197][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.577380][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.631497][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.638635][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.661307][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.737635][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.795166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.802341][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.871817][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.879009][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.897215][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.012444][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.058625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.065812][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.095939][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.113844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.120988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.167433][ T29] cfg80211: failed to load regulatory.db [ 91.173806][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.259098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.266322][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.356427][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.387253][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.394445][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.990510][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.115084][ T5626] Bluetooth: hci5: command tx timeout [ 92.120951][ T5640] Bluetooth: hci2: command tx timeout [ 92.126739][ T5638] Bluetooth: hci0: command tx timeout [ 92.126789][ T5632] Bluetooth: hci3: command tx timeout [ 92.132896][ T5638] Bluetooth: hci1: command tx timeout [ 92.138685][ T51] Bluetooth: hci4: command tx timeout [ 92.225902][ T5621] veth0_vlan: entered promiscuous mode [ 92.306472][ T5621] veth1_vlan: entered promiscuous mode [ 92.464143][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.495201][ T5625] veth0_vlan: entered promiscuous mode [ 92.525160][ T5621] veth0_macvtap: entered promiscuous mode [ 92.568608][ T5621] veth1_macvtap: entered promiscuous mode [ 92.590247][ T5625] veth1_vlan: entered promiscuous mode [ 92.694270][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.711556][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.751785][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.789370][ T5625] veth0_macvtap: entered promiscuous mode [ 92.818979][ T5620] veth0_vlan: entered promiscuous mode [ 92.842377][ T5625] veth1_macvtap: entered promiscuous mode [ 92.922874][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.940468][ T5620] veth1_vlan: entered promiscuous mode [ 92.983525][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.020542][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.048479][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.126869][ T5623] veth0_vlan: entered promiscuous mode [ 93.144674][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.172890][ T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.192318][ T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.204023][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250964][ T5623] veth1_vlan: entered promiscuous mode [ 93.272136][ T5620] veth0_macvtap: entered promiscuous mode [ 93.329019][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.346283][ T5620] veth1_macvtap: entered promiscuous mode [ 93.352600][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.419124][ T5624] veth0_vlan: entered promiscuous mode [ 93.443997][ T1121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.459368][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.460493][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.491363][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.505874][ T5624] veth1_vlan: entered promiscuous mode [ 93.524986][ T5623] veth0_macvtap: entered promiscuous mode [ 93.537529][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.584791][ T1107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625596][ T1107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.638625][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.651007][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.658372][ T5623] veth1_macvtap: entered promiscuous mode [ 93.660980][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.707902][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.749237][ T5622] veth0_vlan: entered promiscuous mode [ 93.766007][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.834042][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.856347][ T5622] veth1_vlan: entered promiscuous mode [ 93.877397][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.886396][ T5767] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.897679][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.907791][ T1121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.916805][ T1121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.927836][ T1121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.940515][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.950395][ T1121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.984517][ T5624] veth0_macvtap: entered promiscuous mode [ 94.092002][ T5624] veth1_macvtap: entered promiscuous mode [ 94.103938][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107709][ T5767] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.126709][ T5767] usb 1-1: not running at top speed; connect to a high speed hub [ 94.144048][ T1107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.282050][ T5767] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 94.404384][ T5767] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 94.463868][ T734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.504441][ T5767] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 94.526575][ T5767] usb 1-1: config 14 has no interface number 0 [ 94.533063][ T5767] usb 1-1: config 14 has no interface number 1 [ 94.544421][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 94.564134][ T5767] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 94.577723][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.590926][ T5767] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 94.634808][ T5767] usb 1-1: config 14 interface 57 has no altsetting 0 [ 94.641930][ T5767] usb 1-1: config 14 interface 228 has no altsetting 0 [ 94.702149][ T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.710314][ T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.742337][ T5767] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 94.760308][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.769258][ T5767] usb 1-1: Product: syz [ 94.773449][ T5767] usb 1-1: Manufacturer: syz [ 94.779679][ T5767] usb 1-1: SerialNumber: syz [ 94.874818][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.926764][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.953552][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.191293][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.199900][ T5873] FAT-fs (nbd5): unable to read boot sector [ 95.251919][ T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.270715][ T5767] legousbtower 1-1:14.57: interrupt endpoints not found [ 95.279605][ T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.301509][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7'. [ 95.309231][ T5622] veth0_macvtap: entered promiscuous mode [ 95.340347][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.342313][ T5622] veth1_macvtap: entered promiscuous mode [ 95.373569][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.405141][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.455773][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.485428][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.500882][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.513073][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.545353][ T5767] legousbtower 1-1:14.228: get version request failed: -71 [ 95.581049][ T5767] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 95.597309][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.622940][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.627736][ T5767] usb 1-1: USB disconnect, device number 2 [ 97.371459][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.379576][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.431121][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.555380][ T1107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.565038][ T5889] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.8'. [ 97.683009][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.705048][ T1107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.710975][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.774294][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.931376][ T1107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.061236][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.207530][ T24] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 98.307664][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.455802][ T24] usb 1-1: Product: syz [ 98.521323][ T24] usb 1-1: Manufacturer: syz [ 98.587456][ T24] usb 1-1: SerialNumber: syz [ 98.913507][ T24] usb 1-1: config 0 descriptor?? [ 98.949330][ T24] ch341 1-1:0.0: ch341-uart converter detected [ 99.078029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.190307][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.459130][ T186] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.997615][ T186] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 100.177403][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.416262][ T186] usb 6-1: Product: syz [ 100.505260][ T186] usb 6-1: Manufacturer: syz [ 100.579249][ T186] usb 6-1: SerialNumber: syz [ 101.643621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.793630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.413618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.532984][ T186] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 102.552417][ T186] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 102.611205][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.670796][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.724789][ T24] usb 1-1: failed to send control message: -110 [ 102.739015][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 102.771429][ T9] usb 1-1: USB disconnect, device number 3 [ 102.805107][ T9] ch341 1-1:0.0: device disconnected [ 104.310767][ T186] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 105.080507][ T186] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.090769][ T186] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.142407][ T186] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 106.115152][ T186] usb 6-1: USB disconnect, device number 2 [ 106.141171][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 108.029790][ T5957] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.24'. [ 108.124180][ T5958] vlan2: entered allmulticast mode [ 108.249227][ T5958] bond0: entered