last executing test programs: 35m49.800977083s ago: executing program 32 (id=26): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x30}}, 0x40000) socketpair(0x11, 0x6, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 32m25.742802278s ago: executing program 33 (id=764): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x86, 0xfffffffffffffffe, 0x5, 0x4, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0x200b, 0x7ffffffffffffd, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0x5, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 32m18.620347492s ago: executing program 34 (id=794): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x86, 0xfffffffffffffffe, 0x5, 0x4, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0x200b, 0x7ffffffffffffd, 0xcc3, 0x1, 0x1, 0x94d6, 0x5, 0x5, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 32m12.073414898s ago: executing program 35 (id=846): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) 22m33.615135837s ago: executing program 36 (id=5070): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d2b000000f9b718810007"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 21m40.735475472s ago: executing program 37 (id=5220): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x62c79000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) 21m39.61308025s ago: executing program 38 (id=5221): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 21m26.03689908s ago: executing program 39 (id=5244): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, 0x0}]) 20m30.812471546s ago: executing program 40 (id=5325): syz_emit_ethernet(0x66, &(0x7f0000000d40)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700303a00fe880000000000000000000000000001ff0200000000000000000000000000010403907800000005644736c704006cffff020000000000000000000000000001000000000000e3afcaf5e5"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000ffffffffffffffe50000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 19m26.656055787s ago: executing program 41 (id=5336): socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b55"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000ffff00000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080020000000000000000000000500010006000000d632c8cea59044cde4d6fe0058e39a337253750228187a7d339d2b8ccc560f118a4e492ca2c89dd151f624d570245f8a3fa34fb766564ab02543a51f6488473af96788697db51302812f024634"], 0x1c}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 19m20.668459895s ago: executing program 42 (id=5347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, 0xffffffffffffffff, 0x4e, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 19m14.483664367s ago: executing program 43 (id=5364): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x1, @link_local, 'geneve1\x00'}}, 0x80, 0x0}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f0000000240)=""/39}], 0x8e}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f0000001f40)=""/249, 0xf9, 0x10022, 0x0, 0x0) 18m54.456844887s ago: executing program 44 (id=5396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x280, 0x7f, 0xfff, 0xe2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18m47.948580925s ago: executing program 45 (id=5404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1, 0x0, 0x1000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 15m35.681005895s ago: executing program 46 (id=5576): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r0], 0x0) 14m6.417578858s ago: executing program 47 (id=5637): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x4, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) 11m9.491149227s ago: executing program 48 (id=5391): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000c40)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @local}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 10m17.689349664s ago: executing program 49 (id=5883): unshare(0x22020600) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 9m49.413646175s ago: executing program 8 (id=5959): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x3722, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000540)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9m44.23605759s ago: executing program 8 (id=5965): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042090}, 0xc000) 9m42.038336701s ago: executing program 8 (id=5968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000000c0)=""/92) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x4982}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x800) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="9001010252000000280012800b000100697036746e6c00001800028014000300fe88"], 0x50}}, 0x0) 9m41.210443415s ago: executing program 8 (id=5970): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x20100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x0, &(0x7f0000000100)={0x1, 0x2000000000000000}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x400, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 9m36.32825098s ago: executing program 2 (id=5974): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x3722, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000540)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9m35.974501011s ago: executing program 2 (id=5976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r1, 0x3517, 0x173d, 0x42, 0x0, 0x0) 9m35.890626813s ago: executing program 8 (id=5977): mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), 0xa00000, &(0x7f0000000180)=ANY=[@ANYRES64]) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4048800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}}, 0x0) 9m35.674788019s ago: executing program 8 (id=5979): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) bind$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40409, 0x21000}}, 0x20}}, 0x0) 9m35.101592399s ago: executing program 2 (id=5980): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x39e2, &(0x7f0000000300)={0x0, 0xdbb7, 0x1800, 0x1, 0x2f3}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 9m34.851744867s ago: executing program 2 (id=5981): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) bind$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40409, 0x21000}}, 0x20}}, 0x0) 9m30.047695034s ago: executing program 2 (id=5988): mount$9p_fd(0x0, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), 0xa00000, &(0x7f0000000180)=ANY=[@ANYRES64]) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x4048800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}}, 0x0) 9m29.717687145s ago: executing program 2 (id=5989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r1, 0x3517, 0x173d, 0x42, 0x0, 0x0) 9m20.337576726s ago: executing program 50 (id=5979): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) bind$packet(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40409, 0x21000}}, 0x20}}, 0x0) 9m14.62642779s ago: executing program 51 (id=5989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r1, 0x3517, 0x173d, 0x42, 0x0, 0x0) 5m41.176082165s ago: executing program 5 (id=6754): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000000580)='./file1\x00', 0x10) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5m40.058524207s ago: executing program 5 (id=6760): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2410}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m38.457119987s ago: executing program 5 (id=6765): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x7}, @my=0x1, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x54b041, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r3, 0x10c, 0x9, 0x0, 0x0) dup2(r5, r5) 5m33.793239758s ago: executing program 5 (id=6768): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x4}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 5m32.217986117s ago: executing program 5 (id=6777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m30.306292925s ago: executing program 5 (id=6782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x48, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='vm_unmapped_area\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r6, @ANYRES32=r6], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000f14000125bd7000fddbdf250c00450072646d615f00000008004500636d6100d2610000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r9, 0x3) r10 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x18b680, 0x8) r12 = dup(r11) sendfile(r12, r10, 0x0, 0x8000fffffffc) 5m15.201293727s ago: executing program 52 (id=6782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x48, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='vm_unmapped_area\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r6, @ANYRES32=r6], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000f14000125bd7000fddbdf250c00450072646d615f00000008004500636d6100d2610000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r9, 0x3) r10 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x18b680, 0x8) r12 = dup(r11) sendfile(r12, r10, 0x0, 0x8000fffffffc) 2m1.514297182s ago: executing program 9 (id=7519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ab0001004d0600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400a388907840007a652ccb6c589a550e85be6145db8f9a38db5a3489e06ba949d1cc9b30e7ea"], 0x0) 2m0.912602346s ago: executing program 9 (id=7521): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0xd86e, 0x6, 0x0, 0x0) 2m0.699854149s ago: executing program 9 (id=7523): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x4, 0x3}) mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 2m0.48573232s ago: executing program 9 (id=7525): mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m0.30357143s ago: executing program 9 (id=7528): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1m59.579680412s ago: executing program 9 (id=7532): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x1, &(0x7f0000004700)=[&(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x3576, r1, &(0x7f0000004580), 0x0, 0x3, 0x0, 0x2, r1}]) 1m59.1955418s ago: executing program 53 (id=7532): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x1, &(0x7f0000004700)=[&(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x3576, r1, &(0x7f0000004580), 0x0, 0x3, 0x0, 0x2, r1}]) 1m26.747262201s ago: executing program 0 (id=7605): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1m25.849711887s ago: executing program 0 (id=7611): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020001010007000000000000d96e6c8d5e8508"], 0x34}, {&(0x7f0000000700)=ANY=[], 0x2e4}], 0x2}, 0x80) 1m25.426432393s ago: executing program 0 (id=7614): socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x4190, &(0x7f00000000c0)={0x0, 0xfee1, 0x30001, 0x0, 0x1e}, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215, 0x0, r1}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1m24.391021387s ago: executing program 0 (id=7617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xfff, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.871661445s ago: executing program 0 (id=7621): io_uring_setup(0x7d98, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/16, 0x10}], 0x1) 1m22.461555347s ago: executing program 0 (id=7625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) getpid() keyctl$session_to_parent(0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x2, 0x2, 0x0, 0x2, 0xffff}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x40c00a0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m6.645710997s ago: executing program 54 (id=7625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000004a85d4ae23e00ac4176b694eed4195d91b91a284949deda138198f6af392715848d8a8e5125abd4bfde207980b8b9724093433b233c8ef74b9cf58c483945d1e7d13d3533ea22d58993db213eedf8ac84f6b3bb08856e0c5175b617d7e31ba724a9d4280a1b90366be4c91bd2a69f92b8e27cbbbb549e8d9fa1fcb5a14c719ed7d60e24a9672c29b475e40e553d9f2777e4a606ff64270459ed71d5e79ebb970fa0e9a91ba48b3eb54447a9ce1bd7bdbc872cc8f751ed07080a5171587c7099fe12ee2a28ab01e9766d74550fe7d927db450b1ee99c529f7628340b2ded5f477ae5292124300a29f290b89d5215bdff820d664d5b03dd3f9315b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) getpid() keyctl$session_to_parent(0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x2, 0x2, 0x0, 0x2, 0xffff}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x40c00a0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.140903374s ago: executing program 6 (id=7844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 10.056257293s ago: executing program 6 (id=7845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002"], 0x5c}}, 0x0) 9.7847596s ago: executing program 6 (id=7846): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x104) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="0103000003000000040000000b0000000d000100f102dcf29effae15cd000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x7, 0x3, 0x804, 0xb, 0xf, 0x8000120000, 0x4000000000009, 0x200, 0xb35, 0x8000, 0x2, 0x0, 0x101, 0x3, 0x1], 0xe000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x3b, 0x6, @scatter={0x2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f00000003c0)=""/165, 0xa5}]}, &(0x7f0000000640)="2f718122f728292f1565154c3b3e374462346caa732112089daf7ad3fcb193701ceb71e5b57d61acaf515c88db1da52308e5a69891d7e3930546f1", &(0x7f0000000740)=""/233, 0x1, 0x0, 0x2, &(0x7f0000000880)}) 8.672683664s ago: executing program 3 (id=7852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r4, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.807618154s ago: executing program 6 (id=7862): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.779857792s ago: executing program 4 (id=7863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x344d, &(0x7f0000000080)={0x0, 0x1539, 0x80, 0x2, 0x2bf}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17d4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0xec, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e9d80e41ab7ca96af121ae2a81a96722"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="050168ea757a6a7896246012823c7a000000000000ecff00"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4c4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4c06add931e38aad"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b273750602f13c92"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ae65d963cbe7a3f10a3d4961105037d5"}]}]}, 0xec}}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x80) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000814) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 6.659536789s ago: executing program 6 (id=7864): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x54b041, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000580)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r3, 0x10c, 0x9, 0x0, 0x0) dup2(r5, r5) 6.549606539s ago: executing program 1 (id=7865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x164, 0x164, 0x1f8, 0x0, 0xa0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x8000000, 0x0, {[{{@ip={@remote, @empty, 0xff, 0xffffff00, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9c, 0x1, @multicast1, 0x201}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xff, 'ip6tnl0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x26}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@multicast2, @private=0xa010100, 0xffffff00, 0x0, 'syz_tun\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x404) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffff7fff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.543475963s ago: executing program 6 (id=7866): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x8, 0x10000, 0x9, 0x8, 0xfffffbf6, 0xfffffffc, 0xfffffffe, 0x800000, 0x100100, 0x2, 0x1, 0x1, 0xfffffffe, 0x404, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffff6, 0x0, 0x20001e52, 0x400000b, 0xfff, 0x0, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) 5.10624099s ago: executing program 3 (id=7873): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x20000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.814674387s ago: executing program 3 (id=7876): r0 = gettid() capset(&(0x7f0000000580)={0x20071026, r0}, &(0x7f0000000b00)={0x4, 0xff, 0x7, 0x40, 0x27d, 0x5}) 4.403296754s ago: executing program 4 (id=7878): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x54b041, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000580)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x12, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3ad87531f7071a74df2cfc06c89f3d9e234b30c50997d5bef409ff2176ff7bfe2f7b6aa54cc50a1fcaed1e831fa7c0a7be998e1b228400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x6, 0x9]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)=0x80000003) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) setsockopt$llc_int(r3, 0x10c, 0x9, 0x0, 0x0) dup2(r5, r5) 4.336532969s ago: executing program 3 (id=7880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, r2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r4, 0x1000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 3.803733994s ago: executing program 7 (id=7881): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08371b"], 0xb) 3.803076375s ago: executing program 4 (id=7882): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000240)=[{0xe, 0xa1, 0x0, 0xfd, @tick=0xc5a, {0x10, 0x49}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 3.6634573s ago: executing program 4 (id=7883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r4, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.663182035s ago: executing program 7 (id=7884): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) 3.372197342s ago: executing program 7 (id=7885): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.308929741s ago: executing program 1 (id=7886): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x20000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.196144711s ago: executing program 7 (id=7887): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0xad, 0x8}, {0x9f, 0xff}, 0x43, 0x4, 0x40}) 3.152808453s ago: executing program 7 (id=7888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000b00)='[\v\xdbH\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xe5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\xe6y\x10\xf0\xfb-\x0e^\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\xa1\xfe4(\xb8-3\xcd\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d\x00\x00\x00\x00\x00\x17\xe9Tn8\xc0\a\x9c\xb7\xf3\xd5\xa0:\nL\x81\xea\x80\f\x91a\x10\xe2S\xfbF\x18\v\xd4\x1e\xb2\xaaJ\x1c3f\x90\x15z\xc4\xc6\x021\x86^`\xd0\x1f\x9e\x1f\xe9\x13\xef@\x04s\x95\x8f\xc7\xfd\xba\xd9*b\xf2f\xb3\x8e]\xa0\xd6N\xfd', 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) 3.001872485s ago: executing program 1 (id=7890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f00000000c0)) 3.001370079s ago: executing program 3 (id=7891): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.934718376s ago: executing program 3 (id=7892): socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x519c, 0xd, 0xfffffffd}]}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x2, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xe}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 2.343636294s ago: executing program 4 (id=7893): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) 1.720042177s ago: executing program 1 (id=7894): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1.518836781s ago: executing program 7 (id=7895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x16, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 402.22966ms ago: executing program 1 (id=7896): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x40000}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=7897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) syz_clone(0x14002000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) kernel console output (not intermixed with test programs): 01825][T22116] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1766.001847][T22116] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.001873][T22116] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1766.033304][T22116] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1766.033331][T22116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.033350][T22116] usb 1-1: Product: syz [ 1766.033364][T22116] usb 1-1: Manufacturer: syz [ 1766.033378][T22116] usb 1-1: SerialNumber: syz [ 1770.874579][T23085] veth0_vlan: entered promiscuous mode [ 1771.178872][T23085] veth1_vlan: entered promiscuous mode [ 1771.203057][T22116] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1771.294559][T23085] veth0_macvtap: entered promiscuous mode [ 1775.212041][T19084] Bluetooth: hci5: command 0x0406 tx timeout [ 1775.268752][T22593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1775.284564][T22593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1775.293506][T22593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1775.306399][T22593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1775.307211][T22593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1776.019206][T20045] usb 1-1: USB disconnect, device number 18 [ 1776.120521][T20045] usblp0: removed [ 1776.954876][T23671] chnl_net:caif_netlink_parms(): no params data found [ 1777.432429][T21357] Bluetooth: hci0: command tx timeout [ 1778.674835][T23762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6285'. [ 1779.465711][T21357] Bluetooth: hci0: command tx timeout [ 1779.779682][T23671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.779898][T23671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.780101][T23671] bridge_slave_0: entered allmulticast mode [ 1779.782947][T23671] bridge_slave_0: entered promiscuous mode [ 1780.168689][T23671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.168821][T23671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.169121][T23671] bridge_slave_1: entered allmulticast mode [ 1780.172129][T23671] bridge_slave_1: entered promiscuous mode [ 1780.484757][T23671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1780.492053][T23671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.829926][T23671] team0: Port device team_slave_0 added [ 1783.167547][T23671] team0: Port device team_slave_1 added [ 1783.296492][T21638] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 1783.465642][T21638] usb 10-1: device descriptor read/64, error -71 [ 1783.796025][T21638] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1783.955837][T21638] usb 10-1: device descriptor read/64, error -71 [ 1784.068057][T21638] usb usb10-port1: attempt power cycle [ 1784.516426][T21638] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 1784.538807][T21638] usb 10-1: device descriptor read/8, error -71 [ 1784.781484][T21357] Bluetooth: hci0: command tx timeout [ 1784.787122][T21638] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 1784.805897][T21638] usb 10-1: device descriptor read/8, error -71 [ 1785.004762][T21638] usb usb10-port1: unable to enumerate USB device [ 1785.621828][T23826] ucma_write: process 36 (syz.3.6302) changed security contexts after opening file descriptor, this is not allowed. [ 1787.168764][T21357] Bluetooth: hci0: command tx timeout [ 1787.340953][T23671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.340969][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.340992][T23671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.359430][T23671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.359445][T23671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.359471][T23671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.695552][ T5946] bridge_slave_1: left allmulticast mode [ 1787.695578][ T5946] bridge_slave_1: left promiscuous mode [ 1787.695812][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.788010][ T5946] bridge_slave_0: left allmulticast mode [ 1787.788036][ T5946] bridge_slave_0: left promiscuous mode [ 1787.788288][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.396073][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.465760][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.487374][ T5946] bond0 (unregistering): Released all slaves [ 1790.767372][T23671] hsr_slave_0: entered promiscuous mode [ 1790.768502][T23671] hsr_slave_1: entered promiscuous mode [ 1790.769248][T23671] debugfs: 'hsr0' already exists in 'hsr' [ 1790.769267][T23671] Cannot create hsr debugfs directory [ 1794.121941][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1794.122009][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.253193][ T5946] hsr_slave_0: left promiscuous mode [ 1794.315243][T20046] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 1794.465396][ T5946] hsr_slave_1: left promiscuous mode [ 1794.466280][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.416138][T23115] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1796.565615][T23115] usb 4-1: device descriptor read/64, error -71 [ 1796.845932][T23115] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1796.995758][T23115] usb 4-1: device descriptor read/64, error -71 [ 1797.108109][T23115] usb usb4-port1: attempt power cycle [ 1797.475787][T23115] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 1797.500082][T23115] usb 4-1: device descriptor read/8, error -71 [ 1797.735868][T23115] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1797.758796][T23115] usb 4-1: device descriptor read/8, error -71 [ 1797.868858][T23115] usb usb4-port1: unable to enumerate USB device [ 1797.918656][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.008932][ T5946] veth0_macvtap: left promiscuous mode [ 1798.009201][ T5946] veth1_vlan: left promiscuous mode [ 1798.009353][ T5946] veth0_vlan: left promiscuous mode [ 1799.525239][T20046] usb 1-1: device descriptor read/64, error -110 [ 1799.825218][T20046] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 1799.865773][ T5946] team0 (unregistering): Port device team_slave_1 removed [ 1799.967943][T20046] usb 1-1: device descriptor read/64, error -32 [ 1800.056880][ T5946] team0 (unregistering): Port device team_slave_0 removed [ 1800.089107][T20046] usb usb1-port1: attempt power cycle [ 1800.224952][T23906] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6327'. [ 1800.475260][T20046] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 1800.495505][T20046] usb 1-1: device descriptor read/8, error -32 [ 1800.607142][T20046] raw-gadget.0 gadget.0: failed to queue suspend event [ 1800.730049][T20046] raw-gadget.0 gadget.0: failed to queue reset event [ 1800.837892][T20046] raw-gadget.0 gadget.0: failed to queue resume event [ 1800.905695][T20046] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1800.927920][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1800.928044][T20046] usb 1-1: device descriptor read/8, error -32 [ 1801.043145][T20046] raw-gadget.0 gadget.0: failed to queue suspend event [ 1801.043718][T20046] usb usb1-port1: unable to enumerate USB device [ 1803.285337][T23872] raw-gadget.0 gadget.0: failed to queue disconnect event [ 1808.625209][T21859] usb 10-1: new low-speed USB device number 16 using dummy_hcd [ 1808.755295][T21859] usb 10-1: device descriptor read/64, error -71 [ 1809.002260][T21859] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1809.165235][T21859] usb 10-1: device descriptor read/64, error -71 [ 1809.281988][T21859] usb usb10-port1: attempt power cycle [ 1810.355268][T23115] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1810.485194][T23115] usb 1-1: device descriptor read/64, error -71 [ 1810.725183][T23115] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1810.952265][T23671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1810.999977][T23671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1811.035700][T23115] usb 1-1: device descriptor read/64, error -71 [ 1811.328614][T23115] usb usb1-port1: attempt power cycle [ 1811.610460][T24017] ceph: No mds server is up or the cluster is laggy [ 1811.637785][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 1811.638573][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 1811.795760][T23671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1811.851233][T23115] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1813.980635][T23671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1814.633031][T23115] usb 1-1: device descriptor read/8, error -71 [ 1814.705213][T21638] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 1815.940819][T23671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1815.982777][T23671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.998154][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.999423][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.007140][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.007359][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.225705][T22116] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1816.377529][T22116] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.380323][T22116] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1816.380351][T22116] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.380372][T22116] usb 10-1: Product: syz [ 1816.380387][T22116] usb 10-1: Manufacturer: syz [ 1816.380401][T22116] usb 10-1: SerialNumber: syz [ 1816.468851][T23671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1818.097722][ T49] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1818.349281][ T49] usb 1-1: device descriptor read/64, error -71 [ 1818.615545][ T49] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 1818.747105][ T49] usb 1-1: device descriptor read/64, error -71 [ 1818.858839][ T49] usb usb1-port1: attempt power cycle [ 1819.285431][ T49] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 1819.360184][ T49] usb 1-1: device descriptor read/8, error -71 [ 1819.384858][T22116] as10x_usb: device has been detected [ 1819.385913][T22116] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1819.406947][T22116] usb 10-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1819.411421][T22116] as10x_usb: error during firmware upload part1 [ 1819.412077][T22116] Registered device Elgato EyeTV DTT Deluxe [ 1819.414487][T22116] usb 10-1: USB disconnect, device number 19 [ 1819.502956][T22116] Unregistered device Elgato EyeTV DTT Deluxe [ 1819.519124][T22116] as10x_usb: device has been disconnected [ 1819.524362][T24084] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1820.975600][ T5978] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1821.193594][ T5978] usb 5-1: device descriptor read/64, error -71 [ 1821.531804][ T5978] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1821.738621][ T5978] usb 5-1: device descriptor read/64, error -71 [ 1821.853664][ T5978] usb usb5-port1: attempt power cycle [ 1822.379000][ T5978] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1822.407609][ T5978] usb 5-1: device descriptor read/8, error -71 [ 1822.665293][ T5978] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 1822.779252][ T5978] usb 5-1: device descriptor read/8, error -71 [ 1822.885833][ T5978] usb usb5-port1: unable to enumerate USB device [ 1823.518615][T24120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1823.613993][T23671] veth0_vlan: entered promiscuous mode [ 1823.634544][T23671] veth1_vlan: entered promiscuous mode [ 1823.662345][T23671] veth0_macvtap: entered promiscuous mode [ 1823.671976][T23671] veth1_macvtap: entered promiscuous mode [ 1823.690402][T23671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1823.711078][T23671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1823.738854][ T4218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.739075][ T4218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.739110][ T4218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.739202][ T4218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1823.855242][T22116] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1824.009565][T22116] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.011369][T22116] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1824.011385][T22116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.011395][T22116] usb 4-1: Product: syz [ 1824.011402][T22116] usb 4-1: Manufacturer: syz [ 1824.011410][T22116] usb 4-1: SerialNumber: syz [ 1824.278979][T21357] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 1824.279006][T21357] Bluetooth: hci2: adv larger than maximum supported [ 1824.279018][T21357] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1824.311677][T22116] as10x_usb: device has been detected [ 1824.312389][T22116] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1824.384165][T22116] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1824.533179][T22116] as10x_usb: error during firmware upload part1 [ 1824.568911][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1824.568931][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1824.574589][T22116] Registered device Elgato EyeTV DTT Deluxe [ 1824.614466][T24131] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1824.623519][T22116] usb 4-1: USB disconnect, device number 21 [ 1827.368126][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.368173][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.013803][T22116] Unregistered device Elgato EyeTV DTT Deluxe [ 1828.015601][T22116] as10x_usb: device has been disconnected [ 1830.485598][T20026] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 1830.636800][T20026] usb 10-1: device descriptor read/64, error -71 [ 1830.913377][T21357] Bluetooth: hci2: command 0x0406 tx timeout [ 1830.964419][T20026] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 1831.171396][T20026] usb 10-1: device descriptor read/64, error -71 [ 1831.281269][T20026] usb usb10-port1: attempt power cycle [ 1831.986210][T20026] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1832.008439][T20026] usb 10-1: device descriptor read/8, error -71 [ 1832.275217][T20026] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1832.295857][T20026] usb 10-1: device descriptor read/8, error -71 [ 1832.319994][T24168] geneve2: entered promiscuous mode [ 1832.405511][T20026] usb usb10-port1: unable to enumerate USB device [ 1832.685999][ T4071] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1832.686048][ T4071] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1832.686084][ T4071] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1832.686119][ T4071] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1832.936654][T24185] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1834.159188][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6416'. [ 1838.473316][ T5890] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1838.621733][ T5890] usb 4-1: device descriptor read/64, error -71 [ 1838.875308][ T5890] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1838.903683][T24242] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1839.015270][ T5890] usb 4-1: device descriptor read/64, error -71 [ 1839.133299][ T5890] usb usb4-port1: attempt power cycle [ 1839.227479][T20046] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1839.375329][T20046] usb 10-1: Using ep0 maxpacket: 8 [ 1839.378363][T20046] usb 10-1: config 6 has an invalid interface number: 2 but max is 0 [ 1839.378388][T20046] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.378408][T20046] usb 10-1: config 6 has no interface number 0 [ 1839.378512][T20046] usb 10-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1839.382776][T20046] usb 10-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1839.382803][T20046] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.382824][T20046] usb 10-1: Product: syz [ 1839.382838][T20046] usb 10-1: Manufacturer: syz [ 1839.382852][T20046] usb 10-1: SerialNumber: syz [ 1839.818600][T20046] hso 10-1:6.2: Failed to