last executing test programs: 1m0.319236253s ago: executing program 0 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x282080, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000500)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000680)={0x0, 0xfffffff2, 0x5, 0x401, 0x1, [0x0, 0x0, r8], [0x3, 0xffff401f, 0x2, 0x7ff], [0x800, 0x0, 0xfffffffa, 0xe0], [0xa2, 0x5, 0x3, 0x3]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdb"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc000) connect(r7, &(0x7f0000000400)=@ax25={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000400", @ANYRES16, @ANYBLOB="01002ebd7000ffdbdf253900000008000300", @ANYRES32, @ANYBLOB="1c005a801800018014000300b4810800081470"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 53.590378026s ago: executing program 0 (id=950): socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6e6f65c2a1374460e0fd906c746769643d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6e6f65c2a1374460e0fd906c746769643d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) 52.368704407s ago: executing program 0 (id=953): r0 = syz_io_uring_setup(0x110, &(0x7f0000000700)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) io_setup(0x9, 0x0) io_submit(0x0, 0x3, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xeb00, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}]) sendmmsg$inet(r1, &(0x7f0000000440), 0x0, 0x40000) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x75) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000120001010000a100e0ffffff070000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x2000c840}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x8f, 0x0, 0x0) 51.146902023s ago: executing program 0 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x282080, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000500)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000680)={0x0, 0xfffffff2, 0x5, 0x401, 0x1, [0x0, 0x0, r8], [0x3, 0xffff401f, 0x2, 0x7ff], [0x800, 0x0, 0xfffffffa, 0xe0], [0xa2, 0x5, 0x3, 0x3]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000080)) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdb"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc000) connect(r7, &(0x7f0000000400)=@ax25={{0x3, @null, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x80) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000400", @ANYRES16, @ANYBLOB="01002ebd7000ffdbdf253900000008000300", @ANYRES32, @ANYBLOB="1c005a801800018014000300b4810800081470"], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 48.417609847s ago: executing program 0 (id=967): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x1411, 0x803, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x400a004}, 0x4040004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) read(r5, &(0x7f0000000280)=""/70, 0x46) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mkdir(&(0x7f0000000140)='./control\x00', 0x5) inotify_init1(0x800) socket$nl_generic(0x10, 0x3, 0x10) 46.299353293s ago: executing program 0 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e012abd7000fddbdf2531000000080001001f00000008000300", @ANYRES32=0x0, @ANYBLOB="080005107a0000006dfe9800010000001b001000a83fa0e817465bb188baa4c7bf05e594a9e6a1494feba8264cea84383627289c68b211ffccc809d9311ec6eb0c20f9783cc6deb2795b114f1d10abef070c18492bf2ac6966f686bcde3c42b141a68ea1e656250101"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000444) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000), 0x8) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x105, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3e}, @IPSET_ATTR_COMMENT={0x6, 0x1a, ')\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000840}, 0xa168a33922b84301) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f00000004c0)) 30.971488827s ago: executing program 32 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0e012abd7000fddbdf2531000000080001001f00000008000300", @ANYRES32=0x0, @ANYBLOB="080005107a0000006dfe9800010000001b001000a83fa0e817465bb188baa4c7bf05e594a9e6a1494feba8264cea84383627289c68b211ffccc809d9311ec6eb0c20f9783cc6deb2795b114f1d10abef070c18492bf2ac6966f686bcde3c42b141a68ea1e656250101"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000444) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000), 0x8) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x9, 0x6, 0x105, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3e}, @IPSET_ATTR_COMMENT={0x6, 0x1a, ')\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000840}, 0xa168a33922b84301) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, &(0x7f00000004c0)) 12.413357223s ago: executing program 2 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x470c, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_uring_enter(0xffffffffffffffff, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040010}, 0x0) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "9c"}, 0xc) write$smackfs_load(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="5b207472616e734a66642c20ed"], 0x10) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.28457128s ago: executing program 3 (id=1076): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 10.712024142s ago: executing program 3 (id=1078): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000000, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x8, 0x1, 0x1}, 0x18, 0x1) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x6, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200, 0x8}) prlimit64(r0, 0xd, &(0x7f0000000280)={0x80, 0xffffffff}, &(0x7f0000000300)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x48004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0xfffffffc, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="373618030000ffffffff0000008c80c8aef0f77fdd00046a4cd4b840d7609a5656c030a53fa6ee0c88a8b2f594f393ce7526e16b77df689c2da79316b400b60d17c57034d7608a7bb8bfb8b2bec5ab3b1a9551d9e3eaecc7f6bfbb4a974b2ef9af6aa05a5165c46a648c8977ea", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000400)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) llistxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=""/34, 0x22) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) 8.175913223s ago: executing program 2 (id=1080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000280)={0x1, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='jffs2\x00', 0x2014800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x304}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001000}, 0xc014) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x44}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019180), 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000004060108000000000080000001ffffef05000100070000000900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 7.643578188s ago: executing program 3 (id=1082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 6.545823053s ago: executing program 2 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1eae8f721276f1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df12c9f7b9a60000000010000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.186294679s ago: executing program 3 (id=1088): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002800)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4048040) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x20004000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.791377538s ago: executing program 2 (id=1090): eventfd2(0x5, 0x801) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x4, 0x5, 0x9}}, 0x30) dup2(r4, r0) write$FUSE_LK(r0, &(0x7f00000000c0)={0x28, 0x0, r1, {{0x5, 0xb0e, 0x2}}}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r5], 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r7 = openat(r6, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x242, 0x20262076a4e6d5e) write$cgroup_int(r7, &(0x7f0000000040)=0x9, 0x12) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000540)) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x90, 0x5, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x8, 0xc}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x4, 0x6f, 0x20, 0x6}, 0x14d, &(0x7f0000000140)={0x5, 0xf, 0x14d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xa, 0x6, 0xb9, 0xf00, 0x7, [0xff3f00, 0xf, 0xc0, 0x3ff0, 0x0, 0xc0c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x0, 0x5}, @generic={0xec, 0x10, 0x4, "a683f06f4e898b8b898bd6046b71466f1eefbb2991986a37fcb67a1c74005f0725d02581a826508ee53ed601d3f137fa4621b3be05117e8632b12ba45a6c5fb8fd6e9bd56f5d9d38682f4f190d90fc1d5a7e436af0048fb8fa34ad0d1443ba7979e56d44048317e1bbec7cddc5bf336166d91e1e4f77b11157f0fba3a6b11f4c12891fc3407c15c3f15483210ab8062b15ce4b824c7df544ccef356d9479d87e2c453f9c96a398d54e1ffe874542f75e03aacf9f8a90552642444358374ced4712bc894b32bb9ebd3ef92a064db3fbcf4e8ad17ead535871172d25b301211dc11524c63224c2ead72a"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x76, 0x0, 0x6, [0xff0000, 0xff003f, 0xff000f, 0xff003f, 0x0, 0x3f0f]}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1431}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c01}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "b20f5b6a98b69f4ba9f757116959e2111fedeff6480c0bed82689e1e4a54d78e005e553d257900df52776a1a0a807996aa20de5fbc96afaf74f15efc0cdb49e6ce44295f5cc5fc66f25e94186509a2931a184a15cc69008d4e7b7cf00a936fe718c2225c65bdc7deb455af7402c7e3f44ea44a3f93ed97489f0fdfe34a960c0624ef34689956835d09e741a27cd258713df5949a605b725f77f45d58b9b508aa38b7541f81719a0a82154dde5d285e015b157a5f9193874f045313ec78f59b45892a61cb21165d2876301b03785925bb8619b6a3"}}, {0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0304000000000000005eff9f209d841b3d987830271fa6df5e7b"]}]}) 4.071756799s ago: executing program 1 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000078000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) prlimit64(r0, 0x9, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.069624603s ago: executing program 3 (id=1094): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000040b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) 3.43546676s ago: executing program 4 (id=1095): mkdir(&(0x7f0000000300)='./bus\x00', 0x120) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x0, 0x0, 0x1400) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x7ffffffe, 0x0, 0x0, 0x880}, 0x0) 3.144569239s ago: executing program 1 (id=1096): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xa8) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 2.167783314s ago: executing program 4 (id=1097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 2.048191115s ago: executing program 1 (id=1098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x2045, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fbdbdf25440000000a001800031e0f16fc73da947f2b9d080000005abb83336327d41570ed53811bfba708c9d1cdbc52738d6af7aee1adbca42cfdc9c03bf702afa084302677f9f6da5d4e238b121ecb0a59e9394fed8e930a4a46b514fb6d4570c2b989360ee0557eef0361b58a17f3eccc0bda18be89348e"], 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000010) 1.828682031s ago: executing program 1 (id=1099): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 1.714736332s ago: executing program 4 (id=1100): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) setpriority(0x2, 0x0, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}}, 0x20008050) syz_genetlink_get_family_id$nl80211(0x0, r4) io_uring_enter(r3, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x6, 0x2, 0x1, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x40}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x808f53, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000200)=[0x3, 0x8, 0x7, 0x7fff, 0xae8d811, 0x80000000, 0x9, 0x1]) syz_emit_ethernet(0x46, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000bb3302000000000000000000000000000186009078000000050000002600000000"], 0x0) syz_open_dev$video(&(0x7f0000000040), 0x9, 0x100) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.677190167s ago: executing program 1 (id=1101): r0 = io_uring_setup(0x2c4a, &(0x7f0000002240)={0x0, 0xf96d, 0x8, 0x0, 0x2d1}) write$smackfs_change_rule(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='PPPPPP & rwxubl watblw'], 0x16) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x1c, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], &(0x7f00000004c0)='GPL\x00', 0x100006, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xff, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 1.339100469s ago: executing program 2 (id=1102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0xa00000000000000, &(0x7f00000006c0)="04d28058b5784467c8653b87a1f87d65338b1454020a802f9281193011fd0c74dff60b5c210dc156a140e2b78131b04293383f13bc30aed52d2ae624c4e1fe79f9a8dd0ecba22be33f6e4d3e1b0039c1"}) 1.195564451s ago: executing program 4 (id=1103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x9}, 0x5b, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=r1], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d568561718bea220df4b488eeee593f634a5337410a600a937ca9c13934f4539323e6173629820a4629d493bf3df80e967a681d4c960bc77880a91c6b7ba9972277aa7e5dc0edb6201605e5a913dbafd8bc62b0332b2aa9598c5953cb3d48f27d71fdbb89aaf3765662cf4124e45adb49c25a14e4bd5485f9de77218b1c947001eff1e14a449dad3dc336df134ead3740753c7d5fa0439d3314b5acab2ebfd3302bf88e5", 0x2d}], 0x1}}], 0x2, 0x8008801) (async) sendto$inet6(r1, &(0x7f00000001c0)="572cb07d63f9cdbeaa3342f76e81e2f26a54fab5b3fa270daf73a44c5c61c4040a5d0ea94b615f53", 0x28, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) (rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x9}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)="3fbe9a7b1e54317b61a08dc1f494a6181164b362d99b7bb9f02a8163d3ddc14fc7b89accc8768c842a5b8ca9ba626c1c8f62aadea34eff7dbfeba69fbc912a9e65162a425b67fb765a0a256b0145b903c2187925a7d74007441f359623a1389378db5922468abd8996557991ccb8cd794ba70302ce", &(0x7f0000000180), 0x3, r2}, 0x38) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge0\x00'}) (async, rerun: 64) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) (rerun: 64) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0x7585, &(0x7f0000000140)={0x0, 0xafed, 0x3c00, 0x2, 0x261, 0x0, r3}, &(0x7f0000000000), &(0x7f00000001c0)) (async) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {0x9, 0x9242, 0x15, 0x200}, 0x3f, [0x7fffffff, 0x7, 0x2, 0x3, 0x8, 0x9, 0x269a, 0xe061, 0x1, 0x81, 0x1, 0x5, 0x9, 0x6, 0x2, 0x2, 0x4, 0xaa, 0x8, 0xfffff422, 0x2, 0x4, 0x5, 0xdfd, 0x3, 0x6, 0x5, 0x9b, 0xfffffffb, 0x1ffe0000, 0x5, 0x1, 0x2, 0x401, 0x7, 0xffffffff, 0x8, 0x2, 0x0, 0x7, 0xfffffffe, 0xc, 0x3bc, 0x4000000, 0x6de, 0x3, 0x9714, 0x7, 0x7, 0x8, 0x101, 0x800, 0xe8, 0x8, 0x81, 0x2, 0x6000, 0x40, 0x3ff00000, 0x8, 0x5, 0x6, 0xfffffffa, 0x400], [0x1, 0xfff, 0x4, 0x10000, 0x3ff, 0x23e, 0x3ff, 0x7, 0x7, 0x0, 0x2, 0x5, 0x7f, 0x4, 0xf6, 0x200, 0x2, 0x3e, 0x4, 0x8, 0x80000000, 0x7f, 0x7fff, 0x2, 0x1000, 0x5c, 0xb, 0x4, 0xc6e, 0x0, 0x200000, 0x1, 0x236, 0x5, 0x400, 0xa680, 0x6, 0x2, 0x5, 0x4, 0x3, 0x5, 0x456, 0x89d0, 0xa, 0x1, 0x7, 0xf0, 0x1000, 0xfff, 0x6, 0xb80, 0x6, 0x1, 0xea, 0x4ee3f6c6, 0x8, 0x1000, 0x5, 0x428, 0x474, 0x6b, 0x0, 0x1], [0x5, 0x9, 0x0, 0x1, 0x9, 0x6, 0x5, 0x8000, 0x7f, 0x0, 0x8, 0x5, 0x4, 0x0, 0x3b59, 0x8, 0x0, 0x7, 0xfb, 0x2, 0x9, 0x80, 0x8, 0x0, 0x401, 0x9fae, 0x9, 0xffff39c8, 0x3, 0x7ff, 0x5, 0x9, 0x2, 0xa, 0x3, 0x6, 0x3, 0x289, 0x5, 0x400, 0x8, 0x10000, 0xe620, 0x1, 0xb, 0x3, 0xf0000, 0x4, 0xa3d, 0x0, 0x0, 0x7f, 0xfffffffb, 0x0, 0x28cb, 0x6481, 0xfb28, 0x80000001, 0x0, 0xce, 0x7ff, 0x26cb7cea, 0x6, 0xa7b], [0x400, 0x9, 0xfffffffc, 0x5da, 0x400, 0x2f6, 0x9, 0x6a14, 0x10000, 0x9, 0x39dcabac, 0x8, 0xffffffff, 0x3, 0x5, 0x5, 0x2, 0x8001, 0x8001, 0x1, 0x8, 0xaa1, 0xc7, 0x2, 0x10001, 0x9, 0x2, 0x3, 0x2, 0xfffffffc, 0x4, 0x0, 0x5, 0x9, 0x200, 0x0, 0x401, 0x3, 0x1, 0x2, 0x4, 0x9, 0xc0, 0x1, 0x800, 0x17, 0x8, 0x44e9, 0x91c, 0xff, 0xe34, 0x9, 0x6, 0xca, 0x0, 0xffffffff, 0x5, 0x6, 0x9, 0xcfb8, 0x2, 0x0, 0xde, 0x7]}, 0x45c) setpriority(0x0, 0x0, 0xacf0165) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008", @ANYRES32], 0x50) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 703.578164ms ago: executing program 3 (id=1104): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r2 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x0, 0x3, 0xf0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) io_uring_register$IORING_REGISTER_FILES(r2, 0x20, &(0x7f0000000000)=[r2], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16], 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000080)={0x1, 0x7}) 539.473947ms ago: executing program 1 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000078000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) prlimit64(r0, 0x9, 0x0, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 159.531769ms ago: executing program 4 (id=1106): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 42.38137ms ago: executing program 4 (id=1107): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), 0x0) syz_io_uring_setup(0x3c20, &(0x7f0000000400)={0x0, 0x2050, 0x3380, 0x8003, 0xd2}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'gretap0\x00', 0x800}) r1 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ed730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb000000000020000000000000000000", 0xd9}, {&(0x7f0000000480)}], 0x2}, 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000001010411000000fd00000001000000300001802c00018030000300fc02eeffffffffffffff000000000004140004000000000000000000000000000400010104000dbb80ecb11bddef163a03634e6ed780a0484442a00ac1e0f2"], 0x48}, 0x1, 0x0, 0x0, 0x4a004}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r4, 0x0, 0x0, 0x2000, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x15, 0x8, 0xe, 0x0, 0x9, 0x0}) 0s ago: executing program 2 (id=1108): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x42) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x2d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20200009, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002c0000000000069078ac1e0001ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c000000907800001e03000074f8404240684bb2bf1bbcb624d39972bf3fbdd6474d707208cf32d5fc6f7ef2b736ca4412c0e13b4300623f248a7458e154d38ab3b3bf7f7af48e6e2170dc6727690b80590956cb623e8c260df3af17c6e728fd3cb8c26a87ac7280205c8d272883794cfe9c02df4d369aa6b9b5"], 0x0) sendmsg$rds(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r6], 0x88}, 0x1, 0x0, 0x0, 0x44020}, 0x24008000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0xfffffffffffffff6, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r9, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f00000005c0)=""/4101, 0x1005}], 0x3}, 0x1}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): 08.550821][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.638992][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.705775][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 108.713042][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.801970][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.965900][ T5899] usb 3-1: USB disconnect, device number 4 [ 110.725633][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 110.804566][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.837540][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.459944][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.467400][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.476571][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.484090][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.491551][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.521926][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.552672][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.573583][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.667815][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 112.128573][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.255301][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.326216][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 112.347833][ T5844] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.530741][ T5906] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.541807][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.667925][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 112.694058][ T5906] usb 5-1: config 0 descriptor?? [ 112.805809][ T5844] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.919099][ T5844] usb 4-1: config 0 has no interface number 0 [ 113.043727][ T5844] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.256481][ T5844] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 113.455709][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.533903][ T5844] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 113.742798][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.977828][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.157391][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.166807][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.174456][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.181997][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.189534][ T5899] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 114.207857][ T5899] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 114.235064][ T5844] usb 4-1: Product: syz [ 114.250394][ T5906] usbhid 5-1:0.0: can't add hid device: -71 [ 114.270711][ T5844] usb 4-1: SerialNumber: syz [ 114.284901][ T5906] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 114.348415][ T5844] usb 4-1: config 0 descriptor?? [ 114.523820][ T5844] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 114.539797][ T5906] usb 5-1: USB disconnect, device number 2 [ 114.797179][ T5844] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 114.890269][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.898902][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.907332][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.916008][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.923244][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.930473][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.937664][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.947459][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.955042][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.962893][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.013268][ T5844] usb 4-1: USB disconnect, device number 4 [ 115.019225][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 115.521040][ T5844] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.522303][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.957837][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.247779][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 117.257105][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.273849][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.289339][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.301226][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.379834][ T6263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.064839][ T5913] usb 3-1: config 0 descriptor?? [ 118.172235][ T6269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.550636][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 118.592646][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.575221][ T5913] usb 3-1: USB disconnect, device number 5 [ 120.120671][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.139199][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 120.388109][ T5906] usb 1-1: device descriptor read/64, error -32 [ 120.647993][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.814167][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 120.916173][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.002494][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.098011][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.108103][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.151734][ T5906] usb 1-1: config 0 descriptor?? [ 122.476510][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.487119][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.678938][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 122.688818][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.325431][ T5906] usb 1-1: USB disconnect, device number 4 [ 123.811116][ T6304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.183269][ T6314] fuse: Bad value for 'fd' [ 124.873338][ T6300] Invalid source name [ 125.001184][ T6317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.057121][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 125.315748][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.757787][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 125.776156][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.845489][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.062015][ T6330] Invalid source name [ 126.206546][ T6323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.221784][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.224683][ T5906] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.237973][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.268518][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 126.295809][ T5906] usb 4-1: config 0 descriptor?? [ 126.329106][ T6323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.345538][ T5837] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 126.358642][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.390744][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.400986][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.425971][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.454378][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 126.486177][ T6323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.500288][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.540561][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.554311][ T6323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.565983][ T6323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.593369][ T6323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 126.773771][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 126.792002][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 126.836844][ T5906] usb 4-1: USB disconnect, device number 5 [ 127.139596][ T6339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.106'. [ 127.723157][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.322634][ C0] Unknown status report in ack skb [ 128.397921][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.484299][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.631893][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 128.638204][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.494267][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 129.757812][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.125566][ T6366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.477797][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.558472][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.717930][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.724598][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 131.837815][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.495429][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.559810][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.637915][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.723366][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 132.759681][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.798229][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.803568][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.804309][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 132.874154][ T6391] binder: 6390:6391 unknown command 0 [ 132.898593][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905250][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924389][ T5899] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.937206][ T6391] binder: 6390:6391 ioctl c0306201 200000000080 returned -22 [ 133.055384][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.251621][ T6396] binder: 6390:6396 ioctl c0306201 200000000280 returned -14 [ 133.636460][ T5899] usb 3-1: config 0 descriptor?? [ 134.740111][ T5837] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 134.782664][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 134.804341][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.975746][ T6402] Invalid source name [ 135.158328][ T5899] usb 3-1: USB disconnect, device number 6 [ 135.577839][ T5940] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.347892][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 136.416374][ T5940] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 136.980674][ T5940] usb 1-1: config 0 has no interface number 0 [ 137.418004][ T5940] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 137.488427][ T5940] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 139.217546][ T5940] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 139.257790][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 139.286424][ T5940] usb 1-1: config 0 descriptor?? [ 139.299010][ T5940] usb 1-1: can't set config #0, error -71 [ 139.498408][ T5940] usb 1-1: USB disconnect, device number 5 [ 141.519654][ T5837] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 142.118063][ T6455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.918852][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 144.371213][ T6478] netlink: 248 bytes leftover after parsing attributes in process `syz.1.150'. [ 144.799362][ T6491] fuse: Bad value for 'fd' [ 147.834374][ T6517] Invalid source name [ 148.740064][ T6533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.787932][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.023716][ T6552] fuse: Bad value for 'fd' [ 150.077917][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 150.754504][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.817772][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.910152][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.951311][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.986058][ T5898] usb 2-1: config 0 descriptor?? [ 151.347442][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.361461][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.024423][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 152.032126][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.051054][ T5898] usb 2-1: USB disconnect, device number 2 [ 152.610758][ T6579] Invalid source name [ 153.303903][ T6585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.823100][ T6598] libceph: resolve '4' (ret=-3): failed [ 157.653112][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 158.814661][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 158.829363][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.870829][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.987911][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.028441][ T5951] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.047054][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.406178][ T6655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.425182][ T5951] usb 2-1: config 0 descriptor?? [ 159.432058][ T6655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.459536][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 159.468896][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.488374][ T6655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.497713][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.519604][ T6655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.527907][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.545946][ T6655] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.556836][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.598215][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.618643][ T6657] binder: 6656:6657 ioctl c0306201 200000000280 returned -11 [ 159.646442][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.923701][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.938153][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 159.950761][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 159.968751][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.020617][ T5951] usbhid 2-1:0.0: can't add hid device: -71 [ 160.037012][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.072840][ T5951] usb 2-1: USB disconnect, device number 3 [ 160.236882][ T5899] usb 5-1: USB disconnect, device number 3 [ 160.869884][ T6676] comedi comedi0: Minor 3 could not be opened [ 161.181717][ T6676] netlink: 'syz.4.206': attribute type 13 has an invalid length. [ 161.239189][ T6681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.340558][ T6676] gretap0: refused to change device tx_queue_len [ 161.346937][ T6676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.437866][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.447011][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.563463][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.641006][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 161.647379][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 163.593337][ T6700] binder: 6699:6700 unknown command 0 [ 163.604589][ T6700] binder: 6699:6700 ioctl c0306201 200000000080 returned -22 [ 164.354798][ T6704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.361672][ T6704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.367885][ T6704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.374343][ T6704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.380617][ T6704] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.793481][ T5898] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.794679][ T5951] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.876031][ T6714] netlink: 248 bytes leftover after parsing attributes in process `syz.4.217'. [ 165.066039][ T6718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.147958][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 165.846135][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.407842][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 166.413055][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.413932][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.459407][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.567922][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 166.650198][ T5951] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.810174][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.869151][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.090170][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.264629][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 167.343411][ T5951] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.712562][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 168.029024][ T10] usb 2-1: config 0 has no interface number 0 [ 168.318374][ T5951] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.586709][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 168.627767][ T5898] usb 3-1: unable to read config index 0 descriptor/all [ 168.628313][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.634791][ T5898] usb 3-1: can't read configurations, error -71 [ 168.671431][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 168.729360][ T5951] usb 1-1: can't set config #16, error -71 [ 168.742266][ T10] usb 2-1: string descriptor 0 read error: -71 [ 168.773900][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.786222][ T5951] usb 1-1: USB disconnect, device number 6 [ 168.972387][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.287223][ T10] usb 2-1: config 0 descriptor?? [ 169.396567][ T10] usb 2-1: can't set config #0, error -71 [ 169.749019][ T10] usb 2-1: USB disconnect, device number 4 [ 169.800105][ T6745] binder: 6744:6745 unknown command 0 [ 169.805654][ T6745] binder: 6744:6745 ioctl c0306201 200000000080 returned -22 [ 170.215825][ T6758] Invalid source name [ 171.497950][ T979] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.701517][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 172.905598][ T979] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 173.184605][ T979] usb 5-1: config 0 has no interface number 0 [ 173.241972][ T979] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 173.332217][ T979] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 173.389843][ T979] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 173.425499][ T979] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 173.445327][ T979] usb 5-1: Product: syz [ 173.450691][ T979] usb 5-1: SerialNumber: syz [ 173.477569][ T979] usb 5-1: config 0 descriptor?? [ 173.504852][ T979] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 173.511956][ T5951] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.542533][ T979] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input7 [ 173.597965][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.687854][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 173.707823][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.731819][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 173.761062][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.784828][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 173.802986][ T5951] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 173.818628][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.836628][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.846713][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.857411][ T5951] usb 2-1: config 0 descriptor?? [ 173.877063][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.896855][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.925224][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.939796][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.167952][ T5913] usb 3-1: GET_CAPABILITIES returned 0 [ 174.191534][ T5913] usbtmc 3-1:16.0: can't read capabilities [ 174.226405][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.236697][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.301010][ T5951] usbhid 2-1:0.0: can't add hid device: -71 [ 174.329332][ T5951] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.373384][ T5951] usb 2-1: USB disconnect, device number 5 [ 174.384875][ T5913] usb 3-1: USB disconnect, device number 9 [ 175.398507][ C0] cm109_urb_ctl_callback: 202 callbacks suppressed [ 175.398525][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.412341][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.419450][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.426622][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.433774][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.440875][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.448112][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.456174][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.463675][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.472545][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 175.479939][ T10] usb 5-1: USB disconnect, device number 4 [ 175.485841][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 175.563493][ T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 176.827182][ T6820] netlink: 248 bytes leftover after parsing attributes in process `syz.3.241'. [ 177.199514][ T6826] Invalid source name [ 177.399432][ T6828] binder: 6821:6828 unknown command 0 [ 177.457275][ T6828] binder: 6821:6828 ioctl c0306201 200000000080 returned -22 [ 177.633138][ T6822] binder: BINDER_SET_CONTEXT_MGR already set [ 177.662237][ T6822] binder: 6821:6822 ioctl 4018620d 200000000040 returned -16 [ 178.808354][ T6844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.218436][ T5951] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.390241][ T6850] Invalid source name [ 180.444437][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 180.526043][ T5951] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 180.661554][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.801348][ T5951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.304636][ T5951] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.362635][ T5951] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.385553][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.881788][ T5951] usb 1-1: GET_CAPABILITIES returned 0 [ 181.915998][ T6862] Invalid source name [ 181.927951][ T5951] usbtmc 1-1:16.0: can't read capabilities [ 182.072544][ T6868] netlink: 112 bytes leftover after parsing attributes in process `syz.4.254'. [ 182.108639][ T5844] usb 1-1: USB disconnect, device number 7 [ 182.143444][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 183.528225][ T6887] Invalid source name [ 184.888444][ T6897] comedi comedi0: Minor 3 could not be opened [ 185.425106][ T6897] netlink: 'syz.3.262': attribute type 13 has an invalid length. [ 185.531346][ T6897] gretap0: refused to change device tx_queue_len [ 185.538594][ T6897] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.719186][ T6917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.573284][ T6934] binder: 6931:6934 unknown command 0 [ 187.712917][ T6936] netlink: 248 bytes leftover after parsing attributes in process `syz.2.269'. [ 187.742372][ T6934] binder: 6931:6934 ioctl c0306201 200000000080 returned -22 [ 187.775651][ T6937] binder: 6931:6937 ioctl c0306201 200000000280 returned -11 [ 187.787914][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 187.958139][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 188.050442][ T6942] Invalid source name [ 188.107987][ T5844] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.479765][ T5844] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.534630][ T5844] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.587773][ T5844] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.710908][ T5844] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.748777][ T6955] Invalid source name [ 188.763586][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.796095][ T5844] usb 4-1: GET_CAPABILITIES returned 0 [ 190.251628][ T5844] usbtmc 4-1:16.0: can't read capabilities [ 190.269433][ T5844] usb 4-1: USB disconnect, device number 6 [ 190.409617][ T6967] comedi comedi0: Minor 3 could not be opened [ 190.502158][ T6967] netlink: 'syz.0.277': attribute type 13 has an invalid length. [ 190.599658][ T6967] gretap0: refused to change device tx_queue_len [ 190.617341][ T6967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 191.664053][ T6974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.521734][ T6977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.279'. [ 192.530935][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 194.337805][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.344093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.821059][ T6992] binder: 6990:6992 unknown command 0 [ 194.827997][ T6992] binder: 6990:6992 ioctl c0306201 200000000080 returned -22 [ 195.291161][ T6992] binder: 6990:6992 ioctl c0306201 200000000280 returned -11 [ 195.420701][ T6995] Invalid source name [ 196.046319][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 196.207470][ T7004] Invalid source name [ 196.907923][ T5940] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 197.109973][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 197.211414][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 197.329689][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 197.420019][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.483381][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.809483][ T7024] netlink: 68 bytes leftover after parsing attributes in process `syz.3.291'. [ 197.818675][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 198.224436][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.234542][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.548257][ T5940] usb 5-1: GET_CAPABILITIES returned 0 [ 198.564567][ T5940] usbtmc 5-1:16.0: can't read capabilities [ 198.764369][ T5940] usb 5-1: USB disconnect, device number 5 [ 198.990924][ T7034] binder: 7033:7034 unknown command 0 [ 199.046290][ T7034] binder: 7033:7034 ioctl c0306201 200000000080 returned -22 [ 199.182677][ T7040] binder: 7033:7040 ioctl c0306201 200000000280 returned -11 [ 199.801576][ T7036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.827962][ T7036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.842261][ T7036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.888067][ T7036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.937945][ T7036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.080877][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 200.640840][ T7060] Invalid source name [ 201.567781][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.716611][ T7070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.902765][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.917936][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.924024][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.997834][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 202.040229][ T7079] netlink: 68 bytes leftover after parsing attributes in process `syz.3.303'. [ 203.166100][ T7085] binder: 7084:7085 unknown command 0 [ 203.182100][ T7085] binder: 7084:7085 ioctl c0306201 200000000080 returned -22 [ 203.209346][ T7088] netlink: 112 bytes leftover after parsing attributes in process `syz.3.309'. [ 203.309024][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.527598][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 203.587483][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 203.725039][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 203.796525][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.858450][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.902518][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 203.913454][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.943859][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.192111][ T7095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.224801][ T7095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.299563][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 204.332743][ T7095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.517745][ T10] usbtmc 1-1:16.0: can't read capabilities [ 204.618320][ T7095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.624463][ T7095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.667934][ T10] usb 1-1: USB disconnect, device number 8 [ 205.517764][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.881855][ T7124] netlink: 248 bytes leftover after parsing attributes in process `syz.4.317'. [ 206.300014][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.397863][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.637842][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 206.644007][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.548737][ T7117] Invalid source name [ 207.743662][ T7129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.845957][ T7141] binder: 7140:7141 unknown command 0 [ 207.853679][ T7141] binder: 7140:7141 ioctl c0306201 200000000080 returned -22 [ 208.595533][ T7154] comedi comedi0: Minor 3 could not be opened [ 208.947551][ T7157] netlink: 'syz.2.327': attribute type 13 has an invalid length. [ 209.150387][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 209.162819][ T7157] gretap0: refused to change device tx_queue_len [ 209.198142][ T7157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.592633][ T7170] netlink: 248 bytes leftover after parsing attributes in process `syz.3.330'. [ 210.878274][ T7176] Invalid source name [ 210.909516][ T7181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.740638][ T7182] binder: 7180:7182 unknown command 0 [ 211.746083][ T7182] binder: 7180:7182 ioctl c0306201 200000000080 returned -22 [ 212.276143][ T7199] Invalid source name [ 213.588735][ T7210] comedi comedi0: Minor 3 could not be opened [ 214.068479][ T7217] netlink: 'syz.1.343': attribute type 13 has an invalid length. [ 214.232005][ T7217] gretap0: refused to change device tx_queue_len [ 214.263502][ T7217] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.355896][ T7222] netlink: 68 bytes leftover after parsing attributes in process `syz.4.345'. [ 214.365002][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 214.460376][ T7214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.649834][ T7214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.815938][ T7214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.831277][ T7214] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.838112][ T7214] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.838314][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.904653][ T7227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.384274][ T7230] Invalid source name [ 216.717794][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.872702][ T7233] binder: 7232:7233 unknown command 0 [ 216.878502][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 216.878524][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.884522][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.892428][ T7239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.904514][ T7233] binder: 7232:7233 ioctl c0306201 200000000080 returned -22 [ 216.969133][ T7233] binder_alloc: 7232: binder_alloc_buf, no vma [ 217.053314][ T7233] binder: 7232:7233 ioctl c0306201 200000000280 returned -11 [ 217.624691][ T7253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.963717][ T7260] netlink: 68 bytes leftover after parsing attributes in process `syz.1.359'. [ 218.972896][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 219.908199][ T7273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.360'. [ 220.268648][ T7280] Invalid source name [ 220.550509][ T7277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 220.556767][ T7277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 220.563546][ T7277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.570138][ T7277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 220.576587][ T7277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.815707][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.364'. [ 220.885011][ T7291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.276772][ T7299] Invalid source name [ 221.425565][ T7300] binder: 7296:7300 unknown command 0 [ 221.437810][ T7300] binder: 7296:7300 ioctl c0306201 200000000080 returned -22 [ 221.631471][ T7300] binder_alloc: 7296: binder_alloc_buf, no vma [ 221.641692][ T7300] binder: 7296:7300 ioctl c0306201 200000000280 returned -11 [ 221.770516][ T7304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.967774][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.969410][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 222.974938][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 222.981162][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.987149][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.167557][ T7320] netlink: 248 bytes leftover after parsing attributes in process `syz.0.371'. [ 223.545587][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.374'. [ 224.401443][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.378'. [ 224.827433][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.071174][ T7350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.617880][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.735694][ T7354] Invalid source name [ 225.950079][ T7357] binder: 7356:7357 unknown command 0 [ 225.973833][ T7357] binder: 7356:7357 ioctl c0306201 200000000080 returned -22 [ 226.003057][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 226.024104][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.046265][ T7357] binder_alloc: 7356: binder_alloc_buf, no vma [ 226.068234][ T7357] binder: 7356:7357 ioctl c0306201 200000000280 returned -11 [ 226.098038][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.133821][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.162073][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.415360][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.397899][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.447414][ T7368] netlink: 68 bytes leftover after parsing attributes in process `syz.4.386'. [ 227.853436][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 227.968278][ T10] usbtmc 1-1:16.0: can't read capabilities [ 228.418448][ T10] usb 1-1: USB disconnect, device number 9 [ 229.239661][ T7384] netlink: 248 bytes leftover after parsing attributes in process `syz.1.388'. [ 232.223555][ T7415] Invalid source name [ 233.732201][ T7446] comedi comedi0: Minor 3 could not be opened [ 233.880126][ T7446] netlink: 'syz.2.404': attribute type 13 has an invalid length. [ 233.888145][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 233.897476][ T7446] gretap0: refused to change device tx_queue_len [ 233.916990][ T7446] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.322338][ T7459] netlink: 68 bytes leftover after parsing attributes in process `syz.4.406'. [ 236.054804][ T7465] Invalid source name [ 236.806851][ T7477] Invalid source name [ 237.088617][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.474238][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.766650][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 237.855799][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 237.947485][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.000336][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.083390][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.109995][ T7498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.162733][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.196437][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.219954][ T7502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 238.245530][ T7501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.444276][ T5898] usb 1-1: GET_CAPABILITIES returned 0 [ 238.475951][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 238.807828][ T7519] Invalid source name [ 239.334487][ T5898] usb 1-1: USB disconnect, device number 10 [ 240.337884][ T7539] Invalid source name [ 240.639862][ T7545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.528694][ T7565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.563631][ T7565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.613249][ T7565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.643337][ T7565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.665095][ T7565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.819476][ T7571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.434'. [ 245.445352][ T7585] Invalid source name [ 246.289560][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.637954][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.645030][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.821832][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.821860][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 246.900163][ T7605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.626319][ T7623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.700234][ T7626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.753571][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'. [ 249.288145][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 249.437763][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 249.471291][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.887879][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.901676][ T5898] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 249.921416][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.965220][ T5898] usb 4-1: config 0 descriptor?? [ 250.308170][ T5898] usbhid 4-1:0.0: can't add hid device: -71 [ 250.332053][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.387969][ T5898] usb 4-1: USB disconnect, device number 7 [ 250.772781][ T7666] netlink: 248 bytes leftover after parsing attributes in process `syz.4.454'. [ 251.967748][ T5940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 253.283153][ T7687] Invalid source name [ 254.385807][ T7697] Invalid source name [ 255.020653][ T7710] binder: 7709:7710 ioctl c0306201 200000000280 returned -11 [ 255.128508][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 255.366723][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'. [ 255.767463][ T5940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.958300][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962573][ T7727] Invalid source name [ 255.969421][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.328465][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 256.373806][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.427938][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.505582][ T5940] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.537940][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.555064][ T5940] usb 1-1: config 0 descriptor?? [ 256.712046][ T7743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.125384][ T7747] Invalid source name [ 257.217871][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 257.556814][ T5940] usbhid 1-1:0.0: can't add hid device: -71 [ 257.667851][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 257.677865][ T5940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 257.701786][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 257.713642][ T5940] usb 1-1: USB disconnect, device number 11 [ 257.727724][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 257.812351][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.626147][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.667884][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.721581][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.948265][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 258.953818][ T10] usbtmc 2-1:16.0: can't read capabilities [ 259.157640][ T10] usb 2-1: USB disconnect, device number 6 [ 259.419583][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 259.513675][ T7771] binder: 7769:7771 ioctl c0306201 200000000280 returned -11 [ 260.095307][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'. [ 260.447988][ T7780] Invalid source name [ 261.263792][ T7794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.291445][ T7794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.328324][ T7794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.348175][ T7794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.395984][ T7794] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.012750][ T7822] Invalid source name [ 263.208162][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.226925][ T7808] Invalid source name [ 263.375088][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.381185][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.387248][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.445465][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 263.620330][ T7831] binder: BINDER_SET_CONTEXT_MGR already set [ 263.627964][ T7831] binder: 7827:7831 ioctl 4018620d 200000000040 returned -16 [ 263.683135][ T7831] binder: 7827:7831 ioctl c0306201 200000000280 returned -11 [ 264.161961][ T7840] Invalid source name [ 264.247867][ T7841] Invalid source name [ 265.135251][ T7848] Invalid source name [ 265.468043][ T7855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.074743][ T7856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.598808][ T7875] Invalid source name [ 270.219077][ T7909] Invalid source name [ 270.285335][ T5848] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 273.170681][ T7938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.415496][ T7949] netlink: 248 bytes leftover after parsing attributes in process `syz.4.523'. [ 275.518104][ T5898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 275.661874][ T7972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.729244][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 277.118396][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 277.138174][ T5898] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 277.154618][ T5898] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.164748][ T5898] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.177978][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.187139][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.583581][ T5898] usb 4-1: GET_CAPABILITIES returned 0 [ 277.634366][ T5898] usbtmc 4-1:16.0: can't read capabilities [ 277.925808][ T10] usb 4-1: USB disconnect, device number 8 [ 278.040591][ T7990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.344626][ T7994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.861900][ T8002] netlink: 248 bytes leftover after parsing attributes in process `syz.2.539'. [ 281.999752][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 282.026116][ T8029] syzkaller0: entered promiscuous mode [ 282.055560][ T8029] syzkaller0: entered allmulticast mode [ 282.663225][ T8032] Invalid source name [ 283.468224][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.630888][ T5898] usb 3-1: device descriptor read/64, error -71 [ 283.868105][ T5898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 284.501575][ T5898] usb 3-1: device descriptor read/64, error -71 [ 284.642397][ T5898] usb usb3-port1: attempt power cycle [ 285.146041][ T5898] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.195717][ T5898] usb 3-1: device descriptor read/8, error -71 [ 285.216729][ T8062] Invalid source name [ 285.338079][ T5844] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 285.458386][ T5898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 285.513027][ T5898] usb 3-1: device descriptor read/8, error -71 [ 285.547862][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 285.562005][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.581315][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.630689][ T5844] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.684015][ T5898] usb usb3-port1: unable to enumerate USB device [ 285.717121][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.892577][ T5844] usb 2-1: config 0 descriptor?? [ 286.376643][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 286.397434][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 286.567221][ T5844] usb 2-1: USB disconnect, device number 7 [ 288.134717][ T8110] netlink: 248 bytes leftover after parsing attributes in process `syz.1.562'. [ 289.064624][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.566'. [ 290.195457][ T8135] Invalid source name [ 290.744512][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.894141][ T10] usb 4-1: device descriptor read/64, error -71 [ 291.316298][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 291.497867][ T10] usb 4-1: device descriptor read/64, error -71 [ 291.657493][ T10] usb usb4-port1: attempt power cycle [ 291.862182][ T8154] Invalid source name [ 292.337946][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.405331][ T10] usb 4-1: device descriptor read/8, error -71 [ 292.587912][ T5898] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 292.696955][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.748786][ T10] usb 4-1: device descriptor read/8, error -71 [ 292.768423][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 292.794194][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.876245][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.898779][ T10] usb usb4-port1: unable to enumerate USB device [ 292.980851][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.043977][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.376868][ T5898] usb 3-1: config 0 descriptor?? [ 293.533528][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.577'. [ 293.752887][ T8179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.982621][ T5898] usbhid 3-1:0.0: can't add hid device: -71 [ 294.988782][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.001639][ T5898] usb 3-1: USB disconnect, device number 15 [ 297.376683][ T8194] comedi comedi0: Minor 3 could not be opened [ 297.471568][ T8194] netlink: 'syz.3.583': attribute type 13 has an invalid length. [ 297.532409][ T8194] gretap0: refused to change device tx_queue_len [ 297.591235][ T8194] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.652759][ T5848] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 297.834697][ C0] Unknown status report in ack skb [ 298.667914][ T8223] Invalid source name [ 299.234734][ T8224] Invalid source name [ 299.421030][ T8227] Invalid source name [ 300.427335][ C1] Unknown status report in ack skb [ 301.628858][ T5848] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 302.286809][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 302.609976][ T8278] netlink: 248 bytes leftover after parsing attributes in process `syz.3.601'. [ 302.967356][ C1] Unknown status report in ack skb [ 304.788864][ C0] Unknown status report in ack skb [ 305.559324][ T8315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.660018][ T5848] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 306.523411][ T8339] netlink: 248 bytes leftover after parsing attributes in process `syz.2.619'. [ 307.438650][ C1] Unknown status report in ack skb [ 307.919057][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.998192][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 308.083201][ T8374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.652374][ T5848] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 309.146728][ T8386] Invalid source name [ 310.238790][ T8402] netlink: 248 bytes leftover after parsing attributes in process `syz.0.637'. [ 311.609957][ T8419] Unknown status report in ack skb [ 311.911881][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'. [ 312.227250][ T5848] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 312.405450][ T8423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.454088][ T8440] Invalid source name [ 313.986851][ T8450] Invalid source name [ 314.360033][ C1] Unknown status report in ack skb [ 314.466230][ T8463] FAULT_INJECTION: forcing a failure. [ 314.466230][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 314.480177][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.0.653 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 314.480203][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.480220][ T8463] Call Trace: [ 314.480232][ T8463] [ 314.480240][ T8463] dump_stack_lvl+0x189/0x250 [ 314.480277][ T8463] ? irqentry_exit+0x74/0x90 [ 314.480299][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.480340][ T8463] should_fail_ex+0x414/0x560 [ 314.480365][ T8463] _copy_from_iter+0x1db/0x16f0 [ 314.480394][ T8463] ? rcu_is_watching+0x15/0xb0 [ 314.480416][ T8463] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 314.480438][ T8463] ? __pfx__copy_from_iter+0x10/0x10 [ 314.480463][ T8463] ? __build_skb_around+0x257/0x3e0 [ 314.480493][ T8463] ? netlink_sendmsg+0x642/0xb30 [ 314.480518][ T8463] ? skb_put+0x11b/0x210 [ 314.480548][ T8463] netlink_sendmsg+0x6b2/0xb30 [ 314.480585][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.480620][ T8463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.480639][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.480666][ T8463] __sock_sendmsg+0x21c/0x270 [ 314.480692][ T8463] ____sys_sendmsg+0x505/0x830 [ 314.480725][ T8463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.480763][ T8463] ? import_iovec+0x74/0xa0 [ 314.480790][ T8463] ___sys_sendmsg+0x21f/0x2a0 [ 314.480822][ T8463] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.480887][ T8463] ? __fget_files+0x2a/0x420 [ 314.480907][ T8463] ? __fget_files+0x3a0/0x420 [ 314.480937][ T8463] __x64_sys_sendmsg+0x19b/0x260 [ 314.480968][ T8463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.481004][ T8463] ? __pfx_ksys_write+0x10/0x10 [ 314.481019][ T8463] ? rcu_is_watching+0x15/0xb0 [ 314.481048][ T8463] ? do_syscall_64+0xbe/0x3b0 [ 314.481074][ T8463] do_syscall_64+0xfa/0x3b0 [ 314.481093][ T8463] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.481112][ T8463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.481131][ T8463] ? clear_bhb_loop+0x60/0xb0 [ 314.481154][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.481180][ T8463] RIP: 0033:0x7f382df8ebe9 [ 314.481201][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.481217][ T8463] RSP: 002b:00007f382eea6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.481244][ T8463] RAX: ffffffffffffffda RBX: 00007f382e1b6090 RCX: 00007f382df8ebe9 [ 314.481258][ T8463] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 314.481270][ T8463] RBP: 00007f382eea6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.481282][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.481293][ T8463] R13: 00007f382e1b6128 R14: 00007f382e1b6090 R15: 00007fff2f6470a8 [ 314.481324][ T8463] [ 315.086083][ T8445] Invalid source name [ 315.232053][ T8466] Invalid source name [ 315.690543][ T5848] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 316.476402][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 316.590848][ T8497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.618226][ T8497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.641538][ T8497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.679712][ T8497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.705539][ T8497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.216725][ T8525] netlink: set zone limit has 4 unknown bytes [ 317.226614][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235384][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.398481][ T8532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.574419][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.646764][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.653015][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.718353][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 318.724534][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 318.990317][ T8546] Invalid source name [ 319.089303][ T8550] netlink: 420 bytes leftover after parsing attributes in process `syz.0.673'. [ 320.037903][ T5848] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 320.718620][ T8566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.800197][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.678'. [ 321.708581][ T8576] Invalid source name [ 321.773376][ T8584] qnx6: unable to read the first superblock [ 321.829035][ T8584] qnx6: unable to read the first superblock [ 321.873369][ T8584] qnx6: unable to read the first superblock [ 321.918709][ T8584] qnx6: unable to read the first superblock [ 321.929849][ T8584] qnx6: unable to read the first superblock [ 321.970824][ T8584] qnx6: unable to read the first superblock [ 321.989765][ T8584] qnx6: unable to read the first superblock [ 322.016191][ T8584] qnx6: unable to read the first superblock [ 322.145467][ T8584] qnx6: unable to read the first superblock [ 322.162244][ T8584] qnx6: unable to read the first superblock [ 322.177003][ T8584] qnx6: unable to read the first superblock [ 323.487715][ T8606] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[8606] [ 323.500110][ T8606] xt_cgroup: invalid path, errno=-2 [ 325.107875][ T30] audit: type=1107 audit(1755857515.919:2): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 325.509643][ T8630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.731722][ T8633] comedi comedi0: Minor 3 could not be opened [ 325.839602][ T8633] netlink: 'syz.3.693': attribute type 13 has an invalid length. [ 325.861686][ T8633] gretap0: refused to change device tx_queue_len [ 325.881659][ T8633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.161804][ T30] audit: type=1326 audit(1755857519.329:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8669 comm="syz.3.701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87d1d8ebe9 code=0x0 [ 329.153317][ T8690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.400540][ T8695] binder: 8694:8695 unknown command 0 [ 329.405977][ T8695] binder: 8694:8695 ioctl c0306201 200000000080 returned -22 [ 329.460952][ T8695] binder: 8694:8695 ioctl c0306201 200000000280 returned -11 [ 330.879542][ T8715] Invalid source name [ 331.130901][ T8719] Invalid source name [ 331.338791][ T8721] Bluetooth: MGMT ver 1.23 [ 332.868017][ T8733] Invalid source name [ 332.962476][ T8728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.011181][ T8728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.058059][ T8728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.088031][ T8728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.100866][ T8728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 333.128297][ T8745] binder: 8743:8745 unknown command 0 [ 333.145249][ T8745] binder: 8743:8745 ioctl c0306201 200000000080 returned -22 [ 333.176946][ T8745] binder: 8743:8745 ioctl c0306201 200000000280 returned -11 [ 334.696569][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.945551][ T8765] comedi comedi0: Minor 3 could not be opened [ 335.128853][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 335.134670][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.134941][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 335.134974][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.137914][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 335.168249][ T8765] netlink: 'syz.3.726': attribute type 13 has an invalid length. [ 335.234052][ T8765] gretap0: refused to change device tx_queue_len [ 335.244103][ T8765] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 335.590389][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 335.833921][ T10] usb 5-1: config 6 has an invalid interface number: 215 but max is 1 [ 335.854643][ T10] usb 5-1: config 6 has an invalid interface number: 195 but max is 1 [ 335.866524][ T10] usb 5-1: config 6 has no interface number 0 [ 336.218248][ T10] usb 5-1: config 6 has no interface number 1 [ 336.297199][ T10] usb 5-1: config 6 interface 195 has no altsetting 0 [ 336.452672][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0154, bcdDevice=ca.4e [ 336.478672][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.588677][ T51] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 336.600153][ T10] usb 5-1: Product: syz [ 336.622186][ T10] usb 5-1: Manufacturer: syz [ 336.648217][ T10] usb 5-1: SerialNumber: syz [ 337.063519][ T8774] Invalid source name [ 337.384501][ T10] usb 5-1: USB disconnect, device number 6 [ 337.395371][ T8789] netlink: 'syz.3.734': attribute type 29 has an invalid length. [ 337.411161][ T8786] FAULT_INJECTION: forcing a failure. [ 337.411161][ T8786] name failslab, interval 1, probability 0, space 0, times 1 [ 337.422904][ T8789] netlink: 'syz.3.734': attribute type 29 has an invalid length. [ 337.445932][ T8790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.466546][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.0.732 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 337.466573][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.466584][ T8786] Call Trace: [ 337.466592][ T8786] [ 337.466601][ T8786] dump_stack_lvl+0x189/0x250 [ 337.466627][ T8786] ? __pfx____ratelimit+0x10/0x10 [ 337.466648][ T8786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.466670][ T8786] ? __pfx__printk+0x10/0x10 [ 337.466699][ T8786] ? __pfx___might_resched+0x10/0x10 [ 337.466719][ T8786] ? fs_reclaim_acquire+0x7d/0x100 [ 337.466755][ T8786] should_fail_ex+0x414/0x560 [ 337.466780][ T8786] should_failslab+0xa8/0x100 [ 337.466803][ T8786] __kmalloc_noprof+0xcb/0x4f0 [ 337.466819][ T8786] ? kfree+0x4d/0x440 [ 337.466843][ T8786] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 337.466873][ T8786] tomoyo_realpath_from_path+0xe3/0x5d0 [ 337.466898][ T8786] ? tomoyo_domain+0xda/0x130 [ 337.466929][ T8786] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 337.466950][ T8786] tomoyo_path_number_perm+0x1e8/0x5a0 [ 337.466973][ T8786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 337.467011][ T8786] ? __lock_acquire+0xab9/0xd20 [ 337.467050][ T8786] ? __fget_files+0x2a/0x420 [ 337.467075][ T8786] ? __fget_files+0x2a/0x420 [ 337.467095][ T8786] ? __fget_files+0x3a0/0x420 [ 337.467114][ T8786] ? __fget_files+0x2a/0x420 [ 337.467137][ T8786] security_file_ioctl+0xcb/0x2d0 [ 337.467162][ T8786] __se_sys_ioctl+0x47/0x170 [ 337.467192][ T8786] do_syscall_64+0xfa/0x3b0 [ 337.467213][ T8786] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.467231][ T8786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.467249][ T8786] ? clear_bhb_loop+0x60/0xb0 [ 337.467272][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.467290][ T8786] RIP: 0033:0x7f382df8ebe9 [ 337.467307][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.467323][ T8786] RSP: 002b:00007f382eec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.467341][ T8786] RAX: ffffffffffffffda RBX: 00007f382e1b5fa0 RCX: 00007f382df8ebe9 [ 337.467355][ T8786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 337.467366][ T8786] RBP: 00007f382eec7090 R08: 0000000000000000 R09: 0000000000000000 [ 337.467376][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.467387][ T8786] R13: 00007f382e1b6038 R14: 00007f382e1b5fa0 R15: 00007fff2f6470a8 [ 337.467418][ T8786] [ 337.467426][ T8786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 337.470826][ T8789] netlink: 500 bytes leftover after parsing attributes in process `syz.3.734'. [ 338.195318][ T8800] FAULT_INJECTION: forcing a failure. [ 338.195318][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.208818][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.1.736 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 338.208841][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.208852][ T8800] Call Trace: [ 338.208859][ T8800] [ 338.208867][ T8800] dump_stack_lvl+0x189/0x250 [ 338.208891][ T8800] ? __pfx____ratelimit+0x10/0x10 [ 338.208911][ T8800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.208930][ T8800] ? __pfx__printk+0x10/0x10 [ 338.208952][ T8800] ? __might_fault+0xb0/0x130 [ 338.208980][ T8800] should_fail_ex+0x414/0x560 [ 338.209003][ T8800] _copy_from_user+0x2d/0xb0 [ 338.209028][ T8800] futex_parse_waitv+0xf4/0x410 [ 338.209054][ T8800] ? __pfx_futex_wake_mark+0x10/0x10 [ 338.209081][ T8800] ? __pfx_futex_parse_waitv+0x10/0x10 [ 338.209106][ T8800] ? rcu_is_watching+0x15/0xb0 [ 338.209128][ T8800] ? trace_kmalloc+0x1f/0xd0 [ 338.209145][ T8800] ? __se_sys_futex_waitv+0x17d/0x280 [ 338.209175][ T8800] __se_sys_futex_waitv+0x19f/0x280 [ 338.209203][ T8800] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 338.209246][ T8800] ? __x64_sys_futex_waitv+0x20/0xc0 [ 338.209273][ T8800] do_syscall_64+0xfa/0x3b0 [ 338.209293][ T8800] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.209313][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.209332][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 338.209356][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.209374][ T8800] RIP: 0033:0x7f960818ebe9 [ 338.209391][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.209407][ T8800] RSP: 002b:00007f96063f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 338.209427][ T8800] RAX: ffffffffffffffda RBX: 00007f96083b5fa0 RCX: 00007f960818ebe9 [ 338.209441][ T8800] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000200000001840 [ 338.209454][ T8800] RBP: 00007f96063f6090 R08: 0000000000000001 R09: 0000000000000000 [ 338.209466][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.209477][ T8800] R13: 00007f96083b6038 R14: 00007f96083b5fa0 R15: 00007ffdf187c8a8 [ 338.209509][ T8800] [ 338.635779][ T8805] bridge_slave_0: invalid flags given to default FDB implementation [ 338.655352][ T8799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.675004][ T8799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.689378][ T8799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.820898][ T8799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.862760][ T8799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 340.073060][ T8822] comedi comedi0: Minor 3 could not be opened [ 340.241668][ T8822] netlink: 'syz.1.741': attribute type 13 has an invalid length. [ 340.268122][ T8822] gretap0: refused to change device tx_queue_len [ 340.982044][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.984027][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.994347][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 340.994363][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.007258][ T51] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 341.154909][ T8822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 341.476666][ T8837] overlayfs: conflicting options: userxattr,metacopy=on [ 341.547950][ T8824] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 341.570252][ T30] audit: type=1400 audit(1755857532.739:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8833 comm="syz.4.745" netif=wpan0 [ 342.778209][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'. [ 342.824870][ T8860] netlink: 'syz.2.750': attribute type 7 has an invalid length. [ 343.666978][ T5844] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 343.916545][ T30] audit: type=1107 audit(1755857535.069:5): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 344.299001][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 344.368239][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.409224][ T5844] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.480845][ T5844] usb 4-1: config 1 interface 0 has no altsetting 0 [ 344.503297][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.545735][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.676412][ T5844] usb 4-1: Product: syz [ 344.772000][ T5844] usb 4-1: Manufacturer: syz [ 344.856534][ T5844] usb 4-1: SerialNumber: syz [ 345.196008][ T8889] Invalid source name [ 345.309607][ T8891] comedi comedi0: Minor 3 could not be opened [ 345.630573][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 345.639165][ T8894] netlink: 'syz.2.758': attribute type 13 has an invalid length. [ 345.653632][ T8894] gretap0: refused to change device tx_queue_len [ 345.674669][ T8894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 345.708721][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 347.743233][ T5844] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 347.865736][ T5844] usb 4-1: USB disconnect, device number 13 [ 349.146602][ T8932] loop6: detected capacity change from 0 to 7 [ 349.230099][ T6050] Dev loop6: unable to read RDB block 7 [ 349.267505][ T8936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.284022][ T6050] loop6: unable to read partition table [ 349.315519][ T6050] loop6: partition table beyond EOD, truncated [ 349.367155][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 349.391038][ T8932] Dev loop6: unable to read RDB block 7 [ 349.425211][ T8932] loop6: unable to read partition table [ 349.455443][ T8932] loop6: partition table beyond EOD, truncated [ 349.465872][ T8932] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.052972][ T8947] Invalid source name [ 350.136417][ T8950] comedi comedi0: Minor 3 could not be opened [ 350.244992][ T8950] netlink: 'syz.4.771': attribute type 13 has an invalid length. [ 350.291858][ T8950] gretap0: refused to change device tx_queue_len [ 350.323282][ T8950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 350.576403][ T8959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.472528][ T8967] FAULT_INJECTION: forcing a failure. [ 351.472528][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 351.489822][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.3.775 