last executing test programs: 24m37.995039707s ago: executing program 32 (id=290): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(r3, r3, 0x0, 0x200000) 24m24.047165237s ago: executing program 33 (id=321): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 24m0.267604049s ago: executing program 3 (id=387): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001580), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000000206010000000000000000000000000605000100070000000900020073797a300000000014000780050015000100000008001340fffff80005000400000000000500040001000000050005000a0000004fc0975f1a9a14e77e4c25e243a9b80c36e267b27ac98babea2cf4eaad8a84ef90bca87c8e6ed36868968e349c6b8b0f48d5c66ec74accd82a902fe8eaf09b6bbf"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 23m59.033304991s ago: executing program 3 (id=390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000fdff7fad0f00000000000019c60000000000000095"], 0x0, 0x204, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sk_skb=0x5}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b}) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000480)=0x1000) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000380)={0x10, 0x1ff, 0x7}) r5 = syz_clone3(&(0x7f0000000500)={0x1000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0xf0ff, 0x0, 0x0}, 0x58) connect$pppoe(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4a200, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000001480)={0x0, 0x0, 0xfffffffe, 0x2, r5}) fcntl$lock(r7, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xd63e, 0x2}) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) 23m57.916258815s ago: executing program 3 (id=391): ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x8, 0x1e3eed, 0x2fca79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peekuser(0x3, r0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x40808) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe5) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) 23m56.419960768s ago: executing program 3 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 23m56.166326879s ago: executing program 3 (id=395): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0xa, 0xc, 0x6e}) r3 = syz_io_uring_setup(0x49e, &(0x7f0000000240)={0x0, 0x4249, 0x8, 0x3, 0x282}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0x5}) socket(0x14, 0x2, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000080)=0x24, 0x4) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000000)=0x8, 0x4) 23m55.130437195s ago: executing program 3 (id=397): openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi4\x00', 0x80100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000340)=0x4) 23m54.694298345s ago: executing program 34 (id=397): openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi4\x00', 0x80100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000700000000800000"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000340)=0x4) 21m23.092879835s ago: executing program 2 (id=787): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001400)=""/91, 0x5b}, {&(0x7f0000001480)=""/102, 0x66}, {0x0}], 0x6, 0xb0a6, 0x0, 0xa) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x7, 0x6, '\x00', 0x3}) 21m21.997341597s ago: executing program 2 (id=792): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001400)=""/91, 0x5b}, {&(0x7f0000001480)=""/102, 0x66}, {0x0}], 0x6, 0xb0a6, 0x0, 0xa) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x7, 0x6, '\x00', 0x3}) 21m20.433851972s ago: executing program 2 (id=795): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB=' \r\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="c785", 0x2}, {&(0x7f0000000280)='\\', 0x1}], 0x2}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r9, 0x47bc, 0x20, 0x0, 0x0, 0x0) 21m14.745005074s ago: executing program 2 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 21m14.363044146s ago: executing program 2 (id=806): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ef5b84663e4ea2fe75c3fe", 0xb) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 21m11.680754543s ago: executing program 2 (id=815): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84015}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0xe, 0x0, '\x00', 0x1, &(0x7f0000000180)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) 21m10.861915715s ago: executing program 35 (id=815): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84015}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0xe, 0x0, '\x00', 0x1, &(0x7f0000000180)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) 20m48.110017618s ago: executing program 0 (id=864): syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 20m47.045838067s ago: executing program 0 (id=866): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 20m45.478935655s ago: executing program 0 (id=870): move_pages(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000019440)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 20m44.968702351s ago: executing program 0 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 20m44.675836116s ago: executing program 0 (id=872): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x4010081) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10010, r2, 0xbb6ac000) io_uring_setup(0x40aa, &(0x7f0000000100)={0x0, 0x40c1, 0x200, 0x2, 0xf8}) socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f00000001c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0011022, 0x0, 0x3be4}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket$unix(0x1, 0x5, 0x0) 20m40.529458402s ago: executing program 0 (id=877): move_pages(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 20m39.683325877s ago: executing program 36 (id=877): move_pages(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) inotify_init1(0x80000) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 18m12.656306744s ago: executing program 5 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r3, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0xc0000) openat$urandom(0xffffffffffffff9c, &(0x7f0000001700), 0x400, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 18m11.338952849s ago: executing program 5 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffe, 0x3c8098e1, 0x401, 0xfffc, 0x101, 0x0, 0x0, 0x0, 0x10, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x20) lseek(r3, 0x6, 0x4) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x4000) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000001340)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x145400, 0x103) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300001b, 0x1010, r6, 0x200000000000000) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r9 = socket(0xa, 0x3, 0x1) getsockopt(r9, 0xff, 0x24, 0x0, &(0x7f0000000280)) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m8.220839397s ago: executing program 5 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x0, 0x40000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x8000, 0xffffffffffffffff, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 18m7.052046764s ago: executing program 5 (id=1260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 18m6.339833137s ago: executing program 5 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = geteuid() quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, r3, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000001700), 0x400, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 18m4.802487062s ago: executing program 5 (id=1282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 18m4.607451007s ago: executing program 37 (id=1282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180), 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 16m6.592154679s ago: executing program 9 (id=1766): syz_emit_ethernet(0x34, &(0x7f0000000300)={@random="e904a200", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x12, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "5c73677a6291"}}}}}}, 0x0) 16m6.238767863s ago: executing program 9 (id=1768): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 16m4.518361224s ago: executing program 9 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005040)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x150, 0x0, 0xfffffffffffffff9, [{{0x4, 0x2, 0xc61, 0xffffffffffffffff, 0x5, 0x1, {0x5, 0x80000000, 0x6, 0x8, 0x7, 0x100000001, 0x1, 0x10000, 0x4, 0x6000, 0x7ff, r8, 0x0, 0x7fffffff, 0x1}}, {0x1, 0x1, 0x2, 0xa, ']['}}, {{0x1, 0x2, 0x1, 0xa, 0x2dcf0a80, 0x1, {0x3, 0x254, 0x8, 0x1, 0x100, 0x5, 0x3, 0x6, 0x5, 0x2000, 0x8, r8, 0x0, 0x1, 0x6}}, {0x3, 0x5, 0x2, 0x6, '.