last executing test programs: 8m46.76478091s ago: executing program 2 (id=8): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) r3 = socket(0x18, 0xa, 0x0) r4 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0xbf48, 0x80, 0x0, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x3513, 0x742b, 0x0, 0x0, 0x0) 8m43.591321328s ago: executing program 2 (id=11): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x6c42, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r8, r8, 0x0, 0x8000002) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x2}}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e20, 0x8001, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x2c, 0x0, 0xee00}, {0x9687, 0x2, 0x10000, 0xd7a3, 0x6, 0x4, 0x40, 0x1}, {0x80000000, 0x5, 0x0, 0xffffffffffff8001}, 0x32e, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}, {{@in=@local, 0x4d5, 0x2b}, 0x16, @in6=@mcast2, 0x3505, 0x2, 0x2, 0x80, 0x5, 0x5, 0xf6}}, 0xe4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x81, 0x2, 0xfffffff8, 0x8000, 0x5, 0x7]}, &(0x7f0000000000)=0x50) 8m41.492719168s ago: executing program 2 (id=16): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, 0x0, 0x20040840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 8m38.261199791s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m34.917072566s ago: executing program 2 (id=34): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bb9, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@multicast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'hsr0\x00', @remote}) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) 8m34.319224915s ago: executing program 2 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 8m33.647423382s ago: executing program 32 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) 21.189490259s ago: executing program 1 (id=1014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpgrp(0x0) sched_getaffinity(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) 16.947355611s ago: executing program 1 (id=1021): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) r3 = socket(0x18, 0xa, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3513, 0x742b, 0x0, 0x0, 0x0) 16.693354437s ago: executing program 1 (id=1023): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket(0x10, 0x803, 0x0) mlock(&(0x7f000022b000/0x3000)=nil, 0x3000) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r4], 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x800003, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x5, 0xffff}}}, 0x24}}, 0x400c0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r6, 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5, 0x0, r7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000080), 0x0}, 0x20) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x44081) socket(0x10, 0x3, 0x0) 14.881777327s ago: executing program 0 (id=1028): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0xa00) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xe0000003}) poll(&(0x7f00000000c0)=[{r1, 0x1009}], 0x1, 0x8000007) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14.851589091s ago: executing program 3 (id=1029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@host}) close(0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 13.769087808s ago: executing program 0 (id=1031): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x6c42, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, 0x0, 0x0) close_range(r0, r0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r9, r9, 0x0, 0x8000002) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x2}}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e20, 0x8001, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x2c, 0x0, 0xee00}, {0x9687, 0x2, 0x10000, 0xd7a3, 0x6, 0x4, 0x40, 0x1}, {0x80000000, 0x5, 0x0, 0xffffffffffff8001}, 0x32e, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}, {{@in=@local, 0x4d5, 0x2b}, 0x16, @in6=@mcast2, 0x3505, 0x2, 0x2, 0x80, 0x5, 0x5, 0xf6}}, 0xe4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x81, 0x2, 0xfffffff8, 0x8000, 0x5, 0x7]}, &(0x7f0000000000)=0x50) 10.84159679s ago: executing program 4 (id=1033): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) r3 = socket(0x18, 0xa, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3513, 0x742b, 0x0, 0x0, 0x0) 10.648080279s ago: executing program 0 (id=1034): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_getevents(0x0, 0x4, 0x13, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0, 0x0, 0x6}]) io_destroy(0x0) 10.568048317s ago: executing program 5 (id=1035): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a", 0xd17}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5", 0x8f}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.43713171s ago: executing program 1 (id=1036): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) ioperm(0x9, 0x40, 0x8001) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x216831b8}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20018084) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) close_range(r5, r5, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) 8.622427741s ago: executing program 4 (id=1037): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 8.445713729s ago: executing program 0 (id=1038): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) 8.261525887s ago: executing program 5 (id=1039): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x8f, 0x206, 0xfffffffd, 0xff, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0xb, 0x8, 0x2, 0xff00}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 7.751884538s ago: executing program 1 (id=1040): getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ppoll(&(0x7f00000002c0)=[{r3, 0x10a}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x1]}, 0x8) 7.684691274s ago: executing program 4 (id=1041): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 6.93174184s ago: executing program 3 (id=1042): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fchmod(0xffffffffffffffff, 0x101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_getaffinity(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(0x0, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) epoll_create1(0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0) 6.672625836s ago: executing program 5 (id=1043): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) r1 = openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x212100, 0x80) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x800, 0x103) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) socket$nl_audit(0x10, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix_mp={0x100, 0xfffffffa, 0x34565559, 0x3, 0x8, [{0x401, 0x4}, {0x3, 0x494}, {0x6, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x401}, {0x7, 0xfffffffe}, {0x3, 0x9cc}], 0xcb, 0x4, 0x0, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 4.155532697s ago: executing program 3 (id=1044): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_uring_setup(0x6c42, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, 0x0, 0x0) close_range(r0, r0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r9, r9, 0x0, 0x8000002) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x2}}, 0x1c}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e20, 0x8001, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0x2c, 0x0, 0xee00}, {0x9687, 0x2, 0x10000, 0xd7a3, 0x6, 0x4, 0x40, 0x1}, {0x80000000, 0x5, 0x0, 0xffffffffffff8001}, 0x32e, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}, {{@in=@local, 0x4d5, 0x2b}, 0x16, @in6=@mcast2, 0x3505, 0x2, 0x2, 0x80, 0x5, 0x5, 0xf6}}, 0xe4) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x81, 0x2, 0xfffffff8, 0x8000, 0x5, 0x7]}, &(0x7f0000000000)=0x50) 4.095907872s ago: executing program 4 (id=1045): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x40, 0xc, 0x72, {0x72, 0x7, "e83b252428aa126f22ac9d15c306c260b77bec63cb12b3975f80452485c8abb621af426dc7261f1184bf288737d1c9d7ee7a92726cc938d01ff0556f84e34effb063567854362a45bdc04d418ba7b37315c049a9fe60d9cff65749b0bba6db6a552129755f837921a0c5ea4b89f1c497"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x8d0ee7b4318a425a, 0x2b, "c20ef0afdb51e2ccee1aa99cfbe7095c1fe77966954a9a0b9d7cf58000e6d319cd314c6dc2313034de56b3"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "58d090fc82fe99995a27842e634c0f8264f879f4bdfdea01b697b84500d3f092d0a147472a1d67da17fa44139bd9eeccebd752d456e13e767e23799f02067b38678a1d220b8fdf40426be687c24f4d7472fbf9bc04e8282c9b257bdb3933de82c155d0d8bd63ab4aee602e46f5f967a7251dc55a0418ba9f56335a501d43f0847ce0353301cf137249977b0555533d5992e00c32690fe66968340f1ef9baabb5ccb199628a581d41c6df38f589b08b440898c142da4d12539615350dd46a39538e1fe09fd66f2d5fcca9902a237026490219be5ea9ce9c2b0d61cdf65a2ae826b8e5ccbe3ae0a8ed777408eb5729383470e2b6f77354ad64ee126fec52160b209e74e6bd155c9293bd05df289d4fadfbb8fdc33695daa137e302f562c819af7441a3644ac7391a38d7347b08ab1a62ddb85c682d1930bde22fd8556f0beece027ba19a1be75c2410c9a42bffdabec430b3dfed2be7b9c2a8e96dcb59c694662da94f03a7d4d157abbb3024072ce2694cc9da997de912768f87a345ac2081146e80c32deb3e340c0f2e009ba089a99f06c089769af8c96da419dcd6e25d68a34d7bc96ac44adf7663ff301d4a441ee256c83cd34500a01c24032796b3e2ed7b9df8a0f84288ffd3dbfe4d37e54f41326073a0a49fc75da7ff29a3970bbd95ddef82d239aeb31953807a0d12304cd37f1e51fea28c0b7b6c50a1ea89c9340128980d40d80e412310534059679015c7758e9abf14aba861e5845855e601e0a2f9eaa20c93c5db483f94b5a90b989ce7eb8d3650941326181ce627f1dd18039323bffda0d6cfc263cbc87fabcdd570f1c2e7cfadee08de188d58ee1f58bed62cf81c0044db702a80521cd06d9b2ea6d516cb252244c1a5bfd30d42737524db1c7439ed1121c49a51ed8d89cbb7e1850f4e0046d29784cd7caa8b32a7a09da605e10791deac8129d70aaf10ff639932abdd164875866eac730b12897a0b567e22a0a4ab981490a9acea0a84326d8cad4994a0bbbefbfd5b429e290f599d552840c6ae40a8d4a66fdbd0f096a4a9ed5efbef6fd08e05a2be9a83bbb48a2b0beaf8884bd0ea612ce429bc332fd9df1379bf463131cf82b35b5477a66976663bfb4f1b04ae7a5fea1bd5c0b22ee980097107ebfb04606b3d9378744cf6829f65c3850da472030ecff4ce06935a30dc35423cc794a1b39749236fc8b9daee981fec7b12615bb56a036470ac4b5dce48f60d8428b01ac37a704acbb7361fc6d06347554a586f8a6d0bfbbff8aa42be7c213e3ef92d96563e3bf457331c65df3bc2cf5311c9a1e1ed7fe1f18d742f5ea77a5b6b3595e67e09933beb80f31ddb582a2d98d986664c1d5b40031ec742ad823839e86e6a7e4516fea31f3b72aecade8d0dc1b81464e8aa39316752cd2aaaf927fec8478738b643cc6fdd80e9cc6c87075502486b"}, &(0x7f0000000240)}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.878107974s ago: executing program 5 (id=1046): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket(0x10, 0x803, 0x0) mlock(&(0x7f000022b000/0x3000)=nil, 0x3000) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r4], 0x34}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x400c0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r6, 0x400, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5, 0x0, r7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000080), 0x0}, 0x20) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x44081) socket(0x10, 0x3, 0x0) 2.976177834s ago: executing program 3 (id=1047): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) r3 = socket(0x18, 0xa, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3513, 0x742b, 0x0, 0x0, 0x0) 1.029905098s ago: executing program 3 (id=1048): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = getpgrp(0x0) sched_getaffinity(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) 613.484599ms ago: executing program 5 (id=1049): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="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", 0xd17}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5", 0x8f}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 613.277019ms ago: executing program 4 (id=1050): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_getevents(0x0, 0x4, 0x13, &(0x7f0000000000), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0, 0x0, 0x6}]) io_destroy(0x0) 605.43721ms ago: executing program 0 (id=1051): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) socket$rxrpc(0x21, 0x2, 0x2) ioperm(0x9, 0x40, 0x8001) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x216831b8}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20018084) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) close_range(r5, r5, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) 372.548303ms ago: executing program 3 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@host}) close(0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 371.634483ms ago: executing program 5 (id=1053): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) listen(r0, 0x803) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="b54300000000000000004a000000d04e00b7324cb98d227ab0b45d4a0e2f80dc15b62e0a48fecdd22afb86918d8a8aa8025ef35ab7018e59033d0bed509c56217d0fd755053919e4dcfe29"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44810}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000240)) write$dsp(r8, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "abf400", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 289.933362ms ago: executing program 4 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x0, 0xc139, 0x2, 0x5, 0xaf, 0xe, 0x7, 0x54c6cff3, 0xf1c00000, 0x2, 0xfffffffd, 0x1, 0x2, 0x6, 0x8a73, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x479, 0x0, 0x8, 0x4086, 0x0, 0x5]}) 42.368166ms ago: executing program 1 (id=1055): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) fchmod(0xffffffffffffffff, 0x101) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sched_getaffinity(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_submit(0x0, 0x0, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) epoll_create1(0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0) 0s ago: executing program 0 (id=1056): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) syz_open_dev$video(0x0, 0x7, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$dh_compute(0x17, &(0x7f0000000700), 0x0, 0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b44d06", 0x41}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x440}, 0x40009d0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r4, 0x80047456, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x8400, 0x1, 0x10, 0x1, 0x6}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r6, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500100000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) close(r3) kernel console output (not intermixed with test programs): 386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.318918][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.343112][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.364883][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.391759][ T4266] device veth0_macvtap entered promiscuous mode [ 87.427860][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.445099][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.462317][ T4266] device veth1_macvtap entered promiscuous mode [ 