allmulticast mode [ 108.254478][ T5958] bond_slave_0: entered allmulticast mode [ 108.260280][ T5958] bond_slave_1: entered allmulticast mode [ 108.793820][ T5728] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.146914][ T5728] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.310537][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.457816][ T5728] usb 6-1: Product: syz [ 109.498435][ T5728] usb 6-1: Manufacturer: syz [ 109.696350][ T5728] usb 6-1: SerialNumber: syz [ 110.846897][ T5728] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 111.001833][ T5728] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 112.306244][ T5774] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.593635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.003626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.043627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.171468][ T5728] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 113.433478][ T5728] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 113.439501][ T5774] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.444826][ T5728] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 113.537252][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.563681][ T5774] usb 1-1: Product: syz [ 113.569854][ T5774] usb 1-1: Manufacturer: syz [ 113.582479][ T5774] usb 1-1: SerialNumber: syz [ 113.781921][ T5728] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 113.798680][ T5982] vlan2: entered allmulticast mode [ 113.826188][ T5728] usb 6-1: USB disconnect, device number 3 [ 114.549585][ T5982] bond0: entered allmulticast mode [ 114.603811][ T5982] bond_slave_0: entered allmulticast mode [ 114.628842][ T5982] bond_slave_1: entered allmulticast mode [ 114.756108][ T5774] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 114.789101][ T5774] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 116.014021][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 116.095542][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 116.161206][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 116.438216][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 117.352597][ T6011] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 117.390326][ T5774] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 117.411976][ T5774] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.479698][ T5774] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.557948][ T6011] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 117.632470][ T5774] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 117.757333][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 118.372199][ T6011] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.625465][ T5774] usb 1-1: USB disconnect, device number 4 [ 118.791081][ T6054] capability: warning: `syz.4.45' uses deprecated v2 capabilities in a way that may be insecure [ 119.021143][ T6052] block device autoloading is deprecated and will be removed. [ 119.422308][ T6011] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.572367][ T6011] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.342035][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 122.463347][ T5282] veth0_vlan: left promiscuous mode [ 122.490595][ T6093] netlink: 56 bytes leftover after parsing attributes in process `syz.0.47'. [ 122.693768][ T5774] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.850069][ T6091] syz.0.47 (6091) used greatest stack depth: 18312 bytes left [ 122.857901][ T5767] veth0_vlan: entered promiscuous mode [ 122.948409][ T5774] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.970598][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.011097][ T5774] usb 6-1: Product: syz [ 123.031956][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 123.036767][ T5774] usb 6-1: Manufacturer: syz [ 123.085652][ T5774] usb 6-1: SerialNumber: syz [ 123.163084][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 123.220748][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 123.358539][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 123.440426][ T6011] wlan0 speed is unknown, defaulting to 1000 [ 123.470557][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 124.152293][ T6109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.178765][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 124.196902][ T6108] siw: device registration error -23 [ 124.329089][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 124.514989][ T5767] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.829225][ T5767] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 125.198306][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.233068][ T5767] usb 3-1: Product: syz [ 125.249911][ T5767] usb 3-1: Manufacturer: syz [ 125.266202][ T5767] usb 3-1: SerialNumber: syz [ 125.488266][ T6126] overlayfs: overlapping lowerdir path [ 126.535911][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 126.574694][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 126.619308][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 126.655558][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 126.687424][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 126.707748][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.826984][ T5774] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 127.242174][ T5774] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 127.379095][ T6141] fuse: Bad value for 'fd' [ 127.444122][ T6141] netlink: 244 bytes leftover after parsing attributes in process `syz.4.63'. [ 127.684074][ T5774] usb 6-1: USB disconnect, device