find INT IN ep [ 1842.318503][T20046] usb 10-1: USB disconnect, device number 24 [ 1848.085200][T21347] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 1848.225182][T21347] usb 4-1: device descriptor read/64, error -71 [ 1848.475890][T21347] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 1848.615280][T21347] usb 4-1: device descriptor read/64, error -71 [ 1848.735722][T21347] usb usb4-port1: attempt power cycle [ 1849.674110][T24355] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6469'. [ 1849.674146][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6469'. [ 1855.905165][T20046] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1856.061941][T20046] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.084169][T20046] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1856.084199][T20046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.084219][T20046] usb 4-1: Product: syz [ 1856.084233][T20046] usb 4-1: Manufacturer: syz [ 1856.084247][T20046] usb 4-1: SerialNumber: syz [ 1856.460410][T14062] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 1856.460441][T14062] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1856.755901][T20046] as10x_usb: device has been detected [ 1856.758113][T20046] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1856.822618][T24257] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1856.977572][T24257] usb 1-1: Using ep0 maxpacket: 32 [ 1856.997159][T24257] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.997283][T24257] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1856.997312][T24257] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1856.997338][T24257] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1857.102611][T24257] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1857.104045][T24257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.104098][T24257] usb 1-1: Product: syz [ 1857.127724][T24257] usb 1-1: Manufacturer: syz [ 1857.128008][T24257] usb 1-1: SerialNumber: syz [ 1857.247468][T24422] Can't find ip_set type hash:ip,ma [ 1857.324134][T20046] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1857.814079][T20046] as10x_usb: error during firmware upload part1 [ 1857.893462][T20046] Registered device Elgato EyeTV DTT Deluxe [ 1858.146395][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1858.211988][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.212363][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.401269][T20046] usb 4-1: USB disconnect, device number 28 [ 1858.407513][T24257] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input30 [ 1858.498467][T20046] Unregistered device Elgato EyeTV DTT Deluxe [ 1858.509028][T20046] as10x_usb: device has been disconnected [ 1858.525224][T24257] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1858.525242][T24257] (id 0x00) [ 1858.815163][T24257] rc_core: IR keymap rc-imon-pad not found [ 1858.815180][T24257] Registered IR keymap rc-empty [ 1858.815362][T24257] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1858.815374][T24257] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1858.836578][T24257] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1858.870898][T24257] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input31 [ 1858.873803][T24257] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:31> initialized [ 1859.082823][T24257] usb 1-1: USB disconnect, device number 31 [ 1863.355650][T24450] binder: 24449:24450 ioctl c0306201 0 returned -14 [ 1865.807634][T24490] binder: 24489:24490 ioctl c0306201 0 returned -14 [ 1866.427147][T24475] pim6reg: entered allmulticast mode [ 1866.457491][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1866.457543][ T37] audit: type=1326 audit(1766733895.977:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24470 comm="syz.0.6506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7ae5f749 code=0x7ffc0000 [ 1866.457785][ T37] audit: type=1326 audit(1766733895.977:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24470 comm="syz.0.6506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7ae5f749 code=0x7ffc0000 [ 1869.085522][ T37] audit: type=1326 audit(1766733898.607:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24521 comm="syz.4.6523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b885ef749 code=0x0 [ 1871.666460][T24473] pim6reg: left allmulticast mode [ 1872.316927][T24557] Bluetooth: MGMT ver 1.23 [ 1874.348924][T24605] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1877.978676][T24625] overlayfs: missing 'lowerdir' [ 1879.633185][T24647] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1881.504365][T24658] overlayfs: missing 'lowerdir' [ 1881.680407][T24671] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1881.685184][T21859] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1881.938376][T21859] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1881.938405][T21859] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.938425][T21859] usb 5-1: config 8 has no interface number 0 [ 1881.938468][T21859] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1881.938496][T21859] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1881.938528][T21859] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1881.938551][T21859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.627047][T24678] ceph: No mds server is up or the cluster is laggy [ 1882.728732][T24224] libceph: connect (1)[c::]:6789 error -101 [ 1882.728935][T24224] libceph: mon0 (1)[c::]:6789 connect error [ 1882.730559][T20045] usb 5-1: USB disconnect, device number 22 [ 1883.412274][T24700] overlayfs: missing 'lowerdir' [ 1886.095220][T22192] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1886.197874][T24741] overlayfs: missing 'lowerdir' [ 1886.285714][T22192] usb 10-1: config 8 has an invalid interface number: 177 but max is 0 [ 1886.285743][T22192] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.285761][T22192] usb 10-1: config 8 has no interface number 0 [ 1886.285803][T22192] usb 10-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1886.285827][T22192] usb 10-1: config 8 interface 177 has no altsetting 0 [ 1886.285859][T22192] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1886.285880][T22192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.530037][T22192] usb 10-1: USB disconnect, device number 25 [ 1887.274153][T24757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6610'. [ 1888.251248][T24773] overlayfs: missing 'lowerdir' [ 1888.478541][T24785] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1888.656602][ T5890] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1888.690131][T24796] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6626'. [ 1889.219750][ T5890] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1889.219809][ T5890] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.219830][ T5890] usb 1-1: config 8 has no interface number 0 [ 1889.219874][ T5890] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1889.219900][ T5890] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1889.220001][ T5890] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1889.220066][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.461863][ T5890] usb 1-1: USB disconnect, device number 32 [ 1889.534973][T24807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1889.535129][T24807] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1889.679851][T24814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6633'. [ 1889.801192][T24822] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1892.921254][T24836] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1892.921310][T24836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1893.948336][T24845] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6638'. [ 1894.855153][ T5890] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1894.914212][T24871] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1895.067589][ T5890] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.160424][ T5890] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1895.171255][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.171291][ T5890] usb 1-1: Product: syz [ 1895.171306][ T5890] usb 1-1: Manufacturer: syz [ 1895.171549][ T5890] usb 1-1: SerialNumber: syz [ 1895.656019][T14062] Bluetooth: hci5: Unknown advertising packet type: 0x1e [ 1895.656058][T14062] Bluetooth: hci5: Unknown advertising packet type: 0x30 [ 1895.656232][T14062] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1895.893083][ T5890] as10x_usb: device has been detected [ 1895.903793][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1896.698375][ T5890] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1896.934190][ T5890] as10x_usb: error during firmware upload part1 [ 1896.971801][ T5890] Registered device Elgato EyeTV DTT Deluxe [ 1897.049126][ T5890] usb 1-1: USB disconnect, device number 33 [ 1897.623819][ T5890] Unregistered device Elgato EyeTV DTT Deluxe [ 1897.679439][ T5890] as10x_usb: device has been disconnected [ 1897.792690][T14062] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1901.431887][T14062] Bluetooth: hci0: command 0x0406 tx timeout [ 1901.869034][T21357] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1901.882635][T21357] Bluetooth: hci5: Injecting HCI hardware error event [ 1901.899865][T21357] Bluetooth: hci5: hardware error 0x00 [ 1902.265132][T21347] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1902.422867][T21347] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.436812][T21347] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1902.436832][T21347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.436852][T21347] usb 6-1: Product: syz [ 1902.436865][T21347] usb 6-1: Manufacturer: syz [ 1902.436879][T21347] usb 6-1: SerialNumber: syz [ 1902.697308][T14062] Bluetooth: hci0: Unknown advertising packet type: 0x1e [ 1902.697343][T14062] Bluetooth: hci0: Unknown advertising packet type: 0x30 [ 1902.697360][T14062] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1902.704312][T21347] as10x_usb: device has been detected [ 1902.707733][T21347] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1902.720354][T21347] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1902.724609][T21347] as10x_usb: error during firmware upload part1 [ 1902.726953][T21347] Registered device Elgato EyeTV DTT Deluxe [ 1902.729407][T21347] usb 6-1: USB disconnect, device number 24 [ 1902.762059][T21347] Unregistered device Elgato EyeTV DTT Deluxe [ 1902.776616][T21347] as10x_usb: device has been disconnected [ 1902.957954][T24914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6671'. [ 1903.085786][T24916] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1904.278041][T21357] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1904.295305][ T5888] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1904.458368][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 1905.484644][ T5888] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.564773][ T5888] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.565154][ T5888] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1905.565549][ T5888] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1905.567893][ T5888] usb 1-1: config 7 interface 0 has no altsetting 0 [ 1905.568002][ T5888] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1905.568054][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.274890][T24937] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6680'. [ 1906.283160][T24935] syzkaller0: entered promiscuous mode [ 1906.283183][T24935] syzkaller0: entered allmulticast mode [ 1906.404608][ T5888] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.000E/input/input35 [ 1907.045422][ T5888] kye 0003:0458:5010.000E: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 1907.051775][ T5888] usb 1-1: USB disconnect, device number 34 [ 1907.092408][T24941] tipc: Started in network mode [ 1907.092436][T24941] tipc: Node identity bec5aefd4c98, cluster identity 4711 [ 1907.093154][T24941] tipc: Enabled bearer , priority 0 [ 1907.220045][T24934] tipc: Resetting bearer [ 1907.563493][T24934] tipc: Disabling bearer [ 1908.215316][ T5888] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1908.596972][ T5888] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.599435][ T5888] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1908.599462][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.599481][ T5888] usb 1-1: Product: syz [ 1908.599493][ T5888] usb 1-1: Manufacturer: syz [ 1908.599505][ T5888] usb 1-1: SerialNumber: syz [ 1908.649236][T24965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6689'. [ 1908.801304][T24967] sp0: Synchronizing with TNC [ 1908.821267][ T5888] as10x_usb: device has been detected [ 1908.822201][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1908.844158][T24966] [U] è [ 1908.858681][ T5888] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1908.863855][ T5888] as10x_usb: error during firmware upload part1 [ 1908.876511][T24969] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6691'. [ 1908.895672][ T5888] Registered device Elgato EyeTV DTT Deluxe [ 1908.898318][ T5888] usb 1-1: USB disconnect, device number 35 [ 1908.938640][ T5888] Unregistered device Elgato EyeTV DTT Deluxe [ 1908.940475][ T5888] as10x_usb: device has been disconnected [ 1908.945207][T24971] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6692'. [ 1910.074520][T24987] binder: 24981:24987 ioctl 4018620d 0 returned -22 [ 1910.416722][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6702'. [ 1910.635240][T25003] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6704'. [ 1911.311369][T25016] binder: 25015:25016 ioctl 4018620d 0 returned -22 [ 1911.384415][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6713'. [ 1915.773427][T25044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1916.710601][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6725'. [ 1916.953271][T25067] binder: 25065:25067 ioctl 4018620d 0 returned -22 [ 1917.302422][T25078] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1917.489180][T25085] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1919.257573][T25094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6739'. [ 1920.716181][ T5978] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 1920.871932][ T5978] usb 1-1: device descriptor read/64, error -71 [ 1921.335704][ T5978] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 1921.496026][ T5978] usb 1-1: device descriptor read/64, error -71 [ 1921.621548][ T5978] usb usb1-port1: attempt power cycle [ 1922.036635][ T5978] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 1922.077094][ T5978] usb 1-1: device descriptor read/8, error -71 [ 1922.307016][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1922.307083][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.370865][ T5978] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 1922.517408][ T5978] usb 1-1: device descriptor read/8, error -71 [ 1922.627123][ T5978] usb usb1-port1: unable to enumerate USB device [ 1922.668278][T25118] binder: 25117:25118 ioctl c0306201 0 returned -14 [ 1922.722421][T25122] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1924.363973][T25128] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6753'. [ 1927.198777][T25158] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1929.555811][ T5978] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 1929.685825][ T5978] usb 1-1: device descriptor read/64, error -71 [ 1931.176803][T25165] binder: 25159:25165 ioctl c0306201 0 returned -14 [ 1931.615095][ T5978] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 1931.617616][T25170] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1931.745158][ T5978] usb 1-1: device descriptor read/64, error -71 [ 1931.826304][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1931.855608][ T5978] usb usb1-port1: attempt power cycle [ 1933.901676][T25205] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1935.167196][T25212] binder: 25211:25212 ioctl c0306201 0 returned -14 [ 1935.652379][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6784'. [ 1936.090611][T25217] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1936.276130][T25229] bridge_slave_0: left allmulticast mode [ 1936.276159][T25229] bridge_slave_0: left promiscuous mode [ 1936.276390][T25229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.681805][T25229] bridge_slave_1: left allmulticast mode [ 1936.681837][T25229] bridge_slave_1: left promiscuous mode [ 1936.682085][T25229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.399928][T21357] Bluetooth: hci0: command 0x0406 tx timeout [ 1937.521071][T25229] bond0: (slave bond_slave_0): Releasing backup interface [ 1937.713999][T25250] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1939.894558][T25229] bond0: (slave bond_slave_1): Releasing backup interface [ 1940.852089][T25229] team0: Port device team_slave_0 removed [ 1940.966651][T25229] team0: Port device team_slave_1 removed [ 1940.970580][T25229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1940.970600][T25229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1941.150420][T25229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1941.150439][T25229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1943.296428][T25229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1943.595780][T22192] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1943.735443][T22192] usb 4-1: device descriptor read/64, error -71 [ 1945.405786][T25277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1947.845808][T21357] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 1951.527354][T14062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1951.558710][T14062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1951.583290][T14062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1951.603294][T14062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1951.620369][T14062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1951.933229][T25335] vivid-008: kernel_thread() failed [ 1955.053901][T25336] chnl_net:caif_netlink_parms(): no params data found [ 1955.066340][T14062] Bluetooth: hci1: command tx timeout [ 1956.910431][T25374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.145133][T14062] Bluetooth: hci1: command tx timeout [ 1958.549562][T25407] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.6836'. [ 1958.638780][T25374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.665178][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1959.115428][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1959.133851][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.133904][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.133930][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.133951][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1959.133976][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1959.134009][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1959.134031][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.225072][T14062] Bluetooth: hci1: command tx timeout [ 1960.315588][ T9] usbhid 4-1:7.0: can't add hid device: -71 [ 1960.315716][ T9] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 1960.319564][ T9] usb 4-1: USB disconnect, device number 31 [ 1960.368596][T25374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1960.495741][T25336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1960.495997][T25336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1960.496240][T25336] bridge_slave_0: entered allmulticast mode [ 1960.513991][T25336] bridge_slave_0: entered promiscuous mode [ 1960.522353][T25336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.522566][T25336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.522748][T25336] bridge_slave_1: entered allmulticast mode [ 1960.544169][T25336] bridge_slave_1: entered promiscuous mode [ 1961.315376][T14062] Bluetooth: hci1: command tx timeout [ 1961.563801][T25374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1961.918426][T25336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1962.552720][T25336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1962.931243][T25439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1962.990616][T25336] team0: Port device team_slave_0 added [ 1963.017129][T25336] team0: Port device team_slave_1 added [ 1963.095299][T25216] Set syz1 is full, maxelem 65536 reached [ 1964.375561][ T37] audit: type=1326 audit(1766733993.617:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25441 comm="syz.4.6848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b885ef749 code=0x0 [ 1965.546276][T18847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1965.819103][ T5888] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1965.945190][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1966.185235][ T5888] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1966.315158][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1966.427328][ T5888] usb usb5-port1: attempt power cycle [ 1966.765083][ T5888] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1966.776393][T25336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1966.776409][T25336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1966.776434][T25336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1966.785651][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1966.851875][T25336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1966.851887][T25336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1966.851902][T25336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1966.852207][ T4218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.025234][ T5888] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1967.046007][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1967.155436][ T5888] usb usb5-port1: unable to enumerate USB device [ 1967.238303][T22689] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.355243][ T49] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1967.436524][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1967.505360][ T49] usb 10-1: Using ep0 maxpacket: 16 [ 1967.512322][ T49] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.512378][ T49] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1967.512401][ T49] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.512422][ T49] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1967.512446][ T49] usb 10-1: config 7 interface 0 has no altsetting 0 [ 1967.512479][ T49] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1967.512499][ T49] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.685627][T25470] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1967.685655][T25470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1967.687916][T25470] vhci_hcd vhci_hcd.0: Device attached [ 1967.728041][ T1151] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.817956][T25336] hsr_slave_0: entered promiscuous mode [ 1967.819738][T25336] hsr_slave_1: entered promiscuous mode [ 1967.821112][T25336] debugfs: 'hsr0' already exists in 'hsr' [ 1967.821134][T25336] Cannot create hsr debugfs directory [ 1967.875140][T20047] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1967.925093][ T5888] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1967.970400][ T49] usbhid 10-1:7.0: can't add hid device: -71 [ 1967.970520][ T49] usbhid 10-1:7.0: probe with driver usbhid failed with error -71 [ 1967.974649][ T49] usb 10-1: USB disconnect, device number 26 [ 1968.025952][T20047] usb 4-1: Using ep0 maxpacket: 16 [ 1968.027778][T20047] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.027830][T20047] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1968.027855][T20047] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1968.027867][T20047] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1968.027881][T20047] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1968.027905][T20047] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1968.027917][T20047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.184795][ T1151] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.391277][T25471] vhci_hcd: connection reset by peer [ 1968.403400][T22689] vhci_hcd vhci_hcd.0: stop threads [ 1968.403424][T22689] vhci_hcd vhci_hcd.0: release socket [ 1968.433071][T22689] vhci_hcd vhci_hcd.0: disconnect device [ 1968.449419][T20047] usbhid 4-1:7.0: can't add hid device: -71 [ 1968.449494][T20047] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 1968.455675][T20047] usb 4-1: USB disconnect, device number 32 [ 1968.551689][ T1151] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.721813][T25476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6857'. [ 1969.730405][ T37] audit: type=1326 audit(1766733998.937:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25477 comm="syz.9.6858" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa87689f749 code=0x0 [ 1972.938001][ T1151] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.075215][ T5888] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1973.258866][T25511] autofs: Unknown parameter '0x0000000000000000' [ 1973.275119][T22183] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1973.445095][T22183] usb 1-1: device descriptor read/64, error -71 [ 1973.685142][T22183] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1973.825201][T22183] usb 1-1: device descriptor read/64, error -71 [ 1973.838725][ T1151] bridge_slave_1: left allmulticast mode [ 1973.838754][ T1151] bridge_slave_1: left promiscuous mode [ 1973.839001][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.935783][T22183] usb usb1-port1: attempt power cycle [ 1973.955112][T19951] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1974.125311][T19951] usb 5-1: Using ep0 maxpacket: 16 [ 1974.127498][T19951] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.127550][T19951] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.127576][T19951] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1974.127597][T19951] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1974.127623][T19951] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1974.127655][T19951] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1974.127678][T19951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.167084][ T1151] bridge_slave_0: left allmulticast mode [ 1974.167111][ T1151] bridge_slave_0: left promiscuous mode [ 1974.167346][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.133569][ T37] audit: type=1326 audit(1766734004.207:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25520 comm="syz.9.6872" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa87689f749 code=0x0 [ 1977.174251][T19951] usbhid 5-1:7.0: can't add hid device: -71 [ 1977.174402][T19951] usbhid 5-1:7.0: probe with driver usbhid failed with error -71 [ 1977.210175][T19951] usb 5-1: USB disconnect, device number 27 [ 1978.011211][T25543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1978.485134][T22183] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1978.635176][T22183] usb 5-1: device descriptor read/64, error -71 [ 1978.875176][T22183] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1980.315489][T22192] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1980.445570][T22192] usb 10-1: device descriptor read/64, error -71 [ 1980.705602][T22192] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1980.856632][T22192] usb 10-1: device descriptor read/64, error -71 [ 1981.238382][T22192] usb usb10-port1: attempt power cycle [ 1981.575663][T22192] usb 10-1: new low-speed USB device number 29 using dummy_hcd [ 1981.598687][T22192] usb 10-1: device descriptor read/8, error -71 [ 1981.845565][T22192] usb 10-1: new low-speed USB device number 30 using dummy_hcd [ 1981.873397][T22192] usb 10-1: device descriptor read/8, error -71 [ 1981.978666][T22192] usb usb10-port1: unable to enumerate USB device [ 1982.271300][T22183] usb 5-1: device descriptor read/64, error -71 [ 1982.435840][T22183] usb usb5-port1: attempt power cycle [ 1983.038327][T25577] 9pnet_virtio: no channels available for device syz [ 1983.115116][T22192] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1983.325794][T22192] usb 4-1: Using ep0 maxpacket: 16 [ 1983.981398][T22192] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.981550][T22192] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.981586][T22192] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.981649][T22192] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1983.981708][T22192] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1983.981816][T22192] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1983.981870][T22192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.460827][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1984.481846][T22192] usbhid 4-1:7.0: can't add hid device: -71 [ 1984.482089][T22192] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 1984.502440][T22192] usb 4-1: USB disconnect, device number 33 [ 1984.541578][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1984.565482][ T1151] bond0 (unregistering): Released all slaves [ 1986.551312][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.551397][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.985069][T22183] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1987.127902][T25611] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6901'. [ 1987.129624][T25611] fuse: Bad value for 'fd' [ 1987.215947][T22183] usb 4-1: no configurations [ 1987.215967][T22183] usb 4-1: can't read configurations, error -22 [ 1987.355088][T22183] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1987.515151][T24257] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1987.520515][T22183] usb 4-1: no configurations [ 1987.520532][T22183] usb 4-1: can't read configurations, error -22 [ 1987.520966][T22183] usb usb4-port1: attempt power cycle [ 1991.105132][T21347] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 1991.252833][T21347] usb 5-1: device descriptor read/64, error -71 [ 1991.272261][T24257] usb 10-1: device not accepting address 31, error -71 [ 1991.488172][T21347] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 1991.635245][T21347] usb 5-1: device descriptor read/64, error -71 [ 1991.665116][T25336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1991.748114][T21347] usb usb5-port1: attempt power cycle [ 1991.828947][ T1151] hsr_slave_0: left promiscuous mode [ 1992.719603][ T1151] hsr_slave_1: left promiscuous mode [ 1992.720554][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1992.720579][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1992.761505][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1992.761533][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1992.847063][ T1151] veth1_macvtap: left promiscuous mode [ 1992.847125][ T1151] veth0_macvtap: left promiscuous mode [ 1992.847256][ T1151] veth1_vlan: left promiscuous mode [ 1992.847348][ T1151] veth0_vlan: left promiscuous mode [ 1993.275102][T24257] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 1993.501931][T24257] usb 10-1: no configurations [ 1993.501952][T24257] usb 10-1: can't read configurations, error -22 [ 1993.648004][T24257] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 1993.796166][T24257] usb 10-1: no configurations [ 1993.796188][T24257] usb 10-1: can't read configurations, error -22 [ 1993.827537][T24257] usb usb10-port1: attempt power cycle [ 1994.033179][T25660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1994.033195][T25660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1994.033314][T25660] vhci_hcd vhci_hcd.0: Device attached [ 1994.198662][T24257] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 1994.219007][T24257] usb 10-1: no configurations [ 1994.219019][T24257] usb 10-1: can't read configurations, error -22 [ 1994.305096][T21347] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1994.345158][T24257] usb 10-1: new full-speed USB device number 36 using dummy_hcd [ 1994.399238][T24257] usb 10-1: no configurations [ 1994.399251][T24257] usb 10-1: can't read configurations, error -22 [ 1994.399738][T24257] usb usb10-port1: unable to enumerate USB device [ 1994.813396][T25661] vhci_hcd: connection reset by peer [ 1994.814548][T20190] vhci_hcd vhci_hcd.0: stop threads [ 1994.814569][T20190] vhci_hcd vhci_hcd.0: release socket [ 1994.834057][T20190] vhci_hcd vhci_hcd.0: disconnect device [ 1995.385861][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 1995.647415][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 1997.768714][T25705] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1997.828780][T25706] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1997.828801][T25706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1997.828923][T25706] vhci_hcd vhci_hcd.0: Device attached [ 1998.095109][T22192] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 1998.165078][T20047] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1998.325682][T20047] usb 1-1: no configurations [ 1998.325696][T20047] usb 1-1: can't read configurations, error -22 [ 1998.455516][T20047] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1998.545297][T25707] vhci_hcd: connection reset by peer [ 1998.546476][T20190] vhci_hcd vhci_hcd.9: stop threads [ 1998.546492][T20190] vhci_hcd vhci_hcd.9: release socket [ 1998.546623][T20190] vhci_hcd vhci_hcd.9: disconnect device [ 1998.635935][T20047] usb 1-1: no configurations [ 1998.635953][T20047] usb 1-1: can't read configurations, error -22 [ 1998.636236][T20047] usb usb1-port1: attempt power cycle [ 1998.985059][T20047] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1999.038078][T20047] usb 1-1: no configurations [ 1999.038091][T20047] usb 1-1: can't read configurations, error -22 [ 1999.165085][T20047] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1999.186256][T20047] usb 1-1: no configurations [ 1999.186273][T20047] usb 1-1: can't read configurations, error -22 [ 1999.191231][T20047] usb usb1-port1: unable to enumerate USB device [ 1999.435180][T21347] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1999.495178][T25336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1999.679217][T25336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1999.779896][T25336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2000.188147][T25336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2000.210105][T25336] 8021q: adding VLAN 0 to HW filter on device team0 [ 2000.217792][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.217984][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2000.228654][ T2146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.229389][ T2146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2001.612532][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6947'. [ 2001.612567][T25752] netlink: 'syz.3.6947': attribute type 5 has an invalid length. [ 2001.612581][T25752] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6947'. [ 2001.846276][T25752] geneve2: entered promiscuous mode [ 2001.846305][T25752] geneve2: entered allmulticast mode [ 2003.279956][T22192] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2006.656871][T25795] 9p: Bad value for 'rfdno' [ 2006.780229][T25336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2006.895094][T22183] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 2007.046897][T22183] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.046924][T22183] usb 10-1: config 0 has no interfaces? [ 2007.049222][T22183] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2007.049250][T22183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.049270][T22183] usb 10-1: Product: syz [ 2007.049284][T22183] usb 10-1: Manufacturer: syz [ 2007.049299][T22183] usb 10-1: SerialNumber: syz [ 2007.054266][T22183] usb 10-1: config 0 descriptor?? [ 2007.266907][T14062] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 2007.266937][T14062] Bluetooth: hci4: adv larger than maximum supported [ 2007.266950][T14062] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2007.268972][T21347] usb 10-1: USB disconnect, device number 37 [ 2007.417348][T25336] veth0_vlan: entered promiscuous mode [ 2007.441421][T25336] veth1_vlan: entered promiscuous mode [ 2007.520845][T25336] veth0_macvtap: entered promiscuous mode [ 2007.566634][T25336] veth1_macvtap: entered promiscuous mode [ 2007.860173][T25336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2007.956880][T25336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2007.999805][ T2146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.000341][ T2146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.027336][ T2146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.027940][ T1457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2008.920825][T25847] GUP no longer grows the stack in syz.3.6975 (25847): 200000004000-20000000a000 (200000002000) [ 2008.920879][T25847] CPU: 0 UID: 0 PID: 25847 Comm: syz.3.6975 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2008.920908][T25847] Tainted: [L]=SOFTLOCKUP [ 2008.920915][T25847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2008.920932][T25847] Call Trace: [ 2008.920946][T25847] [ 2008.920956][T25847] dump_stack_lvl+0xe8/0x150 [ 2008.921093][T25847] __get_user_pages+0x22c8/0x2830 [ 2008.921173][T25847] get_user_pages_remote+0x2f1/0xac0 [ 2008.921200][T25847] ? __pfx_mtree_load+0x10/0x10 [ 2008.921327][T25847] ? __pfx_get_user_pages_remote+0x10/0x10 [ 2008.921353][T25847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2008.921381][T25847] ? __access_remote_vm+0x367/0x7d0 [ 2008.921416][T25847] __access_remote_vm+0x211/0x7d0 [ 2008.921454][T25847] ? __pfx___access_remote_vm+0x10/0x10 [ 2008.921481][T25847] ? set_page_refcounted+0xa0/0x1e0 [ 2008.921513][T25847] ? alloc_pages_noprof+0xe4/0x1e0 [ 2008.921537][T25847] proc_pid_cmdline_read+0x433/0x810 [ 2008.921581][T25847] ? __asan_memset+0x22/0x50 [ 2008.921620][T25847] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2008.921651][T25847] ? rw_verify_area+0x2ac/0x4e0 [ 2008.921688][T25847] vfs_readv+0x5b3/0x850 [ 2008.921709][T25847] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2008.921739][T25847] ? __pfx_vfs_readv+0x10/0x10 [ 2008.921774][T25847] ? __fget_files+0x2a/0x420 [ 2008.921800][T25847] ? __fget_files+0x3a6/0x420 [ 2008.921819][T25847] ? __fget_files+0x2a/0x420 [ 2008.921849][T25847] __x64_sys_preadv+0x19a/0x2a0 [ 2008.921881][T25847] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2008.921922][T25847] do_syscall_64+0xec/0xf80 [ 2008.921986][T25847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2008.922021][T25847] ? trace_irq_disable+0x37/0x100 [ 2008.922064][T25847] ? clear_bhb_loop+0x60/0xb0 [ 2008.922089][T25847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2008.922109][T25847] RIP: 0033:0x7f85f785f749 [ 2008.922131][T25847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2008.922150][T25847] RSP: 002b:00007f85f5aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2008.922172][T25847] RAX: ffffffffffffffda RBX: 00007f85f7ab6090 RCX: 00007f85f785f749 [ 2008.922189][T25847] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 2008.922203][T25847] RBP: 00007f85f78e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 2008.922216][T25847] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 2008.922229][T25847] R13: 00007f85f7ab6128 R14: 00007f85f7ab6090 R15: 00007ffc33adc198 [ 2008.922263][T25847] [ 2009.133844][ T1457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.133864][ T1457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.278271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.278286][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.545101][T20047] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 2010.708625][T20047] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.708653][T20047] usb 10-1: config 0 has no interfaces? [ 2010.712014][T20047] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2010.712043][T20047] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.712064][T20047] usb 10-1: Product: syz [ 2010.712078][T20047] usb 10-1: Manufacturer: syz [ 2010.712093][T20047] usb 10-1: SerialNumber: syz [ 2010.788100][T20047] usb 10-1: config 0 descriptor?? [ 2010.990722][T14062] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 2010.990751][T14062] Bluetooth: hci4: adv larger than maximum supported [ 2010.990764][T14062] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2010.991791][T22183] usb 10-1: USB disconnect, device number 38 [ 2013.656408][T20047] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2013.846591][T20047] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.846608][T20047] usb 7-1: config 0 has no interfaces? [ 2013.848544][T20047] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2013.848561][T20047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.848571][T20047] usb 7-1: Product: syz [ 2013.848579][T20047] usb 7-1: Manufacturer: syz [ 2013.848586][T20047] usb 7-1: SerialNumber: syz [ 2013.863057][T20047] usb 7-1: config 0 descriptor?? [ 2014.067197][T14062] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 2014.067225][T14062] Bluetooth: hci1: adv larger than maximum supported [ 2014.067238][T14062] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2014.071272][T20047] usb 7-1: USB disconnect, device number 15 [ 2015.679607][T25928] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2015.679624][T25928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2015.680944][T25928] vhci_hcd vhci_hcd.0: Device attached [ 2015.945872][T22116] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 2016.041605][ T4071] Bluetooth: (null): Invalid header checksum [ 2016.053698][T25933] Bluetooth: (null): Invalid header checksum [ 2016.637503][T25929] vhci_hcd: connection reset by peer [ 2016.658609][T18847] vhci_hcd vhci_hcd.6: stop threads [ 2016.658631][T18847] vhci_hcd vhci_hcd.6: release socket [ 2016.658698][T18847] vhci_hcd vhci_hcd.6: disconnect device [ 2019.767567][T25971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7015'. [ 2019.767591][T25971] netlink: 'syz.4.7015': attribute type 5 has an invalid length. [ 2019.767598][T25971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7015'. [ 2019.847138][T25971] geneve3: entered promiscuous mode [ 2019.847164][T25971] geneve3: entered allmulticast mode [ 2021.055114][T22116] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 2021.147463][T25986] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.7020'. [ 2024.698750][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7030'. [ 2029.367608][T21859] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2029.514630][T26066] evm: overlay not supported [ 2029.535706][T21859] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2029.539310][T21859] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2029.542463][T21859] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2029.570338][T21859] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2029.570366][T21859] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2029.570385][T21859] usb 10-1: Product: syz [ 2029.570399][T21859] usb 10-1: Manufacturer: syz [ 2029.570413][T21859] usb 10-1: SerialNumber: syz [ 2029.603648][T21859] usb 10-1: config 0 descriptor?? [ 2029.695148][ T9] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 2030.098781][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.098807][ T9] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 2030.101799][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2030.101827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.101846][ T9] usb 5-1: Product: syz [ 2030.101860][ T9] usb 5-1: Manufacturer: syz [ 2030.101875][ T9] usb 5-1: SerialNumber: syz [ 2030.167279][ T5888] usb 10-1: USB disconnect, device number 39 [ 2030.355975][T14062] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 2030.356010][T14062] Bluetooth: hci3: adv larger than maximum supported [ 2030.356023][T14062] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2030.375144][ T9] usb 5-1: USB disconnect, device number 34 [ 2032.138426][T21859] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2032.294750][T21859] usb 5-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 2032.294773][T21859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.294784][T21859] usb 5-1: Product: syz [ 2032.294791][T21859] usb 5-1: Manufacturer: syz [ 2032.294799][T21859] usb 5-1: SerialNumber: syz [ 2032.549671][ T5888] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2032.650988][T21859] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 2032.651743][T21859] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 2033.105031][ T5888] usb 7-1: device descriptor read/64, error -71 [ 2033.260857][T21859] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2033.286962][T21859] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2033.355054][ T5888] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2033.495222][ T5888] usb 7-1: device descriptor read/64, error -71 [ 2033.624249][ T5888] usb usb7-port1: attempt power cycle [ 2033.995083][ T5888] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2034.026466][ T5888] usb 7-1: device descriptor read/8, error -71 [ 2034.450720][T19951] usb 5-1: USB disconnect, device number 35 [ 2034.457367][T19951] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2034.459975][T19951] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2034.460311][T19951] visor 5-1:1.0: device disconnected [ 2034.535076][ T5888] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2034.555607][ T5888] usb 7-1: device descriptor read/8, error -71 [ 2034.665620][ T5888] usb usb7-port1: unable to enumerate USB device [ 2036.939835][T26133] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 2038.869502][T19951] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2039.017193][T19951] usb 1-1: device descriptor read/64, error -71 [ 2039.395015][T19951] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2039.655228][T19951] usb 1-1: device descriptor read/64, error -71 [ 2039.765681][T19951] usb usb1-port1: attempt power cycle [ 2040.565034][T19951] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2040.586599][T19951] usb 1-1: device descriptor read/8, error -71 [ 2040.825458][T19951] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2040.845770][T19951] usb 1-1: device descriptor read/8, error -71 [ 2040.956500][T19951] usb usb1-port1: unable to enumerate USB device [ 2041.074859][T26193] Invalid logical block size (8192) [ 2042.796360][T21347] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2042.968022][T21347] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 2042.968051][T21347] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2042.968069][T21347] usb 7-1: config 0 has no interfaces? [ 2042.968099][T21347] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2042.968122][T21347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.988289][T21347] usb 7-1: config 0 descriptor?? [ 2043.039377][T26228] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2043.039404][T26228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2043.042680][T26228] vhci_hcd vhci_hcd.0: Device attached [ 2043.378607][T19951] usb 7-1: USB disconnect, device number 20 [ 2044.179513][T26229] vhci_hcd: connection closed [ 2044.183504][ T3862] vhci_hcd vhci_hcd.3: stop threads [ 2044.195284][T21347] usb 40-1: SetAddress Request (2) to port 0 [ 2044.195367][T21347] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2044.218454][ T3862] vhci_hcd vhci_hcd.3: release socket [ 2044.219916][ T3862] vhci_hcd vhci_hcd.3: disconnect device [ 2044.225100][T21347] usb 40-1: enqueue for inactive port 0 [ 2044.228007][T26233] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2044.364376][T26242] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7111'. [ 2044.671122][T21347] usb usb40-port1: attempt power cycle [ 2045.867305][T21347] usb usb40-port1: unable to enumerate USB device [ 2047.311813][T26286] batadv_slave_0: entered promiscuous mode [ 2047.632797][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.632867][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2049.361394][ T9] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 2049.508109][ T9] usb 10-1: config 150 has an invalid interface number: 204 but max is 2 [ 2049.508136][ T9] usb 10-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.508154][ T9] usb 10-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 2049.508173][ T9] usb 10-1: config 150 has no interface number 0 [ 2049.508203][ T9] usb 10-1: config 150 interface 204 has no altsetting 0 [ 2049.513353][ T9] usb 10-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2049.513428][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.513449][ T9] usb 10-1: Product: syz [ 2049.513463][ T9] usb 10-1: Manufacturer: syz [ 2049.513477][ T9] usb 10-1: SerialNumber: syz [ 2049.763470][T26322] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2049.763498][T26322] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2049.763759][T26322] vhci_hcd vhci_hcd.0: Device attached [ 2049.874174][ T37] audit: type=1326 audit(1766734079.487:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.008412][ T37] audit: type=1326 audit(1766734079.487:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.008470][ T37] audit: type=1326 audit(1766734079.487:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.008556][ T37] audit: type=1326 audit(1766734079.597:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.008601][ T37] audit: type=1326 audit(1766734079.597:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.345774][ T37] audit: type=1326 audit(1766734079.627:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.345838][ T37] audit: type=1326 audit(1766734079.627:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.345875][ T37] audit: type=1326 audit(1766734079.627:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.345912][ T37] audit: type=1326 audit(1766734079.627:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2050.345948][ T37] audit: type=1326 audit(1766734079.627:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26328 comm="syz.4.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b885ef749 code=0x7ffc0000 [ 2054.105350][T26325] vhci_hcd: connection closed [ 2054.135023][T18847] vhci_hcd vhci_hcd.3: stop threads [ 2054.135047][T18847] vhci_hcd vhci_hcd.3: release socket [ 2054.135110][T18847] vhci_hcd vhci_hcd.3: disconnect device [ 2054.195131][T24224] usb 40-1: enqueue for inactive port 0 [ 2054.223330][ T9] xr_serial 10-1:150.204: skipping garbage [ 2054.245210][ T9] usb 10-1: USB disconnect, device number 40 [ 2054.481170][T26346] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7148'. [ 2054.700951][T24224] usb usb40-port1: attempt power cycle [ 2055.278407][T24224] usb usb40-port1: unable to enumerate USB device [ 2057.753912][T26385] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 2058.329516][T26415] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 2061.785561][T26437] infiniband syz2: set down [ 2061.785584][T26437] infiniband syz2: added ipvlan0 [ 2062.183531][T26437] RDS/IB: syz2: added [ 2062.183619][T26437] smc: adding ib device syz2 with port count 1 [ 2062.184141][T26437] smc: ib device syz2 port 1 has pnetid SYZ (user defined) [ 2064.296661][ T49] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2064.671116][ T49] usb 7-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 2064.671181][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.671241][ T49] usb 7-1: Product: syz [ 2064.671256][ T49] usb 7-1: Manufacturer: syz [ 2064.671271][ T49] usb 7-1: SerialNumber: syz [ 2064.969960][ T49] usb 7-1: palm_os_4_probe - error -71 getting connection info [ 2064.970042][ T49] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 2064.997729][ T49] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2065.016654][ T49] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2065.037254][ T49] usb 7-1: USB disconnect, device number 21 [ 2065.058371][ T49] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2065.062994][ T49] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2065.063485][ T49] visor 7-1:1.0: device disconnected [ 2069.191840][T26546] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.7226'. [ 2069.730221][T26567] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2069.730379][T26567] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2069.732361][T26567] vhci_hcd vhci_hcd.0: Device attached [ 2070.255561][T22116] usb 42-1: SetAddress Request (2) to port 0 [ 2070.256257][T22116] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2070.837063][T26569] vhci_hcd: connection reset by peer [ 2070.837368][T17308] vhci_hcd vhci_hcd.4: stop threads [ 2070.837383][T17308] vhci_hcd vhci_hcd.4: release socket [ 2070.837427][T17308] vhci_hcd vhci_hcd.4: disconnect device [ 2070.957089][T26591] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.7242'. [ 2075.245689][ T9] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2075.405323][T14062] Bluetooth: hci1: command 0x0406 tx timeout [ 2075.445807][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 2075.453603][T22116] usb 42-1: device descriptor read/8, error -110 [ 2075.716567][ T9] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.716583][ T9] usb 10-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 2075.716604][ T9] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2075.716617][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.916367][T22116] usb usb42-port1: attempt power cycle [ 2076.215746][T26703] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2076.215773][T26703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2076.218650][T26703] vhci_hcd vhci_hcd.0: Device attached [ 2076.387577][T26704] vhci_hcd: connection closed [ 2076.395989][ T4071] vhci_hcd vhci_hcd.6: stop threads [ 2076.396047][ T4071] vhci_hcd vhci_hcd.6: release socket [ 2076.396155][ T4071] vhci_hcd vhci_hcd.6: disconnect device [ 2076.507197][T22116] usb usb42-port1: unable to enumerate USB device [ 2076.889471][T26719] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2076.889498][T26719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2076.893603][T26719] vhci_hcd vhci_hcd.0: Device attached [ 2077.103194][T26720] vhci_hcd: connection closed [ 2077.103762][ T1457] vhci_hcd vhci_hcd.3: stop threads [ 2077.103786][ T1457] vhci_hcd vhci_hcd.3: release socket [ 2077.103822][ T1457] vhci_hcd vhci_hcd.3: disconnect device [ 2077.345049][T21859] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2077.526926][T21859] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2077.526963][T21859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.527901][T21859] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2077.527917][T21859] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2077.527928][T21859] usb 5-1: Manufacturer: syz [ 2077.530973][T21859] usb 5-1: config 0 descriptor?? [ 2077.734987][T21859] rc_core: IR keymap rc-hauppauge not found [ 2077.735007][T21859] Registered IR keymap rc-empty [ 2077.736447][T21859] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2077.738074][T21859] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38 [ 2077.996980][ T5888] usb 10-1: USB disconnect, device number 41 [ 2080.305003][ T5888] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2080.472302][ T5888] usb 7-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 2080.472332][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.472352][ T5888] usb 7-1: Product: syz [ 2080.472366][ T5888] usb 7-1: Manufacturer: syz [ 2080.472380][ T5888] usb 7-1: SerialNumber: syz [ 2080.587851][T26748] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.7299'. [ 2080.760455][ T5888] usb 7-1: palm_os_4_probe - error -71 getting connection info [ 2080.760538][ T5888] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 2080.838608][ T5888] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2080.932654][ T5888] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2081.264999][ T5888] usb 7-1: USB disconnect, device number 22 [ 2081.626695][ T5888] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2081.783146][ T5888] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2081.857711][ T5888] visor 7-1:1.0: device disconnected [ 2081.975058][T22116] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2082.124990][T22116] usb 1-1: Using ep0 maxpacket: 16 [ 2082.127079][T22116] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.127133][T22116] usb 1-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2082.127160][T22116] usb 1-1: config 7 interface 0 has no altsetting 0 [ 2082.127192][T22116] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2082.127216][T22116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.545342][T22116] usbhid 1-1:7.0: couldn't find an input interrupt endpoint [ 2083.555054][T22116] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 2083.772914][T22116] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2083.786747][T22116] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2083.786777][T22116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.786798][T22116] usb 7-1: Product: syz [ 2083.786813][T22116] usb 7-1: Manufacturer: syz [ 2083.786828][T22116] usb 7-1: SerialNumber: syz [ 2083.981697][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 2083.981717][ T37] audit: type=1326 audit(1766734113.597:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26782 comm="syz.9.7312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa87689f749 code=0x0 [ 2084.630390][T22116] as10x_usb: device has been detected [ 2084.630867][T22116] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2084.673425][T22116] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2084.705266][T22116] as10x_usb: error during firmware upload part1 [ 2084.706050][T22116] Registered device Elgato EyeTV DTT Deluxe [ 2084.713284][T22116] usb 7-1: USB disconnect, device number 23 [ 2084.713515][ T9] usb 1-1: USB disconnect, device number 54 [ 2085.270074][T22116] Unregistered device Elgato EyeTV DTT Deluxe [ 2085.307426][T22116] as10x_usb: device has been disconnected [ 2085.345976][T26787] netlink: 'syz.0.7313': attribute type 72 has an invalid length. [ 2085.345996][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7313'. [ 2087.861298][T22116] usb 5-1: USB disconnect, device number 36 [ 2088.494280][T26814] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2088.695617][T24224] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2088.777325][T26819] netlink: 'syz.4.7326': attribute type 72 has an invalid length. [ 2088.777346][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7326'. [ 2088.845100][T24224] usb 10-1: Using ep0 maxpacket: 16 [ 2088.847557][T24224] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.847605][T24224] usb 10-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2088.847631][T24224] usb 10-1: config 7 interface 0 has no altsetting 0 [ 2088.847663][T24224] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2088.847694][T24224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.955018][ T9] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 2088.979076][T24224] usbhid 10-1:7.0: couldn't find an input interrupt endpoint [ 2089.107850][ T9] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.110232][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 2089.110249][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.110260][ T9] usb 7-1: Product: syz [ 2089.110267][ T9] usb 7-1: Manufacturer: syz [ 2089.110275][ T9] usb 7-1: SerialNumber: syz [ 2089.262174][T26829] netlink: 'syz.0.7330': attribute type 13 has an invalid length. [ 2089.375164][ T9] as10x_usb: device has been detected [ 2089.375749][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 2089.427140][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 2089.430641][ T9] as10x_usb: error during firmware upload part1 [ 2089.431002][ T9] Registered device Elgato EyeTV DTT Deluxe [ 2089.455298][ T9] usb 7-1: USB disconnect, device number 24 [ 2089.492479][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 2089.495833][ T9] as10x_usb: device has been disconnected [ 2090.159080][T26829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2091.065924][T26852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7335'. [ 2091.485017][T22116] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2091.545944][ T9] usb 10-1: USB disconnect, device number 42 [ 2091.598942][T26855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7337'. [ 2091.655374][T22116] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2091.655432][T22116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2091.656591][T22116] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2091.656616][T22116] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2091.656634][T22116] usb 1-1: Manufacturer: syz [ 2091.661502][T22116] usb 1-1: config 0 descriptor?? [ 2091.764962][T22116] rc_core: IR keymap rc-hauppauge not found [ 2091.764982][T22116] Registered IR keymap rc-empty [ 2091.771298][T22116] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2091.772914][T22116] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 2091.971714][T26851] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2092.983250][T24224] hid-generic 0001:0003:0008.000F: hidraw0: HID v0.07 Device [syz0] on syz0 [ 2094.249564][ T9] usb 1-1: USB disconnect, device number 55 [ 2096.172086][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7348'. [ 2096.429976][T26895] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.7350'. [ 2096.849038][T26906] binder: 26903:26906 ioctl c0306201 200000000080 returned -14 [ 2099.334530][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7362'. [ 2099.350131][T26930] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7363'. [ 2103.470648][T26962] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.7375'. [ 2104.113387][T14077] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2104.525191][T14077] usb 1-1: Using ep0 maxpacket: 16 [ 2104.536823][T14077] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.536877][T14077] usb 1-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2104.536903][T14077] usb 1-1: config 7 interface 0 has no altsetting 0 [ 2104.536935][T14077] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2104.536956][T14077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.559059][T14077] usbhid 1-1:7.0: couldn't find an input interrupt endpoint [ 2104.714996][T21859] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2105.054359][T21859] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 2105.054388][T21859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.054405][T21859] usb 7-1: config 0 has no interfaces? [ 2105.054432][T21859] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2105.054453][T21859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.836950][T21859] usb 7-1: config 0 descriptor?? [ 2106.713100][T14077] usb 7-1: USB disconnect, device number 25 [ 2108.104242][T27004] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.7388'. [ 2108.745092][T21859] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2108.907770][T21859] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2108.907906][T21859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.909351][T21859] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2108.909377][T21859] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2108.909397][T21859] usb 7-1: Manufacturer: syz [ 2108.955435][T21859] usb 7-1: config 0 descriptor?? [ 2109.084986][T21859] rc_core: IR keymap rc-hauppauge not found [ 2109.085007][T21859] Registered IR keymap rc-empty [ 2109.086537][T21859] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2109.093091][T21859] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 2109.151046][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.151111][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2109.162246][T14077] usb 1-1: USB disconnect, device number 56 [ 2109.466538][T14077] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2111.984023][T14077] usb 1-1: Using ep0 maxpacket: 8 [ 2111.985203][T14077] usb 1-1: device descriptor read/all, error -71 [ 2112.297819][T24224] usb 7-1: USB disconnect, device number 26 [ 2112.394991][T21859] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2112.583564][T21859] usb 10-1: config 0 has no interfaces? [ 2112.583600][T21859] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2112.583623][T21859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.665077][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2112.699493][T21859] usb 10-1: config 0 descriptor?? [ 2112.815080][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 2112.817312][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.817363][ T9] usb 5-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2112.817389][ T9] usb 5-1: config 7 interface 0 has no altsetting 0 [ 2112.817421][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2112.817444][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.912460][T22116] usb 10-1: USB disconnect, device number 43 [ 2112.932469][ T9] usbhid 5-1:7.0: couldn't find an input interrupt endpoint [ 2115.351211][T21859] usb 5-1: USB disconnect, device number 37 [ 2116.225590][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 2116.600383][T27091] binder: 27087:27091 ioctl c0306201 200000000080 returned -14 [ 2116.687082][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2116.687134][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2116.689414][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2116.689440][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2116.689459][ T9] usb 7-1: Manufacturer: syz [ 2116.707827][ T9] usb 7-1: config 0 descriptor?? [ 2116.841284][T27085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2116.895108][ T9] rc_core: IR keymap rc-hauppauge not found [ 2116.895129][ T9] Registered IR keymap rc-empty [ 2116.896598][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 2116.899119][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input41 [ 2117.148662][T27111] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7422'. [ 2119.804989][T21859] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2119.954967][T21859] usb 10-1: Using ep0 maxpacket: 16 [ 2119.962844][T21859] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.962899][T21859] usb 10-1: config 7 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2119.962925][T21859] usb 10-1: config 7 interface 0 has no altsetting 0 [ 2119.962957][T21859] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2119.962980][T21859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.051316][T21859] usbhid 10-1:7.0: couldn't find an input interrupt endpoint [ 2121.028898][T14077] usb 7-1: USB disconnect, device number 27 [ 2123.249492][T22116] usb 10-1: USB disconnect, device number 44 [ 2123.276338][T27150] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7436'. [ 2124.265362][T22116] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2125.626854][T22116] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2125.626893][T22116] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2125.674986][T21347] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2125.708878][T22116] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2125.708896][T22116] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2125.708907][T22116] usb 10-1: Manufacturer: syz [ 2125.752084][T22116] usb 10-1: config 0 descriptor?? [ 2125.840783][T21347] usb 4-1: config 0 has no interfaces? [ 2125.840819][T21347] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2125.840842][T21347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.886685][T21347] usb 4-1: config 0 descriptor?? [ 2126.002114][T27186] input: syz0 as /devices/virtual/input/input43 [ 2126.188069][T22116] rc_core: IR keymap rc-hauppauge not found [ 2126.188090][T22116] Registered IR keymap rc-empty [ 2126.264249][ T5888] usb 4-1: USB disconnect, device number 37 [ 2126.421457][T22116] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2126.518790][T22116] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input42 [ 2128.025897][T27192] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7450'. [ 2132.255240][T20047] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2132.419460][T20047] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2132.419522][T20047] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.420169][T20047] usb 5-1: config 0 has no interfaces? [ 2132.421072][T20047] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2132.421173][T20047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.434767][T20047] usb 5-1: config 0 descriptor?? [ 2132.671026][ T5888] usb 5-1: USB disconnect, device number 38 [ 2133.588813][T22116] usb 10-1: USB disconnect, device number 45 [ 2133.677997][T27249] fuse: Bad value for 'fd' [ 2135.668000][ T37] audit: type=1326 audit(1766734165.287:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.668154][ T37] audit: type=1326 audit(1766734165.287:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.668662][ T37] audit: type=1326 audit(1766734165.287:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.669157][ T37] audit: type=1326 audit(1766734165.287:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.669307][ T37] audit: type=1326 audit(1766734165.287:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.672154][ T37] audit: type=1326 audit(1766734165.287:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85f785e1ff code=0x7ffc0000 [ 2135.672390][ T37] audit: type=1326 audit(1766734165.287:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.672538][ T37] audit: type=1326 audit(1766734165.287:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.673464][ T37] audit: type=1326 audit(1766734165.287:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2135.673762][ T37] audit: type=1326 audit(1766734165.287:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27262 comm="syz.3.7472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f785f749 code=0x7ffc0000 [ 2136.845571][T27287] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 2137.332889][T27299] binder: 27296:27299 ioctl c0306201 0 returned -14 [ 2139.375202][T22116] kernel read not supported for file /comedi4 (pid: 22116 comm: kworker/0:3) [ 2140.814957][T14077] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2140.968918][T14077] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2140.968936][T14077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.968946][T14077] usb 1-1: config 0 has no interfaces? [ 2140.968962][T14077] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2140.968974][T14077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.971778][T14077] usb 1-1: config 0 descriptor?? [ 2141.193654][T21859] usb 1-1: USB disconnect, device number 59 [ 2141.859190][T21859] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2142.004922][T21859] usb 5-1: Using ep0 maxpacket: 8 [ 2142.006812][T21859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2142.006926][T21859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2142.006980][T21859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2142.007000][T21859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2142.007026][T21859] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2142.007038][T21859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.091108][T21859] hub 