last executing test programs: 10m13.009642531s ago: executing program 0 (id=1450): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}, 0x28) read$hiddev(0xffffffffffffffff, &(0x7f0000002300)=""/102, 0x66) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) 10m9.991602514s ago: executing program 0 (id=1456): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) 10m9.678807892s ago: executing program 0 (id=1460): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000201, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 10m7.685765747s ago: executing program 0 (id=1466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 10m7.187083189s ago: executing program 0 (id=1468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10320) 10m7.045652538s ago: executing program 0 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m53.410979239s ago: executing program 32 (id=1461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 9m51.860762518s ago: executing program 33 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc6, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m43.204763862s ago: executing program 4 (id=1816): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 7m42.613227141s ago: executing program 4 (id=1818): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgget$private(0x0, 0x1e3) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) 7m41.230625495s ago: executing program 4 (id=1820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10142, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = creat(0x0, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r2, &(0x7f0000000380), 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) sched_setscheduler(0x0, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7m40.418839864s ago: executing program 4 (id=1824): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) 7m40.250773869s ago: executing program 4 (id=1826): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0xbe7, 0x6, 0x3, 0x9, 0x2}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x62da}, {0x6, 0x11, 0xe98}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040088) r8 = socket(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', r9, 0x29, 0x0, 0x1, 0x65b, 0x8, @empty, @private2}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) 7m39.054498209s ago: executing program 4 (id=1827): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7m23.635472005s ago: executing program 34 (id=1827): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7m10.280907993s ago: executing program 6 (id=1904): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000", 0x85}], 0x1}, 0x0) 7m9.281329544s ago: executing program 6 (id=1907): socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x565201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 7m8.971972052s ago: executing program 6 (id=1908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m2.605535924s ago: executing program 6 (id=1920): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d02c5269cef5ccac811bec0fd035bfe4323ad1c577f304ce81f3abb12220e2e95e42aeeba61d28aaadb632a92bc4ca42fc614f744b6b97ea8ec343aec4c56fd77e7008d0a5b703bab1cca57c5c83721ea81a49c1a5546d373aaaae6b389f4bf8f65c78e607e59aa8963535990c5231", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)="345626b66430b3757413b8cb18534d02ba25ff770d77ddc4d89b4b7812c65a3eb63fbcfe41a2d57d3d11e202ec5834967b0193c7e05c1de2a83f4088aa66b2a1e3f360cb90176b1eb1074187a63b3d8fd2e6ee686292c8e5ec9426939c547c26313ec1c02bf6221209b77caab97d98f9fd9b39b17af35fcd4aa260e0ed554114b23b793b3a594a636605f2e4d572bb91f145689910fe01183982473bda891044a0a691b88b459779cacde7ff50e6b1f51b7a9768b0c3c2b6f50b49619f8decb18140eabe6dea67f19fd7416539f752df1a29919c1312508214a287011bbbbf214a726c846a8b5cbd6ea7ecf4e913f0f9cec6de01d6eecba621886f0ce05195d0c6d0554b795d6102d2b85b53667eaed191bb428bd4d17d2aa9e0dcfb1555052d7970d8f2ffa14f4f40bd765d3e8fb28d5c0138531be72cfb382e42aa2295b473c22b8be1af89de9021863f2a7424bce3b1691b243db23250af8528d3e9b5ce77d26331af15976daddeb1c5c6ef5d6887058b8244ed5e8d27af85086fc9e081a4922dc790a5159d9306d099d8defbd1f28754e257b9eefcb4f33d7cf53eb90c7e0227de4ea7fff474c5da25fcc13aecebb650e7fcdf96177317c18307bfb39af051410c1de4e35ca7452be0163bb06a4cb40c12fd7b5cb7ba97cdee8079727748138c6b788f5c48831a9d5cd9d4088a5512434a15e282ae3420fb0caaba39893fcc91a1c82b627d327289abfb8b7a7284487d5a5ea04f40b78976430772887a787171c73b94978197686c520c9802da60177d318662562c76e9b8b1a4146d0c51db28cecd7aa5375cb55da7b0ba8e5f16c4d07e892a8f97d911209eadaa0982f13ad7207f55f127a7636750402636b7899dd1db3e27f25b46482a2ad78d4a9c1fc6c28ac3e6c2dbca389288f4c8fd77fca525", 0x292}], 0x1}}], 0x2, 0x400c0) 7m2.103429698s ago: executing program 3 (id=1921): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000005c0), 0x400000000000291, 0x8100) 7m1.797801053s ago: executing program 6 (id=1922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000210001002bbd7000fcdbdf250a800001000000011c0000001400110072afffff6c616e300000000000000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8894) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0x2, 0x3, 0xfffffff9, 0x9, 0x15, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r4, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) 7m1.350624451s ago: executing program 3 (id=1923): syz_emit_ethernet(0x3b0, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 7m0.801365586s ago: executing program 3 (id=1925): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = eventfd2(0x210d28e2, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r3, 0x1) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 6m59.645131322s ago: executing program 3 (id=1928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 6m58.262723364s ago: executing program 3 (id=1934): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r2, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6m57.720494946s ago: executing program 6 (id=1936): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 6m57.070866531s ago: executing program 3 (id=1938): socket$nl_xfrm(0x10, 0x3, 0x6) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) dup(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x3e00, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6m42.254166794s ago: executing program 35 (id=1936): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 6m41.868604915s ago: executing program 36 (id=1938): socket$nl_xfrm(0x10, 0x3, 0x6) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_create(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) dup(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x3e00, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 6m10.973125233s ago: executing program 5 (id=2002): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0xd, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) gettid() sendmsg$nl_netfilter(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x204c000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f00000000c0)=""/73, &(0x7f0000000000)=0x49) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x6) read$watch_queue(r9, &(0x7f0000000540)=""/4096, 0x1000) socket$kcm(0x15, 0x5, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050403000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m1.938580662s ago: executing program 5 (id=2005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x184}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xc, &(0x7f0000000100)) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = userfaultfd(0x80001) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000000}) 6m1.554193175s ago: executing program 5 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, 0x0, 0x20004090) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[], 0x0, 0x4}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}}, 0x0) r5 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r7, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m59.826196194s ago: executing program 5 (id=2009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r9, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0x10, 0x1, r9}) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x24000840) 5m58.511664064s ago: executing program 5 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m56.970595164s ago: executing program 5 (id=2012): semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) 5m41.401722538s ago: executing program 37 (id=2012): semtimedop(0x0, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) 1m19.445219938s ago: executing program 1 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 1m18.45427561s ago: executing program 1 (id=2388): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x60) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c06, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m17.031631598s ago: executing program 1 (id=2391): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m16.805203189s ago: executing program 1 (id=2393): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$evdev(0x0, 0x0, 0x862b01) read$hiddev(0xffffffffffffffff, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) 1m11.202565712s ago: executing program 1 (id=2401): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) read(r1, &(0x7f0000000a40)=""/141, 0x8d) 1m10.155993121s ago: executing program 1 (id=2405): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$evdev(0x0, 0x0, 0x862b01) read$hiddev(0xffffffffffffffff, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) 1m4.924109232s ago: executing program 9 (id=2411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 1m4.566885621s ago: executing program 9 (id=2413): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2, 0x8}, {0x10, 0x80004, 0xb}], 0x10, 0x1}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 1m4.068240003s ago: executing program 9 (id=2415): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) read(r1, &(0x7f0000000a40)=""/141, 0x8d) 1m2.88280833s ago: executing program 9 (id=2420): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)=ANY=[@ANYBLOB="201405"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 1m2.02966725s ago: executing program 9 (id=2422): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, 0x0, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 53.783692445s ago: executing program 9 (id=2434): pipe(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3e1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) write(0xffffffffffffffff, &(0x7f0000000100)="ace7942dcbab01359f714a46bf8f14fbd49c564b379713314077f123183a2e446833be7753d103957eb7b52747850a09e45e77f0a3a535602a10f2d93bab2ec27ab4027d402a511117a6e0752d2956fb4aabe8d6ee549b4e1ab55d1884dac1b398a65597b381c12ca17cc14562884eba5b4c1a03b8efe52a78d3eddd123fc83d8c2792484f5456f38fa52d6366356dcfe550c86623ddb00571ba9ada9c94befd53df4626688f18007fbca17a358b12c86dce0de1125b38b765fcc15c68106410c04ed668897b1bb0f2b1ee4e", 0xcc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(0xffffffffffffffff, r1, 0x8f5, 0x100000000000000) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x1, 0x0, 0x0, @u32}, @nested={0x4, 0x14e}]}]}, 0x34}}, 0x84054) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020007000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x4d00, 0x0) 38.486337337s ago: executing program 38 (id=2434): pipe(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3e1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) write(0xffffffffffffffff, &(0x7f0000000100)="ace7942dcbab01359f714a46bf8f14fbd49c564b379713314077f123183a2e446833be7753d103957eb7b52747850a09e45e77f0a3a535602a10f2d93bab2ec27ab4027d402a511117a6e0752d2956fb4aabe8d6ee549b4e1ab55d1884dac1b398a65597b381c12ca17cc14562884eba5b4c1a03b8efe52a78d3eddd123fc83d8c2792484f5456f38fa52d6366356dcfe550c86623ddb00571ba9ada9c94befd53df4626688f18007fbca17a358b12c86dce0de1125b38b765fcc15c68106410c04ed668897b1bb0f2b1ee4e", 0xcc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(0xffffffffffffffff, r1, 0x8f5, 0x100000000000000) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x1, 0x0, 0x0, @u32}, @nested={0x4, 0x14e}]}]}, 0x34}}, 0x84054) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000e108000140000000130500020007000000080006400000000208000440000000140900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_RESET(r8, 0x4d00, 0x0) 18.44693428s ago: executing program 2 (id=2474): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0xa, 0x3, 0x10000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r5 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) 14.303163063s ago: executing program 2 (id=2478): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0)={0x0, 0x15, 0x4, "c70b9810"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0x4, "a9e218ec"}, 0x0, 0x0}) 12.485932157s ago: executing program 7 (id=2481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) 10.813645115s ago: executing program 2 (id=2482): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r5 = fanotify_init(0x0, 0x80000) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9.867894964s ago: executing program 2 (id=2483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(0x0, 0x1, 0x200) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000045c0)=0x1) r2 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in=@empty, 0xfffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x40000000}}, 0xe8) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x1, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0x20000}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "ab84411f518dc9d5565b9e05de67830aeb529f334e285efe3786823a0a1e08b53bec30240d4d6f58f05cd36e941758cf60d4c5a818aca82c12697c43daf8000000"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 9.467932083s ago: executing program 7 (id=2484): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db7", 0x8a}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "007357a2bbac3b97cfb8f022691e15da74a73092f02d87492a49735a5e7d5cbd4fe3f7ff298763fe62bdec782583723ec37290a721eaa00fd91d7b81f1b4df6d44962aeefc4fdbeffead5cec4718f6ccf47be25ee6c71ec420a2a0e189b014e7590d846d11b376f2b2703955a4ce2e6457f446371c229fc22ba5c311f42bbd6d824fb13aebd32e0da34276d39c1a2ba003009ac10d9e0c4def4a88478df37e7412f709ff21d2201c51b8bcd9ef3d92f20aeb64f414a7e26f578c804a2a860506b5dee63c8ffd3ff79ded4cca3b16edc5642575c026d5bc480e40985786ad68"}, 0xfffffd61) 7.555751445s ago: executing program 7 (id=2488): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r1, &(0x7f00000000c0)=""/175, 0x20) 7.293798044s ago: executing program 8 (id=2489): mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) 5.947023844s ago: executing program 2 (id=2490): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0)={0x0, 0x15, 0x4, "c70b9810"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0x4, "a9e218ec"}, 0x0, 0x0}) 5.606466965s ago: executing program 7 (id=2491): socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x7) mmap(&(0x7f00008e3000/0x4000)=nil, 0x4000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000540)={0x0, 0x3, 0x100, 0x3, 0x190}, &(0x7f0000000380), &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000015000103000000000070000001"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/186, 0xba) 4.309528823s ago: executing program 8 (id=2492): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.151162938s ago: executing program 8 (id=2493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) 2.363419184s ago: executing program 8 (id=2494): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d02c5269cef5ccac811bec0fd035bfe4323ad1c577f304ce81f3abb12220e2e95e42aeeba61d28aaadb632a92bc4ca42fc614f744b6b97ea8ec343aec4c56fd77e7008d0a5b703bab1cca57c5c83721ea81a49c1a5546d373aaaae6b389f4bf8f65c", 0x62}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0x291}], 0x1}}], 0x2, 0x400c0) 2.241088834s ago: executing program 8 (id=2495): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2, 0x8}, {0x10, 0x80004, 0xb}], 0x10, 0x1}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2.098314589s ago: executing program 8 (id=2496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}, 0x28) r2 = syz_open_dev$evdev(0x0, 0x0, 0x862b01) read$hiddev(0xffffffffffffffff, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"}) 1.576920485s ago: executing program 7 (id=2497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) timer_create(0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @loopback}}}, 0x108) close(r6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r8, r5, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 258.814572ms ago: executing program 7 (id=2498): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20040020) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) 0s ago: executing program 2 (id=2499): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000070000000000000000000000850000007d000021950000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c800, 0x8, 0xc1}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered forwarding state [ 914.709259][T13387] hsr_slave_0: entered promiscuous mode [ 914.717509][T13387] hsr_slave_1: entered promiscuous mode [ 914.718458][T13387] debugfs: 'hsr0' already exists in 'hsr' [ 914.718480][T13387] Cannot create hsr debugfs directory [ 915.060640][T10768] Bluetooth: hci4: command tx timeout [ 915.576131][T13405] hsr_slave_0: entered promiscuous mode [ 915.577044][T13405] hsr_slave_1: entered promiscuous mode [ 915.577677][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 915.577694][T13405] Cannot create hsr debugfs directory [ 915.683484][T13402] hsr_slave_0: entered promiscuous mode [ 915.684965][T13402] hsr_slave_1: entered promiscuous mode [ 915.685887][T13402] debugfs: 'hsr0' already exists in 'hsr' [ 915.685911][T13402] Cannot create hsr debugfs directory [ 915.988885][T11351] usb 2-1: USB disconnect, device number 85 [ 920.697740][T13188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.022105][T12907] bridge_slave_1: left allmulticast mode [ 921.022138][T12907] bridge_slave_1: left promiscuous mode [ 921.022400][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.126106][T12907] bridge_slave_0: left allmulticast mode [ 921.126137][T12907] bridge_slave_0: left promiscuous mode [ 921.126410][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.205234][T12907] bridge_slave_1: left allmulticast mode [ 921.205266][T12907] bridge_slave_1: left promiscuous mode [ 921.205508][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.282077][T12907] bridge_slave_0: left allmulticast mode [ 921.282118][T12907] bridge_slave_0: left promiscuous mode [ 921.282374][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.383386][T12907] bridge_slave_1: left allmulticast mode [ 921.383409][T12907] bridge_slave_1: left promiscuous mode [ 921.383566][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.472139][T12907] bridge_slave_0: left allmulticast mode [ 921.472173][T12907] bridge_slave_0: left promiscuous mode [ 921.472428][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.535044][T12907] bridge_slave_1: left allmulticast mode [ 921.535077][T12907] bridge_slave_1: left promiscuous mode [ 921.535348][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.602080][T12907] bridge_slave_0: left allmulticast mode [ 921.602113][T12907] bridge_slave_0: left promiscuous mode [ 921.602391][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.652876][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.731423][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.794592][T12907] bond0 (unregistering): Released all slaves [ 923.489012][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 923.519281][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 923.537801][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 923.559738][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 923.585213][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 924.721436][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.804674][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.865099][T12907] bond0 (unregistering): Released all slaves [ 925.620788][ T5848] Bluetooth: hci5: command tx timeout [ 926.541292][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.621491][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.724410][T12907] bond0 (unregistering): Released all slaves [ 926.991579][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.071616][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.134864][T12907] bond0 (unregistering): Released all slaves [ 927.726198][ T5848] Bluetooth: hci5: command tx timeout [ 927.729672][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'. [ 928.930764][T12907] hsr_slave_0: left promiscuous mode [ 928.970591][T12907] hsr_slave_1: left promiscuous mode [ 928.971188][T12907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.031063][T12907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.175951][T12907] hsr_slave_0: left promiscuous mode [ 929.200466][T12907] hsr_slave_1: left promiscuous mode [ 929.201081][T12907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.230553][T12907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.402745][T12907] hsr_slave_0: left promiscuous mode [ 929.453944][T12907] hsr_slave_1: left promiscuous mode [ 929.455090][T12907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.526150][T12907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.677114][T12907] hsr_slave_0: left promiscuous mode [ 929.853029][ T5848] Bluetooth: hci5: command tx timeout [ 929.881972][T12907] hsr_slave_1: left promiscuous mode [ 929.882876][T12907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.904153][T12907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.556509][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.556586][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.833040][T12907] team0 (unregistering): Port device team_slave_1 removed [ 931.890423][ T5848] Bluetooth: hci5: command tx timeout [ 932.001405][T12907] team0 (unregistering): Port device team_slave_0 removed [ 933.880790][T12907] team0 (unregistering): Port device team_slave_1 removed [ 934.041413][T12907] team0 (unregistering): Port device team_slave_0 removed [ 936.725247][T12907] team0 (unregistering): Port device team_slave_1 removed [ 936.871318][T12907] team0 (unregistering): Port device team_slave_0 removed [ 938.292187][T12907] team0 (unregistering): Port device team_slave_1 removed [ 938.441290][T12907] team0 (unregistering): Port device team_slave_0 removed [ 939.869800][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2072'. [ 940.143556][T13484] chnl_net:caif_netlink_parms(): no params data found [ 940.744298][T13484] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.744526][T13484] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.744763][T13484] bridge_slave_0: entered allmulticast mode [ 940.747767][T13484] bridge_slave_0: entered promiscuous mode [ 940.781471][T13484] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.781692][T13484] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.781934][T13484] bridge_slave_1: entered allmulticast mode [ 940.829766][T13484] bridge_slave_1: entered promiscuous mode [ 941.119691][T13484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.201571][T13484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.568843][T13484] team0: Port device team_slave_0 added [ 941.588231][T13484] team0: Port device team_slave_1 added [ 941.630516][ T7058] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 941.780610][ T7058] usb 2-1: Using ep0 maxpacket: 32 [ 941.783647][ T7058] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 941.783671][ T7058] usb 2-1: config 0 has no interface number 0 [ 941.783717][ T7058] usb 2-1: config 0 interface 184 has no altsetting 0 [ 941.786243][ T7058] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 941.786268][ T7058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.786279][ T7058] usb 2-1: Product: syz [ 941.786286][ T7058] usb 2-1: Manufacturer: syz [ 941.786292][ T7058] usb 2-1: SerialNumber: syz [ 941.790186][ T7058] usb 2-1: config 0 descriptor?? [ 941.863478][ T7058] smsc75xx v1.0.0 [ 941.892319][T13387] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 941.961895][T13484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.961911][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.961936][T13484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.973620][T13484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.973634][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.973659][T13484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.011740][T13387] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 942.122895][T13387] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 942.378769][T13387] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 942.496243][ T7058] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 942.496271][ T7058] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 942.749720][T13484] hsr_slave_0: entered promiscuous mode [ 942.761248][T13484] hsr_slave_1: entered promiscuous mode [ 943.250448][T13405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 943.313551][ T7058] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 943.313583][ T7058] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 943.313599][ T7058] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 943.313882][ T7058] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 943.330741][ T7058] usb 2-1: USB disconnect, device number 86 [ 943.424253][T13405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 943.507522][T13405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 943.647809][T13405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 944.041740][T13402] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 944.143857][T13402] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 944.308015][T13402] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 944.766669][T13402] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 946.655690][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.659566][T12907] bridge_slave_1: left allmulticast mode [ 946.659597][T12907] bridge_slave_1: left promiscuous mode [ 946.659849][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.731991][T12907] bridge_slave_0: left allmulticast mode [ 946.732023][T12907] bridge_slave_0: left promiscuous mode [ 946.732274][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.546827][T13598] [U]  [ 948.546856][T13598] [U] K{‘ [ 948.547111][T13598] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 948.548419][T13598] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 948.548875][T13598] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 948.601458][T13598] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 948.616121][T13598] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 948.617045][T13598] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 948.617988][T13598] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 948.620104][T13598] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 948.629274][T13598] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 948.629945][T13598] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 948.630044][T13598] [U] 22½“Æ©ÐÛ©X?0;3U± [ 948.643962][T13598] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 948.644392][T13598] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 948.645123][T13598] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 948.645340][T13598] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 948.647404][T13598] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 948.647438][T13598] [U] ¹ EC [ 948.656383][T13598] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 948.663691][T13597] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 948.951454][T12907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.031302][T12907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.055398][T12907] bond0 (unregistering): Released all slaves [ 949.580658][T12907] hsr_slave_0: left promiscuous mode [ 949.600715][T12907] hsr_slave_1: left promiscuous mode [ 949.601737][T12907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.641419][T12907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.711213][T12907] team0 (unregistering): Port device team_slave_1 removed [ 950.951031][T12907] team0 (unregistering): Port device team_slave_0 removed [ 953.540942][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.547993][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.663745][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.664138][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.822294][T13484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 954.017007][T13484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 954.157938][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.158246][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.201835][T13484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 954.496364][T13484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 954.546018][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.641070][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.641284][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.662704][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.688047][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.688155][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.861846][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.987734][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.987950][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.129623][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.129850][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.586825][T13484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.759104][T13484] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.768969][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.826965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.827172][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.919526][T12907] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.919697][T12907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.262009][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.338588][T13402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.645621][T13405] veth0_vlan: entered promiscuous mode [ 956.726168][T13405] veth1_vlan: entered promiscuous mode [ 956.915807][T13405] veth0_macvtap: entered promiscuous mode [ 956.944358][T13405] veth1_macvtap: entered promiscuous mode [ 957.149675][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.243150][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.266689][T13670] [U]  [ 957.266717][T13670] [U] K{‘ [ 957.266973][T13670] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 957.268277][T13670] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 957.268736][T13670] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 957.318138][T13670] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 957.358495][T13670] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 957.362532][T13670] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 957.363078][T13670] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 957.364283][T13670] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 957.368849][T13670] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 957.369520][T13670] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 957.369620][T13670] [U] 22½“Æ©ÐÛ©X?0;3U± [ 957.372658][T13484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.530034][ T2836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.543531][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.545558][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.553461][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.574880][T13670] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 957.575402][T13670] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 957.575773][T13670] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 957.575987][T13670] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 957.576673][T13670] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 957.576704][T13670] [U] ¹ EC [ 957.577277][T13670] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 957.581506][T13669] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 957.723295][T13387] veth0_vlan: entered promiscuous mode [ 958.213523][T13387] veth1_vlan: entered promiscuous mode [ 958.351277][T12907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.351296][T12907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.510565][T11351] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 958.547532][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.547549][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.547584][T13402] veth0_vlan: entered promiscuous mode [ 958.667033][T13402] veth1_vlan: entered promiscuous mode [ 958.669246][T11351] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 958.669272][T11351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.669289][T11351] usb 2-1: Product: syz [ 958.669301][T11351] usb 2-1: Manufacturer: syz [ 958.669314][T11351] usb 2-1: SerialNumber: syz [ 958.695288][T13387] veth0_macvtap: entered promiscuous mode [ 958.732729][T11351] usb 2-1: config 0 descriptor?? [ 958.794303][T13387] veth1_macvtap: entered promiscuous mode [ 958.952557][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 958.979210][T13484] veth0_vlan: entered promiscuous mode [ 959.012083][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 959.068529][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.099891][T11351] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 959.112857][T11351] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 959.127439][T11351] usb 2-1: USB disconnect, device number 87 [ 959.186033][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.216234][T13484] veth1_vlan: entered promiscuous mode [ 959.238087][T13402] veth0_macvtap: entered promiscuous mode [ 959.290457][ T1314] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.301225][ T1314] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.310442][T13402] veth1_macvtap: entered promiscuous mode [ 959.312940][ T1314] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.314717][ T1314] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.563651][T13402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.782781][T13402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.928333][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.935460][T13484] veth0_macvtap: entered promiscuous mode [ 959.989595][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.022865][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.026925][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.033581][T12051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.033600][T12051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.108635][T13484] veth1_macvtap: entered promiscuous mode [ 960.543191][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.543218][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.741093][T13484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.884808][T13484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.974546][ T67] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.976205][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.976611][T12907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.979728][T12907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.158585][T12051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.158605][T12051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.790528][T12051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.790547][T12051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.063037][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.063058][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.201062][T11351] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 962.205730][T13744] [U]  [ 962.205756][T13744] [U] K{‘ [ 962.206012][T13744] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 962.207416][T13744] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 962.207880][T13744] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 962.209921][T13744] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 962.319582][T13744] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 962.320101][T13744] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 962.367056][T13744] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 962.454840][T12051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.454854][T12051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.527247][T11351] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 962.527273][T11351] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 962.527297][T11351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 962.527319][T11351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 962.527338][T11351] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.751836][T13744] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 962.873060][T13744] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 962.899262][T11351] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 962.899366][T11351] imon 2-1:0.0: unable to initialize intf0, err -90 [ 962.899380][T11351] imon:imon_probe: failed to initialize context! [ 962.899390][T11351] imon 2-1:0.0: unable to register, err -19 [ 963.011829][T13744] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 963.011942][T13744] [U] 22½“Æ©ÐÛ©X?0;3U± [ 963.013252][T13744] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 963.013666][T13744] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 963.014035][T13744] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 963.014249][T13744] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 963.014830][T13744] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 963.014860][T13744] [U] ¹ EC [ 963.015434][T13744] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 963.158432][T13743] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 963.381195][ C0] vkms_vblank_simulate: vblank timer overrun [ 963.696928][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.952099][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.079587][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.210535][T11351] usb 2-1: USB disconnect, device number 88 [ 967.030431][ T5850] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 967.207991][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 967.211223][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 967.211246][ T5850] usb 3-1: config 0 has no interface number 0 [ 967.235705][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 967.235732][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.235749][ T5850] usb 3-1: Product: syz [ 967.235760][ T5850] usb 3-1: Manufacturer: syz [ 967.235772][ T5850] usb 3-1: SerialNumber: syz [ 967.274545][ T5850] usb 3-1: config 0 descriptor?? [ 967.290838][ T5850] smsc95xx v2.0.0 [ 967.290856][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 967.291118][ T5850] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 969.514422][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2107'. [ 969.583587][T13812] [U]  [ 969.583615][T13812] [U] K{‘ [ 969.583869][T13812] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 969.622950][T13812] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 969.623420][T13812] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 969.853153][T13812] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 969.872607][T13812] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 969.873127][T13812] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 969.876010][T13812] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 969.882006][T13812] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 969.953404][T13812] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 969.954073][T13812] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 969.954172][T13812] [U] 22½“Æ©ÐÛ©X?0;3U± [ 969.955488][T13812] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 969.955905][T13812] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 969.956276][T13812] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 969.956491][T13812] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 969.957076][T13812] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 969.957105][T13812] [U] ¹ EC [ 969.957674][T13812] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 969.975250][T11351] usb 3-1: USB disconnect, device number 51 [ 969.991199][T13811] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 970.600533][T11351] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 970.805358][T11351] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.805385][T11351] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 970.805408][T11351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 970.805432][T11351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 970.805451][T11351] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 970.811367][T11351] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 970.811393][T11351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.811411][T11351] usb 3-1: Product: syz [ 970.811423][T11351] usb 3-1: Manufacturer: syz [ 970.811435][T11351] usb 3-1: SerialNumber: syz [ 970.862299][T11351] usb 3-1: config 0 descriptor?? [ 970.904087][T11351] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 970.904180][T11351] imon 3-1:0.0: unable to initialize intf0, err -90 [ 970.904193][T11351] imon:imon_probe: failed to initialize context! [ 970.904203][T11351] imon 3-1:0.0: unable to register, err -19 [ 971.913466][ T46] usb 3-1: USB disconnect, device number 52 [ 972.728420][T13864] [U]  [ 972.728448][T13864] [U] K{‘ [ 972.747512][T13864] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 972.758501][T13864] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 972.760292][T13864] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 972.801032][T13864] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 973.059930][T13864] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 973.069597][T13864] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 973.070629][T13864] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 973.072035][T13864] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 973.146218][T13864] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 973.146887][T13864] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 973.146986][T13864] [U] 22½“Æ©ÐÛ©X?0;3U± [ 973.230808][T13864] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 973.260895][T13864] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 973.261268][T13864] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 973.261483][T13864] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 973.262067][T13864] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 973.262097][T13864] [U] ¹ EC [ 973.262665][T13864] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 973.292474][T13863] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 975.532632][ T5850] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 975.715105][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 975.715122][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 975.715135][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 975.715148][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 975.715159][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.720025][ T5850] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 975.720041][ T5850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.720051][ T5850] usb 10-1: Product: syz [ 975.720058][ T5850] usb 10-1: Manufacturer: syz [ 975.720065][ T5850] usb 10-1: SerialNumber: syz [ 975.772752][ T5850] usb 10-1: config 0 descriptor?? [ 975.817057][ T5850] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 975.817112][ T5850] imon 10-1:0.0: unable to initialize intf0, err -90 [ 975.817120][ T5850] imon:imon_probe: failed to initialize context! [ 975.817126][ T5850] imon 10-1:0.0: unable to register, err -19 [ 978.633652][ T993] usb 10-1: USB disconnect, device number 2 [ 982.850982][ T5929] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 983.020498][ T993] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 983.055977][ T5929] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 983.056006][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.056023][ T5929] usb 8-1: Product: syz [ 983.056035][ T5929] usb 8-1: Manufacturer: syz [ 983.056047][ T5929] usb 8-1: SerialNumber: syz [ 983.204291][ T993] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 983.204313][ T993] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 983.204327][ T993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 983.204340][ T993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 983.204354][ T993] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.207377][ T993] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 983.207393][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.207403][ T993] usb 9-1: Product: syz [ 983.207416][ T993] usb 9-1: Manufacturer: syz [ 983.207428][ T993] usb 9-1: SerialNumber: syz [ 983.358373][ T993] usb 9-1: config 0 descriptor?? [ 983.380072][ T993] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 983.380162][ T993] imon 9-1:0.0: unable to initialize intf0, err -90 [ 983.380177][ T993] imon:imon_probe: failed to initialize