number 4 [ 128.266198][ T6145] netlink: 56 bytes leftover after parsing attributes in process `syz.5.65'. [ 128.532562][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 128.624457][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.475250][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 129.507515][ T5767] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 129.541062][ T5767] usb 3-1: USB disconnect, device number 2 [ 131.065763][ T6172] nvme_fabrics: missing parameter 'transport=%s' [ 131.073406][ T6172] nvme_fabrics: missing parameter 'nqn=%s' [ 131.666821][ T6163] vlan2: entered allmulticast mode [ 131.672165][ T6163] bond0: entered allmulticast mode [ 131.677443][ T6163] bond_slave_0: entered allmulticast mode [ 131.683323][ T6163] bond_slave_1: entered allmulticast mode [ 132.117040][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.125566][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.812832][ T6186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.72'. [ 134.297858][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 134.353819][ T5631] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 134.515844][ T5631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.584851][ T5631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.640339][ T5631] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 134.719684][ T5631] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.779249][ T5631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.863797][ T5631] usb 6-1: config 0 descriptor?? [ 135.023729][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.961358][ T6207] nvme_fabrics: missing parameter 'transport=%s' [ 135.967820][ T6207] nvme_fabrics: missing parameter 'nqn=%s' [ 136.101332][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 136.142380][ T24] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 136.183224][ T24] usb 4-1: config 0 has no interface number 0 [ 136.232611][ T24] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 136.255915][ T5631] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 136.279271][ T24] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 136.322759][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 136.430170][ T5728] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 136.457889][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.494451][ T6217] fuse: Bad value for 'fd' [ 136.543823][ T24] usb 4-1: Product: syz [ 136.560504][ T6217] netlink: 244 bytes leftover after parsing attributes in process `syz.4.80'. [ 136.627282][ T24] usb 4-1: Manufacturer: syz [ 136.694840][ T24] usb 4-1: SerialNumber: syz [ 136.777480][ T5728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.885892][ T5728] usb 3-1: config 8 has an invalid interface number: 59 but max is 3 [ 136.979070][ T5728] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 137.026891][ T24] usb 4-1: config 0 descriptor?? [ 137.111409][ T5728] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 137.197177][ T6199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.268733][ T5728] usb 3-1: config 8 has no interface number 0 [ 137.305589][ T6199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.341098][ T5728] usb 3-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 137.416599][ T5728] usb 3-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 137.478315][ T5728] usb 3-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 137.491803][ T5759] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 137.504572][ T5728] usb 3-1: config 8 interface 59 has no altsetting 0 [ 137.583634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.618091][ T6199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.707419][ T6199] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.913754][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.987552][ T24] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 138.012465][ T24] asix 4-1:0.34: probe with driver asix failed with error -61 [ 138.761382][ T5631] usb 6-1: USB disconnect, device number 5 [ 138.767820][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 138.826699][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.868175][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.909245][ T5728] usb 3-1: string descriptor 0 read error: -71 [ 138.925050][ T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.936762][ T5728] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 138.960983][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.976083][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.993752][ T30] usb 1-1: Product: syz [ 139.010980][ T30] usb 1-1: Manufacturer: syz [ 139.025206][ T5728] usb 3-1: can't set config #8, error -71 [ 139.036910][ T30] usb 1-1: SerialNumber: syz [ 139.062725][ T5728] usb 3-1: USB disconnect, device number 3 [ 139.125151][ T30] usb 1-1: 0:2 : does not exist [ 139.307666][ T30] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 141.624611][ T30] usb 1-1: USB disconnect, device number 5 [ 141.830162][ T5774] usb 4-1: USB disconnect, device number 2 [ 141.980702][ T6245] dummy_hcd dummy_hcd.0: remove, state 4 [ 142.038754][ T6245] usb usb1: USB disconnect, device number 1 [ 142.076273][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.360161][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.89'. [ 142.720878][ T6262] FAT-fs (nbd4): unable to read boot sector [ 142.833102][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'. [ 143.644438][ T6245] dummy_hcd dummy_hcd.0: stopped [ 143.678754][ T6245] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 146.204873][ T6294] fuse: Invalid rootmode [ 146.259761][ T6294] netlink: 244 bytes leftover after parsing attributes in process `syz.1.97'. [ 146.454983][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 150.741189][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 150.823434][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.755768][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.747300][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.802969][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 152.846453][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.893959][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.996903][ T10] usb 6-1: config 0 descriptor?? [ 154.116165][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 154.198966][ T10] usb 6-1: USB disconnect, device number 6 [ 154.382807][ T6359] fido_id[6359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 154.584465][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.863837][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 154.975928][ T30] usb 4-1: config 0 has no interfaces? [ 155.113628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.232635][ T30] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.260412][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.293386][ T30] usb 4-1: Product: syz [ 155.313731][ T30] usb 4-1: Manufacturer: syz [ 155.862050][ T30] usb 4-1: SerialNumber: syz [ 155.903488][ T30] r8152-cfgselector 4-1: Unknown version 0x0000 [ 155.941490][ T30] r8152-cfgselector 4-1: config 0 descriptor?? [ 156.079399][ T6376] siw: device registration error -23 [ 156.087019][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 156.232099][ T6376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.596802][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.763989][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.485647][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.693471][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.918293][ T10] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 159.934208][ T30] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 160.038309][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.122050][ T10] usb 2-1: config 0 descriptor?? [ 160.363568][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.128'. [ 161.428319][ T10] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71 [ 161.490308][ T6425] FAT-fs (nbd2): unable to read boot sector [ 162.709367][ T10] usb 2-1: USB disconnect, device number 2 [ 162.785417][ T6428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 164.817263][ T6438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.469574][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 166.941597][ T6474] FAT-fs (nbd1): unable to read boot sector [ 166.947995][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 167.000024][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'. [ 167.828729][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.839469][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.848567][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.885063][ T10] usb 6-1: config 0 descriptor?? [ 167.910436][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 167.937670][ T6481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.141'. [ 169.206055][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.514334][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 172.554109][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 172.595541][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 172.623900][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 172.648798][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 172.676983][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 172.710054][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 172.740551][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 172.786518][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 172.832689][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 172.887932][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 172.960801][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 172.995872][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.180843][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.387019][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 173.569975][ T5728] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.716215][ T10] pwc: Registered as video103. [ 173.736995][ T5728] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 173.743853][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 173.773456][ T10] usb 6-1: USB disconnect, device number 7 [ 173.789972][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.833767][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.842411][ T5728] usb 5-1: Product: syz [ 173.865043][ T5728] usb 5-1: Manufacturer: syz [ 173.890875][ T5728] usb 5-1: SerialNumber: syz [ 173.950508][ T5728] usb 5-1: config 0 descriptor?? [ 174.178588][ T5728] ch341 5-1:0.0: ch341-uart converter detected [ 174.187919][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 174.199044][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.216985][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.233958][ T30] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.244989][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.255683][ T30] usb 3-1: Product: syz [ 174.993355][ T30] usb 3-1: Manufacturer: syz [ 175.013853][ T30] usb 3-1: SerialNumber: syz [ 175.046540][ T30] usb 3-1: 0:2 : does not exist [ 175.210966][ T6531] binder: 6515:6531 ioctl c0046209 0 