&'}}]}, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000005800)='./file0\x00', &(0x7f0000000480), 0x400) sendmmsg$unix(r1, &(0x7f0000005900)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="d0612dc968231664b3bd36f7fbb13566b2f2486a12be3c5f42cc535e3e720c9d72a236299a39274343157cf0f7c5f9e5ab67f645d19dd82cc57d8bc3a5ef654128b350946a83b341e23ca75394e0ba6a3249760ab94b8c46b87ab2d95c82f90d94c52e56f085517f155bcb83ab596c31616cf1c8bd161e14fe943797e7c7f0cde81200b0fc14e903d3e1fa2b102f4ce9b5b2f6346d2f5bcd4ea598d392ceb880acb58880b6088290c36c23bf3dd3cdf0a9a4740790200311556e42d6c21f9d664575c5c89545253cd2f482e7715f2241e3820ed94204b028d180dba26cdb0b10bd2c32286e45282ce518aad221fa06c8e655df07521e", 0xf6}, {&(0x7f0000000000)="75521333eb1d4813c735a997f3883961b708bb", 0x13}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="1c000000000000005e00000002000000ddc5655dfcb407c74507621580ec2a19e566753dc1c305b7522862f931cbc7324c5974cb94f089476b2a69c52e8be0b3a43253f695e814", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x2000080}}, {{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000980)}, {&(0x7f0000000a00)="7f87215ce7eb5054d2f6f341e07ae94abc07b5190d0fa17e8f98b2bd856ce967b8bf42c6c8e0222f21d900c3144d3b67bae3f7bb5af13dfb44a88d3ef4b6652360e0dcae7b9a3a0d5ec36698bf6a8f7dcf1695449b2a0950205181108e1ba1c8a523e7970f1675f1595e58a7d0504ec75f0cdef379bd5989aebcef49", 0x7c}, {0x0}, {0x0}], 0x4, &(0x7f0000001d80)=[@rights={{0x2c, 0x1, 0x1, [r4, r1, r4, r5, r4, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x70, 0x4000000}}, {{&(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001ec0)="8ab454653c4bff3bd19fd60d28b7734bd9d1bd930172a91b26f9e5a77d5c975c8caf5c310810f434ae2a459577a6962b4f1b2d8a41823bd4771a6fd2ddcf22d58eac0a6b7cae74c626c0aab49b540957fdc30d791b2d096e9a2d8458c9428b39dd35bd00329608751c4dc6f41ef8fa7c9e89c410ce0924adc8751b7684150d13ec4810c915a4222b2393c06bc3e8733366f3fddb7b391dbc2b436c0a371a4b80f502876b82ac1d3f6988bb8d5b4e9a7127de49", 0xb3}, {0x0}], 0x2, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}], 0x90, 0x40490}}, {{&(0x7f00000024c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002540)="7fae5dedbcc72f175e33fc684fbcb534e6b618c86703673cf96a190cb2f547dabdcba10ccd94d3bf73e192cf20a8434a", 0x30}], 0x1, 0x0, 0x0, 0x40050}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f00000047c0)="9b39d22e6298bbf23fd0d9a402b326cf80ab0100c8437aa35c2712071bddfb0f6c566008277ed0587cce665cb123c1872d55df113ed07708eedbdc392554ce4a210785146c225483f9d061782a8960de6083f189b10c2c80b704a06f9e1fdb5c1a2849e197275fb63b7cfca071094aec7dedb137522c05af14b5", 0x7a}, {&(0x7f0000004840)="c5be6fcf5a8371daa3fa7b6be8e0137864c9e9d8492ced379761adf544f5ed38c130a097fd8e542e7ce076f622887bba65d9399d169dacf34e684ceef486d743fb83f44126ca8b58353b4dbbcb40d30c7f27c94feda8", 0x56}, {0x0}, {0x0}, {&(0x7f0000004ac0)}, {&(0x7f0000004bc0)="68fe54cf6fa5997c1bdc2baacf780f883a6b3a6f80be6b69371bbe9fa666512e2bfd61e3c23bafd8d8a5b5afc4395ea07ef24b075b0c7cdc0b2c0740d908d57dae0fd5b2683ec795c67ae3d02d01f92128e9ee231959bd7e275cef656398bd0c10fe431dac98f2d135115f7eed3e1ab068e1dd0b6245d5881bf648dc63940015384032d17e2278945d4f2af430161704df1d77ff720af3e702df4d77d61c7085a73ddac8e96c38d2f7989572deaeeae73dc33af6a0078e6afa8c4432742127c93eb6243d551f0cec53847774a4cfeba4e35bdf387f4a79b746228a", 0xdb}], 0x6, 0x0, 0x0, 0x90}}, {{&(0x7f0000004d40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005080)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}], 0x40, 0x844}}, {{&(0x7f00000050c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000005280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005780)=[{&(0x7f0000005300)="c5ae57e36fad449c72ccb2845685904dad0e592595e9ad0f7db41d759be5adfa43e0fd25749cd6c551187c8bb291de24ddadaafe54ee49abc57b561dfe8ba185e8acb85a02a4c5310a07fd848a01e38730ae8af81dbb3ece7669d23bc2df025647e2de7783374bf2ea3139f436079d7d21fb1c7bf1536bee5df028e8d589b56bd8c71142e1497f22ae603257748fc6573c79dbc35668954f492065d2cab623d111f451a83f96b194fa63340516714f", 0xaf}, {&(0x7f0000005400)="4c67eec2adb27d9dac3e1e7efde31403b4ed22dae7fd9fd66a84fa11a015f5ed4b3f3638fdd397d6d72c1ab1509d71751a8338baeff3f4d4", 0x38}, {&(0x7f0000005440)="d5179b1224d2a676691e6f6f5d86f22c97b42720b7ec4122f8dd75cca5dd0f53bb87f0392b2af2449441edff6d192bd839ca59571215f4817d6eb2dbd1d2d20bc875c3f3d7d202d1fb4034a4ba9a76658361ed81eccbad2e3ce5d2d158bbb258d77655249c67b159ab9e3a1a591394935ed3c4ff88a524ab8fa17d8f7ad88f06f6921b655bbe4e329edf7c3885e44572956f4ba1da5cfc8c39b065851287e2a49ca0d19f0b5eee8a9e32766a75251473016715316bddfcd080febc", 0xbb}, {&(0x7f0000005500)="f383ce608afb15ce7c6ef62ece9a07d0ddd2e8660684d1a091805a67828982b9451ffeda1b1eb30d2cedc7059ecc61cae3b95db739e9008fa71b613f94ab145ebb9f354e3d3bbc600293bb8aff163bcc97ee664fe4a6cd14b3d11783017952a31d", 0x61}, {&(0x7f0000005580)="e80c1677c349b88014aa4c9f900e99a08930b4bab2f16fb068877768b137aade2f8dec67f9476eb7b9c2b9a4f0fd469fa7c0914d20454d0844a83e9a2bea209c77e7aa4d2776b93dfa5d5e02dcf769561edda94218de9d9577e603728980c2dfe95e17e662b69b6f084cd9fe43d242867d90c9ae727a1a4d0f129147be554e50f7280d55adfa5d6c5a077899b04d403709c0e0d69ccc99a43959a38f0d2e336465d048ddcd7c31a9a6a0727f4dbe0e12208a2831ce0ce74e217d615445cafba3d3e57eb255802ef23aab96d6a2c58179d5aaaf65a77475a11cf84f887ae06ae02734f3205a74b83acbe6ae432495de6a62c58fff959741", 0xf7}, {&(0x7f0000005680)="321cf33502757fca009f2691c19bb261c5f504d5652cdee5abece14744ca212aa03aebd045d29d5cc88a91df0c210105f8ed82347065ce2381c1c9f803", 0x3d}, {&(0x7f0000005740)="caf966115f5335e2b02c150062a6ecd643db3aea3060f877fd582c3432d9c306e360c2b65d83283bc205cd3e9cf0adf19dc2ae1613", 0x35}], 0x7, &(0x7f00000058c0), 0x0, 0x4800}}], 0x8, 0x4000) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r9, 0x2, 0x1) getdents64(r9, 0x0, 0x4f) 16m3.165739534s ago: executing program 9 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b09b, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 16m2.962705504s ago: executing program 9 (id=1780): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xa) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x1e, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000580)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x44}}, 0x80) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$usbfs(&(0x7f0000000540), 0x5, 0x480040) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x5b, 0x5, 0x7, 0x3, "9c2b45e4f5d791f27b531f369941f25a4bfa0527ddcd1880b190aa8c00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 16m1.559806893s ago: executing program 9 (id=1781): getdents64(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(0x0, &(0x7f0000000040)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7) 16m1.01733836s ago: executing program 38 (id=1781): getdents64(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(0x0, &(0x7f0000000040)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7) 22.201886042s ago: executing program 6 (id=3918): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0xc9d, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x3, 0x0, 0x1000000, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x6, 0x6f, 0x2, 0x0, 0x10, "88bd91aa28528000000000007500000400"}) 18.668407065s ago: executing program 6 (id=3920): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x3, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000005c0)={@mcast2, 0x0}, &(0x7f0000000600)=0x14) connect$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x1b, r3, 0x1, 0xf7, 0x6, @broadcast}, 0x14) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r9 = socket(0x2, 0xa, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r12 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef) sendfile(r9, r8, 0x0, 0x8) read$FUSE(r8, &(0x7f000000b040)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x2, 0xa, 0xa, 0x10, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x10000, 0xdf, &(0x7f0000000340)=""/223, 0x40f00, 0x20, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x2, 0x2}, 0x10, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x54) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 16.315767729s ago: executing program 4 (id=3927): r0 = inotify_init() connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xc0000000, 0x4, 0x6, 0x17fff, 0x27, 0x4, 0x5}, {0xb, 0x1, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0xe5f, 0x1, 0x7, 0xdf1, 0x6, 0x80000004}, {0x80000000, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x1, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x7, 0x1ff}}]}) r7 = eventfd2(0x9, 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r7, 0x4}) write$eventfd(r7, &(0x7f0000000080)=0x430f, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) 16.068612736s ago: executing program 4 (id=3928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x85b5) 15.993400415s ago: executing program 4 (id=3930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 14.112623053s ago: executing program 1 (id=3931): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 13.681330172s ago: executing program 6 (id=3933): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x400) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f00000000c0)={'\x00', 0xfff6, 0x7, 0x2, 0x800, 0x8000000000000001, r6}) 13.524696963s ago: executing program 4 (id=3935): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) shmdt(r2) poll(0x0, 0x0, 0x7) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) 10.207873452s ago: executing program 1 (id=3941): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000001c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.048094669s ago: executing program 7 (id=3943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9.949873825s ago: executing program 4 (id=3944): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8.78164652s ago: executing program 8 (id=3945): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xa) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x1e, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000580)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x44}}, 0x80) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$usbfs(&(0x7f0000000540), 0x5, 0x480040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 8.609196636s ago: executing program 7 (id=3946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xa}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) 8.453216709s ago: executing program 7 (id=3947): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.737802846s ago: executing program 1 (id=3948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r0, 0x0, 0x0) 6.431280958s ago: executing program 1 (id=3949): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x5) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000002600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) 6.217686553s ago: executing program 8 (id=3950): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x19cb, &(0x7f0000000040)={0x0, 0x6be6, 0xc000, 0xfffffffe, 0xc2}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="eb", 0x1}], 0x2}], 0x1, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 5.981404933s ago: executing program 7 (id=3951): syz_io_uring_setup(0x5c9d, &(0x7f0000000340)={0x0, 0xd214, 0x1, 0x0, 0x321}, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 5.876807716s ago: executing program 8 (id=3952): mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x8000000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)={0xa0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24002084}, 0x4000044) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x6a8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x5d8, 0x2e0, 0x2e0, 0x5d8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {0x40}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x2fd3], 0x7, 0x10, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @remote]}}, @common=@srh1={{0x90}, {0x5e, 0xe, 0x3, 0x9, 0x26a9, @dev={0xfe, 0x80, '\x00', 0xe}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 0x244, 0x352}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x60044084) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x4, 0xfffffffc, 0x1}], '%'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "b8b3"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000004c0)=""/158, 0x44, 0x9e, 0x1}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 5.852094456s ago: executing program 6 (id=3953): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x85b5) 5.664164586s ago: executing program 6 (id=3954): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) shmdt(r2) poll(0x0, 0x0, 0x7) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) 5.088650801s ago: executing program 7 (id=3955): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x400) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r4, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000000c0)={'\x00', 0xfff6, 0x7, 0x2, 0x800, 0x8000000000000001, r5}) 5.077723538s ago: executing program 8 (id=3956): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x2007, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x4d27, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 4.683351632s ago: executing program 4 (id=3957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000700)={0x4, 0x5, 0x0, 0xffffffffffffffff, 0x980912, &(0x7f0000000100)={0x980912, 0x6, '\x00', @p_u32=0x0}}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) 4.301403407s ago: executing program 6 (id=3958): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4004014) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) 3.129282205s ago: executing program 1 (id=3959): syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 2.779844726s ago: executing program 8 (id=3960): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xa) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x1e, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0xdb7, {0xffff, 0x1}, {0x48, 0x3}, @cond=[{0x8, 0x4, 0x8, 0x849, 0x5, 0x7}, {0x94, 0x4, 0x1, 0x7, 0x6, 0x4}]}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000580)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, 0x0, 0x80) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$usbfs(&(0x7f0000000540), 0x5, 0x480040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 1.21273228s ago: executing program 1 (id=3961): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4004014) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000dc}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t', 