last executing test programs: 38m11.091888244s ago: executing program 1 (id=724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000019100)=""/102356, 0x18fd4, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 38m7.660826674s ago: executing program 1 (id=729): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) shutdown(r4, 0x2) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 38m3.848223498s ago: executing program 1 (id=736): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020}, 0x2020) dup3(r1, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0xf, 0x3}, 'port0\x00', 0x82, 0x80001, 0x9, 0x8001, 0x8e, 0x7a7, 0x67, 0x0, 0x0, 0x74}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfede, 0x202, 0x100, 0x2, 0xfffffa75, 0x200, 0x6}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r5, 0x3516, 0x0, 0x4, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000240)=0x5, 0x0, 0x4) fsopen(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000001, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 38m2.105012447s ago: executing program 1 (id=737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) dup2(r5, r3) 37m57.677326697s ago: executing program 1 (id=742): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, 0x0, 0x0) 37m56.993560592s ago: executing program 1 (id=745): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x6f4001) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0xa, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 37m55.510197813s ago: executing program 32 (id=745): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x6f4001) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0xa, &(0x7f0000000000)=""/92, &(0x7f0000000080)=0x5c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0xa) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 3m5.441590197s ago: executing program 0 (id=5032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x44080) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {0x77359400}, {0x2, 0x2, 0x4, 0xbf, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) 3m2.319884398s ago: executing program 0 (id=5039): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 3m0.086419317s ago: executing program 0 (id=5041): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, 0x0, 0x0) 2m56.434028618s ago: executing program 0 (id=5046): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 2m55.910843693s ago: executing program 0 (id=5047): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 2m52.795412269s ago: executing program 0 (id=5051): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m37.33744208s ago: executing program 33 (id=5051): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m24.098021004s ago: executing program 4 (id=5088): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 2m20.212953662s ago: executing program 4 (id=5091): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) 2m13.650737956s ago: executing program 4 (id=5096): fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) 2m4.879006201s ago: executing program 4 (id=5107): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0) listen(0xffffffffffffffff, 0x3) close(0x3) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) unshare(0x2a020400) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) listen(r0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x20, 0xa, 0x61, {0x61, 0x0, "30ff497111be53b0359215cdced32a6f08e2e48386f1262df991b7624664081644d69cfea9ca5997c51b1db98b646e204c525058f04e069f5c86e9135e26c8d95910eb842b44bfe8ae545ad70d272a18ddc784665d077650b5f67a9f4c74d3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, &(0x7f0000000040)={0x0, 0x22, 0xe, {[@global=@item_4={0x3, 0x1, 0x6, "65a72cee"}, @local=@item_012={0x0, 0x2, 0xf}, @global=@item_4={0x3, 0x1, 0x9, "7aa54010"}, @global=@item_012={0x2, 0x1, 0x4, "7fd7"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x35e}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x9a, "25d12dbe7647068efea669791e4bee08cfb3a173b4fda10cad5ca30245fbc03779abac7342b5d884fab473f70ccf9809aeed08264b3f8f1c304680667e1fcef4a397f1d7671683dca7b540ed335bb2ecfed66095cbbe74935e07fea462f77a7a07164b1acef7224f051ed52af9b0a29ed45f7d3b58d9975ea043c9628c946081f74c674c7b0f006750f195fda99e4fdfb58526909a0a3498eb9d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x1, 0x9, "75b9b565d6845dbc4f"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x1}}) 2m1.474036925s ago: executing program 2 (id=5111): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1m59.321054661s ago: executing program 4 (id=5115): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 1m57.843284325s ago: executing program 2 (id=5116): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) 1m55.26343353s ago: executing program 4 (id=5119): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m52.286980446s ago: executing program 2 (id=5121): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_pts(r5, 0x141601) ioctl$TCFLSH(r5, 0x540b, 0x2) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 1m49.422853298s ago: executing program 2 (id=5125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) 1m48.918102185s ago: executing program 2 (id=5126): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 1m43.846198405s ago: executing program 2 (id=5131): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m40.068425741s ago: executing program 34 (id=5119): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m28.525507025s ago: executing program 35 (id=5131): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m16.510074288s ago: executing program 3 (id=5155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x44080) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {0x77359400}, {0x2, 0x2, 0x4, 0xbf, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) 1m11.778444912s ago: executing program 3 (id=5158): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x0, 0x0}) 1m7.269803223s ago: executing program 3 (id=5161): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) 1m2.077202295s ago: executing program 3 (id=5168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x44080) syz_usb_connect(0x0, 0x42, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd0, 0xae, 0xd1, 0x8, 0x2013, 0x246, 0xe656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0xd, 0xa1, 0xb6}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) 1m0.203445415s ago: executing program 5 (id=5169): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 56.812238627s ago: executing program 3 (id=5172): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 54.739832649s ago: executing program 5 (id=5175): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x0, 0x0}) 52.75213104s ago: executing program 3 (id=5178): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 49.353880285s ago: executing program 5 (id=5181): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x0, 0x0}) 45.362275415s ago: executing program 5 (id=5185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 40.977731464s ago: executing program 5 (id=5191): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x999, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) fchmod(r4, 0x32) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0xdc6, 0xdb}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0xcc}], 0x1, 0x40000123, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xf, 0xc6a6}, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$tipc2(0x0, r7) r8 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000600)={0x0, "b51fe14403d0ed988aaa9c46b240ea032215ba3f9bf4955618a7e719b386947467d30fb01ae9d6e5430270efc696384db7607b14f0e7d9c0bf8f61053b2d587f", 0x28}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "ed58a3eb3ff434485f500aa092b1876fa4063caeeda42e6a41315b6e0cdb27e8da86392e83b99982235ccbbd1a1a9c862ce424bb8fb0e1d2ede1ab3e2da4b435", 0x24}, 0x48, r8) 37.345027505s ago: executing program 36 (id=5178): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 36.860629646s ago: executing program 5 (id=5196): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 25.393786525s ago: executing program 8 (id=5204): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_pts(r6, 0x141601) ioctl$TCFLSH(r6, 0x540b, 0x2) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 23.331493179s ago: executing program 8 (id=5207): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x0, 0x0}) 21.557040417s ago: executing program 37 (id=5196): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 21.415974402s ago: executing program 7 (id=5209): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, 0x0, 0x0) 20.366751168s ago: executing program 6 (id=5210): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) lseek(r0, 0x1000000, 0x0) 19.440675916s ago: executing program 8 (id=5211): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 16.278545618s ago: executing program 8 (id=5212): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000019100)=""/102356, 0x18fd4, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 16.226100748s ago: executing program 6 (id=5213): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) lseek(r0, 0x1000000, 0x0) 14.695759368s ago: executing program 7 (id=5214): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 14.556526916s ago: executing program 9 (id=5194): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fcc8fc00004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_pts(r6, 0x141601) ioctl$TCFLSH(r6, 0x540b, 0x2) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x86001, 0x0) 11.851886159s ago: executing program 6 (id=5215): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) lseek(r0, 0x1000000, 0x0) 11.442148864s ago: executing program 9 (id=5216): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r4, 0x5501) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r7, 0x0, 0x0}) 11.182134843s ago: executing program 7 (id=5217): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 10.313757604s ago: executing program 7 (id=5218): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x1000000, 0x0) 10.164747313s ago: executing program 8 (id=5219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000019100)=""/102356, 0x18fd4, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000000600)=""/4099, 0x1003, 0x0) 8.725925706s ago: executing program 9 (id=5220): syz_open_procfs(0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 7.505082414s ago: executing program 9 (id=5221): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r3, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r5}) 6.700941311s ago: executing program 6 (id=5222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 5.90417936s ago: executing program 7 (id=5223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.31603792s ago: executing program 9 (id=5224): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r2 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.643129533s ago: executing program 8 (id=5225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_io_uring_setup(0xf04, &(0x7f00000002c0)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000, 0x0, r3}, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x200) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r4 = getpid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) 2.112212537s ago: executing program 7 (id=5226): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x80000000, 0xc, 0x2, 0x5e51, 0x9, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc010203010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.071799099s ago: executing program 6 (id=5227): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 207.128818ms ago: executing program 9 (id=5228): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 0s ago: executing program 6 (id=5229): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): T5931] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2522.006748][T30014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'. [ 2522.195954][ T5931] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 2522.595477][ T5931] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2522.623623][T12650] usb 5-1: USB disconnect, device number 12 [ 2522.635343][T12650] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2522.773510][ T5931] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 2522.801426][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2522.951464][T30038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2523.031500][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2523.067378][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2523.081464][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2523.099662][ T5931] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2523.126335][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.154648][ T5931] usb 3-1: config 0 descriptor?? [ 2523.160824][T30024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2523.271198][T12650] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2523.491063][T12650] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2523.511344][T12650] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2523.535407][T12650] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2523.554870][T12650] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2523.565681][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.575639][T12650] usb 4-1: Product: syz [ 2523.580064][T12650] usb 4-1: Manufacturer: syz [ 2523.595702][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 2523.602539][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2523.610363][T12650] usb 4-1: SerialNumber: syz [ 2523.652071][ T5931] usb 3-1: USB disconnect, device number 22 [ 2523.704868][T12650] hub 4-1:1.0: bad descriptor, ignoring hub [ 2523.710837][T12650] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2523.962255][T12650] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2524.861445][T30035] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 2524.929264][T30066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2524.938671][T30066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2525.451123][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2525.601452][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 2525.612188][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2525.627247][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2525.636179][ T10] usb 3-1: Product: syz [ 2525.640642][ T10] usb 3-1: Manufacturer: syz [ 2525.646123][ T10] usb 3-1: SerialNumber: syz [ 2525.659416][ T10] usb 3-1: config 0 descriptor?? [ 2525.879408][ T10] usb 3-1: USB disconnect, device number 23 [ 2526.388926][T30084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'. [ 2526.463842][ T5931] usb 4-1: USB disconnect, device number 44 [ 2526.496273][ T5931] usblp0: removed [ 2526.883697][T30096] syz.0.4689: attempt to access beyond end of device [ 2526.883697][T30096] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2527.038446][T30099] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4690'. [ 2529.026990][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.035591][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.740225][T30154] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2531.126039][T30158] usb usb8: usbfs: process 30158 (syz.2.4707) did not claim interface 0 before use [ 2531.919587][T30168] ip6gre2: entered allmulticast mode [ 2533.042506][T30183] nvme_fabrics: missing parameter 'transport=%s' [ 2533.050593][T30183] nvme_fabrics: missing parameter 'nqn=%s' [ 2534.627933][T30216] netlink: 'syz.3.4722': attribute type 10 has an invalid length. [ 2534.783252][T30216] netlink: 'syz.3.4722': attribute type 10 has an invalid length. [ 2534.791554][T30216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4722'. [ 2539.411825][ T5931] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2539.595829][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 2539.657100][ T5931] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 2539.731031][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2539.756993][ T5931] usb 3-1: Product: syz [ 2539.778456][ T5931] usb 3-1: SerialNumber: syz [ 2539.866228][ T5931] usb 3-1: config 0 descriptor?? [ 2539.905600][ T5931] gspca_main: spca501-2.14.0 probing 0000:0000 [ 2540.296240][ T30] audit: type=1326 audit(1753673842.293:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.431725][ T5931] gspca_spca501: reg write: error -110 [ 2540.438399][ T5931] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 2540.447023][ T30] audit: type=1326 audit(1753673842.293:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.465261][ T5931] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 2540.614044][ T30] audit: type=1326 audit(1753673842.333:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.654584][ T30] audit: type=1326 audit(1753673842.333:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.685014][ T30] audit: type=1326 audit(1753673842.333:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.728989][ T30] audit: type=1326 audit(1753673842.333:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.768100][ T30] audit: type=1326 audit(1753673842.333:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.805939][ T30] audit: type=1326 audit(1753673842.333:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2a01f8e9a9 code=0x7ffc0000 [ 2540.844000][ T30] audit: type=1326 audit(1753673842.333:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a01f2ab89 code=0x7ffc0000 [ 2540.940776][ T30] audit: type=1326 audit(1753673842.333:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30279 comm="syz.4.