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 351.489847][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.489859][ T8967] Call Trace: [ 351.489866][ T8967] [ 351.489871][ T8967] dump_stack_lvl+0x189/0x250 [ 351.489889][ T8967] ? __pfx____ratelimit+0x10/0x10 [ 351.489900][ T8967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.489911][ T8967] ? __pfx__printk+0x10/0x10 [ 351.489927][ T8967] ? __pfx___might_resched+0x10/0x10 [ 351.489938][ T8967] ? fs_reclaim_acquire+0x7d/0x100 [ 351.489953][ T8967] should_fail_ex+0x414/0x560 [ 351.489967][ T8967] should_failslab+0xa8/0x100 [ 351.489979][ T8967] __kmalloc_noprof+0xcb/0x4f0 [ 351.489988][ T8967] ? drm_atomic_state_init+0x9c/0x310 [ 351.490004][ T8967] drm_atomic_state_init+0x9c/0x310 [ 351.490018][ T8967] drm_atomic_state_alloc+0xbc/0x100 [ 351.490032][ T8967] drm_mode_atomic_ioctl+0x437/0xcb0 [ 351.490048][ T8967] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 351.490063][ T8967] ? irqentry_exit+0x74/0x90 [ 351.490075][ T8967] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 351.490103][ T8967] ? do_raw_spin_unlock+0x122/0x240 [ 351.490118][ T8967] ? _raw_spin_unlock+0x28/0x50 [ 351.490132][ T8967] ? drm_is_current_master+0x19f/0x200 [ 351.490143][ T8967] drm_ioctl_kernel+0x2cf/0x390 [ 351.490155][ T8967] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 351.490170][ T8967] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 351.490186][ T8967] drm_ioctl+0x67f/0xb10 [ 351.490195][ T8967] ? smk_tskacc+0x2fc/0x370 [ 351.490212][ T8967] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 351.490230][ T8967] ? __pfx_drm_ioctl+0x10/0x10 [ 351.490248][ T8967] ? __fget_files+0x2a/0x420 [ 351.490261][ T8967] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.490273][ T8967] ? __pfx_drm_ioctl+0x10/0x10 [ 351.490283][ T8967] __se_sys_ioctl+0xfc/0x170 [ 351.490300][ T8967] do_syscall_64+0xfa/0x3b0 [ 351.490312][ T8967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.490321][ T8967] ? asm_sysvec_call_function_single+0x1a/0x20 [ 351.490331][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 351.490343][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.490353][ T8967] RIP: 0033:0x7f87d1d8ebe9 [ 351.490365][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.490374][ T8967] RSP: 002b:00007f87d2c60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.490385][ T8967] RAX: ffffffffffffffda RBX: 00007f87d1fb6090 RCX: 00007f87d1d8ebe9 [ 351.490393][ T8967] RDX: 0000200000000040 RSI: 00000000c03864bc RDI: 0000000000000003 [ 351.490399][ T8967] RBP: 00007f87d2c60090 R08: 0000000000000000 R09: 0000000000000000 [ 351.490405][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.490411][ T8967] R13: 00007f87d1fb6128 R14: 00007f87d1fb6090 R15: 00007ffe34be6298 [ 351.490427][ T8967] [ 352.649830][ T8971] erofs (device loop4): cannot find valid erofs superblock [ 354.007157][ T8984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.778'. [ 354.297558][ T8990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.315807][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 355.765040][ T8983] ALSA: mixer_oss: invalid OSS volume '' [ 355.815215][ T8994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.426721][ T8984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.469154][ T8984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.494468][ T8984] bond0 (unregistering): Released all slaves [ 356.618098][ T8985] ipvlan0: entered allmulticast mode [ 356.623652][ T8985] veth0_vlan: entered allmulticast mode [ 357.854478][ T9005] Invalid source name [ 358.638826][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 358.714827][ T9024] netlink: 420 bytes leftover after parsing attributes in process `syz.4.785'. [ 359.613995][ T9015] netlink: 'syz.2.784': attribute type 4 has an invalid length. [ 359.621816][ T9015] netlink: 152 bytes leftover after parsing attributes in process `syz.2.784'. [ 360.225817][ T9015] : renamed from bond0 (while UP) [ 360.454873][ T9039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.536896][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'. [ 362.162838][ T9058] Invalid source name [ 362.190424][ T9062] sctp: [Deprecated]: syz.2.797 (pid 9062) Use of int in max_burst socket option deprecated. [ 362.190424][ T9062] Use struct sctp_assoc_value instead [ 362.430194][ T9068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 362.987975][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 363.025085][ T9071] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 363.061961][ T9068] 9p: Unknown uid 00000000004294967295 [ 363.339285][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 363.554011][ T9073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.639666][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.656855][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.667443][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 363.707796][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.466857][ T10] usb 5-1: config 0 descriptor?? [ 364.689456][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 364.787910][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 364.819434][ T10] usb 5-1: USB disconnect, device number 7 [ 364.961158][ T9094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.984857][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 365.772942][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 365.782079][ T9101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.806'. [ 365.836122][ T9101] vlan2: entered allmulticast mode [ 367.197433][ T9115] Invalid source name [ 368.535227][ T5845] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 369.078221][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 369.271335][ T9109] mmap: syz.2.809 (9109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 369.291748][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 369.306743][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 369.331967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.355883][ T10] usb 2-1: Product: syz [ 369.368051][ T10] usb 2-1: Manufacturer: syz [ 369.746177][ T10] usb 2-1: SerialNumber: syz [ 369.754902][ T10] usb 2-1: config 0 descriptor?? [ 369.762936][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 369.810609][ T10] usb 2-1: Detected FT232H [ 370.037685][ C0] hrtimer: interrupt took 41283 ns [ 370.451378][ T9163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.511532][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 370.708947][ T9168] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 371.651772][ T9180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.526711][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 372.539763][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 372.558196][ T10] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 372.647332][ T9185] Invalid source name [ 372.724616][ T9186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.637606][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 373.663639][ T10] usb 2-1: USB disconnect, device number 8 [ 373.689355][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 373.859055][ T10] ftdi_sio 2-1:0.0: device disconnected [ 373.908761][ T5940] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 374.169036][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 374.407983][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 374.442763][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 374.907626][ T5845] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 375.271761][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.281991][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.295031][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.307772][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.490379][ T9205] binder: 9203:9205 ioctl c0306201 0 returned -14 [ 375.567988][ T5940] usb 3-1: usb_control_msg returned -71 [ 375.573645][ T5940] usbtmc 3-1:16.0: can't read capabilities [ 375.647792][ T5940] usb 3-1: USB disconnect, device number 16 [ 375.732618][ T9216] binder: BINDER_SET_CONTEXT_MGR already set [ 375.755041][ T9216] binder: 9215:9216 ioctl 4018620d 200000000040 returned -16 [ 375.813878][ T9216] binder: 9215:9216 ioctl c0306201 200000000280 returned -11 [ 377.132549][ T9224] loop8: detected capacity change from 0 to 7 [ 377.299755][ T9224] Dev loop8: unable to read RDB block 7 [ 377.305405][ T9224] loop8: AHDI p1 p2 p3 [ 377.309715][ T9224] loop8: partition table partially beyond EOD, truncated [ 377.318097][ T9224] loop8: p1 start 1601398130 is beyond EOD, truncated [ 377.325039][ T9224] loop8: p2 start 1702059890 is beyond EOD, truncated [ 377.527580][ T9232] netlink: 196 bytes leftover after parsing attributes in process `syz.2.837'. [ 377.683497][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 377.857998][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 377.866830][ T9237] Invalid source name [ 378.636383][ T5845] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 379.116418][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.126227][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.135226][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.172063][ T5844] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 379.204591][ T5844] usb 2-1: can't read configurations, error -71 [ 379.943614][ T9261] binder: 9260:9261 ioctl c0306201 0 returned -14 [ 380.024844][ T9261] binder: 9260:9261 ioctl c0306201 200000000280 returned -11 [ 380.368075][ T5940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 380.537986][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 380.579027][ T5940] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 380.607558][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 380.634897][ T5940] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.680370][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.710407][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 380.964545][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.177979][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 381.231618][ T5940] usb 5-1: GET_CAPABILITIES returned 0 [ 381.246650][ T5940] usbtmc 5-1:16.0: can't read capabilities [ 381.261569][ T9284] FAULT_INJECTION: forcing a failure. [ 381.261569][ T9284] name failslab, interval 1, probability 0, space 0, times 0 [ 381.338060][ T9284] CPU: 1 UID: 0 PID: 9284 Comm: syz.3.849 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 381.338087][ T9284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.338101][ T9284] Call Trace: [ 381.338113][ T9284] [ 381.338122][ T9284] dump_stack_lvl+0x189/0x250 [ 381.338149][ T9284] ? __pfx____ratelimit+0x10/0x10 [ 381.338169][ T9284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.338191][ T9284] ? __pfx__printk+0x10/0x10 [ 381.338221][ T9284] ? __pfx___might_resched+0x10/0x10 [ 381.338247][ T9284] should_fail_ex+0x414/0x560 [ 381.338271][ T9284] should_failslab+0xa8/0x100 [ 381.338295][ T9284] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 381.338315][ T9284] ? __alloc_skb+0x112/0x2d0 [ 381.338345][ T9284] __alloc_skb+0x112/0x2d0 [ 381.338374][ T9284] netlink_sendmsg+0x5c6/0xb30 [ 381.338410][ T9284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.338446][ T9284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.338464][ T9284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.338499][ T9284] __sock_sendmsg+0x21c/0x270 [ 381.338523][ T9284] ____sys_sendmsg+0x505/0x830 [ 381.338558][ T9284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.338596][ T9284] ? import_iovec+0x74/0xa0 [ 381.338630][ T9284] ___sys_sendmsg+0x21f/0x2a0 [ 381.338661][ T9284] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.338727][ T9284] ? __fget_files+0x2a/0x420 [ 381.338747][ T9284] ? __fget_files+0x3a0/0x420 [ 381.338779][ T9284] __x64_sys_sendmsg+0x19b/0x260 [ 381.338810][ T9284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.338849][ T9284] ? __pfx_ksys_write+0x10/0x10 [ 381.338864][ T9284] ? rcu_is_watching+0x15/0xb0 [ 381.338890][ T9284] ? do_syscall_64+0xbe/0x3b0 [ 381.338916][ T9284] do_syscall_64+0xfa/0x3b0 [ 381.338935][ T9284] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.338954][ T9284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.338973][ T9284] ? clear_bhb_loop+0x60/0xb0 [ 381.338995][ T9284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.339013][ T9284] RIP: 0033:0x7f87d1d8ebe9 [ 381.339030][ T9284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.339046][ T9284] RSP: 002b:00007f87d2c60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.339066][ T9284] RAX: ffffffffffffffda RBX: 00007f87d1fb6090 RCX: 00007f87d1d8ebe9 [ 381.339079][ T9284] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 381.339091][ T9284] RBP: 00007f87d2c60090 R08: 0000000000000000 R09: 0000000000000000 [ 381.339103][ T9284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.339114][ T9284] R13: 00007f87d1fb6128 R14: 00007f87d1fb6090 R15: 00007ffe34be6298 [ 381.339145][ T9284] [ 381.353342][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice= 0.00 [ 381.628032][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.636191][ T10] usb 3-1: SerialNumber: syz [ 381.644667][ T10] usb 3-1: config 0 descriptor?? [ 381.661496][ T5844] usb 5-1: USB disconnect, device number 8 [ 381.662639][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 382.346132][ T10] usb 3-1: failed to send control message: -71 [ 382.367862][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 382.415820][ T10] usb 3-1: USB disconnect, device number 17 [ 382.490337][ T10] ch341 3-1:0.0: device disconnected [ 383.666718][ T9311] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 383.676419][ T9311] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 383.686339][ T9311] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 383.867757][ T5940] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 383.879689][ T9311] syz.3.855 (9311) used greatest stack depth: 16640 bytes left [ 384.049199][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 384.064102][ T5940] usb 5-1: config 32 has an invalid interface number: 32 but max is 0 [ 384.192463][ T5940] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 384.193616][ T5940] usb 5-1: config 32 has no interface number 0 [ 384.197821][ T5940] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 384.197849][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.270325][ T5844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 384.448061][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 384.555290][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 384.569966][ T5940] hub 5-1:32.32: bad descriptor, ignoring hub [ 384.569995][ T5940] hub 5-1:32.32: probe with driver hub failed with error -5 [ 384.828151][ T5844] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 384.828184][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.828205][ T5844] usb 1-1: Product: syz [ 384.828221][ T5844] usb 1-1: Manufacturer: syz [ 384.828236][ T5844] usb 1-1: SerialNumber: syz [ 384.863808][ T5844] usb 1-1: config 0 descriptor?? [ 384.945231][ T5940] usb 5-1: USB disconnect, device number 9 [ 384.963551][ T9329] FAULT_INJECTION: forcing a failure. [ 384.963551][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 384.963598][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.1.860 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 384.963610][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.963617][ T9329] Call Trace: [ 384.963621][ T9329] [ 384.963625][ T9329] dump_stack_lvl+0x189/0x250 [ 384.963642][ T9329] ? __pfx____ratelimit+0x10/0x10 [ 384.963654][ T9329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.963665][ T9329] ? __pfx__printk+0x10/0x10 [ 384.963677][ T9329] ? __local_bh_enable_ip+0x12d/0x1c0 [ 384.963693][ T9329] ? sctp_get_port_local+0xe4c/0x1610 [ 384.963711][ T9329] should_fail_ex+0x414/0x560 [ 384.963725][ T9329] should_failslab+0xa8/0x100 [ 384.963737][ T9329] __kmalloc_cache_noprof+0x70/0x3d0 [ 384.963748][ T9329] ? sctp_add_bind_addr+0x8c/0x370 [ 384.963762][ T9329] sctp_add_bind_addr+0x8c/0x370 [ 384.963776][ T9329] sctp_do_bind+0x5ab/0x940 [ 384.963798][ T9329] sctp_setsockopt_bindx+0x260/0x430 [ 384.963816][ T9329] sctp_setsockopt+0x7eb/0x1200 [ 384.963830][ T9329] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.963845][ T9329] do_sock_setsockopt+0x179/0x1b0 [ 384.963863][ T9329] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.963880][ T9329] do_syscall_64+0xfa/0x3b0 [ 384.963891][ T9329] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.963902][ T9329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.963912][ T9329] ? clear_bhb_loop+0x60/0xb0 [ 384.963924][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.963934][ T9329] RIP: 0033:0x7f960818ebe9 [ 384.963944][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.963952][ T9329] RSP: 002b:00007f96063f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.963964][ T9329] RAX: ffffffffffffffda RBX: 00007f96083b5fa0 RCX: 00007f960818ebe9 [ 384.963972][ T9329] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 384.963978][ T9329] RBP: 00007f96063f6090 R08: 0000000000000030 R09: 0000000000000000 [ 384.963984][ T9329] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000001 [ 384.963990][ T9329] R13: 00007f96083b6038 R14: 00007f96083b5fa0 R15: 00007ffdf187c8a8 [ 384.964007][ T9329] [ 385.151787][ T5844] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 385.220574][ T9316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.856'. [ 385.250668][ T5906] IPVS: starting estimator thread 0... [ 385.251274][ T5844] usb 1-1: USB disconnect, device number 12 [ 385.251675][ T205] usb 1-1: Failed to submit usb control message: -71 [ 385.251745][ T205] usb 1-1: unable to send the bmi data to the device: -71 [ 385.251764][ T205] usb 1-1: unable to get target info from device [ 385.251790][ T205] usb 1-1: could not get target info (-71) [ 385.251988][ T205] usb 1-1: could not probe fw (-71) [ 385.354373][ T9337] IPVS: using max 28 ests per chain, 67200 per kthread [ 386.365904][ T9349] xt_nat: multiple ranges no longer supported [ 387.317242][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 387.329830][ T5844] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 387.401503][ T9362] binder: 9354:9362 ioctl c0306201 200000000280 returned -11 [ 387.582566][ T9368] Invalid source name [ 388.110220][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 388.113501][ T5844] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 388.113537][ T5844] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.113564][ T5844] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.113587][ T5844] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.113630][ T5844] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.113653][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.447332][ T5844] usb 2-1: GET_CAPABILITIES returned 0 [ 388.447385][ T5844] usbtmc 2-1:16.0: can't read capabilities [ 389.535830][ T5940] usb 2-1: USB disconnect, device number 11 [ 390.990211][ T9403] FAULT_INJECTION: forcing a failure. [ 390.990211][ T9403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.990245][ T9403] CPU: 1 UID: 0 PID: 9403 Comm: syz.1.871 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 390.990268][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.990280][ T9403] Call Trace: [ 390.990288][ T9403] [ 390.990296][ T9403] dump_stack_lvl+0x189/0x250 [ 390.990323][ T9403] ? __pfx____ratelimit+0x10/0x10 [ 390.990343][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.990365][ T9403] ? __pfx__printk+0x10/0x10 [ 390.990389][ T9403] ? __might_fault+0xb0/0x130 [ 390.990420][ T9403] should_fail_ex+0x414/0x560 [ 390.990445][ T9403] _copy_from_user+0x2d/0xb0 [ 390.990473][ T9403] ___sys_sendmsg+0x158/0x2a0 [ 390.990505][ T9403] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.990571][ T9403] ? __fget_files+0x2a/0x420 [ 390.990590][ T9403] ? __fget_files+0x3a0/0x420 [ 390.990617][ T9403] __x64_sys_sendmsg+0x19b/0x260 [ 390.990646][ T9403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.990689][ T9403] ? __pfx_ksys_write+0x10/0x10 [ 390.990706][ T9403] ? rcu_is_watching+0x15/0xb0 [ 390.990732][ T9403] ? do_syscall_64+0xbe/0x3b0 [ 390.990759][ T9403] do_syscall_64+0xfa/0x3b0 [ 390.990777][ T9403] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.990807][ T9403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.990826][ T9403] ? clear_bhb_loop+0x60/0xb0 [ 390.990849][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.990869][ T9403] RIP: 0033:0x7f960818ebe9 [ 390.990885][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.990903][ T9403] RSP: 002b:00007f96063f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.990923][ T9403] RAX: ffffffffffffffda RBX: 00007f96083b5fa0 RCX: 00007f960818ebe9 [ 390.990938][ T9403] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 390.990950][ T9403] RBP: 00007f96063f6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.990962][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.990974][ T9403] R13: 00007f96083b6038 R14: 00007f96083b5fa0 R15: 00007ffdf187c8a8 [ 390.991004][ T9403] [ 391.967897][ T9415] tmpfs: Unknown parameter 'usrquota/#/msr' [ 392.529714][ T9415] syz.1.874 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.176046][ T9439] binder: BINDER_SET_CONTEXT_MGR already set [ 394.176076][ T9439] binder: 9438:9439 ioctl 4018620d 200000000040 returned -16 [ 394.176814][ T9439] binder: 9438:9439 ioctl c0306201 200000000280 returned -11 [ 394.712397][ T9445] Invalid source name [ 394.842537][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 396.742938][ T9488] comedi comedi0: Minor 3 could not be opened [ 396.795501][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 396.821434][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'. [ 396.860072][ T9488] netlink: 'syz.1.889': attribute type 13 has an invalid length. [ 396.881335][ T9488] gretap0: refused to change device tx_queue_len [ 396.985257][ T9488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 400.236315][ T9516] Invalid source name [ 400.769718][ T9527] random: crng reseeded on system resumption [ 401.000127][ T9530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.689796][ T9552] comedi comedi0: Minor 3 could not be opened [ 401.874898][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.901'. [ 402.244751][ T9552] netlink: 'syz.3.901': attribute type 13 has an invalid length. [ 402.252961][ T9552] gretap0: refused to change device tx_queue_len [ 404.129681][ T9552] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 404.492723][ T9570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.905'. [ 404.502612][ T9570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.905'. [ 404.612005][ T9570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.807974][ T5844] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 405.059651][ T9570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.114377][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.417757][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 405.472743][ T5844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 405.777800][ T5844] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 405.926239][ T9570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.976629][ T5844] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.019928][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.046528][ T5844] usb 1-1: SerialNumber: syz [ 406.088034][ T9576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.095242][ T9576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.104749][ T5844] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 406.350132][ T9570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.622273][ T9570] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.639573][ T9570] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.657628][ T9570] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.674522][ T9570] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.733754][ T5844] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 406.847866][ T5844] usb 1-1: USB disconnect, device number 13 [ 407.787429][ T9606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.818148][ T9606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.824301][ T9606] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.867271][ T9606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.905711][ T9606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.137928][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 409.416065][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 409.434980][ T5898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.477775][ T5898] usb 4-1: config 0 has no interface number 0 [ 409.497557][ T5898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 409.517037][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.528057][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 409.542239][ T5898] usb 4-1: Product: syz [ 409.548301][ T5898] usb 4-1: Manufacturer: syz [ 409.559389][ T5898] usb 4-1: SerialNumber: syz [ 409.572745][ T5898] usb 4-1: config 0 descriptor?? [ 409.798957][ T5898] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 409.839715][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 409.839734][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.861708][ T5898] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 409.927971][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 409.934255][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.944910][ T5898] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 410.477366][ T9656] comedi comedi0: Minor 3 could not be opened [ 410.524590][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 410.570339][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 410.716048][ T9656] netlink: 'syz.2.924': attribute type 13 has an invalid length. [ 410.752390][ T9656] gretap0: refused to change device tx_queue_len [ 410.770475][ T9656] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 412.146706][ T9681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.740692][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.932'. [ 414.422816][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 415.618082][ T9711] mkiss: ax0: crc mode is auto. [ 416.230683][ T9703] netlink: set zone limit has 4 unknown bytes [ 417.536623][ T9732] comedi comedi0: Minor 3 could not be opened [ 417.582181][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 417.590804][ T9734] trusted_key: syz.3.942 sent an empty control message without MSG_MORE. [ 417.636154][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 417.714082][ T9732] netlink: 'syz.4.939': attribute type 13 has an invalid length. [ 417.764483][ T9732] gretap0: refused to change device tx_queue_len [ 417.771280][ T9732] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 417.894176][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'. [ 419.213116][ T9778] Invalid source name [ 419.486041][ T9782] random: crng reseeded on system resumption [ 419.757341][ T9787] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 419.764177][ T9787] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 419.812013][ T9787] vhci_hcd vhci_hcd.0: Device attached [ 420.013286][ T9788] vhci_hcd: connection closed [ 420.020598][ T5844] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 420.022212][ T6221] vhci_hcd: stop threads [ 420.088688][ T6221] vhci_hcd: release socket [ 420.115701][ T6221] vhci_hcd: disconnect device [ 420.256193][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 420.698198][ T9803] gtp0: entered promiscuous mode [ 420.828388][ T9810] comedi comedi0: Minor 3 could not be opened [ 420.882095][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'. [ 420.934681][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'. [ 421.024387][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 421.035473][ T9810] netlink: 'syz.1.956': attribute type 13 has an invalid length. [ 421.046168][ T30] audit: type=1326 audit(1755857612.209:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9814 comm="syz.2.957" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e8d58ebe9 code=0x0 [ 421.053175][ T9810] gretap0: refused to change device tx_queue_len [ 421.086782][ T9810] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 423.321275][ T9842] misc userio: No port type given on /dev/userio [ 423.409431][ T9853] vivid-003: ================= START STATUS ================= [ 423.417501][ T9853] vivid-003: Radio HW Seek Mode: Bounded [ 423.423656][ T9853] vivid-003: Radio Programmable HW Seek: false [ 423.430054][ T9853] vivid-003: RDS Rx I/O Mode: Block I/O [ 423.435794][ T9853] vivid-003: Generate RBDS Instead of RDS: false [ 423.442341][ T9853] vivid-003: RDS Reception: true [ 423.447596][ T9853] vivid-003: RDS Program Type: 0 inactive [ 423.453601][ T9853] vivid-003: RDS PS Name: inactive [ 423.459099][ T9853] vivid-003: RDS Radio Text: inactive [ 423.464762][ T9853] vivid-003: RDS Traffic Announcement: false inactive [ 423.472392][ T9853] vivid-003: RDS Traffic Program: false inactive [ 423.479431][ T9853] vivid-003: RDS Music: false inactive [ 423.485122][ T9853] vivid-003: ================== END STATUS ================== [ 424.495965][ T9886] netlink: 228 bytes leftover after parsing attributes in process `syz.1.970'. [ 425.226080][ T5844] vhci_hcd: vhci_device speed not set [ 425.498735][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 426.322776][ T9903] random: crng reseeded on system resumption [ 428.790045][ T9948] Invalid source name [ 428.794146][ T9948] UBIFS error (pid: 9948): cannot open "./file0", error -22 [ 428.808898][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 429.032775][ T9948] team0: Port device team_slave_1 removed [ 429.299885][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 430.130658][ T6221] tipc: Subscription rejected, illegal request [ 430.376548][ T9962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.444098][ T9962] bond0: (slave rose0): Enslaving as an active interface with an up link [ 431.864718][ T9984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.197052][ T9983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.308878][ T9984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.374139][ T9983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.455649][ T9984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.471059][ T9993] program syz.4.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.492280][ T9993] program syz.4.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.516145][ T9983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.577390][ T9984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.641325][ T9983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.773183][ T9984] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.811515][ T9984] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.853419][ T9984] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.909697][ T9983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.935558][ T9984] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.964942][ T9983] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.023150][ T9983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.092834][ T9983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.818686][T10049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.347619][T10057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.730028][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 440.150276][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.156749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.568124][T10146] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.577435][T10146] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.586634][T10146] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.594884][T10146] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.649896][T10147] Cannot find del_set index 0 as target [ 440.717371][T10144] block nbd0: shutting down sockets [ 440.834879][T10146] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.844090][T10146] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.853370][T10146] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.862420][T10146] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.483743][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 443.407796][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 443.425529][ T51] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 443.618002][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 443.730949][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 443.924063][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 443.980577][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 444.008085][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.024783][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 444.084725][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.118304][ T10] usb 2-1: Product: syz [ 444.126460][ T10] usb 2-1: Manufacturer: syz [ 444.347757][ T10] usb 2-1: SerialNumber: syz [ 445.166938][ T10] usb 2-1: config 0 descriptor?? [ 445.597287][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 445.635365][T10195] Invalid source name [ 445.676832][ T5190] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 445.694601][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.704419][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.712914][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.721673][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.729841][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.809007][ T5190] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 445.850651][T10176] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 445.915807][ T5190] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 445.921595][T10212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.933064][T10212] batadv_slave_0: entered promiscuous mode [ 446.022476][ T5190] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 446.029358][ T5844] usb 2-1: USB disconnect, device number 12 [ 447.403307][T10203] chnl_net:caif_netlink_parms(): no params data found [ 447.797379][ T51] Bluetooth: hci5: command tx timeout [ 449.143001][ T51] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 450.022908][ T51] Bluetooth: hci5: command tx timeout [ 450.045507][T10250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.495350][T10255] batman_adv: batadv0: Adding interface: dummy0 [ 450.520348][T10255] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.555060][T10256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1044'. [ 450.612834][T10255] batman_adv: batadv0: Interface activated: dummy0 [ 451.904061][T10256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.936019][T10256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.984324][T10256] bond0 (unregistering): Released all slaves [ 452.024893][T10262] ipvlan0: entered allmulticast mode [ 452.030783][T10262] veth0_vlan: entered allmulticast mode [ 452.088606][ T51] Bluetooth: hci5: command tx timeout [ 452.321545][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 452.332305][T10280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 453.220216][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.240579][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.265482][T10203] bridge_slave_0: entered allmulticast mode [ 453.272068][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 453.609208][T10203] bridge_slave_0: entered promiscuous mode [ 453.623324][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.640675][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.658164][T10203] bridge_slave_1: entered allmulticast mode [ 453.885273][T10203] bridge_slave_1: entered promiscuous mode [ 454.704909][ T51] Bluetooth: hci5: command tx timeout [ 454.707785][ T5845] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 454.721938][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.736040][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.459620][T10313] Invalid source name [ 455.494161][T10203] team0: Port device team_slave_0 added [ 455.510804][T10203] team0: Port device team_slave_1 added [ 456.081913][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.094516][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.178062][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.193659][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1060'. [ 456.196986][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.213296][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.250493][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.305080][T10325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1060'. [ 456.380424][T10331] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1061'. [ 457.119069][T10339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.228472][T10330] ALSA: mixer_oss: invalid OSS volume '' [ 458.295999][T10331]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.362456][T10331]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.379704][T10331]  (unregistering): Released all slaves [ 458.490335][T10336] ipvlan0: entered allmulticast mode [ 458.521467][T10336] veth0_vlan: entered allmulticast mode [ 458.630666][T10359] Invalid source name [ 459.531225][T10203] hsr_slave_0: entered promiscuous mode [ 459.538250][T10203] hsr_slave_1: entered promiscuous mode [ 459.544824][T10203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.553676][T10203] Cannot create hsr debugfs directory [ 459.735842][ T30] audit: type=1326 audit(1755857650.899:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.4.1070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc77f8ebe9 code=0x0 [ 459.799139][T10370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1072'. [ 459.812474][T10370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1072'. [ 464.465625][T10400] sctp: [Deprecated]: syz.1.1079 (pid 10400) Use of int in max_burst socket option deprecated. [ 464.465625][T10400] Use struct sctp_assoc_value instead [ 464.677123][T10407] usb usb8: usbfs: process 10407 (syz.2.1080) did not claim interface 0 before use [ 464.828529][T10203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.865408][ T5845] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 465.552551][T10422] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1083'. [ 465.563625][T10422] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1083'. [ 465.629617][T10203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.708299][T10203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.786807][T10203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 466.250218][T10438] Illegal XDP return value 4294967294 on prog (id 205) dev N/A, expect packet loss! [ 466.943737][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.018293][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.041353][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.048615][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.091282][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.098572][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.977417][T10459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 468.292574][T10468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1093'. [ 468.304286][T10468] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1093'. [ 468.341522][T10468] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.514896][T10468] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.540404][T10469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1092'. [ 468.569081][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 468.775170][T10468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.790413][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 468.808049][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 468.872595][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.879832][ T5845] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 468.896462][ T5845] Bluetooth: hci4: Injecting HCI hardware error event [ 468.905643][ T51] Bluetooth: hci4: hardware error 0x00 [ 468.935590][T10468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.995356][ T10] usb 3-1: config 0 has no interface number 0 [ 469.026898][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 469.076698][T10468] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.091490][T10468] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.109608][T10468] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.127841][T10468] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.151201][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.167716][ T10] usb 3-1: Product: syz [ 469.186987][ T10] usb 3-1: Manufacturer: syz [ 469.203084][ T10] usb 3-1: SerialNumber: syz [ 469.236387][ T10] usb 3-1: config 0 descriptor?? [ 469.387574][ T10] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 469.974102][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.989589][ T10] usb 3-1: No valid video chain found. [ 470.125637][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.151758][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.227478][ T10] usb 3-1: USB disconnect, device number 18 [ 470.354866][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 470.683580][T10504] Invalid source name [ 470.925229][ T5898] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 470.957888][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 471.677951][T10515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 471.749155][ T5898] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 471.799284][ T5898] usb 4-1: USB disconnect, device number 14 [ 471.824912][T10520] binder: 10518:10520 unknown command 0 [ 471.876204][T10520] binder: 10518:10520 ioctl c0306201 200000000080 returned -22 [ 472.098230][T10520] binder: 10518:10520 ioctl c0306201 0 returned -14 [ 472.108309][T10525] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1105'. [ 472.119231][T10525] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1105'. [ 472.139218][T10520] binder: 10518:10520 ioctl c0306201 200000000280 returned -11 [ 472.176610][T10525] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.247959][ T5898] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 472.259533][T10525] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.283182][T10203] veth0_vlan: entered promiscuous mode [ 472.322511][T10525] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.352783][T10203] veth1_vlan: entered promiscuous mode [ 472.402516][T10525] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.434932][ T5898] usb 4-1: device descriptor read/64, error -71 [ 472.448100][T10203] veth0_macvtap: entered promiscuous mode [ 472.457556][T10203] veth1_macvtap: entered promiscuous mode [ 472.476856][T10203] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffa1ac: 0000 [#1] SMP KASAN PTI [ 472.488847][T10203] KASAN: probably user-memory-access in range [0x00000000fffd0d60-0x00000000fffd0d67] [ 472.498388][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 472.508549][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.518613][T10203] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 472.524524][T10203] Code: aa 9a 05 01 48 c7 c7 00 86 9c 8c be ec 05 00 00 48 c7 c2 80 86 9c 8c e8 0a 7d ae f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 6e 25 30 f8 4d 8b 2e 4d 85 ed 0f 84 [ 472.544125][T10203] RSP: 0018:ffffc900039ceb90 EFLAGS: 00010206 [ 472.550190][T10203] RAX: 000000001fffa1ac RBX: dffffc0000000000 RCX: ffff88802f4dbc00 [ 472.558239][T10203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 472.566198][T10203] RBP: 0000000000000001 R08: ffffffff8f509ea7 R09: 1ffffffff1ea13d4 [ 472.574170][T10203] R10: dffffc0000000000 R11: fffffbfff1ea13d5 R12: 00000000010000e0 [ 472.582139][T10203] R13: 00000000000001ac R14: 00000000fffd0d60 R15: 0000000000000cc0 [ 472.590107][T10203] FS: 00005555710fe500(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 472.599034][T10203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.605623][T10203] CR2: 00007fbc781b7dac CR3: 000000002902a000 CR4: 00000000003526f0 [ 472.613593][T10203] Call Trace: [ 472.616881][T10203] [ 472.619810][T10203] ip_mc_up+0x125/0x300 [ 472.624074][T10203] inetdev_event+0xfb3/0x15b0 [ 472.628760][T10203] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 472.635149][T10203] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 472.641993][T10203] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 472.648683][T10203] ? __pfx_inetdev_event+0x10/0x10 [ 472.653815][T10203] notifier_call_chain+0x1b3/0x3e0 [ 472.659010][T10203] __dev_notify_flags+0x18d/0x2e0 [ 472.664042][T10203] ? __pfx___dev_notify_flags+0x10/0x10 [ 472.669595][T10203] ? __dev_change_flags+0x4cc/0x6d0 [ 472.674825][T10203] ? __pfx___dev_change_flags+0x10/0x10 [ 472.680487][T10203] ? do_setlink+0x8ce/0x41c0 [ 472.685083][T10203] netif_change_flags+0xe8/0x1a0 [ 472.690021][T10203] do_setlink+0xc55/0x41c0 [ 472.694437][T10203] ? __kernel_text_address+0xd/0x40 [ 472.699644][T10203] ? arch_stack_walk+0xfc/0x150 [ 472.704488][T10203] ? __pfx_do_setlink+0x10/0x10 [ 472.709342][T10203] ? __lock_acquire+0xab9/0xd20 [ 472.714179][T10203] ? __pfx___mutex_trylock_common+0x10/0x10 [ 472.720066][T10203] ? rcu_is_watching+0x15/0xb0 [ 472.724826][T10203] ? trace_contention_end+0x39/0x120 [ 472.730124][T10203] ? __mutex_lock+0x330/0xe80 [ 472.734800][T10203] ? rtnl_newlink+0x8db/0x1c70 [ 472.739563][T10203] ? rcu_is_watching+0x15/0xb0 [ 472.744405][T10203] ? __pfx___mutex_lock+0x10/0x10 [ 472.749438][T10203] ? ns_capable+0x8a/0xf0 [ 472.753761][T10203] ? rtnl_link_get_net_capable+0x16a/0x350 [ 472.759705][T10203] rtnl_newlink+0x160b/0x1c70 [ 472.764386][T10203] ? netlink_sendmsg+0x805/0xb30 [ 472.769322][T10203] ? __pfx_rtnl_newlink+0x10/0x10 [ 472.774343][T10203] ? kasan_quarantine_put+0xdd/0x220 [ 472.779619][T10203] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.784812][T10203] ? nlmon_xmit+0xb0/0x100 [ 472.789216][T10203] ? kmem_cache_free+0x18f/0x400 [ 472.794146][T10203] ? __local_bh_enable_ip+0x12d/0x1c0 [ 472.799505][T10203] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.804692][T10203] ? __local_bh_enable_ip+0x12d/0x1c0 [ 472.810071][T10203] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 472.815786][T10203] ? __dev_queue_xmit+0x27e/0x3a70 [ 472.820900][T10203] ? __dev_queue_xmit+0x27e/0x3a70 [ 472.826000][T10203] ? __dev_queue_xmit+0x27e/0x3a70 [ 472.831098][T10203] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 472.836323][T10203] ? __lock_acquire+0xab9/0xd20 [ 472.841283][T10203] ? __pfx_rtnl_newlink+0x10/0x10 [ 472.846309][T10203] rtnetlink_rcv_msg+0x7cc/0xb70 [ 472.851253][T10203] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 472.856439][T10203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.861888][T10203] ? ref_tracker_free+0x63a/0x7d0 [ 472.866897][T10203] ? __copy_skb_header+0xa7/0x550 [ 472.872084][T10203] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.877447][T10203] ? __skb_clone+0x63/0x7a0 [ 472.881937][T10203] netlink_rcv_skb+0x205/0x470 [ 472.886807][T10203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.892254][T10203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.897528][T10203] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.902745][T10203] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.907946][T10203] netlink_unicast+0x75c/0x8e0 [ 472.912699][T10203] netlink_sendmsg+0x805/0xb30 [ 472.917467][T10203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.922742][T10203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.928013][T10203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.933311][T10203] __sock_sendmsg+0x21c/0x270 [ 472.937980][T10203] __sys_sendto+0x3bd/0x520 [ 472.942471][T10203] ? __pfx___sys_sendto+0x10/0x10 [ 472.947515][T10203] ? fput_close_sync+0x119/0x200 [ 472.952531][T10203] ? __pfx_fput_close_sync+0x10/0x10 [ 472.957810][T10203] __x64_sys_sendto+0xde/0x100 [ 472.962562][T10203] do_syscall_64+0xfa/0x3b0 [ 472.967140][T10203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.973199][T10203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 472.979353][T10203] ? clear_bhb_loop+0x60/0xb0 [ 472.984015][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.989892][T10203] RIP: 0033:0x7fbf3d190a7c [ 472.994292][T10203] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 473.013970][T10203] RSP: 002b:00007fff94e36890 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 473.022374][T10203] RAX: ffffffffffffffda RBX: 00007fbf3dee4620 RCX: 00007fbf3d190a7c [ 473.030345][T10203] RDX: 000000000000002c RSI: 00007fbf3dee4670 RDI: 0000000000000003 [ 473.038333][T10203] RBP: 0000000000000000 R08: 00007fff94e368e4 R09: 000000000000000c [ 473.046293][T10203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 473.054337][T10203] R13: 0000000000000000 R14: 00007fbf3dee4670 R15: 0000000000000000 [ 473.062391][T10203] [ 473.065458][T10203] Modules linked in: [ 473.070903][T10203] ---[ end trace 0000000000000000 ]--- [ 473.125112][T10203] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 473.131788][T10203] Code: aa 9a 05 01 48 c7 c7 00 86 9c 8c be ec 05 00 00 48 c7 c2 80 86 9c 8c e8 0a 7d ae f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 6e 25 30 f8 4d 8b 2e 4d 85 ed 0f 84 [ 473.156274][T10203] RSP: 0018:ffffc900039ceb90 EFLAGS: 00010206 [ 473.163899][T10203] RAX: 000000001fffa1ac RBX: dffffc0000000000 RCX: ffff88802f4dbc00 [ 473.174306][T10203] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 473.194168][T10203] RBP: 0000000000000001 R08: ffffffff8f509ea7 R09: 1ffffffff1ea13d4 [ 473.233407][T10203] R10: dffffc0000000000 R11: fffffbfff1ea13d5 R12: 00000000010000e0 [ 473.246717][T10538] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 473.275518][T10203] R13: 00000000000001ac R14: 00000000fffd0d60 R15: 0000000000000cc0 [ 473.301962][T10203] FS: 00005555710fe500(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 473.333393][T10203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.355513][T10203] CR2: 00007ff9ca94f000 CR3: 000000002902a000 CR4: 00000000003526f0 [ 473.366651][T10203] Kernel panic - not syncing: Fatal exception [ 473.372891][T10203] Kernel Offset: disabled [ 473.377212][T10203] Rebooting in 86400 seconds..