returned -22 [ 175.273330][ T30] usb 3-1: USB disconnect, device number 4 [ 175.364867][ T5767] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.543704][ T5767] usb 6-1: Using ep0 maxpacket: 32 [ 175.555580][ T5767] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.567839][ T5767] usb 6-1: config 2 has an invalid interface number: 171 but max is 0 [ 175.577844][ T5767] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 175.596049][ T5767] usb 6-1: config 2 has no interface number 1 [ 175.613849][ T5767] usb 6-1: too many endpoints for config 2 interface 0 altsetting 51: 64, using maximum allowed: 30 [ 175.630608][ T5767] usb 6-1: config 2 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 175.678221][ T5767] usb 6-1: config 2 interface 171 has no altsetting 0 [ 175.698226][ T5767] usb 6-1: config 2 interface 0 has no altsetting 0 [ 175.720594][ T5767] usb 6-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0 [ 175.729891][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.745210][ T5767] usb 6-1: Product: syz [ 175.749449][ T5767] usb 6-1: Manufacturer: syz [ 175.760720][ T5767] usb 6-1: SerialNumber: syz [ 175.777514][ T5728] ch341-uart ttyUSB0: failed to read break control: -71 [ 175.799426][ T5728] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 175.838732][ T5728] usb 5-1: USB disconnect, device number 2 [ 175.869236][ T5728] ch341 5-1:0.0: device disconnected [ 176.008845][ T5767] usb 6-1: No union descriptors [ 176.022605][ T5767] ftdi_sio 6-1:2.171: FTDI USB Serial Device converter detected [ 176.033513][ T5767] ftdi_sio ttyUSB0: unknown device type: 0xd2c0 [ 176.054583][ T5767] ftdi_sio 6-1:2.0: FTDI USB Serial Device converter detected [ 176.069031][ T5767] ftdi_sio ttyUSB1: unknown device type: 0xd2c0 [ 176.081406][ T5767] usb 6-1: USB disconnect, device number 8 [ 176.183542][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.515478][ T5767] ftdi_sio 6-1:2.171: device disconnected [ 176.939064][ T5767] ftdi_sio 6-1:2.0: device disconnected [ 177.084206][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 177.097314][ T5759] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.121260][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.150673][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 177.162704][ T5759] pvrusb2: ********** [ 177.174283][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.208060][ T5759] pvrusb2: Important functionality might not be entirely working. [ 177.236262][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.254484][ T5759] pvrusb2: ********** [ 177.362755][ T2363] pvrusb2: Invalid write control endpoint [ 177.846057][ T5767] usb 2-1: USB disconnect, device number 3 [ 177.959923][ T2363] pvrusb2: Invalid write control endpoint [ 177.972731][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 177.987183][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 177.995513][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 178.032248][ T2363] pvrusb2: Device being rendered inoperable [ 178.040418][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.048055][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.061756][ T2363] pvrusb2: Attached sub-driver cx25840 [ 178.073180][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.178930][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.254021][ T186] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.421130][ T186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.496699][ T186] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.208198][ T5627] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.240037][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.380964][ T186] usb 6-1: config 0 descriptor?? [ 179.417829][ T5627] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.430400][ T186] pwc: Askey VC010 type 2 USB webcam detected. [ 179.487336][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.564817][ T5627] usb 5-1: Product: syz [ 179.610921][ T5627] usb 5-1: Manufacturer: syz [ 179.708151][ T5627] usb 5-1: SerialNumber: syz [ 180.120170][ T186] pwc: recv_control_msg error -32 req 02 val 2b00 [ 180.257581][ T186] pwc: recv_control_msg error -32 req 02 val 2700 [ 180.354257][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.416848][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.524298][ T186] pwc: recv_control_msg error -71 req 02 val 2c00 [ 180.553936][ T186] pwc: recv_control_msg error -71 req 04 val 1000 [ 180.584361][ T186] pwc: recv_control_msg error -71 req 04 val 1300 [ 180.602517][ T186] pwc: recv_control_msg error -71 req 04 val 1400 [ 180.629917][ T186] pwc: recv_control_msg error -71 req 02 val 2000 [ 180.680392][ T186] pwc: recv_control_msg error -71 req 02 val 2100 [ 180.694777][ T186] pwc: recv_control_msg error -71 req 04 val 1500 [ 180.713865][ T186] pwc: recv_control_msg error -71 req 02 val 2500 [ 180.732785][ T186] pwc: recv_control_msg error -71 req 02 val 2400 [ 180.757889][ T186] pwc: recv_control_msg error -71 req 02 val 2600 [ 180.881710][ T5627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 180.913153][ T5627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 180.986204][ T186] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.013651][ T5627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.038429][ T186] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.062467][ T186] pwc: recv_control_msg error -71 req 04 val 1100 [ 181.106061][ T5627] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 181.117495][ T186] pwc: recv_control_msg error -71 req 04 val 1200 [ 181.161467][ T186] pwc: Registered as video103. [ 