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a01f2ab89 code=0x7ffc0000 [ 2541.164573][T30291] netlink: 'syz.5.4745': attribute type 8 has an invalid length. [ 2542.104684][T30296] netlink: 392 bytes leftover after parsing attributes in process `syz.3.4747'. [ 2542.163104][ T5931] usb 3-1: USB disconnect, device number 24 [ 2542.809452][T30312] tipc: Enabling of bearer rejected, already enabled [ 2542.832364][T30312] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 2542.840018][T30312] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 2543.831036][ T5931] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2544.034312][ T5931] usb 5-1: config 0 has no interfaces? [ 2544.066092][ T5931] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2544.075469][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2544.119020][ T5931] usb 5-1: Product: syz [ 2544.123313][ T5931] usb 5-1: Manufacturer: syz [ 2544.127945][ T5931] usb 5-1: SerialNumber: syz [ 2544.152085][ T5931] usb 5-1: config 0 descriptor?? [ 2544.765527][ T5931] usb 5-1: USB disconnect, device number 13 [ 2546.591456][T30364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2546.657544][T30364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2546.740460][T30364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4768'. [ 2546.789480][T30364] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2546.835914][T30364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2546.939001][T30364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2547.976854][T30370] input: syz1 as /devices/virtual/input/input146 [ 2548.071850][T30373] netlink: 161024 bytes leftover after parsing attributes in process `syz.2.4772'. [ 2548.091123][T30370] input: failed to attach handler leds to device input146, error: -6 [ 2548.110814][T30373] netlink: zone id is out of range [ 2548.147263][T30373] netlink: zone id is out of range [ 2548.171224][T30376] openvswitch: netlink: Key type 4222 is out of range max 32 [ 2548.194537][T30373] netlink: zone id is out of range [ 2548.213107][T30373] netlink: zone id is out of range [ 2548.230395][T30373] netlink: zone id is out of range [ 2548.249485][T30373] netlink: zone id is out of range [ 2548.263932][T30373] netlink: zone id is out of range [ 2548.281585][T30373] netlink: zone id is out of range [ 2548.298137][T30373] netlink: zone id is out of range [ 2551.581231][T14323] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2551.741457][T14323] usb 5-1: Using ep0 maxpacket: 32 [ 2551.821195][T14323] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2551.833504][T14323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2551.870437][T14323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2551.924658][T14323] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2551.934432][T14323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.975280][T14323] usb 5-1: config 0 descriptor?? [ 2551.983382][T30401] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2551.993699][T14323] hub 5-1:0.0: USB hub found [ 2552.242052][T14323] hub 5-1:0.0: 15 ports detected [ 2552.257782][T14323] hub 5-1:0.0: insufficient power available to use all downstream ports [ 2552.537823][T14323] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 2552.553019][T14323] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 2552.581808][T14323] usbhid 5-1:0.0: can't add hid device: -71 [ 2552.587873][T14323] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2552.611457][T30414] netlink: 'syz.5.4781': attribute type 23 has an invalid length. [ 2552.712134][T14323] usb 5-1: USB disconnect, device number 14 [ 2553.563255][T30418] xt_nfacct: accounting object `syz1' does not exists [ 2559.174421][T30483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.183796][T30483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2559.654419][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4801'. [ 2559.679683][T30489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 2559.894527][T30495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2559.947047][T30495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.654351][T30509] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2560.671234][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2560.680244][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2560.694443][T30509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4807'. [ 2560.951412][ T5931] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2560.992481][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4808'. [ 2561.228098][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 2562.263028][T12650] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2562.502791][T12650] usb 4-1: Using ep0 maxpacket: 16 [ 2562.515114][T12650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.661471][T12650] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.823822][T12650] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2562.948711][T12650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.974502][T12650] usb 4-1: config 0 descriptor?? [ 2563.408816][T12650] playstation 0003:054C:05C4.003E: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2563.599684][T12650] playstation 0003:054C:05C4.003E: Invalid byte count transferred, expected 16 got 0 [ 2563.653484][T12650] playstation 0003:054C:05C4.003E: Failed to retrieve DualShock4 pairing info: -22 [ 2563.718707][T12650] playstation 0003:054C:05C4.003E: Failed to get MAC address from DualShock4 [ 2563.748075][T12650] playstation 0003:054C:05C4.003E: Failed to create dualshock4. [ 2563.826290][T12650] playstation 0003:054C:05C4.003E: probe with driver playstation failed with error -22 [ 2563.859374][T12650] usb 4-1: USB disconnect, device number 45 [ 2563.918089][T30541] fido_id[30541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2563.987379][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2564.004790][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2564.056858][ T5931] usb 3-1: can't read configurations, error -71 [ 2565.161130][ T5931] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2565.365131][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 2565.430055][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.579447][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2565.634598][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2565.643848][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.077721][ T5931] usb 3-1: Product: syz [ 2566.095033][ T5931] usb 3-1: Manufacturer: syz [ 2566.113014][ T5931] usb 3-1: SerialNumber: syz [ 2566.704679][T30583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4818'. [ 2568.372369][ T5931] usb 3-1: 0:2 : does not exist [ 2568.402859][ T5931] usb 3-1: USB disconnect, device number 26 [ 2568.510414][T29301] udevd[29301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2569.486040][T30618] netlink: 'syz.5.4823': attribute type 1 has an invalid length. [ 2569.742647][T30614] bond8: entered promiscuous mode [ 2569.747870][T30614] bond8: entered allmulticast mode [ 2569.755334][T30614] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2569.911782][T30621] bridge3: entered promiscuous mode [ 2569.917223][T30621] bridge3: entered allmulticast mode [ 2569.933058][T30621] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 2569.972575][ T3502] net_ratelimit: 32 callbacks suppressed [ 2569.972596][ T3502] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2570.114167][ T3502] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2571.632559][T30635] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2575.591737][T12650] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2575.627986][T30670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 2575.928667][T12650] usb 5-1: Using ep0 maxpacket: 16 [ 2575.952656][T12650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2575.984041][T12650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2576.116322][T12650] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2576.186571][T12650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2576.227804][T12650] usb 5-1: config 0 descriptor?? [ 2576.288414][T30684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2576.719494][ T5931] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2576.971361][T12650] playstation 0003:054C:05C4.003F: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 2576.987378][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 2577.133592][T12650] playstation 0003:054C:05C4.003F: Invalid byte count transferred, expected 16 got 0 [ 2577.159354][T12650] playstation 0003:054C:05C4.003F: Failed to retrieve DualShock4 pairing info: -22 [ 2577.230227][T12650] playstation 0003:054C:05C4.003F: Failed to get MAC address from DualShock4 [ 2577.327972][T12650] playstation 0003:054C:05C4.003F: Failed to create dualshock4. [ 2577.477207][T12650] playstation 0003:054C:05C4.003F: probe with driver playstation failed with error -22 [ 2577.689862][T12650] usb 5-1: USB disconnect, device number 15 [ 2578.624815][ T30] kauditd_printk_skb: 1720 callbacks suppressed [ 2578.624831][ T30] audit: type=1326 audit(1753673880.613:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2578.711334][T12650] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2578.800062][ T30] audit: type=1326 audit(1753673880.613:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2578.897860][ T30] audit: type=1326 audit(1753673880.613:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2578.928381][T12650] usb 5-1: config 0 has no interfaces? [ 2578.944380][T12650] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2578.954907][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.978227][T12650] usb 5-1: Product: syz [ 2578.996561][T12650] usb 5-1: Manufacturer: syz [ 2579.014713][T12650] usb 5-1: SerialNumber: syz [ 2579.110687][ T30] audit: type=1326 audit(1753673880.613:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2579.141599][T12650] usb 5-1: config 0 descriptor?? [ 2579.500744][ T30] audit: type=1326 audit(1753673880.613:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2579.575030][ T30] audit: type=1326 audit(1753673880.613:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2579.931508][ T30] audit: type=1326 audit(1753673880.623:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2580.284417][ T30] audit: type=1326 audit(1753673880.623:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2580.411036][ T30] audit: type=1326 audit(1753673880.623:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2580.749040][ T30] audit: type=1326 audit(1753673880.623:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30700 comm="syz.5.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82a78e9a9 code=0x7ffc0000 [ 2581.248301][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2581.290478][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2581.417981][ T5931] usb 4-1: can't read configurations, error -71 [ 2581.838721][T30724] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2582.859096][T30734] netlink: 'syz.2.4844': attribute type 1 has an invalid length. [ 2583.169279][T30736] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 2583.255288][T30736] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 2583.318294][T30737] gretap2: entered promiscuous mode [ 2583.364729][T30737] bond12: (slave gretap2): making interface the new active one [ 2583.418615][T30737] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 2583.505087][ T5931] usb 5-1: USB disconnect, device number 16 [ 2584.811479][ T5931] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2585.158969][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 2585.183991][ T5931] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2585.274643][ T5931] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2585.347586][ T5931] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2585.415146][ T5931] usb 5-1: config 1 has no interface number 1 [ 2585.459291][ T5931] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2585.511070][ T5931] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 2585.525350][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2585.547158][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.605188][ T5931] usb 5-1: Product: syz [ 2585.611252][ T5931] usb 5-1: Manufacturer: syz [ 2585.615919][ T5931] usb 5-1: SerialNumber: syz [ 2585.708326][T30759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.778514][T30759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2586.176846][ T5931] usb 5-1: USB disconnect, device number 17 [ 2586.982610][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4850'. [ 2588.516763][T30795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2589.405443][T30786] pim6reg: entered allmulticast mode [ 2590.141596][ T5931] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2590.315481][T30804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4857'. [ 2590.342808][ T5931] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.390303][ T5931] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.417672][ T5931] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2590.439577][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2590.464831][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 2590.470836][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.480518][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.490609][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.531601][ T5931] usb 4-1: config 0 descriptor?? [ 2590.631053][T12650] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2590.801109][T12650] usb 3-1: Using ep0 maxpacket: 8 [ 2590.809156][T12650] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2590.864409][T12650] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 2590.894075][T12650] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2591.015913][T12650] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2591.049090][T30800] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 2591.055769][T30800] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2591.085304][T12650] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 2591.094143][T30800] vhci_hcd vhci_hcd.0: Device attached [ 2591.102505][T30823] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2591.128158][T12650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.144529][T12650] usb 3-1: Product: syz [ 2591.154616][T12650] usb 3-1: Manufacturer: syz [ 2591.173015][T30800] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 2591.179671][T30800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2591.197551][T12650] usb 3-1: SerialNumber: syz [ 2591.208411][T30800] vhci_hcd vhci_hcd.0: Device attached [ 2591.261457][T30806] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2591.273438][T30800] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2591.291391][ T10] vhci_hcd: vhci_device speed not set [ 2591.298983][T30823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 2591.305632][T30823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2591.322553][T30800] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2591.341521][T30823] vhci_hcd vhci_hcd.0: Device attached [ 2591.351279][ T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 2591.528432][T30828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2591.665777][T12650] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input147 [ 2591.676280][T30800] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(28) [ 2591.682932][T30800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2591.716065][ T5201] bcm5974 3-1:1.0: could not read from device [ 2591.747888][T30800] vhci_hcd vhci_hcd.0: Device attached [ 2591.815679][ T5201] bcm5974 3-1:1.0: could not read from device [ 2591.831034][T12650] usb 3-1: USB disconnect, device number 27 [ 2591.861389][T30823] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(31) [ 2591.868056][T30823] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2592.019689][T30823] vhci_hcd vhci_hcd.0: Device attached [ 2592.121186][T30829] vhci_hcd: connection closed [ 2592.121494][T30826] vhci_hcd: connection closed [ 2592.121556][ T3502] vhci_hcd: stop threads [ 2592.132927][T30824] vhci_hcd: connection closed [ 2592.135651][T30821] vhci_hcd: connection reset by peer [ 2592.171060][ T3502] vhci_hcd: release socket [ 2592.191327][ T3502] vhci_hcd: disconnect device [ 2592.215738][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 2592.232959][ T3502] vhci_hcd: stop threads [ 2592.237277][ T3502] vhci_hcd: release socket [ 2592.263778][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2592.291021][ T3502] vhci_hcd: disconnect device [ 2592.314251][ T5931] usb 4-1: USB disconnect, device number 48 [ 2592.320650][ T3502] vhci_hcd: stop threads [ 2592.356357][ T3502] vhci_hcd: release socket [ 2592.401202][ T3502] vhci_hcd: disconnect device [ 2592.432978][ T3502] vhci_hcd: stop threads [ 2592.456147][ T3502] vhci_hcd: release socket [ 2592.474780][ T3502] vhci_hcd: disconnect device [ 2592.628234][T30838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4861'. [ 2592.793030][T30831] vhci_hcd: connection closed [ 2592.794970][ T6105] vhci_hcd: stop threads [ 2592.813300][ T6105] vhci_hcd: release socket [ 2592.832282][ T6105] vhci_hcd: disconnect device [ 2593.381676][ T5931] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2593.546287][ T5931] usb 4-1: config 0 has no interfaces? [ 2593.562255][ T5931] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2593.571658][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.579724][ T5931] usb 4-1: Product: syz [ 2593.591009][ T5931] usb 4-1: Manufacturer: syz [ 2593.619119][ T5931] usb 4-1: SerialNumber: syz [ 2593.666357][ T5931] usb 4-1: config 0 descriptor?? [ 2593.938475][T30843] xt_socket: unknown flags 0xc [ 2596.044920][T30866] Lens A: ================= START STATUS ================= [ 2596.052589][T30866] Lens A: Focus, Absolute: 0 [ 2596.057303][T30866] Lens A: ================== END STATUS ================== [ 2596.611080][ T10] vhci_hcd: vhci_device speed not set [ 2596.930250][T29472] usb 4-1: USB disconnect, device number 49 [ 2597.922250][T14323] usb usb40-port1: attempt power cycle [ 2598.511988][T14323] usb usb40-port1: unable to enumerate USB device [ 2599.963314][T30904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'. [ 2603.611233][ T5931] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2603.761615][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 2603.779219][ T5931] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 2603.790087][ T5931] usb 3-1: config 0 has no interface number 0 [ 2603.885473][ T5931] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2603.911154][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.929594][ T5931] usb 3-1: Product: syz [ 2603.955573][ T5931] usb 3-1: Manufacturer: syz [ 2603.980564][ T5931] usb 3-1: SerialNumber: syz [ 2604.101245][ T5931] usb 3-1: config 0 descriptor?? [ 2604.159417][ T5931] as10x_usb: device has been detected [ 2604.179198][ T5931] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2604.241424][ T5931] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2604.376584][ T5931] as10x_usb: error during firmware upload part1 [ 2604.392189][ T5931] Registered device PCTV Systems picoStick (74e) [ 2604.895575][ T5931] usb 3-1: USB disconnect, device number 28 [ 2605.006922][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2605.010612][ T5931] as10x_usb: device has been disconnected [ 2605.011203][T14323] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2605.311336][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 2605.322279][T14323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2605.634975][T14323] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2605.659325][T14323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2605.770583][T14323] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2605.789267][T14323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.798655][T14323] usb 5-1: Product: syz [ 2605.849349][T14323] usb 5-1: Manufacturer: syz [ 2605.869198][T14323] usb 5-1: SerialNumber: syz [ 2606.151044][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2606.311115][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 2606.355031][T30964] netlink: 'syz.2.4889': attribute type 29 has an invalid length. [ 2606.592116][T30968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2609.344590][T14323] usb 5-1: 0:2 : does not exist [ 2609.407839][T14323] usb 5-1: USB disconnect, device number 18 [ 2609.685911][T30945] udevd[30945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2610.105956][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2610.164582][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2610.187346][ T10] usb 3-1: can't read configurations, error -71 [ 2610.341039][ T5931] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2610.543525][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 2610.652136][ T5931] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 2610.662696][ T5931] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2610.676181][ T5931] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2610.703349][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 2610.710936][ T5931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2610.720420][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.071053][T30999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2611.081403][T30999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2611.100037][T30999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4895'. [ 2612.181190][ T5931] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2612.441189][ T5931] usb 4-1: config 0 has no interfaces? [ 2612.583560][ T5931] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2612.602391][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.648084][ T5931] usb 4-1: Product: syz [ 2612.675661][ T5931] usb 4-1: Manufacturer: syz [ 2612.695026][ T5931] usb 4-1: SerialNumber: syz [ 2612.725584][ T5931] usb 4-1: config 0 descriptor?? [ 2612.994228][T31005] input: syz1 as /devices/virtual/input/input148 [ 2613.083812][T31011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2613.093955][T31011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2613.720408][ T5931] usb 5-1: USB disconnect, device number 19 [ 2615.441211][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4904'. [ 2616.126349][ T5931] usb 4-1: USB disconnect, device number 50 [ 2618.961129][T22705] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2619.205630][T22705] usb 4-1: Using ep0 maxpacket: 16 [ 2619.251898][T22705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2619.280123][T22705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2619.348931][T22705] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2619.528247][T22705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2619.562821][T22705] usb 4-1: config 0 descriptor?? [ 2619.980290][T22705] playstation 0003:054C:05C4.0040: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2620.059140][T31074] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2620.176735][T22705] playstation 0003:054C:05C4.0040: Invalid byte count transferred, expected 16 got 0 [ 2620.186736][T22705] playstation 0003:054C:05C4.0040: Failed to retrieve DualShock4 pairing info: -22 [ 2620.207896][T22705] playstation 0003:054C:05C4.0040: Failed to get MAC address from DualShock4 [ 2620.219022][T22705] playstation 0003:054C:05C4.0040: Failed to create dualshock4. [ 2620.237378][T22705] playstation 0003:054C:05C4.0040: probe with driver playstation failed with error -22 [ 2620.381576][ T5931] usb 4-1: USB disconnect, device number 51 [ 2620.426364][T31078] fido_id[31078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2621.491111][T22705] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2621.644910][T22705] usb 4-1: Using ep0 maxpacket: 8 [ 2621.652897][T22705] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2621.664811][T22705] usb 4-1: config 0 has no interface number 0 [ 2621.726215][T22705] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2621.950967][T22705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2621.959014][T22705] usb 4-1: Product: syz [ 2622.126792][T22705] usb 4-1: Manufacturer: syz [ 2622.144453][T22705] usb 4-1: SerialNumber: syz [ 2622.207780][T22705] usb 4-1: config 0 descriptor?? [ 2622.337802][T22705] as10x_usb: device has been detected [ 2622.357863][T22705] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2622.462990][T22705] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2622.673352][T22705] as10x_usb: error during firmware upload part1 [ 2622.771188][T22705] Registered device PCTV Systems picoStick (74e) [ 2623.988963][ T5931] usb 4-1: USB disconnect, device number 52 [ 2624.046604][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2624.065177][ T5931] as10x_usb: device has been disconnected [ 2626.532062][T31131] ptrace attach of "./syz-executor exec"[8461] was attempted by "./syz-executor exec"[31131] [ 2627.091044][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2627.261130][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 2627.268234][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2627.340741][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2627.418676][ T5931] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2627.430039][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.670376][ T5931] usb 5-1: config 0 descriptor?? [ 2628.128403][ T5931] playstation 0003:054C:05C4.0041: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 2628.233495][T31146] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2628.351590][ T5931] playstation 0003:054C:05C4.0041: Invalid byte count transferred, expected 16 got 0 [ 2628.402032][T12650] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2628.607788][T12650] usb 4-1: Using ep0 maxpacket: 8 [ 2628.623700][T12650] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2628.666736][T12650] usb 4-1: config 0 has no interface number 0 [ 2628.709725][ T5931] playstation 0003:054C:05C4.0041: Failed to retrieve DualShock4 pairing info: -22 [ 2628.724201][T12650] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2628.734509][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.753278][ T5931] playstation 0003:054C:05C4.0041: Failed to get MAC address from DualShock4 [ 2628.783149][T12650] usb 4-1: Product: syz [ 2628.787409][T12650] usb 4-1: Manufacturer: syz [ 2628.805074][ T5931] playstation 0003:054C:05C4.0041: Failed to create dualshock4. [ 2628.817638][T12650] usb 4-1: SerialNumber: syz [ 2628.847554][ T5931] playstation 0003:054C:05C4.0041: probe with driver playstation failed with error -22 [ 2628.868980][T12650] usb 4-1: config 0 descriptor?? [ 2628.899988][T12650] as10x_usb: device has been detected [ 2628.935360][ T5931] usb 5-1: USB disconnect, device number 20 [ 2628.944184][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2629.015590][T12650] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2629.054388][T12650] as10x_usb: error during firmware upload part1 [ 2629.066420][T12650] Registered device PCTV Systems picoStick (74e) [ 2629.508267][T31163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4928'. [ 2630.421659][T31172] binder: 31161:31172 ioctl c0306201 200000000640 returned -22 [ 2631.206289][T12650] usb 4-1: USB disconnect, device number 53 [ 2631.268140][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2631.279617][T12650] as10x_usb: device has been disconnected [ 2632.085374][T31179] binder: 31167:31179 ioctl c0306201 200000000640 returned -22 [ 2635.821179][T12650] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2636.011338][T12650] usb 4-1: Using ep0 maxpacket: 8 [ 2636.046308][T12650] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2636.060980][T12650] usb 4-1: config 0 has no interface number 0 [ 2636.091180][T12650] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2636.100548][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.128111][T12650] usb 4-1: Product: syz [ 2636.138210][T12650] usb 4-1: Manufacturer: syz [ 2636.171110][T12650] usb 4-1: SerialNumber: syz [ 2636.221692][T12650] usb 4-1: config 0 descriptor?? [ 2636.236993][T12650] as10x_usb: device has been detected [ 2636.243473][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2636.278433][T12650] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2636.483004][T31225] binder: 31209:31225 ioctl c0306201 200000000640 returned -22 [ 2636.555533][T12650] as10x_usb: error during firmware upload part1 [ 2636.707786][T12650] Registered device PCTV Systems picoStick (74e) [ 2637.397092][T31235] binder: 31210:31235 ioctl c0306201 200000000640 returned -22 [ 2638.130440][T12650] usb 4-1: USB disconnect, device number 54 [ 2638.234504][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2638.241669][T12650] as10x_usb: device has been disconnected [ 2639.331086][T12650] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2639.491185][T12650] usb 5-1: Using ep0 maxpacket: 8 [ 2639.499630][T12650] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2639.520906][T12650] usb 5-1: config 0 has no interface number 0 [ 2639.534323][T12650] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2639.543633][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.552019][T12650] usb 5-1: Product: syz [ 2639.567492][T12650] usb 5-1: Manufacturer: syz [ 2639.769724][T12650] usb 5-1: SerialNumber: syz [ 2639.786525][T12650] usb 5-1: config 0 descriptor?? [ 2640.129292][T31255] binder: 31240:31255 ioctl c0306201 200000000640 returned -22 [ 2640.358197][T31252] binder: 31238:31252 ioctl c0306201 200000000640 returned -22 [ 2640.387611][T12650] as10x_usb: device has been detected [ 2640.448250][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2640.704726][T12650] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2640.865824][T12650] as10x_usb: error during firmware upload part1 [ 2640.904052][T12650] Registered device PCTV Systems picoStick (74e) [ 2642.055164][T14323] usb 5-1: USB disconnect, device number 21 [ 2642.247705][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2642.253950][T14323] as10x_usb: device has been disconnected [ 2642.341300][T12650] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2642.511315][T12650] usb 3-1: Using ep0 maxpacket: 8 [ 2642.519011][T12650] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 2642.528136][T12650] usb 3-1: config 0 has no interface number 0 [ 2642.591593][T12650] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2642.606120][T12650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.876594][T12650] usb 3-1: Product: syz [ 2642.911245][T12650] usb 3-1: Manufacturer: syz [ 2642.915921][T12650] usb 3-1: SerialNumber: syz [ 2642.971699][T12650] usb 3-1: config 0 descriptor?? [ 2642.998411][T12650] as10x_usb: device has been detected [ 2643.031836][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2643.102418][T12650] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2643.144856][T12650] as10x_usb: error during firmware upload part1 [ 2643.179675][T12650] Registered device PCTV Systems picoStick (74e) [ 2643.321178][T14323] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2643.506937][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 2643.533448][T14323] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2643.565424][T14323] usb 5-1: config 0 has no interface number 0 [ 2643.644940][T14323] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2643.692532][T14323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.727386][T14323] usb 5-1: Product: syz [ 2643.741222][T14323] usb 5-1: Manufacturer: syz [ 2643.766270][T14323] usb 5-1: SerialNumber: syz [ 2643.800502][T14323] usb 5-1: config 0 descriptor?? [ 2643.875274][T14323] as10x_usb: device has been detected [ 2643.929277][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2644.066327][T31291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2644.129161][T31291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2644.381698][T14323] usb 5-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 2644.399886][T14323] as10x_usb: error during firmware upload part1 [ 2644.406814][T14323] Registered device PCTV Systems picoStick (74e) [ 2644.674967][T12650] usb 3-1: USB disconnect, device number 31 [ 2644.836938][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2644.853086][T12650] as10x_usb: device has been disconnected [ 2645.187060][T14323] usb 5-1: USB disconnect, device number 22 [ 2645.270302][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2645.315394][T14323] as10x_usb: device has been disconnected [ 2645.731060][T12650] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2645.761088][T22705] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2645.912543][T12650] usb 4-1: Using ep0 maxpacket: 8 [ 2645.922960][T12650] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2645.940977][T12650] usb 4-1: config 0 has no interface number 0 [ 2645.947484][T22705] usb 3-1: Using ep0 maxpacket: 16 [ 2645.954131][T12650] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2645.964952][T22705] usb 3-1: config 0 has no interfaces? [ 2645.973399][T22705] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2645.976137][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.991008][T22705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2645.999207][T22705] usb 3-1: Product: syz [ 2645.999703][T12650] usb 4-1: Product: syz [ 2646.008110][T12650] usb 4-1: Manufacturer: syz [ 2646.009402][T22705] usb 3-1: Manufacturer: syz [ 2646.017718][T12650] usb 4-1: SerialNumber: syz [ 2646.018199][T22705] usb 3-1: SerialNumber: syz [ 2646.028018][T12650] usb 4-1: config 0 descriptor?? [ 2646.037940][T22705] usb 3-1: config 0 descriptor?? [ 2646.050338][T12650] as10x_usb: device has been detected [ 2646.067026][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2646.078540][T14323] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2646.101516][T12650] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2646.122052][T12650] as10x_usb: error during firmware upload part1 [ 2646.129018][T12650] Registered device PCTV Systems picoStick (74e) [ 2646.241115][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 2646.271699][T22705] usb 3-1: USB disconnect, device number 32 [ 2646.280774][T14323] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2646.323109][T14323] usb 5-1: config 0 has no interface number 0 [ 2646.343331][T14323] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2646.358587][T14323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.383605][T14323] usb 5-1: Product: syz [ 2646.387836][T14323] usb 5-1: Manufacturer: syz [ 2646.402436][T14323] usb 5-1: SerialNumber: syz [ 2646.434919][T14323] usb 5-1: config 0 descriptor?? [ 2646.454203][T14323] as10x_usb: device has been detected [ 2646.474888][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2646.517861][T14323] usb 5-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 2646.544575][T14323] as10x_usb: error during firmware upload part1 [ 2646.552894][T14323] Registered