87.486907][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.568712][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.576954][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.594358][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.607286][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.631020][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.657018][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.677779][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.697152][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.718345][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.737111][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.755681][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.783575][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.807407][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.850849][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.896488][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.976601][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.003084][ T4397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 88.017298][ T4394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 88.064647][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.082016][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099387][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.117338][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.128719][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.144495][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.159081][ T4268] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.191314][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.227500][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.338750][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 88.356497][ T127] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 88.365190][ T4268] usb 2-1: Using ep0 maxpacket: 8 [ 88.372504][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.387240][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.397290][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.398025][ T4268] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 88.417932][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.428343][ T4268] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.438953][ T127] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.452451][ T4268] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.454386][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.463007][ T4268] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.480706][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.492575][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.500970][ T4268] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.516233][ T4268] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.545771][ T4268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.575069][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.625896][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.658601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 88.765902][ T127] usb 1-1: GET_CAPABILITIES returned 0 [ 88.772040][ T127] usbtmc 1-1:16.0: can't read capabilities [ 88.835566][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.871891][ T4268] usb 2-1: GET_CAPABILITIES returned 0 [ 88.877461][ T4268] usbtmc 2-1:16.0: can't read capabilities [ 88.898770][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.907548][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.110051][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.582196][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.596378][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.609575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.786306][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.795009][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.810460][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.078794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.087125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.176661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.483773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.925601][ T41] usb 2-1: USB disconnect, device number 2 [ 95.015374][ T7] usb 1-1: USB disconnect, device number 2 [ 95.259221][ T4334] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 95.306991][ T4456] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 96.457944][ T4334] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.474956][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.483787][ T4334] usb 4-1: Product: syz [ 96.487973][ T4334] usb 4-1: Manufacturer: syz [ 96.498225][ T4334] usb 4-1: SerialNumber: syz [ 96.521318][ T4334] usb 4-1: config 0 descriptor?? [ 97.371268][ T4318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.875469][ T4464] sched: RT throttling activated [ 97.903554][ T4334] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.018312][ T4464] 9pnet_virtio: no channels available for device syz [ 98.046658][ T4464] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 98.056822][ T4464] SQUASHFS error: Failed to read block 0x0: -5 [ 98.151351][ T4334] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 98.233286][ T4334] usb 4-1: USB disconnect, device number 2 [ 98.260300][ T4318] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 98.346972][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.388137][ T4318] usb 1-1: config 0 has no interfaces? [ 98.408412][ T4318] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 99.273430][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.293588][ T4318] usb 1-1: config 0 descriptor?? [ 99.328786][ T4318] usb 1-1: can't set config #0, error -71 [ 99.347994][ T4318] usb 1-1: USB disconnect, device number 3 [ 101.261040][ T4374] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 101.394028][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 101.474769][ T4374] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.498922][ T4481] syz.2.22 (4481): drop_caches: 2 [ 101.499107][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.513389][ T4374] usb 2-1: Product: syz [ 101.517643][ T4374] usb 2-1: Manufacturer: syz [ 101.523864][ T4374] usb 2-1: SerialNumber: syz [ 101.541985][ T4374] usb 2-1: config 0 descriptor?? [ 101.689465][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.757776][ T4374] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.915519][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 101.930821][ T127] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 101.941138][ T127] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.953179][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.964245][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.977470][ T127] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.991969][ T127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.002829][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.418945][ T4482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.558067][ T4482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.657794][ T4482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.788386][ T4482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.677651][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.687783][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.698185][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.709819][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.719514][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.727150][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.034247][ T4374] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 104.670179][ T4374] usb 2-1: USB disconnect, device number 3 [ 105.514760][ T127] usb 4-1: usb_control_msg returned -71 [ 105.546324][ T127] usbtmc 4-1:16.0: can't read capabilities [ 105.670009][ T127] usb 4-1: USB disconnect, device number 3 [ 105.692258][ T26] audit: type=1326 audit(1763033564.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 105.746903][ T4566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 105.759262][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 105.796822][ T26] audit: type=1326 audit(1763033564.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 105.821087][ T26] audit: type=1326 audit(1763033564.740:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 105.843023][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.855043][ T26] audit: type=1326 audit(1763033564.740:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 105.876914][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.890350][ T26] audit: type=1326 audit(1763033564.740:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 105.912296][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.965234][ T26] audit: type=1326 audit(1763033564.740:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 106.024071][ T26] audit: type=1326 audit(1763033564.740:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 106.046007][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.067656][ T26] audit: type=1326 audit(1763033564.740:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 106.096989][ T26] audit: type=1326 audit(1763033564.740:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 106.135595][ T26] audit: type=1326 audit(1763033564.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567198f6c9 code=0x7ffc0000 [ 106.157768][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.222933][ T4535] chnl_net:caif_netlink_parms(): no params data found [ 106.553889][ T4482] device hsr_slave_0 left promiscuous mode [ 106.584653][ T4482] device hsr_slave_1 left promiscuous mode [ 106.592148][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.604634][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.616172][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.627761][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.644305][ T4482] device bridge_slave_1 left promiscuous mode [ 106.665277][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.728991][ T4482] device bridge_slave_0 left promiscuous mode [ 106.740570][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.817455][ T4482] device veth1_macvtap left promiscuous mode [ 106.817622][ T4482] device veth0_macvtap left promiscuous mode [ 106.817715][ T4482] device veth1_vlan left promiscuous mode [ 106.817862][ T4482] device veth0_vlan left promiscuous mode [ 107.609926][ T127] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 107.839343][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 108.433132][ T127] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 108.452539][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.478141][ T127] usb 1-1: Product: syz [ 108.484170][ T127] usb 1-1: Manufacturer: syz [ 108.491534][ T127] usb 1-1: SerialNumber: syz [ 108.505113][ T127] usb 1-1: config 0 descriptor?? [ 108.717606][ T127] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 108.997824][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 109.045599][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 109.091166][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.141303][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.199206][ T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.404602][ T22] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 109.422880][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.434541][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.446160][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.454580][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.464211][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.477441][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.486012][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.495567][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.507043][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.517003][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.526935][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.538768][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.557385][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.566466][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.577954][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.587875][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.598629][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.610694][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.620046][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.629772][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.642483][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.652530][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.661594][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.673860][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.684442][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 109.694002][ T22] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 109.705835][ T22] usb 2-1: Product: syz [ 109.710561][ T22] usb 2-1: Manufacturer: syz [ 109.715274][ T22] usb 2-1: SerialNumber: syz [ 109.737361][ T22] usb 2-1: config 0 descriptor?? [ 109.756616][ T22] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 109.858312][ T4482] bond0 (unregistering): Released all slaves [ 109.919344][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 110.179743][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.297596][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.371678][ T4535] device bridge_slave_0 entered promiscuous mode [ 110.478952][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.574944][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.584009][ T4535] device bridge_slave_1 entered promiscuous mode [ 110.684585][ T4535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.702029][ T4535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.802643][ T4535] team0: Port device team_slave_0 added [ 110.812013][ T4535] team0: Port device team_slave_1 added [ 110.960415][ T4535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.969430][ T127] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 111.009939][ T127] usb 1-1: USB disconnect, device number 4 [ 111.047332][ T4535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.075927][ T4535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.159426][ T4535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.179332][ T4535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.258410][ T4535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.504366][ T4535] device hsr_slave_0 entered promiscuous mode [ 111.565772][ T4535] device hsr_slave_1 entered promiscuous mode [ 111.581939][ T4625] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.701961][ T4535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.770601][ T4535] Cannot create hsr debugfs directory [ 111.999173][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 114.081560][ T4535] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.405362][ T4535] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.448048][ T4535] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.517819][ T4535] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.192655][ T4535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.270577][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.285694][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.301417][ T4535] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.314521][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.327463][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.338159][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.345378][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.461468][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.512222][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.576475][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.628116][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.635353][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.686995][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.718000][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.737499][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.770114][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.813757][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.835232][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.936139][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.006491][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.077215][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.143658][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.184162][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.237187][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.895126][ T127] usb 2-1: USB disconnect, device number 4 [ 117.933658][ T127] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 121.394112][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.434144][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.476000][ T4535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.937800][ T4729] ======================================================= [ 121.937800][ T4729] WARNING: The mand mount option has been deprecated and [ 121.937800][ T4729] and is ignored by this kernel. Remove the mand [ 121.937800][ T4729] option from the mount to silence this warning. [ 121.937800][ T4729] ======================================================= [ 127.447137][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.462725][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.619225][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.655176][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.715103][ T4535] device veth0_vlan entered promiscuous mode [ 127.884630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.910063][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.941825][ T4535] device veth1_vlan entered promiscuous mode [ 128.307706][ T4796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 128.445841][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.485240][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.518455][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.598937][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.609128][ T4426] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.651733][ T4535] device veth0_macvtap entered promiscuous mode [ 128.698071][ T4803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 128.726543][ T4535] device veth1_macvtap entered promiscuous mode [ 128.809150][ T4426] usb 4-1: Using ep0 maxpacket: 8 [ 128.832914][ T4426] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.845624][ T4426] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.869098][ T4426] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.889113][ T4426] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.909728][ T4426] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.939317][ T4426] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.954844][ T4426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.022436][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.091684][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.185647][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.249453][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.332250][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.743050][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.820495][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.884373][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.935581][ T4535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.989142][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.037494][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.100729][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.180955][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.319205][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.409367][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.489170][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.549104][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.589217][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.882397][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889840][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.078706][ T4426] usb 4-1: usb_control_msg returned -110 [ 134.084428][ T4426] usbtmc 4-1:16.0: can't read capabilities [ 134.462848][ T4535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.563303][ T4535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.779335][ T4535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.807554][ T4426] usb 4-1: USB disconnect, device number 4 [ 134.887654][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.929631][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.992414][ T4535] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.049206][ T4535] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.089075][ T4535] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.138547][ T4535] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.462813][ T4825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.536879][ T4825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.580747][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.597440][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.616172][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.646675][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.739138][ T127] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.929215][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 137.936237][ T127] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 137.995880][ T127] usb 5-1: config 0 has no interface number 0 [ 138.014068][ T127] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 138.051620][ T127] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 138.070973][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.219292][ T4311] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 139.031832][ T127] usb 5-1: Product: syz [ 139.036068][ T127] usb 5-1: Manufacturer: syz [ 139.041331][ T127] usb 5-1: SerialNumber: syz [ 139.100405][ T127] usb 5-1: config 0 descriptor?? [ 139.118086][ T127] usb 5-1: can't set config #0, error -71 [ 139.127396][ T127] usb 5-1: USB disconnect, device number 2 [ 139.179915][ T4311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.199961][ T4311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.210095][ T4311] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 139.220218][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.232788][ T4311] usb 1-1: config 0 descriptor?? [ 139.254717][ T4311] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.313918][ T4311] dvb-usb: bulk message failed: -22 (3/0) [ 141.327252][ T4311] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.367050][ T4311] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.378011][ T4311] usb 1-1: media controller created [ 141.386955][ T4311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.425246][ T4311] dvb-usb: bulk message failed: -22 (6/0) [ 141.432106][ T4311] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.450627][ T4311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 141.486310][ T4311] dvb-usb: schedule remote query interval to 150 msecs. [ 141.519245][ T4311] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.573474][ T4311] usb 1-1: USB disconnect, device number 5 [ 141.932561][ T4311] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 143.012680][ T4900] Zero length message leads to an empty skb [ 143.030031][ T4900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 143.268596][ T4374] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 143.321197][ T4900] netlink: 'syz.4.112': attribute type 4 has an invalid length. [ 143.350562][ T4900] netlink: 17 bytes leftover after parsing attributes in process `syz.4.112'. [ 143.567297][ T4374] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 143.586187][ T4374] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 143.644123][ T4891] delete_channel: no stack [ 143.666336][ T4374] usb 1-1: config 8 has no interface number 0 [ 143.711969][ T4374] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 143.786444][ T4374] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 143.882972][ T4374] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 143.979024][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.089513][ T4899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 144.146652][ T4374] usb 1-1: NFC: intf ffff88802edee000 id ffffffff8d3fc6e0 [ 144.952219][ T4361] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.159596][ T4361] usb 2-1: Using ep0 maxpacket: 32 [ 145.174064][ T4361] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 145.201254][ T4361] usb 2-1: config 0 has no interface number 0 [ 145.224161][ T4361] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 145.281816][ T4361] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 145.324065][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.359802][ T4361] usb 2-1: Product: syz [ 145.372588][ T4361] usb 2-1: Manufacturer: syz [ 145.390645][ T4361] usb 2-1: SerialNumber: syz [ 145.422815][ T4361] usb 2-1: config 0 descriptor?? [ 145.449767][ T4927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.487766][ T4311] usb 1-1: USB disconnect, device number 6 [ 145.684888][ T4927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 146.689108][ T127] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 146.991199][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.019754][ T127] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 147.049121][ T127] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 147.083065][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.166560][ T127] usb 5-1: config 0 descriptor?? [ 147.184713][ T127] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 147.233863][ T127] dvb-usb: bulk message failed: -22 (3/0) [ 147.266488][ T127] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 147.287340][ T127] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 147.302525][ T127] usb 5-1: media controller created [ 147.319278][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.351442][ T127] dvb-usb: bulk message failed: -22 (6/0) [ 147.367105][ T127] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.088399][ T127] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 149.191006][ T127] dvb-usb: schedule remote query interval to 150 msecs. [ 149.277247][ T4361] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 149.289723][ T4361] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 149.302310][ T4361] asix: probe of 2-1:0.188 failed with error -71 [ 149.312201][ T4361] usb 2-1: USB disconnect, device number 5 [ 149.313253][ T127] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.503433][ T127] usb 5-1: USB disconnect, device number 3 [ 149.578207][ T127] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 151.689705][ T4311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.880185][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 151.887131][ T4311] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 151.918179][ T4311] usb 5-1: config 0 has no interface number 0 [ 151.970599][ T4311] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 152.001478][ T4311] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 152.042746][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.080339][ T4311] usb 5-1: Product: syz [ 152.084578][ T4311] usb 5-1: Manufacturer: syz [ 152.133701][ T4311] usb 5-1: SerialNumber: syz [ 152.174504][ T4311] usb 5-1: config 0 descriptor?? [ 152.202892][ T5010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.445193][ T5010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.484718][ T4426] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 154.711897][ T4426] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 154.742781][ T4426] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 154.800191][ T4426] usb 6-1: config 8 has no interface number 0 [ 154.814154][ T4426] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 154.895276][ T4426] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 154.900155][ T4311] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 154.953761][ T4426] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 154.987826][ T4311] asix: probe of 5-1:0.188 failed with error -71 [ 155.023474][ T4426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.047566][ T4311] usb 5-1: USB disconnect, device number 4 [ 155.117304][ T5028] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 155.251211][ T4426] usb 6-1: NFC: intf ffff88801de8b000 id ffffffff8d3fc6e0 [ 156.962969][ T4826] usb 6-1: USB disconnect, device number 2 [ 160.855406][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 161.079100][ T127] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.279166][ T127] usb 6-1: Using ep0 maxpacket: 32 [ 161.286335][ T127] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 161.316453][ T127] usb 6-1: config 0 has no interface number 0 [ 161.346856][ T127] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.417034][ T127] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 161.468022][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.511115][ T127] usb 6-1: Product: syz [ 161.525742][ T127] usb 6-1: Manufacturer: syz [ 161.587795][ T127] usb 6-1: SerialNumber: syz [ 161.706907][ T127] usb 6-1: config 0 descriptor?? [ 161.765507][ T5096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.986275][ T5096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 162.275955][ T5123] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.489876][ T5133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.158'. [ 165.311881][ T127] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 165.346465][ T127] asix: probe of 6-1:0.188 failed with error -71 [ 165.384920][ T127] usb 6-1: USB disconnect, device number 3 [ 167.090497][ T4361] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 167.359843][ T5182] 9pnet_virtio: no channels available for device syz [ 168.140337][ T4361] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.160171][ T4361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.190468][ T4361] usb 6-1: Product: syz [ 168.194779][ T4361] usb 6-1: Manufacturer: syz [ 168.201227][ T4361] usb 6-1: SerialNumber: syz [ 168.210103][ T4361] usb 6-1: config 0 descriptor?? [ 168.424830][ T4361] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.709642][ T22] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 