181.198161][ T5627] usb 5-1: USB disconnect, device number 3 [ 181.252027][ T186] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 181.456536][ T186] usb 6-1: USB disconnect, device number 9 [ 185.174353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 185.474292][ T6618] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 185.486400][ T6618] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 185.494800][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) [ 185.503988][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 185.514033][ T6618] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 185.519498][ T6618] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 45 51 10 fa eb 0c e8 3e 51 10 fa eb 05 e8 37 51 10 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 41 ea 7d fa 4d 8b 36 4c 89 f7 e8 [ 185.539099][ T6618] RSP: 0018:ffffc9001eb5f830 EFLAGS: 00010256 [ 185.545159][ T6618] RAX: 0000000000000000 RBX: ffff8880352bc050 RCX: 0000000000080000 [ 185.553116][ T6618] RDX: ffffc90005b01000 RSI: 00000000000019ed RDI: 00000000000019ee [ 185.561076][ T6618] RBP: ffff88802ac18000 R08: ffff88801df41f00 R09: 0000000000000004 [ 185.569038][ T6618] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 185.576996][ T6618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 185.584956][ T6618] FS: 00007faff0c096c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 185.593873][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.600441][ T6618] CR2: 00007fafefd86cc0 CR3: 0000000078141000 CR4: 0000000000350ef0 [ 185.608399][ T6618] Call Trace: [ 185.611661][ T6618] [ 185.614576][ T6618] ? __pfx_dummy_udc_start+0x10/0x10 [ 185.619945][ T6618] gadget_bind_driver+0x3a8/0x9e0 [ 185.624999][ T6618] ? __pfx_gadget_bind_driver+0x10/0x10 [ 185.630543][ T6618] really_probe+0x254/0xae0 [ 185.635046][ T6618] __driver_probe_device+0x1e8/0x360 [ 185.640329][ T6618] driver_probe_device+0x4f/0x240 [ 185.645350][ T6618] __driver_attach+0x339/0x600 [ 185.650109][ T6618] bus_for_each_dev+0x23b/0x2c0 [ 185.654959][ T6618] ? __pfx___driver_attach+0x10/0x10 [ 185.660237][ T6618] ? __pfx_bus_for_each_dev+0x10/0x10 [ 185.665608][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.671233][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.676859][ T6618] ? do_raw_spin_unlock+0xf5/0x210 [ 185.681965][ T6618] bus_add_driver+0x345/0x670 [ 185.686633][ T6618] driver_register+0x23a/0x320 [ 185.691397][ T6618] usb_gadget_register_driver_owner+0xf9/0x270 [ 185.697549][ T6618] raw_ioctl+0x1541/0x41c0 [ 185.701958][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.707584][ T6618] ? tomoyo_path_number_perm+0x219/0x5f0 [ 185.713218][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.718845][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.724469][ T6618] ? do_vfs_ioctl+0x116f/0x1530 [ 185.729312][ T6618] ? __pfx_raw_ioctl+0x10/0x10 [ 185.734072][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.739695][ T6618] ? hook_file_ioctl+0x1f0/0x5f0 [ 185.744630][ T6618] ? __fget_files+0x2a/0x420 [ 185.749220][ T6618] ? __fget_files+0x2a/0x420 [ 185.753808][ T6618] ? __fget_files+0x3a2/0x420 [ 185.758485][ T6618] ? __fget_files+0x2a/0x420 [ 185.763070][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.768694][ T6618] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.774319][ T6618] ? __pfx_raw_ioctl+0x10/0x10 [ 185.779073][ T6618] __se_sys_ioctl+0xfc/0x170 [ 185.783653][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.789734][ T6618] do_syscall_64+0x174/0x580 [ 185.794322][ T6618] ? trace_irq_disable+0x3b/0x140 [ 185.799347][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.805227][ T6618] RIP: 0033:0x7fafefd9dcab [ 185.809629][ T6618] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 185.829219][ T6618] RSP: 002b:00007faff0c06f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.837620][ T6618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fafefd9dcab [ 185.845577][ T6618] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 185.853532][ T6618] RBP: 00007faff0c07fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 185.861487][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.869443][ T6618] R13: 0000200000000000 R14: 0000000000000002 R15: 0000000000000000 [ 185.877409][ T6618] [ 185.880411][ T6618] Modules linked in: [ 185.886187][ T6618] ---[ end trace 0000000000000000 ]--- [ 185.909367][ T6618] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 185.915014][ T6618] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 45 51 10 fa eb 0c e8 3e 51 10 fa eb 05 e8 37 51 10 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 41 ea 7d fa 4d 8b 36 4c 89 f7 e8 [ 185.935201][ T6618] RSP: 0018:ffffc9001eb5f830 EFLAGS: 00010256 [ 185.941359][ T6618] RAX: 0000000000000000 RBX: ffff8880352bc050 RCX: 0000000000080000 [ 185.950122][ T6618] RDX: ffffc90005b01000 RSI: 00000000000019ed RDI: 00000000000019ee [ 185.958496][ T6618] RBP: ffff88802ac18000 R08: ffff88801df41f00 R09: 0000000000000004 [ 185.966885][ T6618] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 186.037631][ T51] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 186.100342][ T6618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 186.150942][ T6618] FS: 00007faff0c096c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 186.184067][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.211506][ T6618] CR2: 00007f3a4d7eec38 CR3: 0000000078141000 CR4: 0000000000350ef0 [ 186.240085][ T6618] Kernel panic - not syncing: Fatal exception [ 186.246595][ T6618] Kernel Offset: disabled [ 186.250902][ T6618] Rebooting in 86400 seconds..