device PCTV Systems picoStick (74e) [ 2646.749844][T31323] binder: 31313:31323 ioctl c0306201 200000000640 returned -22 [ 2647.701302][T31332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2647.713141][T12650] usb 4-1: USB disconnect, device number 55 [ 2647.726535][T31332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.747331][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2647.748538][T12650] as10x_usb: device has been disconnected [ 2647.968537][ T5931] usb 5-1: USB disconnect, device number 23 [ 2648.017031][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2648.053462][ T5931] as10x_usb: device has been disconnected [ 2648.554741][T31348] binder: 31329:31348 ioctl c0306201 200000000640 returned -22 [ 2651.082706][T31372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2651.092218][T31372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2651.104651][T31372] xt_socket: unknown flags 0xc [ 2651.320987][ T5931] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2651.472588][ T5931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2651.488541][ T5931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2651.689704][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2651.721047][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2651.765990][T31373] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2651.795602][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2651.911507][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.917948][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.291064][T14323] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2652.320717][T31382] binder: 31368:31382 ioctl c0306201 200000000640 returned -22 [ 2652.541599][T14323] usb 4-1: Using ep0 maxpacket: 16 [ 2652.606818][T14323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2652.618337][T14323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2652.629028][T14323] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2652.639292][T14323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.923042][T14323] usb 4-1: config 0 descriptor?? [ 2653.415394][T14323] playstation 0003:054C:05C4.0042: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2653.679411][T14323] playstation 0003:054C:05C4.0042: Invalid byte count transferred, expected 16 got 0 [ 2653.756632][T14323] playstation 0003:054C:05C4.0042: Failed to retrieve DualShock4 pairing info: -22 [ 2653.796890][T14323] playstation 0003:054C:05C4.0042: Failed to get MAC address from DualShock4 [ 2653.838226][T14323] playstation 0003:054C:05C4.0042: Failed to create dualshock4. [ 2653.927189][T14323] playstation 0003:054C:05C4.0042: probe with driver playstation failed with error -22 [ 2654.115021][T14323] usb 4-1: USB disconnect, device number 56 [ 2654.225359][T22705] usb 3-1: USB disconnect, device number 33 [ 2655.191538][ T5931] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2655.371306][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 2655.401526][ T5931] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2655.420025][ T5931] usb 4-1: config 0 has no interface number 0 [ 2655.454601][ T5931] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2655.483343][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2655.637946][ T5931] usb 4-1: Product: syz [ 2655.658251][ T5931] usb 4-1: Manufacturer: syz [ 2655.678512][ T5931] usb 4-1: SerialNumber: syz [ 2655.722087][ T5931] usb 4-1: config 0 descriptor?? [ 2655.769410][ T5931] as10x_usb: device has been detected [ 2655.775652][ T5931] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2655.907540][ T5931] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2655.958410][ T5931] as10x_usb: error during firmware upload part1 [ 2655.991006][ T5931] Registered device PCTV Systems picoStick (74e) [ 2656.111260][T12650] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2656.345741][T12650] usb 5-1: Using ep0 maxpacket: 8 [ 2656.378028][T12650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2656.397150][T12650] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 2656.407497][T31421] binder: 31397:31421 ioctl c0306201 200000000640 returned -22 [ 2656.417191][T31420] binder: 31391:31420 ioctl c0306201 200000000640 returned -22 [ 2656.461385][T12650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2656.576952][T12650] usb 5-1: config 0 descriptor?? [ 2657.647337][T25535] usb 4-1: USB disconnect, device number 57 [ 2657.719323][T25535] Unregistered device PCTV Systems picoStick (74e) [ 2657.725342][T25535] as10x_usb: device has been disconnected [ 2658.000391][T31428] binder: 31422:31428 ioctl c0306201 200000000640 returned -22 [ 2658.965439][T12650] usbhid 5-1:0.0: can't add hid device: -71 [ 2658.972315][T12650] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2659.022342][T12650] usb 5-1: USB disconnect, device number 24 [ 2659.584933][T31442] xt_NFQUEUE: number of total queues is 0 [ 2659.667721][T12650] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2659.942716][T12650] usb 5-1: Using ep0 maxpacket: 16 [ 2659.977958][T12650] usb 5-1: config 0 has no interfaces? [ 2660.032814][T12650] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2660.122264][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2660.130379][T12650] usb 5-1: Product: syz [ 2660.135127][T12650] usb 5-1: Manufacturer: syz [ 2660.139763][T12650] usb 5-1: SerialNumber: syz [ 2660.152619][T12650] usb 5-1: config 0 descriptor?? [ 2660.386607][T22705] usb 5-1: USB disconnect, device number 25 [ 2662.509412][T31471] binder: 31447:31471 ioctl c0306201 200000000640 returned -22 [ 2663.317272][T31480] binder: 31473:31480 ioctl c0306201 200000000640 returned -22 [ 2664.251001][T12650] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2664.406147][T12650] usb 4-1: Using ep0 maxpacket: 8 [ 2664.446724][T12650] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2664.500999][T12650] usb 4-1: config 0 has no interface number 0 [ 2664.514211][T12650] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2664.550903][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.558996][T12650] usb 4-1: Product: syz [ 2664.645405][T12650] usb 4-1: Manufacturer: syz [ 2664.667270][T12650] usb 4-1: SerialNumber: syz [ 2664.685871][T12650] usb 4-1: config 0 descriptor?? [ 2664.808391][T12650] as10x_usb: device has been detected [ 2664.821806][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2665.004551][T12650] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2665.142806][T12650] as10x_usb: error during firmware upload part1 [ 2665.282691][T12650] Registered device PCTV Systems picoStick (74e) [ 2666.537477][T31515] xt_NFQUEUE: number of total queues is 0 [ 2666.866608][T12650] usb 4-1: USB disconnect, device number 58 [ 2666.920793][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2666.928127][T12650] as10x_usb: device has been disconnected [ 2667.242331][T31520] xt_NFQUEUE: number of total queues is 0 [ 2668.611018][T14323] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2669.021394][T14323] usb 3-1: Using ep0 maxpacket: 16 [ 2669.028809][T14323] usb 3-1: config 0 has no interfaces? [ 2669.088081][T14323] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2669.137797][T14323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.182055][T14323] usb 3-1: Product: syz [ 2669.186381][T14323] usb 3-1: Manufacturer: syz [ 2669.214082][T14323] usb 3-1: SerialNumber: syz [ 2669.244464][T14323] usb 3-1: config 0 descriptor?? [ 2669.645564][T12650] usb 3-1: USB disconnect, device number 34 [ 2670.382766][T14323] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2670.473153][T31548] binder: 31532:31548 ioctl c0306201 200000000640 returned -22 [ 2670.666371][T14323] usb 4-1: Using ep0 maxpacket: 8 [ 2670.751127][T14323] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2670.791015][T14323] usb 4-1: config 0 has no interface number 0 [ 2670.836081][T31550] binder: 31534:31550 ioctl c0306201 200000000640 returned -22 [ 2670.901242][T14323] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2670.921722][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.929876][T14323] usb 4-1: Product: syz [ 2670.940152][T14323] usb 4-1: Manufacturer: syz [ 2670.946818][T14323] usb 4-1: SerialNumber: syz [ 2671.028244][T14323] usb 4-1: config 0 descriptor?? [ 2671.066388][T14323] as10x_usb: device has been detected [ 2671.095090][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2671.184971][T14323] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2671.229042][T14323] as10x_usb: error during firmware upload part1 [ 2671.242349][T14323] Registered device PCTV Systems picoStick (74e) [ 2672.663377][T14323] usb 4-1: USB disconnect, device number 59 [ 2672.748526][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2672.779719][T14323] as10x_usb: device has been disconnected [ 2673.751255][T31570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2673.790652][T31570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2674.662203][T31582] xt_NFQUEUE: number of total queues is 0 [ 2674.716912][T31586] binder: 31567:31586 ioctl c0306201 200000000640 returned -22 [ 2675.531104][T14323] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2675.682445][T14323] usb 5-1: Using ep0 maxpacket: 8 [ 2675.689711][T14323] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2675.709341][T14323] usb 5-1: config 0 has no interface number 0 [ 2675.767789][T14323] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2675.797378][T14323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.817667][T14323] usb 5-1: Product: syz [ 2675.835645][T14323] usb 5-1: Manufacturer: syz [ 2675.842914][T14323] usb 5-1: SerialNumber: syz [ 2675.850271][T14323] usb 5-1: config 0 descriptor?? [ 2675.871299][T14323] as10x_usb: device has been detected [ 2675.887843][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2675.953560][T14323] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2676.029995][T14323] as10x_usb: error during firmware upload part1 [ 2676.091359][T31593] xt_NFQUEUE: number of total queues is 0 [ 2676.257922][T14323] Registered device PCTV Systems picoStick (74e) [ 2676.855283][T31612] xt_NFQUEUE: number of total queues is 0 [ 2677.051080][T12650] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2677.086001][T31611] xt_NFQUEUE: number of total queues is 0 [ 2677.223149][T12650] usb 4-1: Using ep0 maxpacket: 16 [ 2677.232193][T12650] usb 4-1: config 0 has no interfaces? [ 2677.242879][T12650] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2677.258890][T12650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.268857][T12650] usb 4-1: Product: syz [ 2677.345902][T12650] usb 4-1: Manufacturer: syz [ 2677.491361][T12650] usb 4-1: SerialNumber: syz [ 2677.511639][T12650] usb 4-1: config 0 descriptor?? [ 2677.724851][T14323] usb 4-1: USB disconnect, device number 60 [ 2677.938489][T14323] usb 5-1: USB disconnect, device number 26 [ 2678.003342][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2678.029032][T14323] as10x_usb: device has been disconnected [ 2678.971413][T12650] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2679.080965][ T5931] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2679.161629][T12650] usb 5-1: Using ep0 maxpacket: 8 [ 2679.177970][T12650] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2679.203660][T12650] usb 5-1: config 0 has no interface number 0 [ 2679.232466][T12650] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2679.251719][T12650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.262110][ T5931] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2679.297131][T12650] usb 5-1: Product: syz [ 2679.307365][ T5931] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2679.326243][T12650] usb 5-1: Manufacturer: syz [ 2679.337965][T12650] usb 5-1: SerialNumber: syz [ 2679.359615][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2679.385831][T12650] usb 5-1: config 0 descriptor?? [ 2679.411871][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.534856][T12650] as10x_usb: device has been detected [ 2679.569617][T12650] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2679.592371][T31623] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2679.615288][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2679.931958][T12650] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2680.038584][T12650] as10x_usb: error during firmware upload part1 [ 2680.061791][T12650] Registered device PCTV Systems picoStick (74e) [ 2680.272567][T31640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2680.296048][T31640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2681.143719][T14323] usb 3-1: USB disconnect, device number 35 [ 2681.784897][T12650] usb 5-1: USB disconnect, device number 27 [ 2681.831760][T12650] Unregistered device PCTV Systems picoStick (74e) [ 2681.834341][T12650] as10x_usb: device has been disconnected [ 2682.032624][T31652] xt_NFQUEUE: number of total queues is 0 [ 2682.111012][ T5931] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2682.271271][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 2682.283773][ T5931] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 2682.300960][ T5931] usb 3-1: config 0 has no interface number 0 [ 2682.314016][ T5931] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2682.335589][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.387237][ T5931] usb 3-1: Product: syz [ 2682.431249][ T5931] usb 3-1: Manufacturer: syz [ 2682.440413][ T5931] usb 3-1: SerialNumber: syz [ 2682.476150][ T5931] usb 3-1: config 0 descriptor?? [ 2682.494148][ T5931] as10x_usb: device has been detected [ 2682.507677][ T5931] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2682.561357][ T5931] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2682.579535][ T5931] as10x_usb: error during firmware upload part1 [ 2682.600438][ T5931] Registered device PCTV Systems picoStick (74e) [ 2682.761185][T14323] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2683.080409][T14323] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2683.119496][T14323] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2683.139960][T14323] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2683.157934][T14323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2683.179360][T31655] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2683.213860][T14323] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2684.525043][T14323] usb 5-1: USB disconnect, device number 28 [ 2684.858779][ T5931] usb 3-1: USB disconnect, device number 36 [ 2685.042020][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2685.054800][ T5931] as10x_usb: device has been disconnected [ 2687.540716][T31713] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2688.581106][T31721] netlink: 'syz.2.5033': attribute type 4 has an invalid length. [ 2688.981118][ T5931] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2689.131075][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 2689.137659][ T5931] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 2689.146186][ T5931] usb 5-1: config 0 has no interface number 0 [ 2689.160488][ T5931] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2689.170081][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.200231][ T5931] usb 5-1: Product: syz [ 2689.220490][ T5931] usb 5-1: Manufacturer: syz [ 2689.251384][ T5931] usb 5-1: SerialNumber: syz [ 2689.293187][ T5931] usb 5-1: config 0 descriptor?? [ 2689.325279][ T5931] as10x_usb: device has been detected [ 2689.363843][ T5931] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2689.471819][ T5931] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2689.536729][ T5931] as10x_usb: error during firmware upload part1 [ 2689.594534][ T5931] Registered device PCTV Systems picoStick (74e) [ 2690.314157][T31738] netlink: 'syz.5.5036': attribute type 4 has an invalid length. [ 2690.361797][T31738] netlink: 'syz.5.5036': attribute type 4 has an invalid length. [ 2690.678440][T31744] netlink: 'syz.2.5038': attribute type 4 has an invalid length. [ 2690.725695][T31743] xt_NFQUEUE: number of total queues is 0 [ 2690.830246][T31745] binder: 31725:31745 ioctl c0306201 200000000640 returned -22 [ 2690.914162][T31746] netlink: 'syz.2.5038': attribute type 4 has an invalid length. [ 2691.571282][T14323] usb 5-1: USB disconnect, device number 29 [ 2691.636727][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2691.643569][T14323] as10x_usb: device has been disconnected [ 2692.987107][T31763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2693.001941][T31763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2693.015108][T31764] xt_nat: multiple ranges no longer supported [ 2694.300688][T31770] netlink: 'syz.4.5040': attribute type 4 has an invalid length. [ 2694.314205][T31771] netlink: 'syz.0.5041': attribute type 4 has an invalid length. [ 2694.354814][T31771] netlink: 'syz.0.5041': attribute type 4 has an invalid length. [ 2697.391998][T31787] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2697.995231][T31795] netlink: 'syz.4.5048': attribute type 4 has an invalid length. [ 2698.040075][T31795] netlink: 'syz.4.5048': attribute type 4 has an invalid length. [ 2698.086559][T31794] xt_NFQUEUE: number of total queues is 0 [ 2699.191272][T14323] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2699.581017][T14323] usb 3-1: Using ep0 maxpacket: 16 [ 2699.650568][T14323] usb 3-1: config 0 has no interfaces? [ 2699.731621][T14323] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2699.754561][T14323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.878420][T14323] usb 3-1: Product: syz [ 