168.911948][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.960314][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.000708][ T22] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 169.027593][ T4361] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 169.059694][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.131370][ T22] usb 1-1: config 0 descriptor?? [ 169.148321][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.973875][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 169.994079][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 170.004775][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 170.005960][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.014241][ T22] usb 1-1: media controller created [ 170.030987][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.045783][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 170.053815][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 170.080313][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 170.122435][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 170.140870][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 170.154116][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.226587][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 170.275408][ T4361] usb 6-1: USB disconnect, device number 4 [ 170.310900][ T22] dvb-usb: bulk message failed: -22 (1/0) [ 170.316912][ T22] dvb-usb: error while querying for an remote control event. [ 170.376755][ T22] usb 1-1: USB disconnect, device number 7 [ 170.463605][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.530291][ T5204] delete_channel: no stack [ 171.719862][ T4332] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 171.921980][ T4332] usb 6-1: config 16 has an invalid interface number: 168 but max is 0 [ 171.946057][ T4332] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 171.961626][ T5227] netlink: 'syz.3.177': attribute type 4 has an invalid length. [ 171.997932][ T5227] netlink: 17 bytes leftover after parsing attributes in process `syz.3.177'. [ 172.230739][ T4332] usb 6-1: config 16 has no interface number 0 [ 172.238008][ T4332] usb 6-1: config 16 interface 168 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.330301][ T4332] usb 6-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 172.360383][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.457276][ T5235] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.543219][ T4332] HFC-S_USB: probe of 6-1:16.168 failed with error -5 [ 173.016330][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.183'. [ 175.365270][ T127] usb 6-1: USB disconnect, device number 5 [ 176.789985][ T4311] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 177.544669][ T4311] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.601866][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.611665][ T4311] usb 4-1: Product: syz [ 177.615874][ T4311] usb 4-1: Manufacturer: syz [ 177.622191][ T4311] usb 4-1: SerialNumber: syz [ 177.633065][ T4311] usb 4-1: config 0 descriptor?? [ 177.845156][ T4311] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.064031][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 178.075283][ T5288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.193'. [ 178.533932][ T4311] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 180.355311][ T4332] usb 4-1: USB disconnect, device number 5 [ 184.673167][ T5373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.202'. [ 186.340104][ T4332] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 186.533770][ T4332] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 186.597026][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.838401][ T4332] usb 1-1: Product: syz [ 186.908122][ T4332] usb 1-1: Manufacturer: syz [ 186.945285][ T4332] usb 1-1: SerialNumber: syz [ 187.002171][ T4332] usb 1-1: config 0 descriptor?? [ 187.234484][ T4332] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 187.847148][ T4332] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 189.193857][ T4311] usb 1-1: USB disconnect, device number 8 [ 193.581012][ T5452] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 193.800142][ T4311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.997168][ T4311] usb 5-1: config 0 has no interfaces? [ 193.997198][ T4311] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 193.997215][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.136505][ T4311] usb 5-1: config 0 descriptor?? [ 194.325953][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326051][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360270][ T4332] usb 5-1: USB disconnect, device number 5 [ 195.035257][ T5460] tty tty31: ldisc open failed (-12), clearing slot 30 [ 196.383096][ T22] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 196.425651][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.223'. [ 196.603562][ T22] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.634234][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.719753][ T4374] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.753415][ T22] usb 1-1: Product: syz [ 196.769580][ T22] usb 1-1: Manufacturer: syz [ 196.796323][ T22] usb 1-1: SerialNumber: syz [ 196.830718][ T22] usb 1-1: config 0 descriptor?? [ 196.939639][ T4374] usb 4-1: Using ep0 maxpacket: 8 [ 196.948159][ T4374] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 197.034900][ T4374] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.074601][ T22] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.096466][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.140619][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.194471][ T4374] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.263568][ T4374] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.314795][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.980265][ T22] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 198.794908][ T4374] usb 4-1: usb_control_msg returned -71 [ 198.808226][ T4374] usbtmc 4-1:16.0: can't read capabilities [ 198.887406][ T4374] usb 4-1: USB disconnect, device number 6 [ 199.235584][ T4332] usb 1-1: USB disconnect, device number 9 [ 201.520367][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.526467][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 201.533754][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 201.541025][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 206.290198][ T953] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 206.491634][ T953] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.530139][ T953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.570614][ T953] usb 6-1: Product: syz [ 206.574849][ T953] usb 6-1: Manufacturer: syz [ 206.615977][ T953] usb 6-1: SerialNumber: syz [ 206.686120][ T953] usb 6-1: config 0 descriptor?? [ 206.941267][ T953] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.954892][ T5576] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 208.034126][ T953] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 209.814739][ T4426] usb 6-1: USB disconnect, device number 6 [ 210.429630][ T4426] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 211.430452][ T4426] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 211.460261][ T4426] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 211.481868][ T4426] usb 1-1: config 8 has no interface number 0 [ 211.537393][ T4426] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 211.601902][ T4426] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 211.673649][ T4426] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 211.714810][ T5633] netlink: 3 bytes leftover after parsing attributes in process `syz.5.255'. [ 211.730281][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.311364][ T4426] usb 1-1: can't set config #8, error -71 [ 212.397613][ T4426] usb 1-1: USB disconnect, device number 10 [ 216.929956][ T953] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 217.134098][ T953] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.247510][ T953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.308390][ T953] usb 6-1: Product: syz [ 217.343071][ T953] usb 6-1: Manufacturer: syz [ 217.364080][ T953] usb 6-1: SerialNumber: syz [ 217.426718][ T953] usb 6-1: config 0 descriptor?? [ 217.665556][ T953] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.707159][ T953] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 219.235675][ T5682] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.208308][ T4332] usb 6-1: USB disconnect, device number 7 [ 220.299745][ T4426] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.449777][ T953] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 220.619572][ T4426] usb 4-1: Using ep0 maxpacket: 8 [ 220.636103][ T4426] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 220.650707][ T4426] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.663155][ T4426] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.674467][ T4426] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.686109][ T4426] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.710196][ T4426] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.725176][ T4426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.921364][ T953] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 220.945269][ T953] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 220.990973][ T4426] usb 4-1: GET_CAPABILITIES returned 0 [ 220.996734][ T4426] usbtmc 4-1:16.0: can't read capabilities [ 221.053854][ T953] usb 1-1: config 8 has no interface number 0 [ 221.125842][ T953] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 221.185064][ T953] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 221.264617][ T953] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 221.436828][ T953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.531376][ T5704] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 221.542621][ T953] usb 1-1: NFC: intf ffff88805575a000 id ffffffff8d3fc6e0 [ 223.751719][ T4403] usb 1-1: USB disconnect, device number 11 [ 224.286225][ T4403] usb 4-1: USB disconnect, device number 7 [ 228.518669][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 228.937627][ T5745] block device autoloading is deprecated and will be removed. [ 229.363809][ T5750] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.470007][ T5750] kvm: pic: level sensitive irq not supported [ 229.470338][ T5750] kvm: pic: non byte read [ 229.546574][ T5750] kvm: pic: level sensitive irq not supported [ 229.546987][ T5750] kvm: pic: non byte read [ 229.613531][ T5750] kvm: pic: level sensitive irq not supported [ 229.614058][ T5750] kvm: pic: non byte read [ 229.656157][ T5750] kvm: pic: level sensitive irq not supported [ 229.656910][ T5750] kvm: pic: non byte read [ 229.707956][ T5750] kvm: pic: level sensitive irq not supported [ 229.710132][ T5750] kvm: pic: non byte read [ 229.720321][ T4826] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 229.784970][ T5750] kvm: pic: level sensitive irq not supported [ 229.785735][ T5750] kvm: pic: non byte read [ 229.842294][ T5750] kvm: pic: level sensitive irq not supported [ 229.842375][ T5750] kvm: pic: non byte read [ 229.886313][ T5750] kvm: pic: level sensitive irq not supported [ 229.886537][ T5750] kvm: pic: non byte read [ 229.937185][ T5750] kvm: pic: level sensitive irq not supported [ 229.937753][ T5750] kvm: pic: non byte read [ 229.956377][ T4826] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 229.974248][ T4826] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 230.063563][ T4826] usb 1-1: config 8 has no interface number 0 [ 230.095107][ T4826] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 230.141039][ T4826] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 230.175923][ T4826] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 230.192456][ T4826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.234244][ T5753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.293119][ T4826] usb 1-1: NFC: intf ffff88805873b000 id ffffffff8d3fc6e0 [ 230.369745][ T4361] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 230.570378][ T4361] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.435792][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.463416][ T4361] usb 5-1: Product: syz [ 231.494465][ T4361] usb 5-1: Manufacturer: syz [ 231.583414][ T4361] usb 5-1: SerialNumber: syz [ 231.610811][ T4361] usb 5-1: config 0 descriptor?? [ 231.872655][ T4361] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.232785][ T4426] usb 1-1: USB disconnect, device number 12 [ 232.631323][ T4361] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 232.691089][ T127] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 232.889847][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 232.914055][ T127] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 232.934118][ T127] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.967391][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.995095][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.006512][ T127] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.020948][ T127] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.031991][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.279448][ T127] usb 6-1: GET_CAPABILITIES returned 0 [ 233.285014][ T127] usbtmc 6-1:16.0: can't read capabilities [ 233.867137][ T4826] usb 5-1: USB disconnect, device number 6 [ 234.043837][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.294'. [ 236.370907][ T5808] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 236.464016][ T5808] kvm: pic: level sensitive irq not supported [ 236.464097][ T5808] kvm: pic: non byte read [ 236.524903][ T5808] kvm: pic: level sensitive irq not supported [ 236.527181][ T5808] kvm: pic: non byte read [ 236.621190][ T5808] kvm: pic: level sensitive irq not supported [ 236.621264][ T5808] kvm: pic: non byte read [ 236.696681][ T4826] usb 6-1: USB disconnect, device number 8 [ 236.760939][ T5808] kvm: pic: level sensitive irq not supported [ 236.761023][ T5808] kvm: pic: non byte read [ 236.866343][ T5808] kvm: pic: level sensitive irq not supported [ 236.866977][ T5808] kvm: pic: non byte read [ 237.128055][ T5808] kvm: pic: level sensitive irq not supported [ 237.131193][ T5808] kvm: pic: non byte read [ 237.501250][ T5816] process 'syz.5.301' launched './file0' with NULL argv: empty string added [ 239.159669][ T4332] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 239.483666][ T4332] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.624933][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.977184][ T4332] usb 6-1: Product: syz [ 241.001934][ T4332] usb 6-1: Manufacturer: syz [ 241.016891][ T4332] usb 6-1: SerialNumber: syz [ 241.038045][ T4332] usb 6-1: config 0 descriptor?? [ 241.275139][ T4332] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.620215][ T4361] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 241.861531][ T4361] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 241.897009][ T4361] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 241.968411][ T4361] usb 5-1: config 8 has no interface number 0 [ 242.048309][ T4361] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 