context! [ 983.380187][ T993] imon 9-1:0.0: unable to register, err -19 [ 983.664500][ T5929] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 983.664555][ T5929] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 983.665354][ T5929] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 984.154903][ T5929] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 984.831008][ T993] usb 9-1: USB disconnect, device number 2 [ 985.570714][ T5929] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 985.714269][ T993] usb 8-1: USB disconnect, device number 2 [ 985.775481][ T5929] usb 9-1: Using ep0 maxpacket: 32 [ 985.785134][ T5929] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 985.785159][ T5929] usb 9-1: config 0 has no interface number 0 [ 985.788961][ T5929] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 985.788986][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.789003][ T5929] usb 9-1: Product: syz [ 985.789015][ T5929] usb 9-1: Manufacturer: syz [ 985.789027][ T5929] usb 9-1: SerialNumber: syz [ 985.897294][ T5929] usb 9-1: config 0 descriptor?? [ 985.973832][ T5929] smsc95xx v2.0.0 [ 986.090509][ T5911] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 986.250179][ T5911] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.250205][ T5911] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 986.250257][ T5911] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 986.250277][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.255975][ T5911] usb 10-1: config 0 descriptor?? [ 986.265491][ T5911] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 986.265539][ T5911] dvb-usb: bulk message failed: -22 (3/0) [ 986.318157][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 986.328295][ T5911] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 986.328350][ T5911] usb 10-1: media controller created [ 986.333563][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.358025][ T5929] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 986.358051][ T5929] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 986.560508][ T5929] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 986.560734][ T5929] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 986.576052][ T5911] dvb-usb: bulk message failed: -22 (6/0) [ 986.576134][ T5911] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 986.677937][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input23 [ 986.713888][ T5911] dvb-usb: schedule remote query interval to 150 msecs. [ 986.713904][ T5911] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 986.870450][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 986.870471][ T5911] dvb-usb: error while querying for an remote control event. [ 987.217028][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 987.217061][ T5911] dvb-usb: error while querying for an remote control event. [ 987.370481][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 987.370523][ T7666] dvb-usb: error while querying for an remote control event. [ 987.530572][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 987.530603][ T7666] dvb-usb: error while querying for an remote control event. [ 987.788752][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 987.788784][ T7666] dvb-usb: error while querying for an remote control event. [ 987.940565][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 987.940586][ T7666] dvb-usb: error while querying for an remote control event. [ 988.124151][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 988.124175][ T7666] dvb-usb: error while querying for an remote control event. [ 988.295167][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 988.295200][ T5911] dvb-usb: error while querying for an remote control event. [ 988.450503][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 988.450537][ T7666] dvb-usb: error while querying for an remote control event. [ 988.620497][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 988.620519][ T5911] dvb-usb: error while querying for an remote control event. [ 988.780506][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 988.780529][ T5911] dvb-usb: error while querying for an remote control event. [ 988.793290][ T5911] usb 9-1: USB disconnect, device number 3 [ 988.940496][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 988.940530][ T7666] dvb-usb: error while querying for an remote control event. [ 989.100558][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 989.100588][ T5911] dvb-usb: error while querying for an remote control event. [ 989.267511][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 989.267653][ T7666] dvb-usb: error while querying for an remote control event. [ 993.062697][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.062754][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.132148][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 993.132180][ T5911] dvb-usb: error while querying for an remote control event. [ 993.290521][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 993.290543][ T7666] dvb-usb: error while querying for an remote control event. [ 993.450449][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 993.450480][ T7666] dvb-usb: error while querying for an remote control event. [ 993.610515][ T7666] dvb-usb: bulk message failed: -22 (1/0) [ 993.610555][ T7666] dvb-usb: error while querying for an remote control event. [ 993.771040][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 993.771073][ T5911] dvb-usb: error while querying for an remote control event. [ 993.801462][T11351] usb 10-1: USB disconnect, device number 3 [ 994.021086][ T7058] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 994.392033][ T7058] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.392059][ T7058] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 994.392081][ T7058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 994.392103][ T7058] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 994.392122][ T7058] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.399327][ T7058] usb 9-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 994.399354][ T7058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.399371][ T7058] usb 9-1: Product: syz [ 994.399383][ T7058] usb 9-1: Manufacturer: syz [ 994.399395][ T7058] usb 9-1: SerialNumber: syz [ 994.434932][T11351] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 994.444214][ T7058] usb 9-1: config 0 descriptor?? [ 994.494096][ T7058] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 994.494190][ T7058] imon 9-1:0.0: unable to initialize intf0, err -90 [ 994.494204][ T7058] imon:imon_probe: failed to initialize context! [ 994.494214][ T7058] imon 9-1:0.0: unable to register, err -19 [ 995.036943][T14102] binder: 14099:14102 ioctl c0306201 200000000100 returned -11 [ 996.870230][ T5929] usb 9-1: USB disconnect, device number 4 [ 999.680499][ T5911] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 999.831927][ T5911] usb 8-1: Using ep0 maxpacket: 32 [ 999.834766][ T5911] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 999.834790][ T5911] usb 8-1: config 0 has no interface number 0 [ 999.837974][ T5911] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 999.837998][ T5911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.838027][ T5911] usb 8-1: Product: syz [ 999.838038][ T5911] usb 8-1: Manufacturer: syz [ 999.838046][ T5911] usb 8-1: SerialNumber: syz [ 999.909604][ T5911] usb 8-1: config 0 descriptor?? [ 999.941859][ T5911] smsc95xx v2.0.0 [ 1000.000962][ T7058] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1000.167728][ T7058] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1000.167747][ T7058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.167757][ T7058] usb 2-1: Product: syz [ 1000.167763][ T7058] usb 2-1: Manufacturer: syz [ 1000.167770][ T7058] usb 2-1: SerialNumber: syz [ 1000.174101][ T7058] usb 2-1: config 0 descriptor?? [ 1000.517996][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 1000.519631][ T5911] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1000.519657][ T5911] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1000.564774][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 1000.802508][ T5911] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1000.802820][ T5911] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1000.885789][ T7058] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1001.062139][ T7058] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1001.088076][ T7058] usb 2-1: USB disconnect, device number 89 [ 1001.850513][ T5911] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1002.003270][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.003289][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.003309][ T5911] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1002.003321][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.009006][ T5911] usb 10-1: config 0 descriptor?? [ 1002.793425][ T7058] usb 8-1: USB disconnect, device number 3 [ 1003.480527][ T5911] usbhid 10-1:0.0: can't add hid device: -71 [ 1003.480603][ T5911] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1003.490818][ T5911] usb 10-1: USB disconnect, device number 4 [ 1003.789577][T14188] input: syz0 as /devices/virtual/input/input24 [ 1003.931545][T14191] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2185'. [ 1007.570506][ T5911] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1007.737764][ T5911] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1007.737791][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.737808][ T5911] usb 3-1: Product: syz [ 1007.737821][ T5911] usb 3-1: Manufacturer: syz [ 1007.737834][ T5911] usb 3-1: SerialNumber: syz [ 1007.802771][ T5911] usb 3-1: config 0 descriptor?? [ 1008.101953][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 1008.103466][T14218] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1008.103496][T14218] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1008.361213][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'. [ 1009.200596][ T5929] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1009.370448][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1009.373146][ T5929] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1009.373168][ T5929] usb 2-1: config 0 has no interface number 0 [ 1009.392454][ T5929] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1009.392481][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.392584][ T5929] usb 2-1: Product: syz [ 1009.392744][ T5929] usb 2-1: Manufacturer: syz [ 1009.392758][ T5929] usb 2-1: SerialNumber: syz [ 1009.455706][ T5929] usb 2-1: config 0 descriptor?? [ 1009.484794][ T5929] smsc95xx v2.0.0 [ 1009.946461][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1009.946491][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1010.171241][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1010.171984][ T5929] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1010.250843][ T5911] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1010.292399][ T5911] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1010.354690][ T5911] usb 3-1: USB disconnect, device number 53 [ 1010.880765][ T5911] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1011.103960][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.103993][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.104023][ T5911] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1011.104035][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.115556][ T5911] usb 3-1: config 0 descriptor?? [ 1011.229618][T11351] usb 2-1: USB disconnect, device number 90 [ 1011.423543][T14258] tipc: Enabling of bearer rejected, failed to enable media [ 1011.427803][T14258] syzkaller0: entered promiscuous mode [ 1011.427824][T14258] syzkaller0: entered allmulticast mode [ 1013.600497][ T993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1013.688076][T14278] nbd: must specify an index to disconnect [ 1013.912766][ T5911] usbhid 3-1:0.0: can't add hid device: -71 [ 1013.912860][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1013.915263][ T5911] usb 3-1: USB disconnect, device number 54 [ 1013.977318][ T993] usb 10-1: Using ep0 maxpacket: 32 [ 1013.994784][ T993] usb 10-1: config 0 has an invalid interface number: 172 but max is 0 [ 1013.994807][ T993] usb 10-1: config 0 has no interface number 0 [ 1013.994837][ T993] usb 10-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1013.996817][ T993] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1013.996832][ T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.996841][ T993] usb 10-1: Product: syz [ 1013.996848][ T993] usb 10-1: Manufacturer: syz [ 1013.996855][ T993] usb 10-1: SerialNumber: syz [ 1014.004992][ T993] usb 10-1: config 0 descriptor?? [ 1014.005982][T14269] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1014.096850][ T993] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1014.968545][ T993] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 1015.199531][ T993] usb 10-1: USB disconnect, device number 5 [ 1016.250802][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1016.606984][ T5929] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1016.607002][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.607012][ T5929] usb 3-1: Product: syz [ 1016.607019][ T5929] usb 3-1: Manufacturer: syz [ 1016.607026][ T5929] usb 3-1: SerialNumber: syz [ 1016.653619][ T5929] usb 3-1: config 0 descriptor?? [ 1016.861351][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 1016.925516][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 1017.186306][ T5929] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1017.200925][ T5929] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1017.206761][ T5929] usb 3-1: USB disconnect, device number 55 [ 1018.010525][ T5929] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1018.160601][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 1018.164052][ T5929] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1018.164077][ T5929] usb 2-1: config 0 has no interface number 0 [ 1018.167328][ T5929] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1018.167354][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.167371][ T5929] usb 2-1: Product: syz [ 1018.167383][ T5929] usb 2-1: Manufacturer: syz [ 1018.167396][ T5929] usb 2-1: SerialNumber: syz [ 1018.249770][ T5929] usb 2-1: config 0 descriptor?? [ 1018.258438][ T5929] smsc95xx v2.0.0 [ 1018.742913][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1018.742941][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1018.945022][ T5929] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1018.945338][ T5929] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1019.881054][T14362] tipc: Enabling of bearer rejected, failed to enable media [ 1020.567754][ T7666] usb 2-1: USB disconnect, device number 91 [ 1021.170980][T14376] tmpfs: Unknown parameter 'quotÜa•ÝTÉ' [ 1021.343163][T14374] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1021.343216][T14374] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1021.378617][T14374] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2218'. [ 