2699.885586][T14323] usb 3-1: Manufacturer: syz [ 2699.890225][T14323] usb 3-1: SerialNumber: syz [ 2699.915638][T14323] usb 3-1: config 0 descriptor?? [ 2700.192792][T14323] usb 3-1: USB disconnect, device number 37 [ 2704.109993][T31827] xt_NFQUEUE: number of total queues is 0 [ 2705.340389][T31832] netlink: 'syz.4.5053': attribute type 4 has an invalid length. [ 2705.551349][T31835] netlink: 'syz.4.5053': attribute type 4 has an invalid length. [ 2707.226959][T31850] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2707.284618][T31853] xt_NFQUEUE: number of total queues is 0 [ 2707.785444][T31855] netlink: 'syz.2.5059': attribute type 4 has an invalid length. [ 2707.813355][T31855] netlink: 'syz.2.5059': attribute type 4 has an invalid length. [ 2710.549363][T31875] xt_NFQUEUE: number of total queues is 0 [ 2712.018804][T31884] netlink: 'syz.3.5064': attribute type 4 has an invalid length. [ 2712.040754][T31884] netlink: 'syz.3.5064': attribute type 4 has an invalid length. [ 2712.465703][T31885] netlink: 'syz.5.5065': attribute type 4 has an invalid length. [ 2712.526093][T31886] netlink: 'syz.5.5065': attribute type 4 has an invalid length. [ 2713.345831][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.354245][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.617057][T31895] xt_NFQUEUE: number of total queues is 0 [ 2713.745157][T31896] netlink: 'syz.4.5070': attribute type 4 has an invalid length. [ 2713.908842][T31897] netlink: 'syz.4.5070': attribute type 4 has an invalid length. [ 2714.771123][T14323] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2714.922176][T14323] usb 4-1: Using ep0 maxpacket: 8 [ 2714.929880][T14323] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2714.938603][T14323] usb 4-1: config 0 has no interface number 0 [ 2714.966388][T14323] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2714.991350][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.091651][T14323] usb 4-1: Product: syz [ 2715.131431][T14323] usb 4-1: Manufacturer: syz [ 2715.163422][T14323] usb 4-1: SerialNumber: syz [ 2715.231723][T14323] usb 4-1: config 0 descriptor?? [ 2715.406532][T14323] as10x_usb: device has been detected [ 2715.457761][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2715.654595][T14323] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2715.800953][T14323] as10x_usb: error during firmware upload part1 [ 2715.871961][T14323] Registered device PCTV Systems picoStick (74e) [ 2717.532205][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2717.581617][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2717.611861][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2717.623059][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2717.630770][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2717.672554][T10910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2717.680054][T10910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2717.687823][T10910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2717.699947][T10910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2717.708285][T10910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2717.995779][ T5931] usb 4-1: USB disconnect, device number 61 [ 2718.104704][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2718.135546][ T5931] as10x_usb: device has been disconnected [ 2718.397619][T31933] binder: 31920:31933 ioctl c0306201 200000000640 returned -22 [ 2718.883258][T31937] netlink: 'syz.4.5078': attribute type 4 has an invalid length. [ 2718.997959][T31939] netlink: 'syz.4.5078': attribute type 4 has an invalid length. [ 2719.823090][T10910] Bluetooth: hci5: command tx timeout [ 2720.363531][T31930] chnl_net:caif_netlink_parms(): no params data found [ 2721.122748][T31953] binder: 31941:31953 ioctl c0306201 200000000640 returned -22 [ 2721.230590][T31930] bridge0: port 1(bridge_slave_0) entered blocking state [ 2721.313305][T31930] bridge0: port 1(bridge_slave_0) entered disabled state [ 2721.320658][T31930] bridge_slave_0: entered allmulticast mode [ 2721.422777][T31930] bridge_slave_0: entered promiscuous mode [ 2721.491822][T31930] bridge0: port 2(bridge_slave_1) entered blocking state [ 2721.559368][T31930] bridge0: port 2(bridge_slave_1) entered disabled state [ 2721.568854][T31930] bridge_slave_1: entered allmulticast mode [ 2721.588625][T31930] bridge_slave_1: entered promiscuous mode [ 2721.912066][T10910] Bluetooth: hci5: command tx timeout [ 2722.270710][T31930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2722.421478][T31930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2722.659710][T31963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2722.719587][T31963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2722.774991][T31963] xt_socket: unknown flags 0xc [ 2723.090277][T31930] team0: Port device team_slave_0 added [ 2723.111171][T14323] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2723.143105][T31930] team0: Port device team_slave_1 added [ 2723.281579][T14323] usb 4-1: Using ep0 maxpacket: 16 [ 2723.364908][T14323] usb 4-1: config 0 has no interfaces? [ 2723.394590][T14323] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2723.606834][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2723.641812][T14323] usb 4-1: Product: syz [ 2723.646026][T14323] usb 4-1: Manufacturer: syz [ 2723.650765][T14323] usb 4-1: SerialNumber: syz [ 2723.832057][T14323] usb 4-1: config 0 descriptor?? [ 2723.981969][T10910] Bluetooth: hci5: command tx timeout [ 2724.046547][T31975] netlink: 'syz.4.5083': attribute type 4 has an invalid length. [ 2724.163640][T31930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2724.212492][ T5931] usb 4-1: USB disconnect, device number 62 [ 2724.220375][T31930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2724.303315][T31977] netlink: 'syz.4.5083': attribute type 4 has an invalid length. [ 2724.367017][T31930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2724.520216][T31930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2724.542605][T31930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2724.883272][T31930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2726.061373][T10910] Bluetooth: hci5: command tx timeout [ 2726.450019][T31930] hsr_slave_0: entered promiscuous mode [ 2726.549006][T31930] hsr_slave_1: entered promiscuous mode [ 2726.566838][T31930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2726.613602][T31930] Cannot create hsr debugfs directory [ 2726.938018][T31986] xt_NFQUEUE: number of total queues is 0 [ 2728.981134][T14323] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2729.134293][T14323] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2729.214808][T14323] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2729.330275][T14323] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2729.362845][T31930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2729.421522][T14323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.531364][T31992] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2729.550039][T14323] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2729.578080][T31930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2729.652404][T31930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2729.701752][T31994] binder: 31979:31994 ioctl c0306201 200000000640 returned -22 [ 2729.769542][T31930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2729.865979][T32003] netlink: 'syz.5.5087': attribute type 4 has an invalid length. [ 2729.957529][T32005] netlink: 'syz.5.5087': attribute type 4 has an invalid length. [ 2730.005453][T32006] xt_NFQUEUE: number of total queues is 0 [ 2731.662976][T14323] usb 5-1: USB disconnect, device number 30 [ 2731.816729][T31930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2732.017204][T31930] 8021q: adding VLAN 0 to HW filter on device team0 [ 2732.064362][T14826] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.071529][T14826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2732.182113][T14826] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.189296][T14826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2732.892136][T32024] xt_NFQUEUE: number of total queues is 0 [ 2733.021816][T31930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2733.382986][T31930] veth0_vlan: entered promiscuous mode [ 2733.399286][T31930] veth1_vlan: entered promiscuous mode [ 2733.653899][T32030] xt_NFQUEUE: number of total queues is 0 [ 2733.737882][T31930] veth0_macvtap: entered promiscuous mode [ 2734.077164][T31930] veth1_macvtap: entered promiscuous mode [ 2734.462832][T31930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2734.546475][T31930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2734.777000][T31930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.811753][T31930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.855033][T31930] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2734.876459][T31930] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2735.393616][T32037] netlink: 'syz.4.5091': attribute type 4 has an invalid length. [ 2735.522848][T32038] netlink: 'syz.4.5091': attribute type 4 has an invalid length. [ 2736.027831][T23559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2736.089796][T23559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2736.372329][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2736.456593][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2738.103692][T32055] binder: 32050:32055 ioctl c0306201 200000000640 returned -22 [ 2739.074407][T32056] netlink: 'syz.3.5095': attribute type 4 has an invalid length. [ 2739.126576][T32058] netlink: 'syz.3.5095': attribute type 4 has an invalid length. [ 2740.845927][T32069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2740.858730][T32069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.947192][T32069] xt_socket: unknown flags 0xc [ 2741.120961][ T5931] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2742.050647][T32072] netlink: 'syz.4.5096': attribute type 4 has an invalid length. [ 2742.105686][T32076] netlink: 'syz.4.5096': attribute type 4 has an invalid length. [ 2742.311031][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 2742.344281][ T5931] usb 4-1: config 0 has no interfaces? [ 2743.564540][ T5931] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2743.720907][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2743.877662][ T5931] usb 4-1: Product: syz [ 2744.009277][ T5931] usb 4-1: Manufacturer: syz [ 2744.151011][ T5931] usb 4-1: SerialNumber: syz [ 2744.198609][ T5931] usb 4-1: config 0 descriptor?? [ 2744.246352][ T5931] usb 4-1: can't set config #0, error -71 [ 2744.321196][ T5931] usb 4-1: USB disconnect, device number 63 [ 2744.701894][ T5931] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2744.951324][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 2744.962934][ T5931] usb 4-1: config 0 has no interfaces? [ 2745.294046][ T5931] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2745.342755][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.355692][ T5931] usb 4-1: Product: syz [ 2745.359895][ T5931] usb 4-1: Manufacturer: syz [ 2745.388269][ T5931] usb 4-1: SerialNumber: syz [ 2745.402032][ T5931] usb 4-1: config 0 descriptor?? [ 2746.791306][T14323] usb 4-1: USB disconnect, device number 64 [ 2747.851033][ T5931] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2748.082471][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 2748.131758][ T5931] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 2748.366806][ T5931] usb 3-1: config 0 has no interface number 0 [ 2748.402054][ T5931] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2748.440042][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.466955][ T5931] usb 3-1: Product: syz [ 2748.485192][ T5931] usb 3-1: Manufacturer: syz [ 2748.489854][ T5931] usb 3-1: SerialNumber: syz [ 2748.587743][ T5931] usb 3-1: config 0 descriptor?? [ 2748.607891][ T5931] as10x_usb: device has been detected [ 2748.628417][ T5931] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2748.768206][ T5931] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2749.034134][ T5931] as10x_usb: error during firmware upload part1 [ 2749.283657][ T5931] Registered device PCTV Systems picoStick (74e) [ 2750.721064][T22705] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2750.972421][T25535] usb 3-1: USB disconnect, device number 38 [ 2750.981425][T22705] usb 7-1: Using ep0 maxpacket: 16 [ 2751.000803][T22705] usb 7-1: config 0 has no interfaces? [ 2751.013562][T22705] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2751.023182][T22705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2751.031744][T22705] usb 7-1: Product: syz [ 2751.036891][T22705] usb 7-1: Manufacturer: syz [ 2751.085950][T22705] usb 7-1: SerialNumber: syz [ 2751.095706][T22705] usb 7-1: config 0 descriptor?? [ 2751.132720][T25535] Unregistered device PCTV Systems picoStick (74e) [ 2751.189961][T25535] as10x_usb: device has been disconnected [ 2751.353512][T32039] usb 7-1: USB disconnect, device number 2 [ 2751.755961][T32131] xt_NFQUEUE: number of total queues is 0 [ 2753.391416][T32138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.453076][T32138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.511431][T32039] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2753.519244][T25535] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2754.571339][T32039] usb 4-1: Using ep0 maxpacket: 8 [ 2754.752842][T32039] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2754.801760][T32039] usb 4-1: config 0 has no interface number 0 [ 2754.818935][T25535] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2754.853807][T32039] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2754.871417][T25535] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2754.892309][T32039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.916024][T25535] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2754.928941][T32039] usb 4-1: Product: syz [ 2754.944731][T32039] usb 4-1: Manufacturer: syz [ 2754.964916][T25535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.974253][T32039] usb 4-1: SerialNumber: syz [ 2755.011883][T32039] usb 4-1: config 0 descriptor?? [ 2755.032690][T32137] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 2755.157884][T32039] as10x_usb: device has been detected [ 2755.211900][T25535] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2755.238846][T32039] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2755.507162][T32039] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2755.619172][T32039] as10x_usb: error during firmware upload part1 [ 2755.632372][T32039] Registered device PCTV Systems picoStick (74e) [ 2756.841313][T32039] usb 7-1: USB disconnect, device number 3 [ 2756.920941][T32155] xt_NFQUEUE: number of total queues is 0 [ 2756.965800][T25535] usb 4-1: USB disconnect, device number 65 [ 2757.107332][T25535] Unregistered device PCTV Systems picoStick (74e) [ 2757.138741][T25535] as10x_usb: device has been disconnected [ 2757.159092][T32159] binder: 32141:32159 ioctl c0306201 200000000640 returned -22 [ 2758.016318][T32163] netlink: 'syz.3.5120': attribute type 4 has an invalid length. [ 2758.241203][ T5931] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2758.451764][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 2758.712770][ T5931] usb 5-1: config 0 has no interfaces? [ 2758.742564][ T5931] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2758.751976][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2758.781271][ T5931] usb 5-1: Product: syz [ 2758.792029][ T5931] usb 5-1: Manufacturer: syz [ 2758.796674][ T5931] usb 5-1: SerialNumber: syz [ 2758.831705][ T5931] usb 5-1: config 0 descriptor?? [ 2759.124459][ T5931] usb 5-1: USB disconnect, device number 31 [ 2759.451422][T32171] netlink: 'syz.3.5120': attribute type 4 has an invalid length. [ 2759.803882][T32172] netlink: 'syz.6.5118': attribute type 4 has an invalid length. [ 2759.902364][T32173] netlink: 'syz.6.5118': attribute type 4 has an invalid length. [ 2760.721273][T25535] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2761.048358][T25535] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2761.102807][T32181] input: syz0 as /devices/virtual/input/input150 [ 2761.133889][T32181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2761.208024][T25535] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2761.251226][T25535] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2761.296364][T25535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.323792][T32175] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2761.361104][T25535] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2762.524356][T32039] usb 3-1: USB disconnect, device number 39 [ 2763.514576][T32199] netlink: 'syz.6.5124': attribute type 4 has an invalid length. [ 2763.624218][T32199] netlink: 'syz.6.5124': attribute type 4 has an invalid length. [ 2764.901157][T32209] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2765.172341][T32211] input: syz0 as /devices/virtual/input/input151 [ 2766.130299][T32221] input: syz0 as /devices/virtual/input/input152 [ 2766.250458][T32222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2768.768819][T32227] input: syz0 as /devices/virtual/input/input153 [ 2768.886100][T32227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2769.942243][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2770.102051][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 2770.151731][ T10] usb 3-1: config 0 has no interfaces? [ 