0x4}], 0x1) socket$kcm(0xa, 0x2, 0x0) 176.136917ms ago: executing program 8 (id=3962): socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x8090) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c008000020101030000000000000000020000040600124000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4048814) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x40, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 0s ago: executing program 7 (id=3963): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff2bbd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="14340400212000001c0012800c0001006d6163766c616e000c00028008000300800000003d0800007f2bde24fef7b259d32db06415bae54442571d7edc1ba0f33fad77339dacad032bbc89238ca1", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x54, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x5, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x4, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x29d9, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x344, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000040)=0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=0 [ 1468.586016][ T5866] usb 9-1: config 0 descriptor?? [ 1469.055928][ T5866] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1469.314549][ T5866] usb 9-1: USB disconnect, device number 72 [ 1470.307241][T21677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.292938][ T5858] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1471.572502][ T5858] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1471.573598][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.573628][ T5858] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.573650][ T5858] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1471.628766][ T5858] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1471.628797][ T5858] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1471.628817][ T5858] usb 9-1: Manufacturer: syz [ 1471.650748][ T5858] usb 9-1: config 0 descriptor?? [ 1475.469494][ T5858] usbhid 9-1:0.0: can't add hid device: -71 [ 1475.469569][ T5858] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1475.517305][ T5858] usb 9-1: USB disconnect, device number 73 [ 1476.162968][ T7057] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1476.315358][ T7057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.315392][ T7057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.315416][ T7057] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1476.315460][ T7057] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1476.315483][ T7057] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.320705][ T7057] usb 9-1: config 0 descriptor?? [ 1476.772951][ T7057] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1476.996940][ T5866] usb 9-1: USB disconnect, device number 74 [ 1477.213027][T21735] input: syz1 as /devices/virtual/input/input63 [ 1478.573052][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3425'. [ 1479.807479][T21764] fuse: Unknown parameter '0x0000000000000003' [ 1480.822990][ T5866] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1481.043151][ T5807] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1481.047103][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.047120][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1481.048031][ T5866] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1481.048047][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1481.048058][ T5866] usb 5-1: SerialNumber: syz [ 1481.216389][ T5807] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.216410][ T5807] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.216422][ T5807] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1481.216449][ T5807] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1481.216495][ T5807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.220873][ T5807] usb 9-1: config 0 descriptor?? [ 1481.286977][ T5866] usb 5-1: 0:2 : does not exist [ 1481.738532][ T5807] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1481.766765][ T5866] usb 5-1: USB disconnect, device number 71 [ 1481.951049][ T5807] usb 9-1: USB disconnect, device number 75 [ 1481.953690][T21064] udevd[21064]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.046665][T21783] fido_id[21783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1484.665370][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.665439][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.073049][ T50] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1485.170341][T21805] fuse: Unknown parameter '0x0000000000000003' [ 1485.244184][ T50] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1485.244213][ T50] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1485.244232][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1485.244261][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1485.244278][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1485.245862][ T50] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1485.245883][ T50] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1485.245893][ T50] usb 8-1: Product: syz [ 1485.245901][ T50] usb 8-1: Manufacturer: syz [ 1485.344956][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 1485.344969][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 1485.355807][ T50] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1485.355829][ T50] cdc_wdm 8-1:1.0: Unknown control protocol [ 1485.782951][ T50] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1485.933048][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 1485.935532][ T50] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1485.938026][ T50] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1485.938055][ T50] usb 7-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1485.938076][ T50] usb 7-1: Product: syz [ 1485.938090][ T50] usb 7-1: Manufacturer: syz [ 1485.938104][ T50] usb 7-1: SerialNumber: syz [ 1485.949559][ T50] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1485.949584][ T50] r8152-cfgselector 7-1: config 0 descriptor?? [ 1486.267745][ T50] r8152-cfgselector 7-1: Needed 2 retries to read version [ 1486.267796][ T50] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1486.272728][ T50] r8152-cfgselector 7-1: bad CDC descriptors [ 1486.496540][T20125] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1486.662179][ T5807] usb 8-1: USB disconnect, device number 74 [ 1487.213000][ T5988] r8152-cfgselector 7-1: USB disconnect, device number 99 [ 1487.578039][ T1233] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1487.822375][ T1233] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1487.822404][ T1233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.822417][ T1233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.822430][ T1233] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1488.013245][ T1233] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1488.013264][ T1233] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1488.013275][ T1233] usb 9-1: Manufacturer: syz [ 1488.025976][ T1233] usb 9-1: config 0 descriptor?? [ 1491.735276][ T1233] usbhid 9-1:0.0: can't add hid device: -71 [ 1491.735388][ T1233] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1491.837876][ T1233] usb 9-1: USB disconnect, device number 76 [ 1492.172596][T21865] fuse: Unknown parameter '0x0000000000000003' [ 1492.290359][T21867] IPVS: Error connecting to the multicast addr [ 1492.789832][T21877] ptrace attach of "./syz-executor exec"[16943] was attempted by "./syz-executor exec"[21877] [ 1493.072984][ T5807] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1493.299005][ T5807] usb 9-1: Using ep0 maxpacket: 16 [ 1493.301744][ T5807] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1493.305152][ T5807] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1493.305183][ T5807] usb 9-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1493.305204][ T5807] usb 9-1: Product: syz [ 1493.305226][ T5807] usb 9-1: Manufacturer: syz [ 1493.305241][ T5807] usb 9-1: SerialNumber: syz [ 1493.319809][ T5807] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1493.319834][ T5807] r8152-cfgselector 9-1: config 0 descriptor?? [ 1493.793305][ T5807] r8152-cfgselector 9-1: Needed 2 retries to read version [ 1493.794009][ T5807] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1493.794621][ T5807] r8152-cfgselector 9-1: bad CDC descriptors [ 1495.173861][ T50] r8152-cfgselector 9-1: USB disconnect, device number 77 [ 1495.783485][ T5807] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1495.943557][ T5807] usb 8-1: Using ep0 maxpacket: 32 [ 1495.947385][ T5807] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1495.947412][ T5807] usb 8-1: config 0 has no interface number 0 [ 1495.949868][ T5807] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1495.949895][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.949914][ T5807] usb 8-1: Product: syz [ 1495.949927][ T5807] usb 8-1: Manufacturer: syz [ 1495.949942][ T5807] usb 8-1: SerialNumber: syz [ 1495.958309][ T5807] usb 8-1: config 0 descriptor?? [ 1495.971819][ T5807] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1495.971848][ T5807] usb 8-1: selecting invalid altsetting 1 [ 1495.971865][ T5807] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1495.987201][T21914] fuse: Unknown parameter '0x0000000000000003' [ 1496.012031][ T5807] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1496.012369][ T5807] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1496.012415][ T5807] usb 8-1: media controller created [ 1496.118421][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1496.287585][ T5807] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1496.287642][ T5807] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1496.288172][ T5807] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1496.473277][ T5807] usb 8-1: USB disconnect, device number 75 [ 1497.372547][T21933] input: syz1 as /devices/virtual/input/input65 [ 1498.709233][ T50] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1498.886399][ T50] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1498.886448][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.886474][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.886497][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1498.888025][ T50] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1498.888043][ T50] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1498.888054][ T50] usb 5-1: Manufacturer: syz [ 1498.891073][ T50] usb 5-1: config 0 descriptor?? [ 1499.684493][T21949] fuse: Unknown parameter '0x0000000000000003' [ 1503.527132][T21976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1504.287523][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 1504.287598][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1504.290582][ T50] usb 5-1: USB disconnect, device number 72 [ 1505.010453][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1505.045220][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1505.046714][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1505.051263][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1505.086080][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1505.200936][T22004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1505.825165][T22000] lo speed is unknown, defaulting to 1000 [ 1506.343019][ T5866] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1506.525486][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.525521][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.525545][ T5866] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1506.525586][ T5866] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1506.525610][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.595017][ T5866] usb 8-1: config 0 descriptor?? [ 1507.052234][ T36] audit: type=1326 audit(1774792463.343:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22009 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e066c799 code=0x7ffc0000 [ 1507.052286][ T36] audit: type=1326 audit(1774792463.343:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22009 comm="syz.1.3489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e066c799 code=0x7ffc0000 [ 1507.192979][ T5815] Bluetooth: hci4: command tx timeout [ 1507.212887][ T5866] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1508.846676][ T9205] bridge_slave_1: left promiscuous mode [ 1508.846934][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.923772][ T9205] bridge_slave_0: left promiscuous mode [ 1508.923946][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.285701][ T5815] Bluetooth: hci4: command tx timeout [ 1509.287762][ T5866] usb 8-1: USB disconnect, device number 76 [ 1510.350015][T22050] fuse: Unknown parameter '0x0000000000000003' [ 1511.353129][ T5815] Bluetooth: hci4: command tx timeout [ 1512.193020][ T5858] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1512.253046][ T9205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.313794][ T9205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.356128][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 1512.361068][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1512.361115][ T5858] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1512.361129][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.425626][ T9205] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1512.427234][ T5858] usb 2-1: config 0 descriptor?? [ 1512.473839][ T9205] macvlan2: left allmulticast mode [ 1512.475365][ T9205] bond0 (unregistering): Released all slaves [ 1512.507367][ T9205] bond1 (unregistering): Released all slaves [ 1512.569336][ T9205] bond2 (unregistering): Released all slaves [ 1512.923678][ T5858] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1513.390105][T22058] kvm: pic: non byte read [ 1513.390171][T22058] kvm: pic: non byte read [ 1513.390229][T22058] kvm: pic: non byte read [ 1513.390285][T22058] kvm: pic: non byte read [ 1513.390340][T22058] kvm: pic: non byte read [ 1513.390397][T22058] kvm: pic: non byte read [ 1513.390453][T22058] kvm: pic: non byte read [ 1513.390508][T22058] kvm: pic: non byte read [ 1513.390572][T22058] kvm: pic: non byte read [ 1513.390630][T22058] kvm: pic: non byte read [ 1513.403505][ T36] audit: type=1326 audit(1774792469.753:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22057 comm="syz.1.3500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9e066c799 code=0x0 [ 1513.443142][ T5815] Bluetooth: hci4: command tx timeout [ 1513.510037][T22072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.510563][T22072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.643693][T22087] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1513.644072][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3505'. [ 1513.814265][T22000] chnl_net:caif_netlink_parms(): no params data found [ 1514.692012][T22000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.692242][T22000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.692473][T22000] bridge_slave_0: entered allmulticast mode [ 1514.724467][T22000] bridge_slave_0: entered promiscuous mode [ 1514.736346][T22000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.752202][T22000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.752440][T22000] bridge_slave_1: entered allmulticast mode [ 1514.778714][T22000] bridge_slave_1: entered promiscuous mode [ 1515.103662][ T5858] usb 2-1: USB disconnect, device number 50 [ 1515.282657][T22000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.290935][T22000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.356740][T22000] team0: Port device team_slave_0 added [ 1515.467149][T22000] team0: Port device team_slave_1 added [ 1516.257795][T22000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.258091][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.258122][T22000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.359968][T22000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.359981][T22000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.359997][T22000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.305831][ T9205] hsr_slave_0: left promiscuous mode [ 1517.346366][ T9205] hsr_slave_1: left promiscuous mode [ 1517.347125][ T9205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.411426][ T9205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.943243][T22150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1519.112967][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1519.654698][ T9205] team0 (unregistering): Port device team_slave_1 removed [ 1519.739223][ T9205] team0 (unregistering): Port device team_slave_0 removed [ 1520.158617][T22160] ptrace attach of "./syz-executor exec"[16943] was attempted by "./syz-executor exec"[22160] [ 1521.109395][T22000] hsr_slave_0: entered promiscuous mode [ 1521.120912][T22000] hsr_slave_1: entered promiscuous mode [ 1521.130654][T22000] debugfs: 'hsr0' already exists in 'hsr' [ 1521.130682][T22000] Cannot create hsr debugfs directory [ 1521.389791][T22167] input: syz1 as /devices/virtual/input/input67 [ 1521.942783][T22178] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1523.479510][T22167] input: failed to attach handler evdev to device input67, error: -4 [ 1524.159418][T22185] input: syz1 as /devices/virtual/input/input68 [ 1524.445358][T22197] fuse: Bad value for 'fd' [ 1524.807236][ T5858] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1525.005387][ T5858] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1525.005418][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.005435][ T5858] usb 8-1: Product: syz [ 1525.005442][ T5858] usb 8-1: Manufacturer: syz [ 1525.005451][ T5858] usb 8-1: SerialNumber: syz [ 1525.010037][ T5858] usb 8-1: config 0 descriptor?? [ 1525.059376][ T5858] hub 8-1:0.0: bad descriptor, ignoring hub [ 1525.059414][ T5858] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1525.262936][ T5858] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1525.277787][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1525.283261][ T5858] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1525.283320][ T5858] usb 8-1: media controller created [ 1525.393853][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1525.624802][ T9205] IPVS: stop unused estimator thread 0... [ 1525.713215][ T5858] DVB: Unable to find symbol dib7000p_attach() [ 1525.713234][ T5858] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1525.903069][ T5858] rc_core: IR keymap rc-dib0700-rc5 not found [ 1525.903089][ T5858] Registered IR keymap rc-empty [ 1525.903327][ T5858] dvb-usb: could not initialize remote control. [ 1525.903334][ T5858] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1527.042255][T22221] syzkaller0: entered promiscuous mode [ 1527.042271][T22221] syzkaller0: entered allmulticast mode [ 1527.045504][T22221] tipc: Started in network mode [ 1527.045533][T22221] tipc: Node identity 626414f16897, cluster identity 4711 [ 1527.046042][T22221] tipc: Enabled bearer , priority 0 [ 1527.108946][T22220] tipc: Resetting bearer [ 1527.365659][T22220] tipc: Disabling bearer [ 1528.486748][ T1233] usb 8-1: USB disconnect, device number 77 [ 1528.594542][ T1233] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1528.744983][T22238] fuse: Bad value for 'fd' [ 1529.093379][ T1233] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1529.257118][ T1233] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1529.257137][ T1233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.257148][ T1233] usb 8-1: Product: syz [ 1529.257156][ T1233] usb 8-1: Manufacturer: syz [ 1529.257164][ T1233] usb 8-1: SerialNumber: syz [ 1529.302081][ T1233] usb 8-1: config 0 descriptor?? [ 1529.311941][ T1233] hub 8-1:0.0: bad descriptor, ignoring hub [ 1529.311964][ T1233] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1529.541825][ T1233] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1529.565680][ T1233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1529.570537][ T1233] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1529.570699][ T1233] usb 8-1: media controller created [ 1529.750491][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1530.116953][T22250] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1531.351227][T22251] i2c i2c-1: Invalid block size returned: 239 [ 1531.489969][ T1233] DVB: Unable to find symbol dib7000p_attach() [ 1531.489987][ T1233] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1531.732985][ T1233] rc_core: IR keymap rc-dib0700-rc5 not found [ 1531.732999][ T1233] Registered IR keymap rc-empty [ 1531.733170][ T1233] dvb-usb: could not initialize remote control. [ 1531.733177][ T1233] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1532.041063][T22000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1532.148503][T22000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1532.201476][T22000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1532.258491][T22000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1532.984388][ T1233] usb 8-1: USB disconnect, device number 78 [ 1533.133870][T22000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.196112][ T1233] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1533.237165][T22000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.381972][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.386707][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.445410][T20125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.465928][T20125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.674368][T22309] fuse: Unknown parameter '0x0000000000000003' [ 1535.041912][T22000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.947938][T22000] veth0_vlan: entered promiscuous mode [ 1537.007901][T22000] veth1_vlan: entered promiscuous mode [ 1537.106874][T22000] veth0_macvtap: entered promiscuous mode [ 1537.133056][T22000] veth1_macvtap: entered promiscuous mode [ 1537.179361][T22000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.194454][T22000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.219982][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.220230][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.220290][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.220325][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.292983][ T50] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1537.467492][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.467525][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.467548][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1537.467591][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1537.467613][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.540481][ T50] usb 9-1: config 0 descriptor?? [ 1537.631322][T22348] fuse: Unknown parameter '0x0000000000000003' [ 