242.088012][ T4361] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 243.100814][ T4361] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 243.120111][ T4332] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 243.132686][ T4361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.889640][ T4426] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 244.102184][ T4332] usb 6-1: USB disconnect, device number 9 [ 244.169633][ T4426] usb 1-1: Using ep0 maxpacket: 8 [ 244.262576][ T4426] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 244.299714][ T4426] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.373575][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.413774][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.489045][ T4426] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.489130][ T4426] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.489154][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.726408][ T4426] usb 1-1: GET_CAPABILITIES returned 0 [ 244.733275][ T4426] usbtmc 1-1:16.0: can't read capabilities [ 245.567245][ T4361] usb 5-1: can't set config #8, error -71 [ 245.645321][ T4361] usb 5-1: USB disconnect, device number 7 [ 249.455363][ T4426] usb 1-1: USB disconnect, device number 13 [ 251.019118][ T127] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 252.306776][ T127] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.393162][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.490142][ T127] usb 1-1: Product: syz [ 252.536314][ T127] usb 1-1: Manufacturer: syz [ 252.617794][ T127] usb 1-1: SerialNumber: syz [ 252.722346][ T127] usb 1-1: config 0 descriptor?? [ 253.023708][ T127] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.401665][ T127] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 255.816141][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.822538][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.936063][ T127] usb 1-1: USB disconnect, device number 14 [ 258.419885][ T127] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 258.679599][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 258.690528][ T127] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 258.720169][ T127] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.742830][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.765297][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.778334][ T127] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.825073][ T127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.838319][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.078801][ T127] usb 4-1: GET_CAPABILITIES returned 0 [ 259.084470][ T127] usbtmc 4-1:16.0: can't read capabilities [ 260.830154][ T4426] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 261.048323][ T4426] usb 6-1: config 0 has no interfaces? [ 261.056260][ T4426] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 261.069601][ T4426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.127857][ T4426] usb 6-1: config 0 descriptor?? [ 261.397650][ T4403] usb 6-1: USB disconnect, device number 10 [ 261.498034][ T4409] udevd[4409]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 262.677766][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 262.695040][ T4826] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 262.904210][ T4826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.947783][ T4826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.015337][ T4826] usb 5-1: Product: syz [ 263.076219][ T4826] usb 5-1: Manufacturer: syz [ 263.131294][ T4826] usb 5-1: SerialNumber: syz [ 263.155975][ T4826] usb 5-1: config 0 descriptor?? [ 263.227097][ T4361] usb 4-1: USB disconnect, device number 8 [ 263.401767][ T4826] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.074255][ T4826] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 266.160681][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 267.151937][ T4426] usb 5-1: USB disconnect, device number 8 [ 267.212103][ T6066] fuse: Bad value for 'fd' [ 267.317460][ T6066] device ipip0 entered promiscuous mode [ 271.899150][ T4426] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 272.139426][ T4426] usb 1-1: Using ep0 maxpacket: 8 [ 272.165561][ T4426] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 272.194139][ T4426] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.210216][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.244968][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.303263][ T4426] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.348333][ T4426] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.549634][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.900355][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 273.319543][ T4403] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 273.539576][ T4403] usb 4-1: Using ep0 maxpacket: 8 [ 273.554357][ T4403] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 273.599913][ T4403] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.611254][ T4403] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.629968][ T4403] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.644660][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 273.650391][ T4826] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 273.656996][ T4403] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.734257][ T4403] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.894970][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.913369][ T4826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 273.944256][ T4826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.970276][ T4826] usb 5-1: Product: syz [ 273.982428][ T4826] usb 5-1: Manufacturer: syz [ 273.997648][ T4826] usb 5-1: SerialNumber: syz [ 274.013546][ T4826] usb 5-1: config 0 descriptor?? [ 274.243533][ T4826] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.285149][ T4426] usb 1-1: can't set config #16, error -71 [ 274.366628][ T4403] usb 4-1: GET_CAPABILITIES returned 0 [ 274.366670][ T4403] usbtmc 4-1:16.0: can't read capabilities [ 274.381353][ T4426] usb 1-1: USB disconnect, device number 15 [ 275.265838][ T4826] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 276.417137][ T4332] usb 5-1: USB disconnect, device number 9 [ 276.760564][ T4826] usb 4-1: USB disconnect, device number 9 [ 279.404671][ T6141] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 281.140105][ T4826] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 282.956922][ T4826] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.990983][ T4826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.783707][ T4826] usb 4-1: Product: syz [ 283.788276][ T4826] usb 4-1: Manufacturer: syz [ 283.794275][ T4826] usb 4-1: SerialNumber: syz [ 283.810627][ T4826] usb 4-1: config 0 descriptor?? [ 283.828065][ T4826] usb 4-1: can't set config #0, error -71 [ 283.838098][ T4826] usb 4-1: USB disconnect, device number 10 [ 285.450850][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 286.447979][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.395'. [ 286.780148][ T22] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 286.979905][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 287.809648][ T22] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 287.818002][ T22] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.864875][ T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.890122][ T22] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.909666][ T22] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.924488][ T22] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.935962][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.207184][ T22] usb 6-1: GET_CAPABILITIES returned 0 [ 288.221270][ T22] usbtmc 6-1:16.0: can't read capabilities [ 289.289670][ T22] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 289.503778][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.514507][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.524155][ T22] usb 5-1: Product: syz [ 289.529742][ T22] usb 5-1: Manufacturer: syz [ 289.534519][ T22] usb 5-1: SerialNumber: syz [ 289.544697][ T22] usb 5-1: config 0 descriptor?? [ 289.602371][ T6219] netlink: 'syz.0.404': attribute type 6 has an invalid length. [ 289.811594][ T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.316994][ T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 292.097746][ T4826] usb 6-1: USB disconnect, device number 11 [ 292.406959][ T4826] usb 5-1: USB disconnect, device number 10 [ 293.992491][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 296.589740][ T6270] netlink: 3 bytes leftover after parsing attributes in process `syz.0.414'. [ 298.753918][ T6285] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 300.495284][ T4826] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 300.731504][ T4826] usb 2-1: config 0 has no interfaces? [ 300.737019][ T4826] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 300.839881][ T4826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.904183][ T4826] usb 2-1: config 0 descriptor?? [ 301.523913][ T22] usb 2-1: USB disconnect, device number 6 [ 305.127109][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 310.192631][ T6370] fuse: Unknown parameter 'dummy0' [ 317.269767][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.276176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.130024][ T4374] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 320.010022][ T4374] usb 2-1: Using ep0 maxpacket: 8 [ 320.026418][ T4374] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 320.081551][ T4374] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.115578][ T4374] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.159595][ T4374] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.184995][ T4374] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.399790][ T4374] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.410281][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.788119][ T4374] usb 2-1: GET_CAPABILITIES returned 0 [ 320.794469][ T4374] usbtmc 2-1:16.0: can't read capabilities [ 322.740192][ T6461] fuse: Unknown parameter 'dummy0' [ 325.765324][ T953] usb 2-1: USB disconnect, device number 7 [ 338.761170][ T6551] fuse: Unknown parameter 'dummy0' [ 338.849465][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.026284][ T6555] 9pnet_virtio: no channels available for device syz [ 339.069568][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 339.076662][ T127] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 339.123656][ T127] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.173229][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.222715][ T127] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.267020][ T127] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.362170][ T127] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.438097][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.906534][ T127] usb 5-1: usb_control_msg returned -71 [ 340.922892][ T127] usbtmc 5-1:16.0: can't read capabilities [ 341.127812][ T127] usb 5-1: USB disconnect, device number 11 [ 344.764946][ T6589] vxcan0: tx address claim with dest, not broadcast [ 345.408263][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'. [ 345.655606][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 346.050183][ T4374] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 346.102773][ T6607] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 346.249588][ T4374] usb 4-1: Using ep0 maxpacket: 8 [ 346.295301][ T4374] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 346.317158][ T4374] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.331174][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.342345][ T4374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.353507][ T4374] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.368011][ T4374] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 346.378354][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.604210][ T4374] usb 4-1: GET_CAPABILITIES returned 0 [ 346.611014][ T4374] usbtmc 4-1:16.0: can't read capabilities [ 347.119800][ T4374] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 347.185460][ T6607] syz.1.500 (6607) used greatest stack depth: 20448 bytes left [ 347.319645][ T4374] usb 6-1: Using ep0 maxpacket: 8 [ 347.343573][ T4374] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 347.353421][ T4374] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.364817][ T4374] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.379907][ T4374] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.391414][ T4374] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.406140][ T4374] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.416473][ T4374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.653639][ T4374] usb 6-1: GET_CAPABILITIES returned 0 [ 347.660583][ T4374] usbtmc 6-1:16.0: can't read capabilities [ 350.082764][ T4826] usb 4-1: USB disconnect, device number 11 [ 350.817016][ T6632] fuse: Bad value for 'group_id' [ 350.984193][ T4826] usb 6-1: USB disconnect, device number 12 [ 355.365100][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 364.784597][ T6716] fuse: Bad value for 'group_id' [ 368.608244][ T6744] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 369.582799][ T6746] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 372.146238][ T6761] binder: 6760:6761 ioctl 400c620e 200000000040 returned -22 [ 377.880849][ T6800] fuse: Bad value for 'group_id' [ 378.644556][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652997][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.768283][ T6831] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 382.499588][ T6841] netlink: 3 bytes leftover after parsing attributes in process `syz.5.562'. [ 385.096986][ T6859] binder_alloc: 6854: binder_alloc_buf, no vma [ 390.759548][ T127] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 391.105712][ T127] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 391.146819][ T127] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 391.189797][ T127] usb 1-1: config 8 has no interface number 0 [ 391.223555][ T127] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 391.293541][ T127] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 391.358128][ T127] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 391.403516][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.478148][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.550162][ T127] usb 1-1: NFC: intf ffff88802a7e9000 id ffffffff8d3fc6e0 [ 394.148553][ T6914] netlink: 3 bytes leftover after parsing attributes in process `syz.4.582'. [ 395.497824][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 395.647740][ T4826] usb 1-1: USB disconnect, device number 16 [ 403.848902][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 404.153085][ T4374] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 404.249985][ T4361] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 404.349574][ T4374] usb 1-1: Using ep0 maxpacket: 8 [ 404.363225][ T4374] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 404.373723][ T4374] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.384748][ T4374] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.396119][ T4374] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.407535][ T4374] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.423515][ T4374] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.434307][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.475756][ T4361] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 404.497439][ T4361] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 404.605151][ T4361] usb 6-1: config 8 has no interface number 0 [ 404.667348][ T4361] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 404.689919][ T4374] usb 1-1: GET_CAPABILITIES returned 0 [ 404.695724][ T4374] usbtmc 1-1:16.0: can't read capabilities [ 404.776966][ T4361] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 404.882448][ T4361] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 404.972441][ T4361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.025537][ T6985] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 405.052964][ T4361] usb 6-1: NFC: intf ffff88805411a000 id ffffffff8d3fc6e0 [ 406.411378][ T4332] usb 6-1: USB disconnect, device number 13 [ 409.962623][ T7] usb 1-1: USB disconnect, device number 17 [ 410.267340][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 416.573164][ T4332] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 416.772045][ T4332] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 416.815214][ T4332] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 416.871849][ T4332] usb 5-1: config 8 has no interface number 0 [ 416.896614][ T4332] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 419.270032][ T4332] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 421.112819][ T4332] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 421.391555][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.526477][ T4332] usb 5-1: can't set config #8, error -71 [ 421.640949][ T4332] usb 5-1: USB disconnect, device number 12 [ 425.252839][ T7109] binder: 7108:7109 ioctl 400c620e 200000000040 returned -22 [ 433.068460][ T4329] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 433.279642][ T4329] usb 4-1: Using ep0 maxpacket: 8 [ 433.301694][ T4329] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 433.372873][ T4329] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.476776][ T4329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.671431][ T4329] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.717212][ T4329] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.794084][ T4329] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.839778][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.482045][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.502709][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.124882][ T7172] binder: 7171:7172 ioctl 400c620e 200000000040 returned -22 [ 438.550167][ T14] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 438.788133][ T14] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 438.847280][ T14] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 440.541936][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.548308][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.722616][ T14] usb 6-1: config 8 has no interface number 0 [ 441.063243][ T4329] usb 4-1: can't set config #16, error -110 [ 441.123081][ T14] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 441.191390][ T4329] usb 4-1: USB disconnect, device number 12 [ 441.191667][ T14] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 441.300017][ T14] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 441.324784][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.726816][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 441.754831][ T14] usb 6-1: can't set config #8, error -71 [ 441.772424][ T14] usb 6-1: USB disconnect, device number 14 [ 446.382442][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.660'. [ 446.490614][ T7228] capability: warning: `syz.3.662' uses 32-bit capabilities (legacy support in use) [ 449.564913][ T7222] delete_channel: no stack [ 450.029561][ T4329] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 450.220193][ T4329] usb 5-1: Using ep0 maxpacket: 8 [ 450.336759][ T4329] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 450.402015][ T4329] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.413399][ T4329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.428269][ T4329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.543282][ T4329] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.560137][ T4329] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.573849][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.950071][ T4329] usb 5-1: GET_CAPABILITIES returned 0 [ 450.955618][ T4329] usbtmc 5-1:16.0: can't read capabilities [ 451.616277][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 451.629143][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.637079][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.672918][ T41] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 453.573430][ T41] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 453.618296][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 453.739888][ T41] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.824567][ T41] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 453.943832][ T41] usb 6-1: Product: syz [ 454.001510][ T41] usb 6-1: Manufacturer: syz [ 454.252604][ T41] usb 6-1: SerialNumber: syz [ 454.560512][ T41] usb 6-1: config 0 descriptor?? [ 454.633060][ T41] usb 6-1: selecting invalid altsetting 0 [ 454.994551][ T7272] tipc: Started in network mode [ 455.024323][ T7272] tipc: Node identity 4, cluster identity 4711 [ 455.032468][ T7272] tipc: Node number set to 4 [ 455.305129][ T7265] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 455.316189][ T7265] netlink: 20 bytes leftover after parsing attributes in process `syz.5.671'. [ 455.921340][ T4332] usb 5-1: USB disconnect, device number 13 [ 456.592851][ T41] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 458.350275][ T4374] usb 6-1: USB disconnect, device number 15 [ 458.430142][ T41] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 458.478403][ T41] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 458.560048][ T41] usb 2-1: config 8 has no interface number 0 [ 458.630223][ T41] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 458.786217][ T41] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 458.800467][ T41] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 458.810405][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.143979][ T41] usb 2-1: can't set config #8, error -71 [ 459.183159][ T41] usb 2-1: USB disconnect, device number 8 [ 459.581457][ T7301] fuse: Bad value for 'fd' [ 463.096142][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 465.369453][ T41] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 465.594574][ T41] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 465.640457][ T41] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 465.727930][ T41] usb 5-1: config 8 has no interface number 0 [ 465.787728][ T41] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 465.841707][ T41] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 465.879216][ T7370] fuse: Unknown parameter 'grou00000000000000000000' [ 465.904092][ T41] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 465.958239][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.025227][ T7345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 466.062906][ T41] usb 5-1: NFC: intf ffff88802fa1d000 id ffffffff8d3fc6e0 [ 466.900695][ T7373] binder: 7372:7373 ioctl 400c620e 200000000040 returned -22 [ 467.936021][ T4329] usb 5-1: USB disconnect, device number 14 [ 468.313542][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880258f1c00: rx timeout, send abort [ 468.713355][ T7391] binder: 7390:7391 ioctl 400c620e 200000000040 returned -22 [ 468.813612][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ec7e400: rx timeout, send abort [ 468.823822][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880258f1c00: abort rx timeout. Force session deactivation [ 470.404217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ec7e400: abort rx timeout. Force session deactivation [ 470.881275][ T7409] fuse: Unknown parameter 'grou00000000000000000000' [ 471.052494][ T7412] binder: 7410:7412 ioctl 400c620e 200000000040 returned -22 [ 471.579512][ T4426] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 471.769524][ T4426] usb 1-1: Using ep0 maxpacket: 8 [ 471.782056][ T4426] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 471.802424][ T4426] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.837945][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.858618][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.910348][ T4426] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.955595][ T4426] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.000438][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.262167][ T4426] usb 1-1: GET_CAPABILITIES returned 0 [ 472.268011][ T4426] usbtmc 1-1:16.0: can't read capabilities [ 474.260248][ T7443] binder: 7442:7443 ioctl 400c620e 200000000040 returned -22 [ 474.479677][ T4329] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 474.503315][ T7445] capability: warning: `syz.5.720' uses deprecated v2 capabilities in a way that may be insecure [ 474.887095][ T4329] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 474.907917][ T4329] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 474.986603][ T4329] usb 2-1: config 8 has no interface number 0 [ 475.044478][ T4329] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 475.120150][ T4329] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 475.208009][ T4329] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 475.267170][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.353135][ T7271] usb 1-1: USB disconnect, device number 18 [ 475.541360][ T7441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.583073][ T4329] usb 2-1: NFC: intf ffff88807e311000 id ffffffff8d3fc6e0 [ 475.897477][ T7455] binder: 7454:7455 ioctl 400c620e 200000000040 returned -22 [ 476.028095][ T7458] fuse: Unknown parameter 'group_i00000000000000000000' [ 476.906533][ T6169] usb 2-1: USB disconnect, device number 9 [ 481.299568][ T4426] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 481.519736][ T4426] usb 1-1: Using ep0 maxpacket: 8 [ 481.531842][ T4426] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 481.593980][ T4426] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.628005][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.676576][ T4426] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.735197][ T4426] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.805090][ T4426] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.850155][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.139047][ T4426] usb 1-1: GET_CAPABILITIES returned 0 [ 482.144609][ T4426] usbtmc 1-1:16.0: can't read capabilities [ 485.080525][ T22] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 485.336275][ T22] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 485.442671][ T22] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 485.548115][ T22] usb 2-1: config 8 has no interface number 0 [ 485.616510][ T22] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 485.616660][ T7529] binder: 7528:7529 ioctl 400c620e 200000000040 returned -22 [ 485.669548][ T22] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 485.970694][ T22] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 486.121789][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.149030][ T7526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 486.158250][ T4374] usb 1-1: USB disconnect, device number 19 [ 486.190857][ T7540] fuse: Unknown parameter 'group_i00000000000000000000' [ 486.212600][ T22] usb 2-1: NFC: intf ffff8880766b2000 id ffffffff8d3fc6e0 [ 487.161230][ T7545] fuse: Bad value for 'fd' [ 487.755838][ T4374] usb 2-1: USB disconnect, device number 10 [ 490.750451][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 490.823389][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 491.603643][ T7574] binder: 7573:7574 ioctl 400c620e 200000000040 returned -22 [ 491.789537][ T127] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 491.974233][ T7582] fuse: Bad value for 'fd' [ 491.989605][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 492.009233][ T127] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 492.042234][ T127] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.078910][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.108406][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.188527][ T127] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.235909][ T127] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.283131][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.536617][ T127] usb 6-1: GET_CAPABILITIES returned 0 [ 492.570539][ T127] usbtmc 6-1:16.0: can't read capabilities [ 493.325887][ T7599] fuse: Unknown parameter 'group_i00000000000000000000' [ 493.550623][ T6169] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 493.784956][ T6169] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 493.806565][ T6169] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 493.855242][ T6169] usb 2-1: config 8 has no interface number 0 [ 493.900238][ T6169] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 493.953567][ T6169] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 494.007408][ T6169] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 494.058083][ T6169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.104293][ T7597] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 494.162538][ T6169] usb 2-1: NFC: intf ffff8880579c6000 id ffffffff8d3fc6e0 [ 494.264838][ T4374] usb 6-1: USB disconnect, device number 16 [ 495.719826][ T6169] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 495.901740][ T6169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.965886][ T6169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.980043][ T6169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 495.995913][ T6169] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.007984][ T6169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.035730][ T6169] usb 4-1: config 0 descriptor?? [ 496.137455][ T953] usb 2-1: USB disconnect, device number 11 [ 496.464674][ T6169] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 496.633178][ T6169] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 496.635798][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.769'. [ 496.770279][ T6169] usb 4-1: USB disconnect, device number 13 [ 497.324714][ T7623] fido_id[7623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 497.376844][ T7626] fuse: Bad value for 'fd' [ 498.402027][ T6169] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 498.796114][ T6169] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 498.837975][ T6169] usb 4-1: config 0 has no interface number 0 [ 498.878179][ T6169] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.991952][ T6169] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 