2770.161218][ T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2770.170750][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2770.221420][ T10] usb 3-1: Product: syz [ 2770.265455][ T10] usb 3-1: Manufacturer: syz [ 2770.270088][ T10] usb 3-1: SerialNumber: syz [ 2770.296613][ T10] usb 3-1: config 0 descriptor?? [ 2770.547638][ T10] usb 3-1: USB disconnect, device number 40 [ 2770.612230][T32239] input: syz0 as /devices/virtual/input/input154 [ 2770.621485][T14323] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2770.821888][T14323] usb 7-1: Using ep0 maxpacket: 8 [ 2770.856253][T14323] usb 7-1: config 0 has an invalid interface number: 130 but max is 0 [ 2770.909310][T14323] usb 7-1: config 0 has no interface number 0 [ 2770.946116][T14323] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2770.997261][T14323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.009200][T14323] usb 7-1: Product: syz [ 2771.015960][T14323] usb 7-1: Manufacturer: syz [ 2771.025150][T14323] usb 7-1: SerialNumber: syz [ 2771.048884][T14323] usb 7-1: config 0 descriptor?? [ 2771.118893][T14323] as10x_usb: device has been detected [ 2771.160426][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2771.319925][T14323] usb 7-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2771.353160][T14323] as10x_usb: error during firmware upload part1 [ 2771.359954][T14323] Registered device PCTV Systems picoStick (74e) [ 2773.164438][T14323] usb 7-1: USB disconnect, device number 4 [ 2773.325873][T14323] Unregistered device PCTV Systems picoStick (74e) [ 2773.368589][T14323] as10x_usb: device has been disconnected [ 2773.933540][T32259] input: syz0 as /devices/virtual/input/input155 [ 2774.067633][T32262] binder: 32245:32262 ioctl c0306201 200000000640 returned -22 [ 2774.331010][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2774.343972][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2774.357951][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2774.417288][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2774.426452][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2774.592231][T25535] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2774.785310][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.791831][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.291559][T25535] usb 7-1: config 0 has no interfaces? [ 2775.431992][T25535] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2775.441180][T25535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.449169][T25535] usb 7-1: Product: syz [ 2775.453796][T25535] usb 7-1: Manufacturer: syz [ 2775.458401][T25535] usb 7-1: SerialNumber: syz [ 2775.465463][T25535] usb 7-1: config 0 descriptor?? [ 2775.743076][T32266] xt_socket: unknown flags 0xc [ 2776.461413][ T5856] Bluetooth: hci4: command tx timeout [ 2778.554983][ T5856] Bluetooth: hci4: command tx timeout [ 2779.227631][T32267] chnl_net:caif_netlink_parms(): no params data found [ 2779.401089][T32281] netlink: 'syz.5.5141': attribute type 4 has an invalid length. [ 2779.635763][T32282] netlink: 'syz.5.5141': attribute type 4 has an invalid length. [ 2780.161110][T25535] usb 7-1: USB disconnect, device number 5 [ 2780.621050][ T5856] Bluetooth: hci4: command tx timeout [ 2782.701034][ T5856] Bluetooth: hci4: command tx timeout [ 2783.005244][T32267] bridge0: port 1(bridge_slave_0) entered blocking state [ 2783.081280][T32267] bridge0: port 1(bridge_slave_0) entered disabled state [ 2783.088665][T32267] bridge_slave_0: entered allmulticast mode [ 2783.177826][T32267] bridge_slave_0: entered promiscuous mode [ 2783.272417][T32267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2783.322857][T32267] bridge0: port 2(bridge_slave_1) entered disabled state [ 2783.330235][T32267] bridge_slave_1: entered allmulticast mode [ 2783.438727][T32267] bridge_slave_1: entered promiscuous mode [ 2783.838121][T32267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2783.968477][T32267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2784.582664][T32307] input: syz0 as /devices/virtual/input/input156 [ 2784.737329][T32267] team0: Port device team_slave_0 added [ 2784.815578][T32309] netlink: 'syz.3.5144': attribute type 4 has an invalid length. [ 2784.860031][T32309] netlink: 'syz.3.5144': attribute type 4 has an invalid length. [ 2784.894796][T32267] team0: Port device team_slave_1 added [ 2785.471401][T32267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2785.478775][T32267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2785.659092][T32267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2785.768141][T32267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2785.848763][T32267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2786.011202][T32267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2786.049684][T10910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2786.064625][T10910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2786.072611][T10910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2786.080695][T10910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2786.088428][T10910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2786.410403][T32267] hsr_slave_0: entered promiscuous mode [ 2786.429066][T32267] hsr_slave_1: entered promiscuous mode [ 2786.529788][T32267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2786.537757][T32267] Cannot create hsr debugfs directory [ 2787.781085][T14323] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2788.021354][T14323] usb 4-1: Using ep0 maxpacket: 16 [ 2788.141744][ T5856] Bluetooth: hci1: command tx timeout [ 2788.438464][T32326] input: syz0 as /devices/virtual/input/input157 [ 2788.800038][T14323] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 2788.823826][T14323] usb 4-1: config 0 has no interface number 0 [ 2788.914229][T14323] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2788.923733][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2789.021604][T14323] usb 4-1: Product: syz [ 2789.077385][T14323] usb 4-1: Manufacturer: syz [ 2789.257471][T32330] binder: 32312:32330 ioctl c0306201 200000000640 returned -22 [ 2789.283436][T14323] usb 4-1: SerialNumber: syz [ 2789.431678][T14323] usb 4-1: config 0 descriptor?? [ 2789.624439][T32267] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2789.731303][T32267] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2789.807910][T32311] chnl_net:caif_netlink_parms(): no params data found [ 2790.168872][T32267] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2790.224028][T32267] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2790.231648][ T5856] Bluetooth: hci1: command tx timeout [ 2791.473691][T32311] bridge0: port 1(bridge_slave_0) entered blocking state [ 2791.501240][T32311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2791.508649][T32311] bridge_slave_0: entered allmulticast mode [ 2791.564700][T32311] bridge_slave_0: entered promiscuous mode [ 2791.624162][T32311] bridge0: port 2(bridge_slave_1) entered blocking state [ 2791.653942][T32311] bridge0: port 2(bridge_slave_1) entered disabled state [ 2791.698597][T32311] bridge_slave_1: entered allmulticast mode [ 2791.737757][T25535] usb 4-1: USB disconnect, device number 66 [ 2791.758258][T32311] bridge_slave_1: entered promiscuous mode [ 2791.934710][T32350] syz.5.5151: attempt to access beyond end of device [ 2791.934710][T32350] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2792.135476][T32352] syz.6.5150: attempt to access beyond end of device [ 2792.135476][T32352] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2792.247452][T32311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2792.277569][T32311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2792.303460][ T5856] Bluetooth: hci1: command tx timeout [ 2793.151601][T32311] team0: Port device team_slave_0 added [ 2793.225603][T32311] team0: Port device team_slave_1 added [ 2794.381202][ T5856] Bluetooth: hci1: command tx timeout [ 2794.534581][T32311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2794.551655][T32311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2794.651046][T32311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2794.676055][T32267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2794.684280][T32311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2794.742469][T32311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2794.958954][T32311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2795.438495][T32311] hsr_slave_0: entered promiscuous mode [ 2795.463788][T32311] hsr_slave_1: entered promiscuous mode [ 2795.531710][T32311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2795.557702][T32311] Cannot create hsr debugfs directory [ 2795.595769][T32267] 8021q: adding VLAN 0 to HW filter on device team0 [ 2795.951290][T32364] input: syz0 as /devices/virtual/input/input158 [ 2796.073387][T30595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2796.080626][T30595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2796.372252][T30595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.379461][T30595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2796.581031][T14323] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2796.794906][T14323] usb 4-1: Using ep0 maxpacket: 8 [ 2796.823206][T14323] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2796.833482][T14323] usb 4-1: config 0 has no interface number 0 [ 2796.842627][T14323] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2796.852185][T14323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.860240][T14323] usb 4-1: Product: syz [ 2796.865330][T14323] usb 4-1: Manufacturer: syz [ 2796.870016][T14323] usb 4-1: SerialNumber: syz [ 2796.931464][T14323] usb 4-1: config 0 descriptor?? [ 2796.948375][T14323] as10x_usb: device has been detected [ 2796.960120][T14323] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2797.117415][T14323] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2797.189630][T14323] as10x_usb: error during firmware upload part1 [ 2797.197953][T14323] Registered device PCTV Systems picoStick (74e) [ 2797.525933][T32267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2798.157671][T32311] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2798.310285][T32311] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2798.402142][T32311] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2798.451547][T32311] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2798.662879][T32267] veth0_vlan: entered promiscuous mode [ 2798.834712][T32267] veth1_vlan: entered promiscuous mode [ 2799.099765][T32267] veth0_macvtap: entered promiscuous mode [ 2799.111821][T32385] syz.5.5156: attempt to access beyond end of device [ 2799.111821][T32385] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2799.344762][T32267] veth1_macvtap: entered promiscuous mode [ 2799.615991][T32267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2799.843272][T32267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2799.867557][T32267] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.988647][T32267] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.047751][T32267] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.082215][T32267] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2800.099069][T25535] usb 4-1: USB disconnect, device number 67 [ 2800.107113][T32311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2800.208121][T25535] Unregistered device PCTV Systems picoStick (74e) [ 2800.211597][T25535] as10x_usb: device has been disconnected [ 2800.607192][T32311] 8021q: adding VLAN 0 to HW filter on device team0 [ 2801.023246][T32390] netlink: 'syz.6.5157': attribute type 4 has an invalid length. [ 2801.296782][T32391] netlink: 'syz.6.5157': attribute type 4 has an invalid length. [ 2801.313454][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2801.320695][T14817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2801.408246][T14817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2801.460963][T14817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2801.710065][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2801.717268][T14817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2801.757986][T14817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2801.811958][T14817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2801.924109][T32396] input: syz0 as /devices/virtual/input/input159 [ 2802.176068][T32397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2802.354615][T32311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2802.875416][T32407] input: syz0 as /devices/virtual/input/input160 [ 2802.921123][T32407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2802.983976][T32311] veth0_vlan: entered promiscuous mode [ 2803.056193][T32311] veth1_vlan: entered promiscuous mode [ 2803.472123][T32311] veth0_macvtap: entered promiscuous mode [ 2803.508177][T32311] veth1_macvtap: entered promiscuous mode [ 2803.815989][T32311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2803.937724][T32311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2804.127435][T32311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.236337][T32311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.301312][T32311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2804.310080][T32311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2805.418963][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2805.459541][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2805.776222][T14826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2805.791877][T14826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2806.258983][T32418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2807.003676][T32425] netlink: 'syz.3.5161': attribute type 4 has an invalid length. [ 2807.063296][T32426] netlink: 'syz.3.5161': attribute type 4 has an invalid length. [ 2807.326371][T32431] netlink: 'syz.6.5160': attribute type 4 has an invalid length. [ 2807.355908][T32431] netlink: 'syz.6.5160': attribute type 4 has an invalid length. [ 2808.447813][T32433] netlink: 'syz.7.5162': attribute type 4 has an invalid length. [ 2808.505828][T32434] netlink: 'syz.7.5162': attribute type 4 has an invalid length. [ 2810.321888][T32440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2810.336209][T32440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2810.830903][T22705] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2810.870969][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2811.060950][T22705] usb 4-1: Using ep0 maxpacket: 8 [ 2811.068177][T22705] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 2811.077265][T22705] usb 4-1: config 0 has no interface number 0 [ 2811.115783][T22705] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2811.128916][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 2811.151336][T22705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.171322][ T10] usb 7-1: config 0 has an invalid interface number: 130 but max is 0 [ 2811.281072][ T10] usb 7-1: config 0 has no interface number 0 [ 2811.287545][T22705] usb 4-1: Product: syz [ 2811.293309][T22705] usb 4-1: Manufacturer: syz [ 2811.299820][T22705] usb 4-1: SerialNumber: syz [ 2811.305427][ T10] usb 7-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 2811.315017][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.323300][ T10] usb 7-1: Product: syz [ 2811.327590][ T10] usb 7-1: Manufacturer: syz [ 2811.401129][ T10] usb 7-1: SerialNumber: syz [ 2811.604446][T22705] usb 4-1: config 0 descriptor?? [ 2811.629471][ T10] usb 7-1: config 0 descriptor?? [ 2811.657479][T22705] as10x_usb: device has been detected [ 2811.668442][ T10] as10x_usb: device has been detected [ 2811.674627][T22705] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2811.686088][ T10] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2811.757242][T22705] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2811.814184][ T10] usb 7-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 2811.833461][T22705] as10x_usb: error during firmware upload part1 [ 2811.858897][T22705] Registered device PCTV Systems picoStick (74e) [ 2811.860702][ T10] as10x_usb: error during firmware upload part1 [ 2812.024101][ T10] Registered device PCTV Systems picoStick (74e) [ 2813.147001][T32476] xt_NFQUEUE: number of total queues is 0 [ 2813.532317][T32478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2815.679320][ T5931] usb 4-1: USB disconnect, device number 68 [ 2815.848714][ T5931] Unregistered device PCTV Systems picoStick (74e) [ 2815.850566][ T5931] as10x_usb: device has been disconnected [ 2816.405289][ T10] usb 7-1: USB disconnect, device number 6 [ 2816.575910][T32487] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2816.603727][ T10] Unregistered device PCTV Systems picoStick (74e) [ 2816.644735][ T10] as10x_usb: device has been disconnected [ 2817.104095][T32493] input: syz0 as /devices/virtual/input/input162 [ 2817.129995][T32493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2818.448406][T32504] input: syz0 as /devices/virtual/input/input163 [ 2818.481638][T32504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2821.601454][T22705] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2821.811935][T22705] usb 4-1: Using ep0 maxpacket: 16 [ 2821.858822][T22705] usb 4-1: config 0 has no interfaces? [ 2822.068230][T22705] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2822.120463][T22705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2822.128886][T22705] usb 4-1: Product: syz [ 2822.133266][T22705] usb 4-1: Manufacturer: syz [ 