1537.841412][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.841433][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.987085][T22351] fuse: Unknown parameter '0x0000000000000003' [ 1538.051443][ T50] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1538.221453][ T9205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.221475][ T9205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.539029][T22369] input: syz1 as /devices/virtual/input/input72 [ 1540.518854][T10243] usb 9-1: USB disconnect, device number 78 [ 1540.613679][T22389] netlink: 'syz.8.3546': attribute type 10 has an invalid length. [ 1540.625524][T22389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1541.820462][T22397] fuse: Unknown parameter '0x0000000000000003' [ 1543.990957][T22426] fuse: Unknown parameter '0x0000000000000003' [ 1545.996914][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.997008][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.207600][T22443] fuse: Unknown parameter '0x0000000000000003' [ 1546.543048][T10243] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1546.720152][T10243] usb 8-1: Using ep0 maxpacket: 8 [ 1546.731625][T10243] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.734064][T10243] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1546.734084][T10243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.734856][T10243] usb 8-1: Product: syz [ 1546.734874][T10243] usb 8-1: Manufacturer: syz [ 1546.734886][T10243] usb 8-1: SerialNumber: syz [ 1546.739074][T10243] usb 8-1: config 0 descriptor?? [ 1546.794625][T10243] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1546.794722][T10243] usb 8-1: selecting invalid altsetting 1 [ 1546.822950][ T50] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1547.013121][ T50] usb 2-1: Using ep0 maxpacket: 8 [ 1547.016155][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1547.016204][ T50] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1547.016219][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.024500][ T50] usb 2-1: config 0 descriptor?? [ 1547.316047][T10243] gspca_stk014: reg_r err -110 [ 1547.316324][T10243] stk014 8-1:0.0: probe with driver stk014 failed with error -110 [ 1547.561898][ T50] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1547.868308][T22451] picdev_read: 77 callbacks suppressed [ 1547.868323][T22451] kvm: pic: non byte read [ 1547.868367][T22451] kvm: pic: non byte read [ 1547.868409][T22451] kvm: pic: non byte read [ 1547.868451][T22451] kvm: pic: non byte read [ 1547.868492][T22451] kvm: pic: non byte read [ 1547.868534][T22451] kvm: pic: non byte read [ 1547.868576][T22451] kvm: pic: non byte read [ 1547.868617][T22451] kvm: pic: non byte read [ 1547.868659][T22451] kvm: pic: non byte read [ 1547.868708][T22451] kvm: pic: non byte read [ 1547.955660][ T36] audit: type=1326 audit(1774792504.303:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22450 comm="syz.1.3562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9e066c799 code=0x0 [ 1548.187002][T22467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.187515][T22467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.708119][ T5858] usb 8-1: USB disconnect, device number 79 [ 1549.359623][T22475] fuse: Unknown parameter '0x0000000000000003' [ 1549.658981][T22482] ptrace attach of "./syz-executor exec"[16893] was attempted by "./syz-executor exec"[22482] [ 1549.780540][T22477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.780991][T22477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.846798][ T50] usb 2-1: USB disconnect, device number 51 [ 1550.978185][T22477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1551.122293][T22477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.606593][T22512] input: syz1 as /devices/virtual/input/input73 [ 1553.035187][ T57] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.049731][ T57] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.293113][ T57] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.297626][ T57] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.943014][T10243] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1556.128296][T10243] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1556.128327][T10243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.128341][T10243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.128353][T10243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1556.129721][T10243] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1556.129738][T10243] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1556.129749][T10243] usb 7-1: Manufacturer: syz [ 1556.212930][T10243] usb 7-1: config 0 descriptor?? [ 1556.611205][T22550] fuse: Unknown parameter '0x0000000000000003' [ 1556.760073][T22554] netlink: 'syz.7.3579': attribute type 10 has an invalid length. [ 1556.775623][T22554] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1557.083581][T22559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1558.485886][T22570] input: syz1 as /devices/virtual/input/input74 [ 1559.205711][T10243] usbhid 7-1:0.0: can't add hid device: -71 [ 1559.205840][T10243] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1559.235379][T10243] usb 7-1: USB disconnect, device number 100 [ 1559.624355][ T36] audit: type=1326 audit(1774792515.873:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624414][ T36] audit: type=1326 audit(1774792515.883:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624446][ T36] audit: type=1326 audit(1774792515.883:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624468][ T36] audit: type=1326 audit(1774792515.883:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624490][ T36] audit: type=1326 audit(1774792515.883:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624512][ T36] audit: type=1326 audit(1774792515.883:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624534][ T36] audit: type=1326 audit(1774792515.883:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624556][ T36] audit: type=1326 audit(1774792515.883:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624579][ T36] audit: type=1326 audit(1774792515.883:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1559.624601][ T36] audit: type=1326 audit(1774792515.883:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22578 comm="syz.6.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1561.679094][T22593] fuse: Unknown parameter '0x0000000000000003' [ 1565.703069][T10243] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1565.913330][T10243] usb 2-1: Using ep0 maxpacket: 16 [ 1566.541227][T10243] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1566.591235][T10243] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1566.591254][T10243] usb 2-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1566.591272][T10243] usb 2-1: Product: syz [ 1566.591280][T10243] usb 2-1: Manufacturer: syz [ 1566.591288][T10243] usb 2-1: SerialNumber: syz [ 1566.634782][T10243] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1566.634809][T10243] r8152-cfgselector 2-1: config 0 descriptor?? [ 1566.712887][ T7057] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1566.961096][ T7057] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1566.961144][ T7057] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.961172][ T7057] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1566.961194][ T7057] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1566.964439][ T7057] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1566.964467][ T7057] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1566.964487][ T7057] usb 7-1: Manufacturer: syz [ 1567.365507][T22662] syzkaller0: entered promiscuous mode [ 