5-1:1.0: bad descriptor, ignoring hub [ 2142.091129][T21859] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2142.091660][T21859] cdc_wdm 5-1:1.0: skipping garbage [ 2142.091669][T21859] cdc_wdm 5-1:1.0: skipping garbage [ 2142.136453][T21859] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2142.136535][T21859] cdc_wdm 5-1:1.0: Unknown control protocol [ 2142.527053][ T5888] usb 5-1: USB disconnect, device number 39 [ 2143.414349][T27393] 9pnet_virtio: no channels available for device syz [ 2143.464243][T27393] overlay: Bad value for 'verity' [ 2144.714962][ T5888] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2144.889064][ T5888] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2144.889094][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.889114][ T5888] usb 5-1: config 0 has no interfaces? [ 2144.889145][ T5888] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2144.889169][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.892286][ T5888] usb 5-1: config 0 descriptor?? [ 2145.120977][ T5888] usb 5-1: USB disconnect, device number 40 [ 2147.480684][T27440] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2147.551868][ T1301] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.730941][T14062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2147.769615][T14062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2147.795930][T14062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2147.809876][T14062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2147.825803][T14062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2148.213953][ T1301] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.683370][ T1301] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.934524][ T1301] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.945070][T14062] Bluetooth: hci0: command tx timeout [ 2151.295638][T27488] syz2: rxe_newlink: already configured on ipvlan0 [ 2152.024920][T14062] Bluetooth: hci0: command tx timeout [ 2153.513683][T27446] chnl_net:caif_netlink_parms(): no params data found [ 2154.134896][T14062] Bluetooth: hci0: command tx timeout [ 2157.005849][T14062] Bluetooth: hci0: command tx timeout [ 2159.135656][ T1301] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2159.232123][ T1301] bond0 (unregistering): Released all slaves [ 2159.471692][ T1301] tipc: Left network mode [ 2159.742164][T27537] netlink: 'syz.0.7560': attribute type 10 has an invalid length. [ 2160.180105][T27542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2160.180133][T27542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2160.182510][T27542] vhci_hcd vhci_hcd.0: Device attached [ 2160.494993][T22116] usb 40-1: SetAddress Request (10) to port 0 [ 2160.495087][T22116] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2160.559470][T27537] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2160.624756][T27538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2160.651279][T27539] bond_slave_0: entered promiscuous mode [ 2160.651331][T27539] bond_slave_1: entered promiscuous mode [ 2160.651439][T27539] syz_tun: entered promiscuous mode [ 2160.679221][T27539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2160.682998][T27539] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 2160.683021][T27539] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 2160.713500][T27539] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 2160.761622][T27543] vhci_hcd: connection reset by peer [ 2160.762028][T20190] vhci_hcd vhci_hcd.3: stop threads [ 2160.762041][T20190] vhci_hcd vhci_hcd.3: release socket [ 2160.762177][T20190] vhci_hcd vhci_hcd.3: disconnect device [ 2160.942899][T27446] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.954203][T27446] bridge0: port 1(bridge_slave_0) entered disabled state [ 2160.954455][T27446] bridge_slave_0: entered allmulticast mode [ 2160.962046][T27446] bridge_slave_0: entered promiscuous mode [ 2161.001994][T27446] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.002093][T27446] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.002233][T27446] bridge_slave_1: entered allmulticast mode [ 2161.003581][T27446] bridge_slave_1: entered promiscuous mode [ 2162.719425][T27562] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2164.416975][T27446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2164.464626][T27446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2164.831289][T27520] Set syz1 is full, maxelem 65536 reached [ 2164.954279][T27446] team0: Port device team_slave_0 added [ 2165.000002][T27446] team0: Port device team_slave_1 added [ 2165.544992][T22116] usb 40-1: device descriptor read/8, error -110 [ 2165.847955][ T1301] hsr_slave_0: left promiscuous mode [ 2165.885774][ T1301] hsr_slave_1: left promiscuous mode [ 2165.946663][T22116] usb usb40-port1: attempt power cycle [ 2166.148197][ T1301] veth1_macvtap: left promiscuous mode [ 2166.148300][ T1301] veth0_macvtap: left promiscuous mode [ 2166.148468][ T1301] veth1_vlan: left promiscuous mode [ 2166.148636][ T1301] veth0_vlan: left promiscuous mode [ 2166.198294][T27590] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2166.255851][T27594] 9p: Bad value for 'rfdno' [ 2166.457435][T27595] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2166.515271][T22116] usb usb40-port1: unable to enumerate USB device [ 2170.512284][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.512352][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2177.017933][T27446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2177.017949][T27446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.017964][T27446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.229034][T27446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.229052][T27446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.229078][T27446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2177.287705][T27634] syz2: rxe_newlink: already configured on ipvlan0 [ 2177.535340][T27446] hsr_slave_0: entered promiscuous mode [ 2177.536712][T27446] hsr_slave_1: entered promiscuous mode [ 2177.537335][T27446] debugfs: 'hsr0' already exists in 'hsr' [ 2177.537365][T27446] Cannot create hsr debugfs directory [ 2178.958712][T27669] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2179.918379][T27446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2179.969048][T27446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2180.127301][T27446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2180.174757][T27446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2180.232684][T27692] 9pnet_virtio: no channels available for device syz [ 2181.253768][T27446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2181.335461][T27446] 8021q: adding VLAN 0 to HW filter on device team0 [ 2181.358512][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.373271][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2181.400108][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.400316][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.343321][T27446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2186.958362][T27446] veth0_vlan: entered promiscuous mode [ 2186.980406][T27446] veth1_vlan: entered promiscuous mode [ 2187.022713][T27446] veth0_macvtap: entered promiscuous mode [ 2187.038077][T27446] veth1_macvtap: entered promiscuous mode [ 2187.064448][T27446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2187.085816][T14062] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 2187.089530][T27446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2187.117331][ T3673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.117379][ T3673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.117413][ T3673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.117447][ T3673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2187.124380][T27752] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20004 [ 2187.812796][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2187.812818][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2188.007262][T20190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2188.007284][T20190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2190.565770][T27808] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7651'. [ 2191.388676][T27821] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.7657'. [ 2192.609480][T27839] 9pnet_virtio: no channels available for device syz [ 2192.965585][T27850] 9p: Bad value for 'rfdno' [ 2198.037603][T27603] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 2198.165530][T27603] usb 5-1: device descriptor read/64, error -71 [ 2198.426921][T27603] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 2198.786877][T27603] usb 5-1: device descriptor read/64, error -71 [ 2198.895401][T27603] usb usb5-port1: attempt power cycle [ 2199.149499][T14062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2199.197902][T14062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2199.199541][T14062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2199.200816][T14062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2199.229381][T14062] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2199.276911][T27603] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 2199.484953][T27603] usb 5-1: device not accepting address 43, error -71 [ 2199.803072][T27730] Set syz1 is full, maxelem 65536 reached [ 2201.277231][T27730] bond0: (slave syz_tun): Releasing backup interface [ 2201.304953][T14062] Bluetooth: hci4: command tx timeout [ 2202.001694][ T1301] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2203.655031][T14062] Bluetooth: hci4: command tx timeout [ 2205.715140][T14062] Bluetooth: hci4: command tx timeout [ 2205.840541][T20046] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 2205.900263][ T1301] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.984850][T20046] usb 8-1: device descriptor read/64, error -71 [ 2206.107267][ T1301] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.243303][T20046] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 2206.339913][T27888] chnl_net:caif_netlink_parms(): no params data found [ 2206.395007][T20046] usb 8-1: device descriptor read/64, error -71 [ 2206.505696][T20046] usb usb8-port1: attempt power cycle [ 2206.546903][ T1301] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.846833][T20046] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 2206.866064][T20046] usb 8-1: device descriptor read/8, error -71 [ 2207.106176][T20046] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 2207.325089][T20046] usb 8-1: device not accepting address 14, error -71 [ 2207.325383][T20046] usb usb8-port1: unable to enumerate USB device [ 2207.338122][T27888] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.338315][T27888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.338556][T27888] bridge_slave_0: entered allmulticast mode [ 2207.349882][T27888] bridge_slave_0: entered promiscuous mode [ 2207.537255][T27888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.537790][T27888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.537987][T27888] bridge_slave_1: entered allmulticast mode [ 2207.540563][T27888] bridge_slave_1: entered promiscuous mode [ 2207.777885][T27888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2207.785146][T14062] Bluetooth: hci4: command tx timeout [ 2207.803103][T27888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2208.167275][T27888] team0: Port device team_slave_0 added [ 2208.194021][T27888] team0: Port device team_slave_1 added [ 2208.550475][ T1301] bridge_slave_1: left allmulticast mode [ 2208.550502][ T1301] bridge_slave_1: left promiscuous mode [ 2208.550735][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.194813][ T1301] bridge_slave_0: left allmulticast mode [ 2212.194843][ T1301] bridge_slave_0: left promiscuous mode [ 2212.195188][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.515584][ T1301] bond_slave_0: left promiscuous mode [ 2212.515713][ T1301] bond_slave_1: left promiscuous mode [ 2214.856019][ T1301] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 2214.858050][ T1301] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 2214.976001][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2215.025462][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2215.057382][ T1301] bond0 (unregistering): Released all slaves [ 2215.929482][ T1301] bond1 (unregistering): Released all slaves [ 2216.178629][T28017] tmpfs: Unsupported parameter 'huge' [ 2216.295572][T27888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2216.295583][T27888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2216.295598][T27888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2216.296043][ T1301] tipc: Left network mode [ 2216.426323][T27888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2216.426340][T27888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2216.426367][T27888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2217.193347][T27888] hsr_slave_0: entered promiscuous mode [ 2217.194084][T27888] hsr_slave_1: entered promiscuous mode [ 2217.194584][T27888] debugfs: 'hsr0' already exists in 'hsr' [ 2217.194599][T27888] Cannot create hsr debugfs directory [ 2217.469313][T14062] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 2218.910129][T14077] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 2219.064953][T14077] usb 8-1: device descriptor read/64, error -71 [ 2219.674911][T14077] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 2219.822617][T14077] usb 8-1: device descriptor read/64, error -71 [ 2219.935226][T14077] usb usb8-port1: attempt power cycle [ 2219.991126][ T1301] hsr_slave_0: left promiscuous mode [ 2220.025621][ T1301] hsr_slave_1: left promiscuous mode [ 2220.065041][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2220.065060][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2220.106104][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2220.106122][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2220.294931][T14077] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 2220.318974][T14077] usb 8-1: device descriptor read/8, error -71 [ 2220.357380][ T1301] veth1_macvtap: left promiscuous mode [ 2220.357442][ T1301] veth0_macvtap: left promiscuous mode [ 2220.357576][ T1301] veth1_vlan: left promiscuous mode [ 2220.357666][ T1301] veth0_vlan: left promiscuous mode [ 2220.554897][T14077] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 2220.575539][T14077] usb 8-1: device descriptor read/8, error -71 [ 2220.685173][T14077] usb usb8-port1: unable to enumerate USB device [ 2224.015643][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 2224.265482][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 2227.702400][T28124] [U] ÿ [ 2230.400251][T28141] 9pnet_virtio: no channels available for device syz [ 2230.981024][T28145] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 2230.981050][T28145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2230.981865][T28145] vhci_hcd vhci_hcd.0: Device attached [ 2231.255083][T20026] usb 48-1: SetAddress Request (2) to port 0 [ 2231.255164][T20026] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2231.285905][T28151] fuse: Unknown parameter 'grou00000000000000000000' [ 2232.116742][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2232.116811][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.302121][T28146] vhci_hcd: connection reset by peer [ 2232.356932][ T1457] vhci_hcd vhci_hcd.7: stop threads [ 2232.356955][ T1457] vhci_hcd vhci_hcd.7: release socket [ 2232.357019][ T1457] vhci_hcd vhci_hcd.7: disconnect device [ 2233.539214][T28145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2233.545540][T28145] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2233.701988][T28145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2233.702086][T28145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2233.927974][T28145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2233.928120][T28145] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2234.168407][T28145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2234.180024][T28145] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2234.304015][T28145] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2234.354974][T14062] Bluetooth: hci3: command 0x0406 tx timeout [ 2234.650619][T28145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2234.650717][T28145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2234.809138][T28145] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2235.348203][T27888] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2235.704867][T14062] Bluetooth: hci2: command 0x0406 tx timeout [ 2235.705772][T27888] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2235.945245][T14062] Bluetooth: hci1: command 0x0406 tx timeout [ 2235.945250][T22116] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 2236.000143][T27888] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2236.075210][T22116] usb 8-1: device descriptor read/64, error -71 [ 2236.184973][T14062] Bluetooth: hci0: command 0x0c1a tx timeout [ 2236.345927][T20026] usb 48-1: device descriptor read/8, error -110 [ 2236.424926][T14062] Bluetooth: hci3: command 0x0406 tx timeout [ 2236.426363][T22116] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 2236.640028][T27888] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2236.654877][T22116] usb 8-1: device descriptor read/64, error -71 [ 2236.665173][T14062] Bluetooth: hci4: command 0x0c1a tx timeout [ 2236.736612][T20026] usb usb48-port1: attempt power cycle [ 2236.765468][T22116] usb usb8-port1: attempt power cycle [ 2237.131051][T28187] 9pnet_virtio: no channels available for device syz [ 2237.514905][T22116] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 