2822.138624][T22705] usb 4-1: SerialNumber: syz [ 2822.151496][T22705] usb 4-1: config 0 descriptor?? [ 2822.539886][T22705] usb 4-1: USB disconnect, device number 69 [ 2823.837571][T32529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2824.551180][T32533] binder: 32516:32533 ioctl c0306201 200000000640 returned -22 [ 2826.477276][T32542] syz.8.5183: attempt to access beyond end of device [ 2826.477276][T32542] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2826.774176][T32547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2827.827691][T32553] syz.5.5185: attempt to access beyond end of device [ 2827.827691][T32553] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2830.377745][T32573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2831.075609][T32569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2832.220990][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2832.390901][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 2832.554524][T32587] netlink: 'syz.5.5191': attribute type 23 has an invalid length. [ 2832.623347][ T5916] usb 7-1: config 0 has an invalid interface number: 53 but max is 0 [ 2832.697111][ T5916] usb 7-1: config 0 has no interface number 0 [ 2832.764102][ T5916] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2832.880986][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2832.981589][ T5916] usb 7-1: Product: syz [ 2833.013835][ T5916] usb 7-1: Manufacturer: syz [ 2833.051515][ T5916] usb 7-1: SerialNumber: syz [ 2833.110058][ T5916] usb 7-1: config 0 descriptor?? [ 2834.387896][T32595] input: syz0 as /devices/virtual/input/input166 [ 2834.618269][T32595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2835.267334][ T5916] usb 7-1: USB disconnect, device number 7 [ 2836.012220][T32604] syz.6.5195: attempt to access beyond end of device [ 2836.012220][T32604] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2836.095641][T32603] binder: 32588:32603 ioctl c0306201 0 returned -14 [ 2836.231594][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.238085][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.938481][T32610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.948003][T32610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2837.115161][T10910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2837.159205][T10910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2837.168132][T10910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2837.195272][T10910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2837.203115][T10910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2838.304560][T32619] input: syz0 as /devices/virtual/input/input167 [ 2838.318298][T32619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2839.009904][T32626] syz.8.5198: attempt to access beyond end of device [ 2839.009904][T32626] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2839.274192][ T5856] Bluetooth: hci6: command tx timeout [ 2839.395762][T32613] chnl_net:caif_netlink_parms(): no params data found [ 2840.885058][T32613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2840.909595][T32613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2840.971363][T32613] bridge_slave_0: entered allmulticast mode [ 2841.056153][T32613] bridge_slave_0: entered promiscuous mode [ 2841.115627][T32613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.142258][T32613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2841.149637][T32613] bridge_slave_1: entered allmulticast mode [ 2841.193371][T32613] bridge_slave_1: entered promiscuous mode [ 2841.353159][ T5856] Bluetooth: hci6: command tx timeout [ 2841.387960][T32638] netlink: 'syz.6.5199': attribute type 4 has an invalid length. [ 2841.457717][T32640] netlink: 'syz.6.5199': attribute type 4 has an invalid length. [ 2841.553854][T32641] xt_NFQUEUE: number of total queues is 0 [ 2841.766564][T32613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2841.836855][T32613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2842.661722][T32613] team0: Port device team_slave_0 added [ 2842.713826][T32613] team0: Port device team_slave_1 added [ 2843.235377][T32613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2843.291467][T32613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2843.435763][T32613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2843.519110][T31927] Bluetooth: hci5: command 0x0406 tx timeout [ 2843.525463][T31927] Bluetooth: hci6: command tx timeout [ 2843.574853][T32613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2843.582056][T32613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2843.650915][T32613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2844.490204][T32613] hsr_slave_0: entered promiscuous mode [ 2844.573561][T32613] hsr_slave_1: entered promiscuous mode [ 2844.598040][T32613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2844.731060][ T5931] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2844.840848][T32613] Cannot create hsr debugfs directory [ 2845.005958][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 2845.041687][ T5931] usb 7-1: config 0 has an invalid interface number: 53 but max is 0 [ 2845.142734][ T5931] usb 7-1: config 0 has no interface number 0 [ 2845.255805][ T5931] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2845.267037][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.353754][ T5931] usb 7-1: Product: syz [ 2845.403851][ T5931] usb 7-1: Manufacturer: syz [ 2845.408518][ T5931] usb 7-1: SerialNumber: syz [ 2845.627301][ T5856] Bluetooth: hci6: command tx timeout [ 2845.634591][T32662] netlink: 'syz.8.5201': attribute type 4 has an invalid length. [ 2845.698285][T32663] netlink: 'syz.8.5201': attribute type 4 has an invalid length. [ 2846.334934][ T5931] usb 7-1: config 0 descriptor?? [ 2847.571192][T22705] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2847.723261][T22705] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2847.734560][T22705] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2847.745327][T22705] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2847.861355][T22705] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.963048][T32667] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2848.072935][T22705] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2848.337599][T32676] syz.7.5205: attempt to access beyond end of device [ 2848.337599][T32676] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2848.523669][T28864] usb 9-1: USB disconnect, device number 2 [ 2848.763501][ T5931] usb 7-1: USB disconnect, device number 8 [ 2849.150834][T32613] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2849.226621][T32613] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2849.392844][T32682] syz.6.5206: attempt to access beyond end of device [ 2849.392844][T32682] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2849.500254][T32613] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2849.540189][T32613] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2850.054279][T32693] input: syz0 as /devices/virtual/input/input168 [ 2850.120088][T32694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2850.340416][T32613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2850.519975][T32613] 8021q: adding VLAN 0 to HW filter on device team0 [ 2850.574944][T14817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.582260][T14817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2850.695517][T14817] bridge0: port 2(bridge_slave_1) entered blocking state [ 2850.702890][T14817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2851.344016][T32613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2851.530407][ T5916] usb 6-1: USB disconnect, device number 122 [ 2852.143929][T32613] veth0_vlan: entered promiscuous mode [ 2852.291441][T32613] veth1_vlan: entered promiscuous mode [ 2852.515891][T32613] veth0_macvtap: entered promiscuous mode [ 2852.815549][T32613] veth1_macvtap: entered promiscuous mode [ 2853.403009][T32613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2853.435367][T32613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2853.458385][T32613] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.469025][T32613] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.492385][T32613] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.930924][T32613] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2854.017151][T32705] netlink: 'syz.7.5209': attribute type 4 has an invalid length. [ 2854.079284][T32710] xt_NFQUEUE: number of total queues is 0 [ 2854.095273][T32712] netlink: 'syz.7.5209': attribute type 4 has an invalid length. [ 2854.107671][T32646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2854.118980][T32646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2854.127283][T32646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2854.135901][T32646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2854.144051][T10910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2856.322084][T10910] Bluetooth: hci0: command tx timeout [ 2856.424193][T23565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2856.456200][T23565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.141853][T12650] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2857.328775][T12650] usb 9-1: Using ep0 maxpacket: 16 [ 2857.344425][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2857.382317][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2857.649931][T32713] chnl_net:caif_netlink_parms(): no params data found [ 2857.747352][T12650] usb 9-1: config 0 has an invalid interface number: 53 but max is 0 [ 2857.826261][T12650] usb 9-1: config 0 has no interface number 0 [ 2857.907116][T12650] usb 9-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2857.948385][T12650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2858.000749][T12650] usb 9-1: Product: syz [ 2858.023217][T12650] usb 9-1: Manufacturer: syz [ 2858.051022][T12650] usb 9-1: SerialNumber: syz [ 2858.160695][T12650] usb 9-1: config 0 descriptor?? [ 2858.365769][ T5916] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2858.393540][T10910] Bluetooth: hci0: command tx timeout [ 2858.408578][T32737] syz.7.5214: attempt to access beyond end of device [ 2858.408578][T32737] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2858.544777][ T5916] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2858.610120][ T5916] usb 10-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2858.799375][ T5916] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2858.810996][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2859.147357][ T5916] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2859.182127][ T5916] usb 10-1: invalid MIDI out EP 0 [ 2859.593214][T32713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2859.629051][ T5916] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2859.642529][T32673] udevd[32673]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2859.682339][T32713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2859.689757][T32713] bridge_slave_0: entered allmulticast mode [ 2859.862697][T32713] bridge_slave_0: entered promiscuous mode [ 2860.461551][T10910] Bluetooth: hci0: command tx timeout [ 2860.481431][T12650] usb 10-1: USB disconnect, device number 2 [ 2860.730921][T32713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2860.789419][T32713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.834367][T32713] bridge_slave_1: entered allmulticast mode [ 2860.856332][T32713] bridge_slave_1: entered promiscuous mode [ 2861.591024][T32754] input: syz0 as /devices/virtual/input/input169 [ 2861.629595][T32754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2861.866436][T32713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2861.941251][T32713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2862.151498][ T5916] usb 9-1: USB disconnect, device number 3 [ 2862.540924][T10910] Bluetooth: hci0: command tx timeout [ 2862.753083][T32713] team0: Port device team_slave_0 added [ 2862.928593][T32713] team0: Port device team_slave_1 added [ 2863.690924][ T5916] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2863.804162][T32713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2863.831485][T32713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2863.882249][T32713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2863.906317][T32713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2863.920520][ T5916] usb 9-1: Using ep0 maxpacket: 16 [ 2864.019978][T32713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2864.078922][ T5916] usb 9-1: config 0 has an invalid interface number: 53 but max is 0 [ 2864.160355][ T5916] usb 9-1: config 0 has no interface number 0 [ 2864.248610][ T5916] usb 9-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2864.325753][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.338207][T32713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2864.370965][ T5916] usb 9-1: Product: syz [ 2864.380665][ T5916] usb 9-1: Manufacturer: syz [ 2864.394875][ T5916] usb 9-1: SerialNumber: syz [ 2864.455260][ T5916] usb 9-1: config 0 descriptor?? [ 2865.728552][ T309] input: syz0 as /devices/virtual/input/input170 [ 2865.765464][ T308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2865.795905][T32713] hsr_slave_0: entered promiscuous mode [ 2865.831766][T32713] hsr_slave_1: entered promiscuous mode [ 2865.871924][T32713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2865.941066][T32713] Cannot create hsr debugfs directory [ 2866.517529][ T314] syz.6.5222: attempt to access beyond end of device [ 2866.517529][ T314] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2868.767223][T12650] usb 9-1: USB disconnect, device number 4 [ 2868.831988][ T326] syz.9.5224: attempt to access beyond end of device [ 2868.831988][ T326] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2869.891311][T14323] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2870.231382][T14323] usb 9-1: config 0 has no interfaces? [ 2870.379804][T14323] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2870.554314][T14323] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.672200][T14323] usb 9-1: Product: syz [ 2870.676418][T14323] usb 9-1: Manufacturer: syz [ 2870.850893][T14323] usb 9-1: SerialNumber: syz [ 2870.956805][T14323] usb 9-1: config 0 descriptor?? [ 2872.884472][ T353] xt_NFQUEUE: number of total queues is 0 [ 2874.425479][T32713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2874.480742][T12650] usb 9-1: USB disconnect, device number 5 [ 2874.556788][T32713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2874.763366][ T369] syz.7.5230: attempt to access beyond end of device [ 2874.763366][ T369] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2874.789240][T32713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2874.956367][T32713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2875.571142][T12650] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2875.921579][T12650] usb 9-1: Using ep0 maxpacket: 8 [ 2876.106270][T12650] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2876.173984][T12650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2876.315958][T12650] usb 9-1: Product: syz [ 2876.356858][T12650] usb 9-1: Manufacturer: syz [ 2876.375167][T12650] usb 9-1: SerialNumber: syz [ 2876.412959][T12650] usb 9-1: config 0 descriptor?? [ 2876.660001][T12650] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2876.679179][T32713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2876.806789][T32713] 8021q: adding VLAN 0 to HW filter on device team0 [ 2876.943486][T23565] bridge0: port 1(bridge_slave_0) entered blocking state [ 2876.950741][T23565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2876.977180][ T388] syz.9.5232: attempt to access beyond end of device [ 2876.977180][ T388] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2877.120518][T23559] bridge0: port 2(bridge_slave_1) entered blocking state [ 2877.127755][T23559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2877.713517][T12650] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2878.031787][T12650] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2878.190255][T32713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2878.191012][T12650] usb 7-1: Using ep0 maxpacket: 16 [ 2878.235146][T12650] usb 7-1: config 0 has an invalid interface number: 53 but max is 0 [ 2878.244264][T12650] usb 7-1: config 0 has no interface number 0 [ 2878.288908][T12650] usb 7-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 2878.298281][T12650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.324506][T12650] usb 7-1: Product: syz [ 2878.342665][T12650] usb 7-1: Manufacturer: syz [ 2878.379921][T12650] usb 7-1: SerialNumber: syz [ 2878.402192][T12650] usb 7-1: config 0 descriptor?? [ 2878.818408][T32713] veth0_vlan: entered promiscuous mode [ 2879.166259][T32713] veth1_vlan: entered promiscuous mode [ 2879.239001][ T408] syz.7.5234: attempt to access beyond end of device [ 2879.239001][ T408] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2879.290338][T12650] usb 9-1: USB disconnect, device number 6 [ 2879.607558][T32713] veth0_macvtap: entered promiscuous mode [ 2879.821297][T32713] veth1_macvtap: entered promiscuous mode [ 2879.845690][ T418] input: syz0 as /devices/virtual/input/input171 [ 2880.067009][ T418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2880.097171][T32713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2880.301940][T32713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2880.464390][T32713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.691015][T32713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.710220][T32713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2880.810962][T32713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2881.864651][T28571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2881.912451][T28571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2882.025158][ T428] syz.9.5236: attempt to access beyond end of device [ 2882.025158][ T428] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2882.334307][T14817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2882.415621][T14817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2882.917426][ T10] usb 7-1: USB disconnect, device number 9 [ 2885.489646][ T450] netlink: 'syz.6.5237': attribute type 4 has an invalid length. [ 2885.567891][ T450] netlink: 'syz.6.5237': attribute type 4 has an invalid length. [ 2898.169725][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.183164][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2900.225702][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 2908.541224][ T31] INFO: task syz.4.5119:32164 blocked for more than 143 seconds. [ 2909.974270][ T31] Not tainted 6.16.0-syzkaller #0 [ 2909.981908][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 2910.010226][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2910.036648][ T31] task:syz.4.5119 state:D stack:27496 pid:32164 tgid:32160 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 2910.157473][ T31] Call Trace: [ 2910.171058][ T31] [ 2910.174110][ T31] __schedule+0x16fd/0x4cf0 [ 2910.178698][ T31] ? schedule+0x165/0x360 [ 2910.221007][ T31] ? __pfx___schedule+0x10/0x10 [ 2910.225985][ T31] ? schedule+0x91/0x360 [ 2910.230280][ T31] schedule+0x165/0x360 [ 2910.270869][ T31] schedule_timeout+0x9a/0x270 [ 2910.275731][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2910.328952][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2910.360916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2910.366199][ T31] ? wait_for_completion+0x267/0x5d0 [ 2910.390135][ T31] wait_for_completion+0x2bf/0x5d0 [ 2910.400954][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2910.406681][ T31] ? __flush_work+0xd2/0xbc0 [ 2910.451225][ T31] ? __flush_work+0xd2/0xbc0 [ 2910.455920][ T31] __flush_work+0x9b9/0xbc0 [ 2910.460486][ T31] ? __flush_work+0xd2/0xbc0 [ 2910.500923][ T31] ? __pfx___flush_work+0x10/0x10 [ 2910.506036][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2910.537990][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2910.571361][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2910.577779][ T31] n_tty_poll+0x2db/0x740 [ 2910.601268][ T31] ? __pfx_n_tty_poll+0x10/0x10 [ 2910.606209][ T31] tty_poll+0xbb/0x160 [ 2910.610329][ T31] ? __pfx_tty_poll+0x10/0x10 [ 2910.628269][ T31] do_select+0x105e/0x17e0 [ 2910.651095][ T31] ? __page_table_check_zero+0xba/0x530 [ 2910.656736][ T31] ? do_select+0x881/0x17e0 [ 2910.681197][ T31] ? __pfx_do_select+0x10/0x10 [ 2910.686125][ T31] ? __pfx___pollwait+0x10/0x10 [ 2910.720905][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.725682][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.730416][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.782619][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.787403][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.806781][ T31] ? __pfx_pollwake+0x10/0x10 [ 2910.821388][ T31] core_sys_select+0x6dd/0xa20 [ 2910.826269][ T31] ? __pfx_core_sys_select+0x10/0x10 [ 2910.857399][ T31] ? __pfx_set_user_sigmask+0x10/0x10 [ 2910.876134][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2910.895859][ T31] __se_sys_pselect6+0x27a/0x300 [ 2910.911354][ T31] ? __pfx___se_sys_pselect6+0x10/0x10 [ 2910.916904][ T31] ? __x64_sys_pselect6+0x21/0xf0 [ 2910.933379][ T31] do_syscall_64+0xfa/0x3b0 [ 2910.937959][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2910.967682][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2910.974712][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2910.979447][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.012827][ T31] RIP: 0033:0x7f2a01f8e9a9 [ 2911.017306][ T31] RSP: 002b:00007f2a02d6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2911.061283][ T31] RAX: ffffffffffffffda RBX: 00007f2a021b6080 RCX: 00007f2a01f8e9a9 [ 2911.069449][ T31] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 2911.111455][ T31] RBP: 00007f2a02010d69 R08: 0000000000000000 R09: 0000000000000000 [ 2911.119508][ T31] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 2911.175305][ T31] R13: 0000000000000001 R14: 00007f2a021b6080 R15: 00007f2a022dfa28 [ 2911.221305][ T31] [ 2911.224471][ T31] INFO: task syz.4.5119:32166 blocked for more than 146 seconds. [ 2911.280859][ T31] Not tainted 6.16.0-syzkaller #0 [ 2911.286471][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2911.356575][ T31] task:syz.4.5119 state:D stack:27400 pid:32166 tgid:32160 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 2911.371914][ T31] Call Trace: [ 2911.375268][ T31] [ 2911.378259][ T31] __schedule+0x16fd/0x4cf0 [ 2911.391000][ T31] ? schedule+0x165/0x360 [ 2911.395424][ T31] ? __pfx___schedule+0x10/0x10 [ 2911.400338][ T31] ? schedule+0x91/0x360 [ 2911.420895][ T31] schedule+0x165/0x360 [ 2911.426329][ T31] schedule_timeout+0x9a/0x270 [ 2911.441014][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2911.446524][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2911.466814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2911.479902][ T31] ? wait_for_completion+0x267/0x5d0 [ 2911.491128][ T31] wait_for_completion+0x2bf/0x5d0 [ 2911.496335][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2911.517188][ T31] ? __flush_work+0xd2/0xbc0 [ 2911.528112][ T31] ? __flush_work+0xd2/0xbc0 [ 2911.539019][ T31] __flush_work+0x9b9/0xbc0 [ 2911.551192][ T31] ? __flush_work+0xd2/0xbc0 [ 2911.555855][ T31] ? __pfx___flush_work+0x10/0x10 [ 2911.581159][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 2911.586555][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2911.620870][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2911.627310][ T31] n_tty_poll+0x2db/0x740 [ 2911.672667][ T31] ? __pfx_n_tty_poll+0x10/0x10 [ 2911.677613][ T31] tty_poll+0xbb/0x160 [ 2911.696360][ T31] ? __pfx_tty_poll+0x10/0x10 [ 2911.721127][ T31] do_select+0x105e/0x17e0 [ 2911.725632][ T31] ? __page_table_check_zero+0xba/0x530 [ 2911.752924][ T31] ? do_select+0x881/0x17e0 [ 2911.757543][ T31] ? __pfx_do_select+0x10/0x10 [ 2911.793543][ T31] ? __pfx___pollwait+0x10/0x10 [ 2911.798506][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.821526][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.826447][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.851000][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.855770][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.860501][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.902136][ T31] ? __pfx_pollwake+0x10/0x10 [ 2911.906949][ T31] core_sys_select+0x6dd/0xa20 [ 2911.934479][ T31] ? __pfx_core_sys_select+0x10/0x10 [ 2911.939874][ T31] ? __pfx_set_user_sigmask+0x10/0x10 [ 2911.976997][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2912.011336][ T31] __se_sys_pselect6+0x27a/0x300 [ 2912.016371][ T31] ? __pfx___se_sys_pselect6+0x10/0x10 [ 2912.041477][ T31] ? __x64_sys_pselect6+0x21/0xf0 [ 2912.046595][ T31] do_syscall_64+0xfa/0x3b0 [ 2912.071225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2912.094649][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.120889][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2912.125670][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2912.150986][ T31] RIP: 0033:0x7f2a01f8e9a9 [ 2912.155501][ T31] RSP: 002b:00007f2a02d4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2912.205205][ T31] RAX: ffffffffffffffda RBX: 00007f2a021b6160 RCX: 00007f2a01f8e9a9 [ 2912.231057][ T31] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 2912.239119][ T31] RBP: 00007f2a02010d69 R08: 0000000000000000 R09: 0000000000000000 [ 2912.291155][ T31] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000 [ 2912.299210][ T31] R13: 0000000000000001 R14: 00007f2a021b6160 R15: 00007f2a022dfa28 [ 2912.341021][ T31] [ 2912.371097][ T31] [ 2912.371097][ T31] Showing all locks held in the system: [ 2912.378897][ T31] 1 lock held by khungtaskd/31: [ 2912.430949][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2912.461113][ T31] 2 locks held by getty/5609: [ 2912.465872][ T31] #0: ffff88814d7380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.531229][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2912.566918][ T31] 6 locks held by kworker/u8:8/6105: [ 2912.581125][ T31] 2 locks held by kworker/u8:1/28571: [ 2912.590497][ T31] 1 lock held by syz.0.5051/31807: [ 2912.621140][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.641335][ T31] 1 lock held by syz.0.5051/31808: [ 2912.646494][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.667272][ T31] 1 lock held by syz.4.5119/32164: [ 2912.682710][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.707753][ T31] 1 lock held by syz.4.5119/32166: [ 2912.717290][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.738370][ T31] 1 lock held by syz.2.5131/32230: [ 2912.751389][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.787706][ T31] 1 lock held by syz.2.5131/32231: [ 2912.817449][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.854639][ T31] 1 lock held by syz.3.5178/32512: [ 2912.859823][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.886583][ T31] 1 lock held by syz.3.5178/32513: [ 2912.911270][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.931058][ T31] 1 lock held by syz.5.5196/32608: [ 2912.936243][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2912.972585][ T31] 1 lock held by syz.5.5196/32609: [ 2912.977756][ T31] #0: ffff88803507f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2913.009696][ T31] 4 locks held by dhcpcd-run-hook/571: [ 2913.026651][ T31] [ 2913.029039][ T31] ============================================= [ 2913.029039][ T31] [ 2913.080872][ T31] NMI backtrace for cpu 1 [ 2913.080902][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2913.080929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2913.080941][ T31] Call Trace: [ 2913.080951][ T31] [ 2913.080963][ T31] dump_stack_lvl+0x189/0x250 [ 2913.080995][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2913.081054][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2913.081080][ T31] ? __pfx__printk+0x10/0x10 [ 2913.081124][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2913.081163][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2913.081193][ T31] ? _printk+0xcf/0x120 [ 2913.081226][ T31] ? __pfx__printk+0x10/0x10 [ 2913.081260][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2913.081286][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2913.081323][ T31] watchdog+0xfee/0x1030 [ 2913.081345][ T31] ? watchdog+0x1de/0x1030 [ 2913.081375][ T31] kthread+0x711/0x8a0 [ 2913.081410][ T31] ? __pfx_watchdog+0x10/0x10 [ 2913.081430][ T31] ? __pfx_kthread+0x10/0x10 [ 2913.081465][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2913.081487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2913.081509][ T31] ? __pfx_kthread+0x10/0x10 [ 2913.081542][ T31] ret_from_fork+0x3fc/0x770 [ 2913.081569][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2913.081598][ T31] ? __switch_to_asm+0x39/0x70 [ 2913.081628][ T31] ? __switch_to_asm+0x33/0x70 [ 2913.081654][ T31] ? __pfx_kthread+0x10/0x10 [ 2913.081694][ T31] ret_from_fork_asm+0x1a/0x30 [ 2913.081741][ T31] [ 2913.081749][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2913.244954][ C0] NMI backtrace for cpu 0 [ 2913.244973][ C0] CPU: 0 UID: 0 PID: 6105 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2913.244993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2913.245013][ C0] Workqueue: events_unbound flush_to_ldisc [ 2913.245046][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 2913.245064][ C0] Code: e8 1e f8 79 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 09 dc fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 2913.245080][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00000006 [ 2913.245095][ C0] RAX: 1ffffffff33bed00 RBX: 00000000000002e8 RCX: 0000000000000000 [ 2913.245107][ C0] RDX: 00000000000002e8 RSI: 0000000000000000 RDI: 0000000000000020 [ 2913.245118][ C0] RBP: ffffffff99df6e50 R08: ffff888025880000 R09: 0000000000000004 [ 2913.245130][ C0] R10: 0000000000000003 R11: ffffffff85462e70 R12: dffffc0000000000 [ 2913.245143][ C0] R13: dffffc0000000000 R14: ffffffff99df6e40 R15: 0000000000000000 [ 2913.245156][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 2913.245170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2913.245182][ C0] CR2: 00007f06e9f7c260 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2913.245197][ C0] Call Trace: [ 2913.245206][ C0] [ 2913.245216][ C0] serial8250_read_char+0x65/0x380 [ 2913.245243][ C0] serial8250_handle_irq+0x4fb/0xbb0 [ 2913.245273][ C0] serial8250_default_handle_irq+0xbf/0x1b0 [ 2913.245293][ C0] serial8250_interrupt+0xa2/0x1d0 [ 2913.245315][ C0] ? __pfx_serial8250_interrupt+0x10/0x10 [ 2913.245338][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 2913.245369][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 2913.245397][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2913.245424][ C0] handle_irq_event+0x8b/0x1e0 [ 2913.245447][ C0] ? handle_edge_irq+0x25d/0x9c0 [ 2913.245469][ C0] handle_edge_irq+0x267/0x9c0 [ 2913.245496][ C0] __common_interrupt+0x140/0x250 [ 2913.245515][ C0] common_interrupt+0xb6/0xe0 [ 2913.245539][ C0] [ 2913.245545][ C0] [ 2913.245553][ C0] asm_common_interrupt+0x26/0x40 [ 2913.245571][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 2913.245589][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 f9 22 32 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 2913.245604][ C0] RSP: 0018:ffffc9000b8a7558 EFLAGS: 00000206 [ 2913.245618][ C0] RAX: ef961a40b26a4900 RBX: 0000000000000000 RCX: ef961a40b26a4900 [ 2913.245631][ C0] RDX: 0000000000000000 RSI: ffffffff8db8419f RDI: ffffffff8be28d80 [ 2913.245643][ C0] RBP: 00000000ffffffff R08: ffffc9000b8a77c7 R09: 0000000000000000 [ 2913.245654][ C0] R10: ffffc9000b8a77a0 R11: fffff52001714ef9 R12: 0000000000000246 [ 2913.245666][ C0] R13: ffff888025880000 R14: ffffffff8e13f1a0 R15: 0000000000000005 [ 2913.245692][ C0] __might_resched+0xf5/0x610 [ 2913.245716][ C0] ? __pfx___might_resched+0x10/0x10 [ 2913.245735][ C0] ? rcu_is_watching+0x15/0xb0 [ 2913.245759][ C0] ? n_tty_receive_char+0x790/0xc30 [ 2913.245790][ C0] __mutex_lock+0x106/0xe80 [ 2913.245816][ C0] ? n_tty_receive_buf_common+0xbe3/0x12f0 [ 2913.245838][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 2913.245869][ C0] n_tty_receive_buf_common+0xbe3/0x12f0 [ 2913.245926][ C0] tty_port_default_receive_buf+0x6e/0xa0 [ 2913.245954][ C0] flush_to_ldisc+0x24a/0x720 [ 2913.245983][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2913.246135][ C0] process_scheduled_works+0xae1/0x17b0 [ 2913.246175][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2913.246205][ C0] worker_thread+0x8a0/0xda0 [ 2913.246227][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2913.246249][ C0] ? __kthread_parkme+0x7b/0x200 [ 2913.246275][ C0] kthread+0x711/0x8a0 [ 2913.246300][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2913.246320][ C0] ? __pfx_kthread+0x10/0x10 [ 2913.246344][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2913.246360][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2913.246378][ C0] ? __pfx_kthread+0x10/0x10 [ 2913.246401][ C0] ret_from_fork+0x3fc/0x770 [ 2913.246421][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2913.246442][ C0] ? __switch_to_asm+0x39/0x70 [ 2913.246464][ C0] ? __switch_to_asm+0x33/0x70 [ 2913.246485][ C0] ? __pfx_kthread+0x10/0x10 [ 2913.246509][ C0] ret_from_fork_asm+0x1a/0x30 [ 2913.246540][ C0] [ 2914.943371][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2914.950254][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 2914.959989][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2914.970076][ T31] Call Trace: [ 2914.973364][ T31] [ 2914.976338][ T31] dump_stack_lvl+0x99/0x250 [ 2914.980941][ T31] ? __asan_memcpy+0x40/0x70 [ 2914.985561][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2914.990787][ T31] ? __pfx__printk+0x10/0x10 [ 2914.995412][ T31] panic+0x2db/0x790 [ 2914.999319][ T31] ? __pfx_panic+0x10/0x10 [ 2915.003755][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2915.009574][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2915.014970][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2915.021143][ T31] watchdog+0x102d/0x1030 [ 2915.025478][ T31] ? watchdog+0x1de/0x1030 [ 2915.029901][ T31] kthread+0x711/0x8a0 [ 2915.033986][ T31] ? __pfx_watchdog+0x10/0x10 [ 2915.038674][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.043289][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2915.048504][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2915.053738][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.058377][ T31] ret_from_fork+0x3fc/0x770 [ 2915.062986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2915.068308][ T31] ? __switch_to_asm+0x39/0x70 [ 2915.073084][ T31] ? __switch_to_asm+0x33/0x70 [ 2915.077866][ T31] ? __pfx_kthread+0x10/0x10 [ 2915.082477][ T31] ret_from_fork_asm+0x1a/0x30 [ 2915.087281][ T31] [ 2915.090701][ T31] Kernel Offset: disabled [ 2915.095035][ T31] Rebooting in 86400 seconds..