1022.516674][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 1022.655827][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 1023.200853][T14402] binder: 14396:14402 ioctl c0306201 200000000100 returned -11 [ 1023.571055][ T46] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1023.733481][ T46] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 1023.733506][ T46] usb 8-1: config 0 has no interface number 0 [ 1023.733555][ T46] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1023.733577][ T46] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1023.736235][ T46] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1023.736250][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.736259][ T46] usb 8-1: Product: syz [ 1023.736267][ T46] usb 8-1: Manufacturer: syz [ 1023.736273][ T46] usb 8-1: SerialNumber: syz [ 1023.809092][ T46] usb 8-1: config 0 descriptor?? [ 1023.810160][T14412] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1023.836749][ T46] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1023.908077][ T46] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1024.085604][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1024.295801][ T46] usb 8-1: USB disconnect, device number 4 [ 1024.337267][ T46] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1024.354150][ T46] cyberjack 8-1:0.69: device disconnected [ 1024.910540][ T993] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1025.061396][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 1025.063977][ T993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1025.067590][ T993] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1025.067606][ T993] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1025.067616][ T993] usb 3-1: Product: syz [ 1025.067623][ T993] usb 3-1: Manufacturer: syz [ 1025.067629][ T993] usb 3-1: SerialNumber: syz [ 1025.370499][ T993] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1025.370521][ T993] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1025.370538][ T993] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1025.370554][ T993] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1025.408994][T14424] tipc: Enabling of bearer rejected, failed to enable media [ 1025.901985][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.930091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.535173][ T993] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1026.559829][ T993] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1026.587388][ T993] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1026.743715][ T5838] usb 3-1: USB disconnect, device number 56 [ 1027.803974][ T5838] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1027.950771][ T5838] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1027.951597][ T5838] visor 3-1:1.0: device disconnected [ 1029.692063][T14463] [U]  [ 1029.692090][T14463] [U] K{‘ [ 1029.692355][T14463] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1029.721762][T14463] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1029.722231][T14463] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1029.760872][T14463] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1029.833494][T14463] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1029.835815][T14463] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1029.896514][T14463] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1029.897722][T14463] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 1029.972447][T14463] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 1029.988386][T14463] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1029.988492][T14463] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1030.071143][T14463] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1030.071775][T14463] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1030.072147][T14463] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1030.077833][T14463] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1030.078427][T14463] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1030.078458][T14463] [U] ¹ EC [ 1030.090723][T14463] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 1030.137579][ T5929] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1030.314392][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1030.314416][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1030.314428][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1030.314439][ T5929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1030.314461][ T5929] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1030.314472][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.367448][ T5929] usb 2-1: config 0 descriptor?? [ 1030.570543][ T5929] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 1030.570559][ T5929] hdpvr 2-1:0.0: device init failed [ 1030.570609][ T5929] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1030.578646][ T5929] usb 2-1: USB disconnect, device number 92 [ 1031.483654][T14465] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1031.701692][T14464] Bluetooth: hci1: command 0x0406 tx timeout [ 1031.701728][T14464] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.701800][T14464] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.141702][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'. [ 1032.461764][T14494] tipc: Enabling of bearer rejected, failed to enable media [ 1032.483777][T14494] syzkaller0: entered promiscuous mode [ 1032.483805][T14494] syzkaller0: entered allmulticast mode [ 1032.628766][T14499] loop2: detected capacity change from 0 to 7 [ 1032.692190][T14499] Dev loop2: unable to read RDB block 7 [ 1032.692240][T14499] loop2: unable to read partition table [ 1032.692468][T14499] loop2: partition table beyond EOD, truncated [ 1032.692497][T14499] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1032.751242][ T5929] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1032.926580][ T5929] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1032.926608][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.926626][ T5929] usb 2-1: Product: syz [ 1032.926639][ T5929] usb 2-1: Manufacturer: syz [ 1032.926652][ T5929] usb 2-1: SerialNumber: syz [ 1034.589840][ T5929] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1034.589902][ T5929] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1034.780737][ T5929] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1035.113949][T14525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1035.747004][ T5929] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1035.901277][ T5929] usb 2-1: USB disconnect, device number 93 [ 1036.189314][T14432] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1038.359649][T14432] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.359689][T14432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1038.359706][T14432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1038.359718][T14432] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1038.362005][T14432] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1038.362030][T14432] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1038.362048][T14432] usb 3-1: Manufacturer: syz [ 1038.367753][T14432] usb 3-1: config 0 descriptor?? [ 1038.391667][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2254'. [ 1039.890827][T14432] rc_core: IR keymap rc-hauppauge not found [ 1039.890845][T14432] Registered IR keymap rc-empty [ 1039.893071][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.913393][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1039.932427][T14432] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1039.935984][T14432] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 1039.958742][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.004129][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.024059][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.073946][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.093851][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.115430][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.132071][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.155156][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.269724][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.296608][T14432] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1040.573213][T14432] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1040.573237][T14432] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1041.724594][T14432] usb 3-1: USB disconnect, device number 57 [ 1041.796681][T14570] tipc: Enabling of bearer rejected, failed to enable media [ 1041.797607][T14570] syzkaller0: entered promiscuous mode [ 1041.797631][T14570] syzkaller0: entered allmulticast mode [ 1043.021308][T14580] lo speed is unknown, defaulting to 1000 [ 1043.025731][T14580] lo speed is unknown, defaulting to 1000 [ 1043.027214][T14580] lo speed is unknown, defaulting to 1000 [ 1043.160482][ T993] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1043.208928][T14580] infiniband sz1: set active [ 1043.208954][T14580] infiniband sz1: added lo [ 1043.379184][T14580] RDS/IB: sz1: added [ 1043.379770][T14580] smc: adding ib device sz1 with port count 1 [ 1043.379955][T14580] smc: ib device sz1 port 1 has pnetid [ 1043.572869][ T993] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1043.572887][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.572897][ T993] usb 2-1: Product: syz [ 1043.572904][ T993] usb 2-1: Manufacturer: syz [ 1043.572911][ T993] usb 2-1: SerialNumber: syz [ 1043.633338][ T46] lo speed is unknown, defaulting to 1000 [ 1043.641825][T14580] lo speed is unknown, defaulting to 1000 [ 1043.810489][T14580] lo speed is unknown, defaulting to 1000 [ 1043.975563][T14580] lo speed is unknown, defaulting to 1000 [ 1044.142844][T14580] lo speed is unknown, defaulting to 1000 [ 1044.310758][T14580] lo speed is unknown, defaulting to 1000 [ 1044.660619][ T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1044.829474][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 1044.842835][ T46] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 1044.842861][ T46] usb 8-1: config 0 has no interface number 0 [ 1044.842909][ T46] usb 8-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1044.847577][ T46] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1044.847601][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.847619][ T46] usb 8-1: Product: syz [ 1044.847631][ T46] usb 8-1: Manufacturer: syz [ 1044.847643][ T46] usb 8-1: SerialNumber: syz [ 1044.950516][ T46] usb 8-1: config 0 descriptor?? [ 1045.121966][T14590] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1045.183388][ T46] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1045.216984][ T5926] lo speed is unknown, defaulting to 1000 [ 1046.004910][ T46] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27 [ 1046.537338][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 1046.550470][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1046.550525][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1046.551308][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1046.590931][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2265'. [ 1046.603261][ T46] usb 8-1: USB disconnect, device number 5 [ 1046.675783][ T993] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1047.654181][ T993] usb 2-1: USB disconnect, device number 94 [ 1047.770715][T14622] genirq: Flags mismatch irq 9. 00202000 (pcmmio) vs. 00002080 (acpi) [ 1050.537300][ C0] vkms_vblank_simulate: vblank timer overrun [ 1053.728482][T14640] syzkaller0: entered promiscuous mode [ 1053.728511][T14640] syzkaller0: entered allmulticast mode [ 1054.433324][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.433399][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.090625][ T5904] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1055.275160][ T5904] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1055.275189][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.275206][ T5904] usb 8-1: Product: syz [ 1055.275218][ T5904] usb 8-1: Manufacturer: syz [ 1055.275231][ T5904] usb 8-1: SerialNumber: syz [ 1055.326617][ T5904] usb 8-1: config 0 descriptor?? [ 1055.549108][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1055.610734][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1055.745247][T14661] batadv0: entered promiscuous mode [ 1055.784129][T14661] macvtap1: entered promiscuous mode [ 1055.785215][T14661] macvtap1: entered allmulticast mode [ 1055.785227][T14661] batadv0: entered allmulticast mode [ 1055.791591][T14661] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1055.916999][ T5904] cx82310_eth 8-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1055.921611][ T5904] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1055.938653][ T5904] usb 8-1: USB disconnect, device number 6 [ 1056.002693][ T993] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1056.174273][ T993] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1056.174290][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.174300][ T993] usb 2-1: Product: syz [ 1056.174307][ T993] usb 2-1: Manufacturer: syz [ 1056.174314][ T993] usb 2-1: SerialNumber: syz [ 1057.435894][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1057.435927][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1057.436418][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1057.529786][ T993] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1058.436618][T14697] binder: 14689:14697 ioctl c0306201 200000000100 returned -11 [ 1058.670576][ T46] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1058.792268][ T5929] usb 2-1: USB disconnect, device number 95 [ 1058.821281][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1058.824466][ T46] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1058.824490][ T46] usb 9-1: config 0 has no interface number 0 [ 1058.824537][ T46] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1058.830772][ T46] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1058.830798][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.830816][ T46] usb 9-1: Product: syz [ 1058.830827][ T46] usb 9-1: Manufacturer: syz [ 1058.830840][ T46] usb 9-1: SerialNumber: syz [ 1058.947399][T14711] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 1058.947420][T14711] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1058.993035][ T46] usb 9-1: config 0 descriptor?? [ 1059.137753][ T46] smsc75xx v1.0.0 [ 1059.437166][T14720] syzkaller0: entered promiscuous mode [ 1059.437195][T14720] syzkaller0: entered allmulticast mode [ 1059.501071][ T46] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1059.501101][ T46] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1059.501119][ T46] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1059.501412][ T46] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 1059.743882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.820524][ T7058] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1059.949943][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.154981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.800539][ T7058] usb 3-1: Using ep0 maxpacket: 32 [ 1060.803007][ T7058] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 1060.803030][ T7058] usb 3-1: config 0 has no interface number 0 [ 1060.803086][ T7058] usb 3-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1060.806437][ T7058] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1060.806462][ T7058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.806480][ T7058] usb 3-1: Product: syz [ 1060.806493][ T7058] usb 3-1: Manufacturer: syz [ 1060.806506][ T7058] usb 3-1: SerialNumber: syz [ 1060.830526][ T7058] usb 3-1: config 0 descriptor?? [ 1060.915277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.917140][T14722] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1060.940218][ T7058] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1061.440649][ T5838] usb 9-1: USB disconnect, device number 5 [ 1061.735099][ T7058] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 1062.004056][ T7058] usb 3-1: USB disconnect, device number 58 [ 1062.855902][T14768] input: syz0 as /devices/virtual/input/input29 [ 1062.962451][ T5838] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1063.321998][ T5838] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1063.322026][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.322042][ T5838] usb 10-1: Product: syz [ 1063.322054][ T5838] usb 10-1: Manufacturer: syz [ 1063.322067][ T5838] usb 10-1: SerialNumber: syz [ 1064.628753][ T5838] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1064.628810][ T5838] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1064.629602][ T5838] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1064.882764][ T5838] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1065.600535][ T46] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1065.717946][ T5838] usb 10-1: USB disconnect, device number 6 [ 1065.750525][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 1065.753341][ T46] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1065.753364][ T46] usb 8-1: config 0 has no interface number 0 [ 1065.753408][ T46] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1065.756630][ T46] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1065.756654][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.756671][ T46] usb 8-1: Product: syz [ 1065.756684][ T46] usb 8-1: Manufacturer: syz [ 1065.756697][ T46] usb 8-1: SerialNumber: syz [ 1065.890621][ T46] usb 8-1: config 0 descriptor?? [ 1065.894799][ T46] smsc75xx v1.0.0 [ 1065.938102][T14794] syzkaller0: entered promiscuous mode [ 1065.938130][T14794] syzkaller0: entered allmulticast mode [ 1065.993823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.320587][ T46] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1066.320624][ T46] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1066.320640][ T46] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1066.321004][ T46] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -32 [ 1068.201398][T14839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.607054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.762968][ T5929] usb 8-1: USB disconnect, device number 7 [ 1068.846310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.288692][T10768] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 1069.300630][ T5929] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1069.420043][T14855] syzkaller0: entered promiscuous mode [ 1069.425113][T14855] syzkaller0: entered allmulticast mode [ 1069.453154][ T5929] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1069.453179][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.458654][ T5929] usb 8-1: config 0 descriptor?? [ 1071.312111][ T5929] usb 8-1: Cannot set autoneg [ 1071.312386][ T5929] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1071.366276][ T5929] usb 8-1: USB disconnect, device number 8 [ 1074.518433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.692212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.720588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.824025][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.853624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.627634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.904942][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.966104][T14934] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2336'. [ 1078.075445][T14962] tipc: Started in network mode [ 1078.075475][T14962] tipc: Node identity 2ab66b2a0dda, cluster identity 4711 [ 1078.075695][T14962] tipc: Enabled bearer , priority 0 [ 1078.076678][T14962] syzkaller0: entered promiscuous mode [ 1078.076703][T14962] syzkaller0: entered allmulticast mode [ 1078.270235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.316945][T14958] tipc: Resetting bearer [ 1078.445633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.523036][ T993] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1078.654505][T14967] block device autoloading is deprecated and will be removed. [ 1079.184507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.365971][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.460482][ T993] usb 8-1: Using ep0 maxpacket: 32 [ 1079.462656][ T993] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.462682][ T993] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.462718][ T993] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1079.462738][ T993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.510826][ T5926] tipc: Node number set to 661416746 [ 1079.658354][ T993] usb 8-1: config 0 descriptor?? [ 1079.710899][ T993] hub 8-1:0.0: USB hub found [ 1079.890586][ T993] hub 8-1:0.0: 1 port detected [ 1079.940565][ T1600] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1079.951474][T14958] tipc: Disabling bearer [ 1080.170905][ T1600] usb 2-1: Using ep0 maxpacket: 16 [ 1080.197729][ T1600] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1080.197898][ T1600] usb 2-1: config 0 has no interface number 0 [ 1080.659034][T14982] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2345'. [ 1080.684523][ T1600] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1080.684551][ T1600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.684569][ T1600] usb 2-1: Product: syz [ 1080.684582][ T1600] usb 2-1: Manufacturer: syz [ 1080.684593][ T1600] usb 2-1: SerialNumber: syz [ 1080.735510][ T1600] usb 2-1: config 0 descriptor?? [ 1080.909032][ T993] hub 8-1:0.0: hub_hub_status failed (err = -32) [ 1080.909074][ T993] hub 8-1:0.0: config failed, can't get hub status (err -32) [ 1081.070132][ T1600] hub 2-1:0.132: bad descriptor, ignoring hub [ 1081.070172][ T1600] hub 2-1:0.132: probe with driver hub failed with error -5 [ 1081.118513][ T993] usbhid 8-1:0.0: can't add hid device: -32 [ 1081.119866][ T993] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1081.165322][ T1600] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input30 [ 1082.004665][ T1600] usb 2-1: USB disconnect, device number 96 [ 1083.200588][T14987] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1083.370538][T14987] usb 2-1: Using ep0 maxpacket: 16 [ 1083.375546][T14987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.375568][T14987] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.375602][T14987] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1083.375623][T14987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.430549][T14987] usb 2-1: config 0 descriptor?? [ 1086.162793][T14986] usb 2-1: USB disconnect, device number 97 [ 1087.480893][T14986] usb 8-1: USB disconnect, device number 9 [ 1087.951590][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2356'. [ 1087.959618][T14433] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1088.082548][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1088.230716][T14433] usb 8-1: Using ep0 maxpacket: 32 [ 1088.267312][T14433] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 1088.267345][T14433] usb 8-1: config 0 has no interface number 0 [ 1088.267394][T14433] usb 8-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1088.283532][T14433] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1088.283560][T14433] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.283578][T14433] usb 8-1: Product: syz [ 1088.283590][T14433] usb 8-1: Manufacturer: syz [ 1088.283602][T14433] usb 8-1: SerialNumber: syz [ 1088.464167][T14433] usb 8-1: config 0 descriptor?? [ 1088.465848][T15034] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1088.562676][T14433] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1089.356933][T14433] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input31 [ 1089.558441][T14433] usb 8-1: USB disconnect, device number 10 [ 1092.893632][T15062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1092.893654][T15062] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1093.023367][T15062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1093.023384][T15062] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1093.235665][T15062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1093.235686][T15062] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1093.389148][T15062] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1093.389172][T15062] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1095.210589][ T993] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1095.449634][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 1095.592336][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.592377][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.592417][ T993] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1095.592438][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.596198][ T993] usb 3-1: config 0 descriptor?? [ 1095.600075][ T993] hub 3-1:0.0: USB hub found [ 1095.822772][ T993] hub 3-1:0.0: 1 port detected [ 1096.390300][T15094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2370'. [ 1096.918387][ T993] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 1096.918411][ T993] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 1097.082040][ T993] usbhid 3-1:0.0: can't add hid device: -32 [ 1097.082230][ T993] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1099.710485][ T7058] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1099.880559][ T7058] usb 10-1: Using ep0 maxpacket: 32 [ 1099.899395][ T7058] usb 10-1: config 0 has an invalid interface number: 172 but max is 0 [ 1099.899419][ T7058] usb 10-1: config 0 has no interface number 0 [ 1099.899464][ T7058] usb 10-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1099.931500][ T7058] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1099.931526][ T7058] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.931542][ T7058] usb 10-1: Product: syz [ 1099.931550][ T7058] usb 10-1: Manufacturer: syz [ 1099.931556][ T7058] usb 10-1: SerialNumber: syz [ 1099.934616][ T7058] usb 10-1: config 0 descriptor?? [ 1099.935360][T15118] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1099.938010][ T7058] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1100.390874][ T5926] usb 3-1: USB disconnect, device number 59 [ 1101.510711][ T7058] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input32 [ 1101.680971][ T7058] usb 10-1: USB disconnect, device number 7 [ 1103.264533][T15136] loop2: detected capacity change from 0 to 7 [ 1103.284634][T13606] Dev loop2: unable to read RDB block 7 [ 1103.284687][T13606] loop2: unable to read partition table [ 1103.284939][T13606] loop2: partition table beyond EOD, truncated [ 1103.289383][T15136] Dev loop2: unable to read RDB block 7 [ 1103.289413][T15136] loop2: unable to read partition table [ 1103.289540][T15136] loop2: partition table beyond EOD, truncated [ 1103.289550][T15136] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.440595][ T993] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1109.590509][ T993] usb 10-1: Using ep0 maxpacket: 32 [ 1109.593679][ T993] usb 10-1: config 0 has an invalid interface number: 172 but max is 0 [ 1109.593704][ T993] usb 10-1: config 0 has no interface number 0 [ 1109.593751][ T993] usb 10-1: config 0 interface 172 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1109.597051][ T993] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1109.597076][ T993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.597094][ T993] usb 10-1: Product: syz [ 1109.597107][ T993] usb 10-1: Manufacturer: syz [ 1109.597120][ T993] usb 10-1: SerialNumber: syz [ 1109.602878][ T993] usb 10-1: config 0 descriptor?? [ 1109.603902][T15191] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1109.609507][ T993] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1110.572490][ T993] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input33 [ 1110.773280][ T993] usb 10-1: USB disconnect, device number 8 [ 1112.414800][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2402'. [ 1114.320803][T15225] binder: 15218:15225 ioctl c0306201 200000000100 returned -11 [ 1115.867521][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.867576][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.933933][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 1120.258264][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1120.272576][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1120.290493][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1120.304067][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1120.305069][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.458677][T10768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1120.459095][T10768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1120.459521][T10768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1120.462592][T10768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1120.464366][T10768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.592754][T15276] loop2: detected capacity change from 0 to 7 [ 1120.612682][T15276] Dev loop2: unable to read RDB block 7 [ 1120.612712][T15276] loop2: unable to read partition table [ 1120.612843][T15276] loop2: partition table beyond EOD, truncated [ 1120.612853][T15276] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1122.534261][T10768] Bluetooth: hci0: command tx timeout [ 1122.549977][ T2836] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.602614][T15284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1122.602628][T15284] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1122.719652][T15265] lo speed is unknown, defaulting to 1000 [ 1124.730200][ T2836] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.790651][ T1600] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1124.940644][ T1600] usb 8-1: Using ep0 maxpacket: 16 [ 1124.946470][ T1600] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1124.946497][ T1600] usb 8-1: config 0 has no interface number 0 [ 1124.951613][ T1600] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1124.951639][ T1600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.951657][ T1600] usb 8-1: Product: syz [ 1124.951670][ T1600] usb 8-1: Manufacturer: syz [ 1124.951683][ T1600] usb 8-1: SerialNumber: syz [ 1124.964912][ T1600] usb 8-1: config 0 descriptor?? [ 1124.977600][ T1600] hub 8-1:0.132: bad descriptor, ignoring hub [ 1124.977638][ T1600] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1125.049702][ T1600] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input34 [ 1125.626634][ T2836] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.860685][ T46] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1126.012969][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.013000][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.013037][ T46] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1126.013058][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.080698][ T46] usb 3-1: config 0 descriptor?? [ 1126.296412][ T2836] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.101184][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 1127.101309][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1127.196191][ T46] usb 3-1: USB disconnect, device number 60 [ 1127.220555][ T1600] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1127.270912][T15265] chnl_net:caif_netlink_parms(): no params data found [ 1127.418108][ T1600] usb 9-1: Using ep0 maxpacket: 32 [ 1127.428103][ T1600] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1127.428127][ T1600] usb 9-1: config 0 has no interface number 0 [ 1127.432753][ T1600] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1127.432779][ T1600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.432797][ T1600] usb 9-1: Product: syz [ 1127.432810][ T1600] usb 9-1: Manufacturer: syz [ 1127.432823][ T1600] usb 9-1: SerialNumber: syz [ 1127.496023][ T1600] usb 9-1: config 0 descriptor?? [ 1127.563422][ T1600] smsc95xx v2.0.0 [ 1127.651061][ T5911] usb 8-1: USB disconnect, device number 11 [ 1127.928486][T15314] loop2: detected capacity change from 0 to 7 [ 1128.005272][ T1600] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1128.005302][ T1600] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1128.058627][T15314] Dev loop2: unable to read RDB block 7 [ 1128.058735][T15314] loop2: unable to read partition table [ 1128.059315][T15314] loop2: partition table beyond EOD, truncated [ 1128.059580][T15314] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.980620][ T1600] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1128.980952][ T1600] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 1129.408842][T15265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.409446][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.409604][T15265] bridge_slave_0: entered allmulticast mode [ 1129.415802][T15265] bridge_slave_0: entered promiscuous mode [ 1129.420233][T15265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.422020][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.422146][T15265] bridge_slave_1: entered allmulticast mode [ 1129.426766][T15265] bridge_slave_1: entered promiscuous mode [ 1129.687281][ T2836] bridge_slave_1: left allmulticast mode [ 1129.687315][ T2836] bridge_slave_1: left promiscuous mode [ 1129.699867][ T2836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.841832][ T2836] bridge_slave_0: left allmulticast mode [ 1129.841871][ T2836] bridge_slave_0: left promiscuous mode [ 1129.842127][ T2836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.070182][ T5911] usb 9-1: USB disconnect, device number 6 [ 1130.505464][T15336] nbd: must specify an index to disconnect [ 1130.832707][ T7058] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1131.680529][ T5911] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1131.830606][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 1131.833587][ T5911] usb 9-1: config 0 has an invalid interface number: 24 but max is 0 [ 1131.833611][ T5911] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.833630][ T5911] usb 9-1: config 0 has no interface number 0 [ 1131.833674][ T5911] usb 9-1: config 0 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1131.833724][ T5911] usb 9-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1131.833746][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.932923][ T5911] usb 9-1: config 0 descriptor?? [ 1132.005815][ T5911] usbhid 9-1:0.24: couldn't find an input interrupt endpoint [ 1134.569904][T11352] usb 9-1: USB disconnect, device number 7 [ 1134.970521][ T1600] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1135.340114][ T1600] usb 8-1: Using ep0 maxpacket: 16 [ 1135.342676][ T1600] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1135.342691][ T1600] usb 8-1: config 0 has no interface number 0 [ 1135.344728][ T1600] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1135.344742][ T1600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.344753][ T1600] usb 8-1: Product: syz [ 1135.344760][ T1600] usb 8-1: Manufacturer: syz [ 1135.344767][ T1600] usb 8-1: SerialNumber: syz [ 1135.349898][ T1600] usb 8-1: config 0 descriptor?? [ 1135.352488][ T1600] hub 8-1:0.132: bad descriptor, ignoring hub [ 1135.352508][ T1600] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1135.373558][ T1600] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input35 [ 1136.030530][ T7058] usb 10-1: device descriptor read/64, error -110 [ 1136.280503][ T7058] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1136.450487][ T7058] usb 10-1: device descriptor read/64, error -32 [ 1136.560877][ T7058] usb usb10-port1: attempt power cycle [ 1136.631290][ T5850] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1136.810406][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 1136.813089][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1136.813113][ T5850] usb 3-1: config 0 has no interface number 0 [ 1136.820112][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1136.849380][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.849404][ T5850] usb 3-1: Product: syz [ 1136.849417][ T5850] usb 3-1: Manufacturer: syz [ 1136.849430][ T5850] usb 3-1: SerialNumber: syz [ 1136.882869][ T5850] usb 3-1: config 0 descriptor?? [ 1136.895940][ T5850] smsc95xx v2.0.0 [ 1136.934185][ T7058] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1136.952713][ T7058] usb 10-1: device descriptor read/8, error -32 [ 1137.061128][ T7058] raw-gadget.0 gadget.9: failed to queue suspend event [ 1137.061690][ T7058] raw-gadget.0 gadget.9: failed to queue reset event [ 1137.135615][ T7058] raw-gadget.0 gadget.9: failed to queue resume event [ 1137.190626][ T7058] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1137.210873][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1137.210972][ T7058] usb 10-1: device descriptor read/8, error -32 [ 1137.321325][ T7058] raw-gadget.0 gadget.9: failed to queue suspend event [ 1137.321629][ T7058] usb usb10-port1: unable to enumerate USB device [ 1137.344799][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1137.344826][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1137.811131][ T46] usb 8-1: USB disconnect, device number 12 [ 1138.047363][ T2836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.142402][ T2836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.153223][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1138.153522][ T5850] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1138.224987][ T2836] bond0 (unregistering): Released all slaves [ 1139.442473][ T7058] usb 3-1: USB disconnect, device number 61 [ 1139.685631][ T2836] bond1 (unregistering): Released all slaves [ 1140.721734][ T2836] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1140.814558][ T2836] bond2 (unregistering): Released all slaves [ 1141.684770][ T2836] bond3 (unregistering): Released all slaves [ 1142.574859][ T2836] bond4 (unregistering): Released all slaves [ 1144.244881][ T2836] bond5 (unregistering): Released all slaves [ 1145.034685][ T2836] bond6 (unregistering): Released all slaves [ 1145.844771][ T2836] bond7 (unregistering): Released all slaves [ 1146.650272][ T2836] bond8 (unregistering): Released all slaves [ 1147.459953][ T2836] bond9 (unregistering): Released all slaves [ 1147.623684][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.649154][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.659045][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1147.669425][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.688290][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.736967][T10768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1147.737384][T10768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1147.738623][T10768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1147.751711][T10768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.780695][T10768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1147.903342][T15383] tipc: Started in network mode [ 1147.903371][T15383] tipc: Node identity 42f36a914259, cluster identity 4711 [ 1147.909470][T15383] tipc: Enabled bearer , priority 0 [ 1147.910788][T15384] syzkaller0: entered promiscuous mode [ 1147.910813][T15384] syzkaller0: entered allmulticast mode [ 1147.946807][T15394] tipc: Resetting bearer [ 1147.980165][T15265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.321018][T15381] tipc: Resetting bearer [ 1148.511202][T15381] tipc: Disabling bearer [ 1148.834498][ T2836] tipc: Left network mode [ 1148.837967][T15265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.312073][ T5850] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1149.483466][ T5850] usb 9-1: Using ep0 maxpacket: 32 [ 1149.504074][ T5850] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1149.504100][ T5850] usb 9-1: config 0 has no interface number 0 [ 1149.513451][ T5850] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1149.513477][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.513496][ T5850] usb 9-1: Product: syz [ 1149.513509][ T5850] usb 9-1: Manufacturer: syz [ 1149.513522][ T5850] usb 9-1: SerialNumber: syz [ 1149.552632][ T5850] usb 9-1: config 0 descriptor?? [ 1149.573720][ T5850] smsc95xx v2.0.0 [ 1149.660901][T15332] raw-gadget.0 gadget.9: failed to queue disconnect event [ 1149.880993][ T5840] Bluetooth: hci2: command tx timeout [ 1149.990554][ T5850] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1149.990582][ T5850] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1150.297890][T15265] team0: Port device team_slave_0 added [ 1150.378552][T15265] team0: Port device team_slave_1 added [ 1150.379353][T15412] lo speed is unknown, defaulting to 1000 [ 1150.804283][ T5850] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1150.804594][ T5850] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 1151.187136][T15265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.187152][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.187172][T15265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.263157][T15265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.263173][T15265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1151.263199][T15265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.941579][ T5840] Bluetooth: hci2: command tx timeout [ 1152.016871][T15265] hsr_slave_0: entered promiscuous mode [ 1152.018362][T15265] hsr_slave_1: entered promiscuous mode [ 1152.019400][T15265] debugfs: 'hsr0' already exists in 'hsr' [ 1152.019424][T15265] Cannot create hsr debugfs directory [ 1152.083404][ T1600] usb 9-1: USB disconnect, device number 8 [ 1152.310648][ T2836] hsr_slave_0: left promiscuous mode [ 1152.350715][ T2836] hsr_slave_1: left promiscuous mode [ 1152.524892][ T2836] veth1_macvtap: left promiscuous mode [ 1152.524972][ T2836] veth0_macvtap: left promiscuous mode [ 1152.880524][ T5850] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1153.110522][ T5850] usb 9-1: Using ep0 maxpacket: 32 [ 1153.117780][ T5850] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1153.117826][ T5850] usb 9-1: config 0 has no interface number 0 [ 1153.117859][ T5850] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1153.126249][ T5850] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1153.126275][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.126293][ T5850] usb 9-1: Product: syz [ 1153.126306][ T5850] usb 9-1: Manufacturer: syz [ 1153.126319][ T5850] usb 9-1: SerialNumber: syz [ 1153.137629][ T5850] usb 9-1: config 0 descriptor?? [ 1153.159929][ T5850] smsc75xx v1.0.0 [ 1153.159945][ T5850] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1153.160200][ T5850] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 1153.444346][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.447480][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.023939][ T5840] Bluetooth: hci2: command tx timeout [ 1154.593347][ T2836] pimreg (unregistering): left allmulticast mode [ 1156.100522][ T5840] Bluetooth: hci2: command tx timeout [ 1157.821378][ T2836] team0 (unregistering): Port device team_slave_1 removed [ 1158.091385][ T2836] team0 (unregistering): Port device team_slave_0 removed [ 1158.540585][ T46] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1158.711050][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 1158.726944][ T46] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1158.726970][ T46] usb 8-1: config 0 has no interface number 0 [ 1158.730036][ T46] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1158.730062][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.730076][ T46] usb 8-1: Product: syz [ 1158.730083][ T46] usb 8-1: Manufacturer: syz [ 1158.730091][ T46] usb 8-1: SerialNumber: syz [ 1158.736798][ T46] usb 8-1: config 0 descriptor?? [ 1158.803456][ T46] smsc95xx v2.0.0 [ 1159.229251][ T46] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1159.229278][ T46] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1160.094588][ T46] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1160.094898][ T46] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1161.013461][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.013485][T15457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.052009][T15457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.052029][T15457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.267418][T15478] tipc: Enabled bearer , priority 0 [ 1161.280025][T15479] syzkaller0: entered promiscuous mode [ 1161.280059][T15479] syzkaller0: entered allmulticast mode [ 1161.295229][ T7058] usb 8-1: USB disconnect, device number 13 [ 1161.317166][T15486] tipc: Resetting bearer [ 1161.488999][ T5850] usb 9-1: USB disconnect, device number 9 [ 1161.888836][T15486] tipc: Resetting bearer [ 1162.041169][ T46] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1162.162420][T15486] tipc: Disabling bearer [ 1162.230493][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 1162.233030][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.233058][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.233095][ T46] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1162.233115][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.292382][ T46] usb 9-1: config 0 descriptor?? [ 1162.305592][ T46] hub 9-1:0.0: USB hub found [ 1162.521410][ T46] hub 9-1:0.0: 1 port detected [ 1163.179896][T15518] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2471'. [ 1163.710183][ T46] hub 9-1:0.0: hub_hub_status failed (err = -32) [ 1163.710208][ T46] hub 9-1:0.0: config failed, can't get hub status (err -32) [ 1163.716326][ T46] usbhid 9-1:0.0: can't add hid device: -32 [ 1163.716446][ T46] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1164.805675][ T2836] IPVS: stop unused estimator thread 0... [ 1165.190534][T14986] usb 9-1: USB disconnect, device number 10 [ 1165.395757][T15412] chnl_net:caif_netlink_parms(): no params data found [ 1167.546583][ T2836] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.946454][ T2836] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.237164][T15412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.237308][T15412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.237545][T15412] bridge_slave_0: entered allmulticast mode [ 1169.262151][T15412] bridge_slave_0: entered promiscuous mode [ 1169.470577][ T5850] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1169.641115][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 1169.642848][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1169.642863][ T5850] usb 3-1: config 0 has no interface number 0 [ 1169.645003][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1169.645019][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.645029][ T5850] usb 3-1: Product: syz [ 1169.645036][ T5850] usb 3-1: Manufacturer: syz [ 1169.645044][ T5850] usb 3-1: SerialNumber: syz [ 1169.648261][ T5850] usb 3-1: config 0 descriptor?? [ 1169.707192][ T5850] smsc95xx v2.0.0 [ 1169.770459][T14987] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1170.649362][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1170.649380][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1170.655305][ T2836] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.719397][T15412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.719715][T15412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.720047][T15412] bridge_slave_1: entered allmulticast mode [ 1170.749251][T15412] bridge_slave_1: entered promiscuous mode [ 1170.790465][T14987] usb 9-1: Using ep0 maxpacket: 32 [ 1170.920694][T14987] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1170.920720][T14987] usb 9-1: config 0 has no interface number 0 [ 1170.920751][T14987] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1170.935543][T14987] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1170.935571][T14987] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.935589][T14987] usb 9-1: Product: syz [ 1170.935656][T14987] usb 9-1: Manufacturer: syz [ 1170.935669][T14987] usb 9-1: SerialNumber: syz [ 1171.007178][T14987] usb 9-1: config 0 descriptor?? [ 1171.041228][T14987] smsc75xx v1.0.0 [ 1171.041245][T14987] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1171.041674][T14987] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 1171.436438][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.440843][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.465735][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1171.466041][ T5850] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1172.039284][ T2836] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.330229][T15412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.377811][T15412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.532816][ T7058] usb 3-1: USB disconnect, device number 62 [ 1172.955307][T15412] team0: Port device team_slave_0 added [ 1173.030283][T15412] team0: Port device team_slave_1 added [ 1173.770640][T15265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1173.810567][ T5911] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1173.852577][T14987] usb 9-1: USB disconnect, device number 11 [ 1173.966411][T15412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.966427][T15412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.966451][T15412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.969762][T15265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1173.990545][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 1174.000633][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.000661][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.000697][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1174.000718][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.074158][ T5911] usb 3-1: config 0 descriptor?? [ 1174.089493][ T5911] hub 3-1:0.0: USB hub found [ 1174.186589][T15412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.186606][T15412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.187010][T15412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.202605][T15265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1174.280614][ T5911] hub 3-1:0.0: 1 port detected [ 1174.410988][T15265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1174.705627][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2483'. [ 1175.778517][ T5911] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 1175.778543][ T5911] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 1175.790999][ T5911] usbhid 3-1:0.0: can't add hid device: -32 [ 1175.791125][ T5911] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1176.349337][ T2836] bridge_slave_1: left allmulticast mode [ 1176.349370][ T2836] bridge_slave_1: left promiscuous mode [ 1176.349647][ T2836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.422815][ T2836] bridge_slave_0: left allmulticast mode [ 1176.422835][ T2836] bridge_slave_0: left promiscuous mode [ 1176.423011][ T2836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.490422][T14987] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1176.650703][T14987] usb 8-1: Using ep0 maxpacket: 16 [ 1176.653561][T14987] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1176.653586][T14987] usb 8-1: config 0 has no interface number 0 [ 1176.657024][T14987] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1176.657051][T14987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.657070][T14987] usb 8-1: Product: syz [ 1176.657084][T14987] usb 8-1: Manufacturer: syz [ 1176.657097][T14987] usb 8-1: SerialNumber: syz [ 1176.668738][T14987] usb 8-1: config 0 descriptor?? [ 1176.672962][T14987] hub 8-1:0.132: bad descriptor, ignoring hub [ 1176.672999][T14987] hub 8-1:0.132: probe with driver hub failed with error -5 [ 1176.798692][T14987] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.132/input/input36 [ 1177.308220][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.308298][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.200929][T14986] usb 3-1: reset high-speed USB device number 63 using dummy_hcd [ 1178.442378][T14986] usb 3-1: device firmware changed [ 1178.485859][T14986] usb 3-1: USB disconnect, device number 63 [ 1178.838220][T10768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1178.860899][T10768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1178.868472][T10768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1178.873174][T10768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1178.874883][T10768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1178.927979][T14986] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1179.110639][T14986] usb 3-1: Using ep0 maxpacket: 32 [ 1179.112612][T14986] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1179.112635][T14986] usb 3-1: config 0 has no interface number 0 [ 1179.116748][T14986] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1179.116773][T14986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.116792][T14986] usb 3-1: Product: syz [ 1179.116805][T14986] usb 3-1: Manufacturer: syz [ 1179.116818][T14986] usb 3-1: SerialNumber: syz [ 1179.171942][T14986] usb 3-1: config 0 descriptor?? [ 1179.234510][T14986] smsc95xx v2.0.0 [ 1180.093993][T14986] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1180.094021][T14986] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1180.980261][T14986] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1180.980999][ T5840] Bluetooth: hci3: command tx timeout [ 1180.981505][T14986] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1181.301216][ T2836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.368976][ T2836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.597378][ T2836] bond0 (unregistering): Released all slaves [ 1181.649346][T15624] binder: 15621:15624 ioctl c0306201 200000000100 returned -11 [ 1181.673406][T14987] usb 8-1: USB disconnect, device number 14 [ 1181.696508][T15412] hsr_slave_0: entered promiscuous mode [ 1181.697327][T15412] hsr_slave_1: entered promiscuous mode [ 1181.697849][T15412] debugfs: 'hsr0' already exists in 'hsr' [ 1181.697864][T15412] Cannot create hsr debugfs directory [ 1181.698837][T15265] kthread_run failed with err -4 [ 1183.070261][ T5840] Bluetooth: hci3: command tx timeout [ 1183.307856][ T5911] usb 3-1: USB disconnect, device number 64 [ 1184.924189][T15640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1184.924211][T15640] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1185.128565][T15640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1185.128586][T15640] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1185.140407][ C0] ------------[ cut here ]------------ [ 1185.140421][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 1185.140514][ C0] WARNING: CPU: 0 PID: 16 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 1185.140559][ C0] Modules linked in: [ 1185.140591][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1185.140614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1185.140633][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 1185.140660][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 1185.140679][ C0] RSP: 0000:ffffc90000157828 EFLAGS: 00010046 [ 1185.140696][ C0] RAX: 7677f4806b253600 RBX: 0000000000000000 RCX: ffff88801ae8d940 [ 1185.140712][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1185.140727][ C0] RBP: ffff888069e78998 R08: 0000000000000000 R09: 0000000000000100 [ 1185.140742][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 1185.140759][ C0] R13: dffffc0000000000 R14: ffff88802a4ce968 R15: ffff88801ae8e44c [ 1185.140777][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 1185.140795][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.140812][ C0] CR2: 0000001b2fd16ff8 CR3: 000000003ae6a000 CR4: 00000000003526f0 [ 1185.140831][ C0] Call Trace: [ 1185.140840][ C0] [ 1185.140867][ C0] call_timer_fn+0x17b/0x5f0 [ 1185.140897][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1185.140924][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1185.140950][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1185.140990][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1185.141015][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1185.141046][ C0] __run_timer_base+0x709/0x970 [ 1185.141091][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1185.141138][ C0] run_timer_softirq+0xb7/0x180 [ 1185.141165][ C0] handle_softirqs+0x22c/0x710 [ 1185.141203][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1185.141244][ C0] run_ktimerd+0xcf/0x190 [ 1185.141271][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1185.141296][ C0] ? schedule+0x91/0x360 [ 1185.141331][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1185.141356][ C0] smpboot_thread_fn+0x542/0xa60 [ 1185.141384][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1185.141421][ C0] kthread+0x711/0x8a0 [ 1185.141456][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1185.141482][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.141518][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.141556][ C0] ret_from_fork+0x3fc/0x770 [ 1185.141587][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.141621][ C0] ? __switch_to_asm+0x39/0x70 [ 1185.141641][ C0] ? __switch_to_asm+0x33/0x70 [ 1185.141660][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.141692][ C0] ret_from_fork_asm+0x1a/0x30 [ 1185.141732][ C0] [ 1185.141743][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1185.141759][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1185.141784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1185.141797][ C0] Call Trace: [ 1185.141806][ C0] [ 1185.141816][ C0] dump_stack_lvl+0x99/0x250 [ 1185.141846][ C0] ? __asan_memcpy+0x40/0x70 [ 1185.141870][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.141901][ C0] ? __pfx__printk+0x10/0x10 [ 1185.141938][ C0] vpanic+0x281/0x750 [ 1185.141968][ C0] ? __pfx__printk+0x10/0x10 [ 1185.141990][ C0] ? __pfx_vpanic+0x10/0x10 [ 1185.142019][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1185.142061][ C0] panic+0xb9/0xc0 [ 1185.142090][ C0] ? __pfx_panic+0x10/0x10 [ 1185.142137][ C0] __warn+0x31b/0x4b0 [ 1185.142166][ C0] ? __queue_work+0x2e5/0x1010 [ 1185.142194][ C0] ? __queue_work+0x2e5/0x1010 [ 1185.142221][ C0] report_bug+0x2be/0x4f0 [ 1185.142246][ C0] ? __queue_work+0x2e5/0x1010 [ 1185.142274][ C0] ? __queue_work+0x2e5/0x1010 [ 1185.142299][ C0] ? __queue_work+0x2e7/0x1010 [ 1185.142326][ C0] handle_bug+0x84/0x160 [ 1185.142356][ C0] exc_invalid_op+0x1a/0x50 [ 1185.142386][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1185.142406][ C0] RIP: 0010:__queue_work+0x2e5/0x1010 [ 1185.142433][ C0] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 1185.142452][ C0] RSP: 0000:ffffc90000157828 EFLAGS: 00010046 [ 1185.142470][ C0] RAX: 7677f4806b253600 RBX: 0000000000000000 RCX: ffff88801ae8d940 [ 1185.142487][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1185.142501][ C0] RBP: ffff888069e78998 R08: 0000000000000000 R09: 0000000000000100 [ 1185.142517][ C0] R10: dffffc0000000000 R11: ffffed1017104863 R12: dffffc0000000000 [ 1185.142540][ C0] R13: dffffc0000000000 R14: ffff88802a4ce968 R15: ffff88801ae8e44c [ 1185.142578][ C0] ? __queue_work+0x2e4/0x1010 [ 1185.142621][ C0] call_timer_fn+0x17b/0x5f0 [ 1185.142647][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1185.142675][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1185.142701][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1185.142742][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1185.142766][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1185.142797][ C0] __run_timer_base+0x709/0x970 [ 1185.142842][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1185.142888][ C0] run_timer_softirq+0xb7/0x180 [ 1185.142915][ C0] handle_softirqs+0x22c/0x710 [ 1185.142953][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1185.142991][ C0] run_ktimerd+0xcf/0x190 [ 1185.143019][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1185.143046][ C0] ? schedule+0x91/0x360 [ 1185.143079][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1185.143105][ C0] smpboot_thread_fn+0x542/0xa60 [ 1185.143133][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1185.143169][ C0] kthread+0x711/0x8a0 [ 1185.143204][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1185.143230][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.143267][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.143297][ C0] ret_from_fork+0x3fc/0x770 [ 1185.143328][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.143362][ C0] ? __switch_to_asm+0x39/0x70 [ 1185.143382][ C0] ? __switch_to_asm+0x33/0x70 [ 1185.143401][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.143433][ C0] ret_from_fork_asm+0x1a/0x30 [ 1185.143474][ C0] [ 1185.143726][ C0] Kernel Offset: disabled