499.044474][ T6169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.085644][ T6169] usb 4-1: Product: syz [ 499.100036][ T6169] usb 4-1: Manufacturer: syz [ 499.104693][ T6169] usb 4-1: SerialNumber: syz [ 499.158008][ T6169] usb 4-1: config 0 descriptor?? [ 499.169922][ T4374] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 499.217012][ T6169] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 499.348207][ T7650] tmpfs: Unknown parameter 'q›ota' [ 499.361539][ T4374] usb 5-1: Using ep0 maxpacket: 8 [ 499.373554][ T4374] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 499.403526][ T6169] usb 4-1: USB disconnect, device number 14 [ 499.424216][ T4374] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.450648][ T6169] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 499.487456][ T4374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 499.522487][ T4374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.619537][ T4374] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.757616][ T4374] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 499.903483][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.158282][ T7655] binder: 7654:7655 ioctl 400c620e 200000000040 returned -22 [ 500.293077][ T4374] usb 5-1: GET_CAPABILITIES returned 0 [ 500.309842][ T4374] usbtmc 5-1:16.0: can't read capabilities [ 500.387972][ T7660] fuse: Unknown parameter 'group_id00000000000000000000' [ 500.839905][ T14] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 501.030524][ T14] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 501.050606][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.075266][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.122479][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.154910][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.167707][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.184629][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.213013][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.235310][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.254901][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.277162][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.290004][ T6169] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 501.297996][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.310963][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.342425][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.389568][ T4374] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 501.391698][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.458012][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.493596][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.512828][ T6169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.528067][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535541][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.549696][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.562034][ T6169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.573544][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.581554][ T6169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.604382][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.626376][ T4374] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 501.639884][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.653259][ T6169] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.664945][ T4374] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 501.706808][ T6169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.716197][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.750064][ T6169] usb 2-1: config 0 descriptor?? [ 501.756003][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 501.757752][ T4374] usb 6-1: config 8 has no interface number 0 [ 501.793081][ T14] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.851366][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.870500][ T4374] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 501.892149][ T14] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 501.922877][ T14] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 501.953572][ T14] usb 1-1: Product: syz [ 501.963672][ T4374] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 501.967929][ T14] usb 1-1: Manufacturer: syz [ 502.013707][ T14] usb 1-1: SerialNumber: syz [ 502.064534][ T4374] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 502.094586][ T4374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.114787][ T14] usb 1-1: config 0 descriptor?? [ 502.155705][ T41] usb 5-1: USB disconnect, device number 15 [ 502.163741][ T7675] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 502.202992][ T6169] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 502.220739][ T14] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 502.256050][ T6169] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 502.256490][ T4374] usb 6-1: NFC: intf ffff8880731fc000 id ffffffff8d3fc6e0 [ 502.741571][ T6169] usb 2-1: USB disconnect, device number 12 [ 502.951310][ T4374] usb 1-1: USB disconnect, device number 20 [ 502.979632][ T4374] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 502.999105][ T41] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 503.213295][ T7679] fido_id[7679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 503.269616][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 503.277058][ T41] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 503.307897][ T41] usb 5-1: config 0 has no interface number 0 [ 503.315763][ T41] usb 5-1: config 0 interface 2 has no altsetting 0 [ 503.334524][ T41] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 503.347475][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.357447][ T41] usb 5-1: Product: syz [ 503.364304][ T41] usb 5-1: Manufacturer: syz [ 503.370881][ T41] usb 5-1: SerialNumber: syz [ 503.394023][ T41] usb 5-1: config 0 descriptor?? [ 503.740795][ T7677] loop7: detected capacity change from 0 to 16384 [ 504.102664][ T4374] usb 6-1: USB disconnect, device number 17 [ 504.161061][ T7692] loop7: detected capacity change from 16384 to 0 [ 504.504245][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.579540][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.621710][ T41] usb 5-1: invalid MIDI out EP 0 [ 504.782457][ T41] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 504.834091][ T7680] udevd[7680]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.885597][ T41] usb 5-1: USB disconnect, device number 16 [ 505.189461][ T4374] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 505.393106][ T4374] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 505.456063][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.549471][ T4374] usb 1-1: Product: syz [ 505.553697][ T4374] usb 1-1: Manufacturer: syz [ 505.589613][ T4374] usb 1-1: SerialNumber: syz [ 505.610299][ T4374] usb 1-1: config 0 descriptor?? [ 505.714649][ T7711] tmpfs: Unknown parameter 'q›ota' [ 505.849892][ T4374] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 506.061564][ T4374] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 506.956479][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 507.349508][ T41] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 507.376784][ T7737] fuse: Unknown parameter 'group_id00000000000000000000' [ 507.579942][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 507.590388][ T41] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 507.604036][ T41] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.616943][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.645106][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.686507][ T41] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.750870][ T41] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.782853][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.814809][ T127] usb 1-1: USB disconnect, device number 21 [ 508.017144][ T41] usb 2-1: GET_CAPABILITIES returned 0 [ 508.059891][ T41] usbtmc 2-1:16.0: can't read capabilities [ 508.930944][ T7748] binder: 7747:7748 ioctl 400c620e 200000000040 returned -22 [ 509.956312][ T41] usb 2-1: USB disconnect, device number 13 [ 510.941790][ T953] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 511.216495][ T953] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 511.268124][ T953] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 511.326320][ T953] usb 1-1: config 8 has no interface number 0 [ 511.380776][ T953] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 511.583286][ T953] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 511.712492][ T953] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 511.757754][ T953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.870234][ T7760] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 511.940626][ T953] usb 1-1: NFC: intf ffff888059665000 id ffffffff8d3fc6e0 [ 512.719483][ T127] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 512.923246][ T127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 512.979490][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.034814][ T127] usb 2-1: Product: syz [ 513.049504][ T127] usb 2-1: Manufacturer: syz [ 513.069072][ T127] usb 2-1: SerialNumber: syz [ 513.134583][ T127] usb 2-1: config 0 descriptor?? [ 513.350585][ T4332] usb 1-1: USB disconnect, device number 22 [ 513.393932][ T127] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.605797][ T127] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 514.764712][ T7789] binder: 7787:7789 ioctl 400c620e 200000000040 returned -22 [ 515.283231][ T7800] fuse: Unknown parameter 'group_id00000000000000000000' [ 515.525777][ T41] usb 2-1: USB disconnect, device number 14 [ 516.910151][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 517.245553][ T14] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 517.287822][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.333507][ T14] usb 5-1: Product: syz [ 517.337809][ T14] usb 5-1: Manufacturer: syz [ 517.346442][ T14] usb 5-1: SerialNumber: syz [ 517.377955][ T14] usb 5-1: config 0 descriptor?? [ 517.806739][ T14] usb 5-1: USB disconnect, device number 17 [ 518.309840][ T4332] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 518.581279][ T4332] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 518.604103][ T4332] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 518.682570][ T4332] usb 6-1: config 8 has no interface number 0 [ 518.712722][ T4332] usb 6-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 518.754605][ T4332] usb 6-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 518.823412][ T4332] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 518.913703][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.013733][ T7826] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 519.075597][ T4332] usb 6-1: NFC: intf ffff888058ed7000 id ffffffff8d3fc6e0 [ 519.119612][ T14] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 519.331825][ T14] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.366550][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.404639][ T14] usb 5-1: Product: syz [ 519.425915][ T14] usb 5-1: Manufacturer: syz [ 519.453773][ T14] usb 5-1: SerialNumber: syz [ 519.494632][ T14] usb 5-1: config 0 descriptor?? [ 519.715235][ T14] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 519.927118][ T14] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 520.400861][ T7841] binder: 7840:7841 ioctl 400c620e 200000000040 returned -22 [ 520.741242][ T22] usb 6-1: USB disconnect, device number 18 [ 521.295398][ T7860] fuse: Bad value for 'user_id' [ 521.620462][ T6169] usb 5-1: USB disconnect, device number 18 [ 522.742910][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 524.467252][ T7890] binder: 7889:7890 ioctl 400c620e 200000000040 returned -22 [ 526.052929][ T7920] fuse: Bad value for 'user_id' [ 526.154055][ T7922] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 526.320768][ T22] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 526.732197][ T22] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 526.762684][ T22] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 527.677414][ T22] usb 1-1: config 8 has no interface number 0 [ 527.803112][ T22] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 528.046026][ T22] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 528.161718][ T4332] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 528.363931][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.029394][ T22] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 529.040007][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.112239][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.207600][ T4332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.420065][ T4332] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.440610][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.501731][ T4332] usb 5-1: config 0 descriptor?? [ 529.520616][ T22] usb 1-1: can't set config #8, error -71 [ 529.558729][ T22] usb 1-1: USB disconnect, device number 23 [ 530.091270][ T4332] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 530.171484][ T4332] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 530.314846][ T4332] usb 5-1: USB disconnect, device number 19 [ 530.815442][ T7944] fido_id[7944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 532.715845][ T7952] Can't find ip_set type hash:ip,ma [ 534.314993][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 534.749617][ T7979] fuse: Bad value for 'user_id' [ 536.409864][ T4332] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 536.691267][ T4332] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 536.713077][ T4332] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 536.765294][ T4332] usb 2-1: config 8 has no interface number 0 [ 536.814321][ T4332] usb 2-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 536.880255][ T4332] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 536.952891][ T4332] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 536.994880][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.100468][ T7999] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.757644][ T4332] usb 2-1: NFC: intf ffff888079b1c000 id ffffffff8d3fc6e0 [ 539.007984][ T6169] usb 2-1: USB disconnect, device number 15 [ 541.210370][ T8040] Bluetooth: MGMT ver 1.22 [ 543.536704][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 543.638212][ T8056] fuse: Bad value for 'fd' [ 543.698258][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.886'. [ 548.861851][ T127] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 549.221578][ T127] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 549.250477][ T127] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 549.519678][ T127] usb 5-1: config 8 has no interface number 0 [ 549.561281][ T127] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 549.580130][ T127] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 549.630127][ T127] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 549.647515][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.719947][ T8100] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 549.747966][ T127] usb 5-1: NFC: intf ffff888057ad9000 