2237.542163][T22116] usb 8-1: device descriptor read/8, error -71 [ 2237.630468][T27888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.729313][T27888] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.779085][T20026] usb usb48-port1: unable to enumerate USB device [ 2237.779724][T28190] fuse: Unknown parameter 'grou00000000000000000000' [ 2237.785240][T14062] Bluetooth: hci2: command 0x0406 tx timeout [ 2237.786013][T22116] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 2237.805562][T22116] usb 8-1: device descriptor read/8, error -71 [ 2237.915930][T22116] usb usb8-port1: unable to enumerate USB device [ 2238.029344][T14062] Bluetooth: hci1: command 0x0406 tx timeout [ 2238.267637][T14062] Bluetooth: hci0: command 0x0c1a tx timeout [ 2238.754913][T14062] Bluetooth: hci4: command 0x0c1a tx timeout [ 2240.345666][T14062] Bluetooth: hci0: command 0x0c1a tx timeout [ 2240.984715][T14062] Bluetooth: hci4: command 0x0c1a tx timeout [ 2243.674875][T22116] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2244.227172][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 2244.227380][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2244.270342][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 2244.272256][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2244.314727][T28228] fuse: Unknown parameter 'grou00000000000000000000' [ 2245.327399][T27888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2245.553299][T27888] veth0_vlan: entered promiscuous mode [ 2245.616313][T27888] veth1_vlan: entered promiscuous mode [ 2245.760832][T27888] veth0_macvtap: entered promiscuous mode [ 2245.799703][T27888] veth1_macvtap: entered promiscuous mode [ 2246.831345][T27888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2246.866374][T27888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2246.900481][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.902033][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.904159][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.940055][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.689502][T22337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.689522][T22337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2247.846587][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.846608][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2249.377377][T28290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7815'. [ 2249.377444][T28290] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7815'. [ 2253.511161][T28341] overlayfs: failed to clone upperpath [ 2253.602451][T28343] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2253.602479][T28343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2253.638177][T28343] vhci_hcd vhci_hcd.0: Device attached [ 2253.904914][T27882] usb 40-1: SetAddress Request (14) to port 0 [ 2253.944114][T27882] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 2254.758220][T28345] vhci_hcd: connection reset by peer [ 2254.762717][ T1457] vhci_hcd vhci_hcd.3: stop threads [ 2254.762741][ T1457] vhci_hcd vhci_hcd.3: release socket [ 2254.762984][ T1457] vhci_hcd vhci_hcd.3: disconnect device [ 2255.514489][T28375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7845'. [ 2255.514513][T28375] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7845'. [ 2257.195038][T21859] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 2257.282422][T28398] 9pnet_virtio: no channels available for device syz [ 2257.751040][T21859] usb 4-1: device descriptor read/64, error -71 [ 2258.115524][T21859] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 2258.246652][T21859] usb 4-1: device descriptor read/64, error -71 [ 2258.362660][T21859] usb usb4-port1: attempt power cycle [ 2258.699457][T21859] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 2258.727038][T21859] usb 4-1: device descriptor read/8, error -71 [ 2258.991084][T27882] usb 40-1: device descriptor read/8, error -110 [ 2259.054893][T21859] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 2259.075610][T21859] usb 4-1: device descriptor read/8, error -71 [ 2259.185412][T21859] usb usb4-port1: unable to enumerate USB device [ 2259.279313][T28427] netlink: 'syz.4.7863': attribute type 1 has an invalid length. [ 2259.279540][T28427] netlink: 280 bytes leftover after parsing attributes in process `syz.4.7863'. [ 2259.281789][T28427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7863'. [ 2259.376492][T27882] usb usb40-port1: attempt power cycle [ 2259.382327][T28436] 9pnet_virtio: no channels available for device syz [ 2259.956497][T27882] usb usb40-port1: unable to enumerate USB device [ 2260.005626][T14062] Bluetooth: hci0: unexpected event for opcode 0x001b [ 2261.698422][T14062] Bluetooth: hci0: unexpected event for opcode 0x001b [ 2264.900976][T28509] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2265.947027][T28513] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 2265.947043][T28513] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 28513, name: syz.1.7896 [ 2265.947053][T28513] preempt_count: 2, expected: 0 [ 2265.947058][T28513] RCU nest depth: 1, expected: 1 [ 2265.947068][T28513] 3 locks held by syz.1.7896/28513: [ 2265.947075][T28513] #0: ffff888070bdb918 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 2265.947190][T28513] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 2265.947221][T28513] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 2265.947251][T28513] Preemption disabled at: [ 2265.947254][T28513] [] count_memcg_events+0x68/0x240 [ 2265.947281][T28513] CPU: 0 UID: 0 PID: 28513 Comm: syz.1.7896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2265.947296][T28513] Tainted: [L]=SOFTLOCKUP [ 2265.947300][T28513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2265.947308][T28513] Call Trace: [ 2265.947314][T28513] [ 2265.947320][T28513] dump_stack_lvl+0xe8/0x150 [ 2265.947348][T28513] __might_resched+0x32a/0x480 [ 2265.947390][T28513] ? count_memcg_events+0x68/0x240 [ 2265.947417][T28513] rt_spin_lock+0xc7/0x3e0 [ 2265.947482][T28513] ? __pfx_rt_spin_lock+0x10/0x10 [ 2265.947495][T28513] ? __lock_acquire+0x6b6/0x2cf0 [ 2265.947516][T28513] ? __lock_acquire+0x6b6/0x2cf0 [ 2265.947531][T28513] ___slab_alloc+0x12f/0x13e0 [ 2265.947545][T28513] ? unwind_next_frame+0xa5/0x23d0 [ 2265.947568][T28513] ? lock_acquire+0x107/0x340 [ 2265.947580][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2265.947600][T28513] __slab_alloc+0xc6/0x1f0 [ 2265.947611][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2265.947623][T28513] kmalloc_nolock_noprof+0x1be/0x440 [ 2265.947637][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2265.947649][T28513] __bpf_stream_push_str+0xa8/0x2b0 [ 2265.947658][T28513] ? __asan_memcpy+0x40/0x70 [ 2265.947672][T28513] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 2265.947687][T28513] bpf_stream_stage_printk+0x14e/0x1c0 [ 2265.947697][T28513] ? __pfx_find_from_stack_cb+0x10/0x10 [ 2265.947710][T28513] ? arch_bpf_stack_walk+0x112/0x170 [ 2265.947726][T28513] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 2265.947744][T28513] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 2265.947755][T28513] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 2265.947765][T28513] ? irqentry_exit+0x5dd/0x660 [ 2265.947775][T28513] ? trace_irq_disable+0x37/0x100 [ 2265.947788][T28513] ? read_tsc+0x9/0x20 [ 2265.947807][T28513] bpf_check_timed_may_goto+0xaa/0xb0 [ 2265.947824][T28513] arch_bpf_timed_may_goto+0x21/0x40 [ 2265.947836][T28513] bpf_prog_262a74d054ad2993+0x53/0x5f [ 2265.947854][T28513] bpf_trace_run9+0x2de/0x510 [ 2265.947867][T28513] ? bpf_trace_run9+0x1ec/0x510 [ 2265.947879][T28513] ? __pfx_bpf_trace_run9+0x10/0x10 [ 2265.947889][T28513] ? _copy_from_iter+0x215/0x1630 [ 2265.947963][T28513] ? __pfx__copy_from_iter+0x10/0x10 [ 2265.947981][T28513] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 2265.948021][T28513] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 2265.948042][T28513] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 2265.948128][T28513] virtio_transport_alloc_skb+0x10af/0x1110 [ 2265.948152][T28513] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 2265.948167][T28513] ? __local_bh_enable_ip+0x1af/0x2c0 [ 2265.948181][T28513] ? lockdep_hardirqs_on+0x7b/0x110 [ 2265.948194][T28513] virtio_transport_send_pkt_info+0x694/0x10b0 [ 2265.948210][T28513] ? virtio_transport_send_pkt_info+0x1ea/0x10b0 [ 2265.948229][T28513] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 2265.948244][T28513] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 2265.948256][T28513] ? reacquire_held_locks+0x104/0x190 [ 2265.948273][T28513] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 2265.948288][T28513] ? rt_spin_unlock+0x150/0x200 [ 2265.948304][T28513] ? rt_spin_unlock+0x161/0x200 [ 2265.948318][T28513] vsock_connectible_sendmsg+0xabf/0x1040 [ 2265.948359][T28513] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2265.948392][T28513] ? __pfx_woken_wake_function+0x10/0x10 [ 2265.948418][T28513] ? lockdep_hardirqs_on+0x7b/0x110 [ 2265.948438][T28513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2265.948453][T28513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2265.948467][T28513] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2265.948483][T28513] __sock_sendmsg+0x21c/0x270 [ 2265.948548][T28513] ____sys_sendmsg+0x534/0x810 [ 2265.948585][T28513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2265.948605][T28513] ? import_iovec+0x74/0xa0 [ 2265.948617][T28513] ___sys_sendmsg+0x21f/0x2a0 [ 2265.948631][T28513] ? __pfx____sys_sendmsg+0x10/0x10 [ 2265.948647][T28513] ? __pfx_futex_wake_mark+0x10/0x10 [ 2265.948682][T28513] ? __fget_files+0x2a/0x420 [ 2265.948694][T28513] ? __fget_files+0x3a6/0x420 [ 2265.948709][T28513] __sys_sendmmsg+0x22d/0x430 [ 2265.948726][T28513] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2265.948737][T28513] ? do_futex+0x333/0x420 [ 2265.948764][T28513] ? __fget_files+0x2a/0x420 [ 2265.948774][T28513] ? __pfx___se_sys_futex+0x10/0x10 [ 2265.948787][T28513] ? __fget_files+0x2a/0x420 [ 2265.948802][T28513] __x64_sys_sendmmsg+0xa0/0xc0 [ 2265.948816][T28513] do_syscall_64+0xec/0xf80 [ 2265.948827][T28513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.948838][T28513] ? trace_irq_disable+0x37/0x100 [ 2265.948853][T28513] ? clear_bhb_loop+0x60/0xb0 [ 2265.948866][T28513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.948877][T28513] RIP: 0033:0x7fa834f7f749 [ 2265.948888][T28513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2265.948897][T28513] RSP: 002b:00007fa8331de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2265.948908][T28513] RAX: ffffffffffffffda RBX: 00007fa8351d5fa0 RCX: 00007fa834f7f749 [ 2265.948916][T28513] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 2265.948923][T28513] RBP: 00007fa835003f91 R08: 0000000000000000 R09: 0000000000000000 [ 2265.948930][T28513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2265.948937][T28513] R13: 00007fa8351d6038 R14: 00007fa8351d5fa0 R15: 00007ffc5e1c1a58 [ 2265.948955][T28513] [ 2267.211075][T28513] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 2267.211091][T28513] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 28513, name: syz.1.7896 [ 2267.211101][T28513] preempt_count: 2, expected: 0 [ 2267.211106][T28513] RCU nest depth: 1, expected: 1 [ 2267.211112][T28513] 3 locks held by syz.1.7896/28513: [ 2267.211119][T28513] #0: ffff888070bdb918 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 2267.211159][T28513] #1: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x510 [ 2267.211185][T28513] #2: ffff8880b883fe88 (&s->lock_key#14){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13e0 [ 2267.211214][T28513] Preemption disabled at: [ 2267.211217][T28513] [] count_memcg_events+0x68/0x240 [ 2267.211237][T28513] CPU: 0 UID: 0 PID: 28513 Comm: syz.1.7896 Tainted: G W L syzkaller #0 PREEMPT_{RT,(full)} [ 2267.211253][T28513] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2267.211257][T28513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2267.211264][T28513] Call Trace: [ 2267.211269][T28513] [ 2267.211275][T28513] dump_stack_lvl+0xe8/0x150 [ 2267.211291][T28513] __might_resched+0x32a/0x480 [ 2267.211304][T28513] ? count_memcg_events+0x68/0x240 [ 2267.211318][T28513] rt_spin_lock+0xc7/0x3e0 [ 2267.211334][T28513] ? __pfx_rt_spin_lock+0x10/0x10 [ 2267.211347][T28513] ? __lock_acquire+0x6b6/0x2cf0 [ 2267.211362][T28513] ? __lock_acquire+0x6b6/0x2cf0 [ 2267.211377][T28513] ___slab_alloc+0x12f/0x13e0 [ 2267.211390][T28513] ? unwind_next_frame+0xa5/0x23d0 [ 2267.211403][T28513] ? lock_acquire+0x107/0x340 [ 2267.211415][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2267.211428][T28513] __slab_alloc+0xc6/0x1f0 [ 2267.211444][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2267.211456][T28513] kmalloc_nolock_noprof+0x1be/0x440 [ 2267.211473][T28513] ? __bpf_stream_push_str+0xa8/0x2b0 [ 2267.211495][T28513] __bpf_stream_push_str+0xa8/0x2b0 [ 2267.211512][T28513] ? __asan_memcpy+0x40/0x70 [ 2267.211539][T28513] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 2267.211569][T28513] bpf_stream_stage_printk+0x14e/0x1c0 [ 2267.211588][T28513] ? __pfx_find_from_stack_cb+0x10/0x10 [ 2267.211604][T28513] ? arch_bpf_stack_walk+0x112/0x170 [ 2267.211622][T28513] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 2267.211641][T28513] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 2267.211653][T28513] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 2267.211663][T28513] ? irqentry_exit+0x5dd/0x660 [ 2267.211673][T28513] ? trace_irq_disable+0x37/0x100 [ 2267.211686][T28513] ? read_tsc+0x9/0x20 [ 2267.211698][T28513] bpf_check_timed_may_goto+0xaa/0xb0 [ 2267.211715][T28513] arch_bpf_timed_may_goto+0x21/0x40 [ 2267.211728][T28513] bpf_prog_262a74d054ad2993+0x53/0x5f [ 2267.211740][T28513] bpf_trace_run9+0x2de/0x510 [ 2267.211753][T28513] ? bpf_trace_run9+0x1ec/0x510 [ 2267.211764][T28513] ? __pfx_bpf_trace_run9+0x10/0x10 [ 2267.211774][T28513] ? _copy_from_iter+0x215/0x1630 [ 2267.211795][T28513] ? __pfx__copy_from_iter+0x10/0x10 [ 2267.211813][T28513] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 2267.211831][T28513] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 2267.211851][T28513] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 2267.211876][T28513] virtio_transport_alloc_skb+0x10af/0x1110 [ 2267.211898][T28513] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 2267.211914][T28513] ? vsock_loopback_send_pkt+0x40/0x120 [ 2267.211930][T28513] virtio_transport_send_pkt_info+0x694/0x10b0 [ 2267.211951][T28513] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 2267.211965][T28513] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 2267.211977][T28513] ? reacquire_held_locks+0x104/0x190 [ 2267.211993][T28513] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 2267.212008][T28513] ? rt_spin_unlock+0x150/0x200 [ 2267.212024][T28513] ? rt_spin_unlock+0x161/0x200 [ 2267.212038][T28513] vsock_connectible_sendmsg+0xabf/0x1040 [ 2267.212063][T28513] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2267.212080][T28513] ? __pfx_woken_wake_function+0x10/0x10 [ 2267.212094][T28513] ? lockdep_hardirqs_on+0x7b/0x110 [ 2267.212104][T28513] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2267.212116][T28513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2267.212129][T28513] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 2267.212145][T28513] __sock_sendmsg+0x21c/0x270 [ 2267.212163][T28513] ____sys_sendmsg+0x534/0x810 [ 2267.212179][T28513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2267.212196][T28513] ? import_iovec+0x74/0xa0 [ 2267.212208][T28513] ___sys_sendmsg+0x21f/0x2a0 [ 2267.212222][T28513] ? __pfx____sys_sendmsg+0x10/0x10 [ 2267.212238][T28513] ? __pfx_futex_wake_mark+0x10/0x10 [ 2267.212262][T28513] ? __fget_files+0x2a/0x420 [ 2267.212272][T28513] ? __fget_files+0x3a6/0x420 [ 2267.212288][T28513] __sys_sendmmsg+0x22d/0x430 [ 2267.212304][T28513] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2267.212315][T28513] ? do_futex+0x333/0x420 [ 2267.212341][T28513] ? __fget_files+0x2a/0x420 [ 2267.212352][T28513] ? __pfx___se_sys_futex+0x10/0x10 [ 2267.212365][T28513] ? __fget_files+0x2a/0x420 [ 2267.212381][T28513] __x64_sys_sendmmsg+0xa0/0xc0 [ 2267.212394][T28513] do_syscall_64+0xec/0xf80 [ 2267.212405][T28513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2267.212415][T28513] ? trace_irq_disable+0x37/0x100 [ 2267.212426][T28513] ? clear_bhb_loop+0x60/0xb0 [ 2267.212446][T28513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2267.212457][T28513] RIP: 0033:0x7fa834f7f749 [ 2267.212468][T28513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2267.212477][T28513] RSP: 002b:00007fa8331de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2267.212489][T28513] RAX: ffffffffffffffda RBX: 00007fa8351d5fa0 RCX: 00007fa834f7f749 [ 2267.212498][T28513] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000003 [ 2267.212505][T28513] RBP: 00007fa835003f91 R08: 0000000000000000 R09: 0000000000000000 [ 2267.212512][T28513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2267.212519][T28513] R13: 00007fa8351d6038 R14: 00007fa8351d5fa0 R15: 00007ffc5e1c1a58 [ 2267.212536][T28513] [ 2268.286525][T28519] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2268.286542][T28519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2268.287665][T28519] vhci_hcd vhci_hcd.0: Device attached [ 2268.505005][T28520] vhci_hcd: connection closed [ 2268.505375][ T3862] vhci_hcd vhci_hcd.4: stop threads [ 2268.505391][ T3862] vhci_hcd vhci_hcd.4: release socket [ 2268.505538][ T3862] vhci_hcd vhci_hcd.4: disconnect device [ 2268.554942][ T9] usb 42-1: enqueue for inactive port 0 [ 2269.055826][ T9] usb usb42-port1: attempt power cycle [ 2269.632017][ T9] usb usb42-port1: unable to enumerate USB device