id ffffffff8d3fc6e0 [ 550.992810][ T4374] usb 5-1: USB disconnect, device number 20 [ 551.415409][ T8131] fuse: Bad value for 'fd' [ 552.536745][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.914'. [ 552.553935][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.914'. [ 556.123064][ T8161] loop2: detected capacity change from 0 to 7 [ 556.185179][ T7263] Dev loop2: unable to read RDB block 7 [ 556.212699][ T7263] loop2: unable to read partition table [ 556.231268][ T7263] loop2: partition table beyond EOD, truncated [ 556.277824][ T8161] Dev loop2: unable to read RDB block 7 [ 556.333752][ T8161] loop2: unable to read partition table [ 556.374034][ T8161] loop2: partition table beyond EOD, truncated [ 556.475589][ T8161] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.072625][ T953] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 557.275608][ T953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.129909][ T953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.174709][ T953] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 558.268029][ T953] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 558.331721][ T953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.403536][ T953] usb 6-1: config 0 descriptor?? [ 558.832382][ T953] usbhid 6-1:0.0: can't add hid device: -71 [ 558.850010][ T953] usbhid: probe of 6-1:0.0 failed with error -71 [ 558.871022][ T953] usb 6-1: USB disconnect, device number 19 [ 562.962929][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970576][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.971879][ T8214] fuse: Bad value for 'fd' [ 567.084162][ T8225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 567.539452][ T4374] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 567.733550][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.775733][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.806755][ T4374] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.864086][ T4374] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.916572][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.969575][ T4374] usb 1-1: config 0 descriptor?? [ 568.412499][ T4374] usbhid 1-1:0.0: can't add hid device: -71 [ 568.445631][ T4374] usbhid: probe of 1-1:0.0 failed with error -71 [ 568.528525][ T4374] usb 1-1: USB disconnect, device number 24 [ 572.415614][ T8263] binder: 8262:8263 ioctl 400c620e 200000000040 returned -22 [ 574.737399][ T8281] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 576.579946][ T4332] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 576.791278][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.809964][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.821510][ T4332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.846749][ T4332] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.942732][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.881337][ T4332] usb 1-1: config 0 descriptor?? [ 577.950773][ T4332] usb 1-1: can't set config #0, error -71 [ 578.029266][ T4332] usb 1-1: USB disconnect, device number 25 [ 579.397623][ T8315] mmap: syz.5.969 (8315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 580.041037][ T8322] binder: 8321:8322 ioctl 400c620e 200000000040 returned -22 [ 583.009933][ T7271] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 583.213350][ T7271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 583.243712][ T7271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.296921][ T7271] usb 1-1: Product: syz [ 583.315011][ T7271] usb 1-1: Manufacturer: syz [ 583.343668][ T7271] usb 1-1: SerialNumber: syz [ 583.369959][ T7271] usb 1-1: config 0 descriptor?? [ 583.604002][ T7271] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 584.224559][ T7271] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 585.722863][ T7271] usb 1-1: USB disconnect, device number 26 [ 586.889638][ T22] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 588.569575][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 588.576451][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.612628][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.679493][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.720396][ T22] usb 5-1: Product: syz [ 588.724757][ T22] usb 5-1: Manufacturer: syz [ 588.753864][ T22] usb 5-1: SerialNumber: syz [ 588.781475][ T22] usb 5-1: config 0 descriptor?? [ 588.878463][ T22] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 588.907213][ T22] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 590.172237][ T22] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 590.260351][ T22] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 590.304672][ T22] em28xx 5-1:0.0: board has no eeprom [ 590.449551][ T22] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 590.580327][ T6169] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 591.262136][ T22] em28xx 5-1:0.0: dvb set to bulk mode. [ 591.273556][ T22] usb 5-1: USB disconnect, device number 21 [ 591.282108][ T22] em28xx 5-1:0.0: Disconnecting em28xx [ 591.289867][ T7271] em28xx 5-1:0.0: Binding DVB extension [ 591.523935][ T6169] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 591.605727][ T6169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.692827][ T6169] usb 2-1: Product: syz [ 591.707340][ T6169] usb 2-1: Manufacturer: syz [ 591.770055][ T6169] usb 2-1: SerialNumber: syz [ 591.791740][ T6169] usb 2-1: config 0 descriptor?? [ 592.013494][ T6169] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 592.794726][ T7271] em28xx 5-1:0.0: Registering input extension [ 592.842504][ T22] em28xx 5-1:0.0: Closing input extension [ 595.147448][ T6169] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 595.273042][ T22] em28xx 5-1:0.0: Freeing device [ 595.341705][ T7271] usb 2-1: USB disconnect, device number 16 [ 598.739947][ T8541] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 599.693817][ T8545] binder: 8543:8545 ioctl 400c620e 200000000040 returned -22 [ 600.243942][ C0] Unknown status report in ack skb [ 600.579495][ T22] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 600.893127][ T22] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 601.497652][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.510211][ T22] usb 6-1: Product: syz [ 601.514516][ T22] usb 6-1: Manufacturer: syz [ 601.520631][ T22] usb 6-1: SerialNumber: syz [ 601.533535][ T22] usb 6-1: config 0 descriptor?? [ 601.753456][ T22] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.406589][ T22] usb 6-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 603.852373][ T22] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 605.627379][ T22] usb 6-1: media controller created [ 605.636229][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.824532][ T22] i2c i2c-1: Added multiplexed i2c bus 2 [ 605.831471][ T22] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 605.891007][ T22] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 605.951171][ T22] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 608.036538][ T8594] binder: 8593:8594 ioctl 400c620e 200000000040 returned -22 [ 608.084544][ T8596] binfmt_misc: register: failed to install interpreter file ./file0 [ 608.270073][ T22] DVB: Unable to find symbol r820t_attach() [ 608.647432][ T22] usb 6-1: USB disconnect, device number 20 [ 612.007935][ T8618] tipc: Can't bind to reserved service type 0 [ 612.910097][ T22] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 613.708777][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 615.394848][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.404312][ T22] usb 5-1: Product: syz [ 615.409912][ T22] usb 5-1: Manufacturer: syz [ 615.415765][ T22] usb 5-1: SerialNumber: syz [ 615.432100][ T22] usb 5-1: config 0 descriptor?? [ 615.927385][ T22] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 615.937895][ T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 615.948546][ T22] usb 5-1: USB disconnect, device number 22 [ 616.246307][ T8646] binder: 8645:8646 ioctl 400c620e 200000000040 returned -22 [ 616.521052][ T8651] comedi comedi2: rti800: I/O port conflict (0x4f27,16) [ 617.127475][ C0] ------------[ cut here ]------------ [ 617.133094][ C0] WARNING: CPU: 0 PID: 15 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 617.143046][ C0] Modules linked in: [ 617.147000][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 617.154359][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 617.164588][ C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 617.171008][ C0] Code: ff ff ff e8 40 d3 e3 f7 0f 0b 48 8b 7c 24 20 e8 04 90 7f fe e9 dd e9 ff ff e8 2a d3 e3 f7 0f 0b e9 f1 ee ff ff e8 1e d3 e3 f7 <0f> 0b e9 61 f2 ff ff e8 12 d3 e3 f7 48 c7 c7 f0 73 fa 8d 4c 89 f6 [ 617.190727][ C0] RSP: 0018:ffffc90000147740 EFLAGS: 00010246 [ 617.196835][ C0] RAX: ffffffff899d0342 RBX: 0000000000000000 RCX: ffff88813fea3b80 [ 617.204885][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.212948][ C0] RBP: ffffc90000147948 R08: ffff88813fea3b80 R09: 0000000000000003 [ 617.221058][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000028f00 [ 617.229222][ C0] R13: dffffc0000000000 R14: ffff88807482e258 R15: ffff88801aacb400 [ 617.237237][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 617.246245][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.252900][ C0] CR2: 0000001b2f421ff8 CR3: 000000005c98a000 CR4: 00000000003506f0 [ 617.260946][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 617.268981][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 617.276985][ C0] Call Trace: [ 617.280332][ C0] [ 617.283305][ C0] ? verify_lock_unused+0x140/0x140 [ 617.288578][ C0] ? __ieee80211_beacon_get+0xad/0x1f50 [ 617.294171][ C0] ? ieee80211_beacon_get_template+0x40/0x40 [ 617.300276][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 617.306315][ C0] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 617.311875][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 617.317466][ C0] ? read_lock_is_recursive+0x10/0x10 [ 617.322925][ C0] __iterate_interfaces+0x243/0x500 [ 617.328161][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 617.334480][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 617.341753][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 617.348033][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 617.355152][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 617.360440][ C0] __hrtimer_run_queues+0x554/0xd60 [ 617.365689][ C0] ? hw_scan_work+0xf30/0xf30 [ 617.370447][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 617.375596][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 617.381749][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 617.386901][ C0] handle_softirqs+0x2a1/0x920 [ 617.391748][ C0] ? __sched_text_start+0x8/0x8 [ 617.396643][ C0] ? run_ksoftirqd+0x98/0xf0 [ 617.401307][ C0] ? do_softirq+0x200/0x200 [ 617.405851][ C0] ? preempt_schedule_common+0xa5/0xd0 [ 617.411395][ C0] run_ksoftirqd+0x98/0xf0 [ 617.415848][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 617.421122][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 617.426573][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 617.431836][ C0] smpboot_thread_fn+0x64a/0xa40 [ 617.436818][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 617.441943][ C0] kthread+0x29d/0x330 [ 617.446062][ C0] ? cpu_report_death+0x230/0x230 [ 617.451172][ C0] ? kthread_blkcg+0xd0/0xd0 [ 617.455805][ C0] ret_from_fork+0x1f/0x30 [ 617.460320][ C0] [ 617.463388][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 617.470686][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 617.477995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 617.488074][ C0] Call Trace: [ 617.491385][ C0] [ 617.494336][ C0] dump_stack_lvl+0x168/0x22e [ 617.499051][ C0] ? memcpy+0x3c/0x60 [ 617.503076][ C0] ? show_regs_print_info+0x12/0x12 [ 617.508311][ C0] ? load_image+0x3b0/0x3b0 [ 617.512874][ C0] panic+0x2c9/0x710 [ 617.516818][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 617.521368][ C0] ? ret_from_fork+0x1f/0x30 [ 617.526002][ C0] __warn+0x2f8/0x4f0 [ 617.530021][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 617.535803][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 617.541572][ C0] report_bug+0x2ba/0x4f0 [ 617.545933][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 617.551698][ C0] handle_bug+0x3a/0x70 [ 617.555887][ C0] exc_invalid_op+0x16/0x40 [ 617.560426][ C0] asm_exc_invalid_op+0x16/0x20 [ 617.565304][ C0] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 617.571670][ C0] Code: ff ff ff e8 40 d3 e3 f7 0f 0b 48 8b 7c 24 20 e8 04 90 7f fe e9 dd e9 ff ff e8 2a d3 e3 f7 0f 0b e9 f1 ee ff ff e8 1e d3 e3 f7 <0f> 0b e9 61 f2 ff ff e8 12 d3 e3 f7 48 c7 c7 f0 73 fa 8d 4c 89 f6 [ 617.591305][ C0] RSP: 0018:ffffc90000147740 EFLAGS: 00010246 [ 617.597406][ C0] RAX: ffffffff899d0342 RBX: 0000000000000000 RCX: ffff88813fea3b80 [ 617.605402][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.613395][ C0] RBP: ffffc90000147948 R08: ffff88813fea3b80 R09: 0000000000000003 [ 617.621396][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff92000028f00 [ 617.629396][ C0] R13: dffffc0000000000 R14: ffff88807482e258 R15: ffff88801aacb400 [ 617.637420][ C0] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 617.643211][ C0] ? verify_lock_unused+0x140/0x140 [ 617.648448][ C0] ? __ieee80211_beacon_get+0xad/0x1f50 [ 617.654050][ C0] ? ieee80211_beacon_get_template+0x40/0x40 [ 617.660090][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 617.666130][ C0] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 617.671633][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 617.677207][ C0] ? read_lock_is_recursive+0x10/0x10 [ 617.682622][ C0] __iterate_interfaces+0x243/0x500 [ 617.687873][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 617.694159][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 617.701386][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 617.707740][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 617.714793][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 617.720028][ C0] __hrtimer_run_queues+0x554/0xd60 [ 617.725268][ C0] ? hw_scan_work+0xf30/0xf30 [ 617.729978][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 617.735116][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 617.741225][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 617.746372][ C0] handle_softirqs+0x2a1/0x920 [ 617.751180][ C0] ? __sched_text_start+0x8/0x8 [ 617.756073][ C0] ? run_ksoftirqd+0x98/0xf0 [ 617.760699][ C0] ? do_softirq+0x200/0x200 [ 617.765236][ C0] ? preempt_schedule_common+0xa5/0xd0 [ 617.770736][ C0] run_ksoftirqd+0x98/0xf0 [ 617.775177][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 617.780398][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 617.785810][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 617.791033][ C0] smpboot_thread_fn+0x64a/0xa40 [ 617.796013][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 617.801090][ C0] kthread+0x29d/0x330 [ 617.805195][ C0] ? cpu_report_death+0x230/0x230 [ 617.810249][ C0] ? kthread_blkcg+0xd0/0xd0 [ 617.814880][ C0] ret_from_fork+0x1f/0x30 [ 617.819350][ C0] [ 617.822771][ C0] Kernel Offset: disabled [ 617.827150][ C0] Rebooting in 86400 seconds..