1567.365525][T22662] syzkaller0: entered allmulticast mode [ 1567.418665][T10243] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1567.419622][T10243] r8152-cfgselector 2-1: bad CDC descriptors [ 1567.445575][T10243] r8152-cfgselector 2-1: USB disconnect, device number 52 [ 1567.466883][ T7057] usb 7-1: config 0 descriptor?? [ 1568.636031][T22670] ptrace attach of "./syz-executor exec"[13897] was attempted by "./syz-executor exec"[22670] [ 1570.025382][T22682] fuse: Unknown parameter '0x0000000000000003' [ 1570.963331][ T7057] usbhid 7-1:0.0: can't add hid device: -71 [ 1570.963407][ T7057] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1570.980325][ T7057] usb 7-1: USB disconnect, device number 101 [ 1573.379876][T22717] ptrace attach of "./syz-executor exec"[13897] was attempted by "./syz-executor exec"[22717] [ 1574.184680][ T50] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1574.334439][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.334472][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.334494][ T50] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1574.334536][ T50] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1574.334567][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.337782][ T50] usb 2-1: config 0 descriptor?? [ 1574.782970][T10245] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1574.791659][ T50] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1574.874821][ T57] wlan0: Trigger new scan to find an IBSS to join [ 1574.933256][T10245] usb 8-1: Using ep0 maxpacket: 32 [ 1574.935184][T10245] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1574.935223][T10245] usb 8-1: config 0 has no interface number 0 [ 1574.937334][T10245] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1574.937358][T10245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.937369][T10245] usb 8-1: Product: syz [ 1574.937376][T10245] usb 8-1: Manufacturer: syz [ 1574.937384][T10245] usb 8-1: SerialNumber: syz [ 1574.975693][T10245] usb 8-1: config 0 descriptor?? [ 1575.017516][T10245] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1575.296864][T10245] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1575.329096][T22728] netlink: 'syz.8.3610': attribute type 10 has an invalid length. [ 1575.381242][T10245] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1576.038935][T10245] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1576.190734][T10245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.190769][T10245] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.190842][T10245] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1576.190884][T10245] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1576.190907][T10245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.249655][T10245] usb 7-1: config 0 descriptor?? [ 1576.805418][T10245] plantronics 0003:047F:FFFF.0019: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1576.984919][ T50] usb 2-1: USB disconnect, device number 53 [ 1577.191193][ T1233] usb 7-1: USB disconnect, device number 102 [ 1577.224894][T10245] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1577.477799][T10245] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1577.477828][T10245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.477842][T10245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.477854][T10245] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1577.479646][T10245] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1577.479664][T10245] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1577.479675][T10245] usb 5-1: Manufacturer: syz [ 1577.487807][T10245] usb 5-1: config 0 descriptor?? [ 1577.644331][T22751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1577.923002][ T9205] wlan0: Trigger new scan to find an IBSS to join [ 1578.000633][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1578.009724][ T50] usb 8-1: USB disconnect, device number 80 [ 1578.093899][ T50] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1578.192467][ T50] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1578.218175][ T50] quatech2 8-1:0.51: device disconnected [ 1578.814498][T22745] fido_id[22745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1581.912998][ T57] wlan0: Trigger new scan to find an IBSS to join [ 1582.845049][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.954117][T10245] usbhid 5-1:0.0: can't add hid device: -32 [ 1582.954195][T10245] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1583.287177][T10245] usb 5-1: USB disconnect, device number 73 [ 1583.475006][ T5807] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1583.603089][ T5807] usb 2-1: device descriptor read/64, error -71 [ 1583.844709][ T5807] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1583.973206][ T5807] usb 2-1: device descriptor read/64, error -71 [ 1584.098159][ T5807] usb usb2-port1: attempt power cycle [ 1584.703075][ T5807] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1584.733681][ T5807] usb 2-1: device descriptor read/8, error -71 [ 1584.953059][T20125] wlan0: Trigger new scan to find an IBSS to join [ 1584.982956][ T5807] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1585.003900][ T5807] usb 2-1: device descriptor read/8, error -71 [ 1585.123322][ T5807] usb usb2-port1: unable to enumerate USB device [ 1585.382961][T10245] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1585.532939][T10245] usb 9-1: Using ep0 maxpacket: 8 [ 1585.535262][T10245] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1585.535312][T10245] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1585.535336][T10245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.599054][T10245] usb 9-1: config 0 descriptor?? [ 1586.012388][T10245] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1586.190608][T22817] fuse: Unknown parameter '0x0000000000000003' [ 1586.373018][ T5866] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1586.444084][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 1586.444104][ T36] audit: type=1326 audit(1774792542.783:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.444152][ T36] audit: type=1326 audit(1774792542.783:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.444192][ T36] audit: type=1326 audit(1774792542.783:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.444231][ T36] audit: type=1326 audit(1774792542.783:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.444270][ T36] audit: type=1326 audit(1774792542.793:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.444311][ T36] audit: type=1326 audit(1774792542.793:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.450276][ T36] audit: type=1326 audit(1774792542.793:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.450321][ T36] audit: type=1326 audit(1774792542.793:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.450361][ T36] audit: type=1326 audit(1774792542.793:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.450558][ T36] audit: type=1326 audit(1774792542.793:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22818 comm="syz.4.3626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f737febc799 code=0x7ffc0000 [ 1586.636503][T22827] picdev_read: 77 callbacks suppressed [ 1586.636526][T22827] kvm: pic: non byte read [ 1586.636593][T22827] kvm: pic: non byte read [ 1586.636651][T22827] kvm: pic: non byte read [ 1586.636708][T22827] kvm: pic: non byte read [ 1586.636764][T22827] kvm: pic: non byte read [ 1586.636820][T22827] kvm: pic: non byte read [ 1586.636875][T22827] kvm: pic: non byte read [ 1586.636931][T22827] kvm: pic: non byte read [ 1586.636988][T22827] kvm: pic: non byte read [ 1586.637044][T22827] kvm: pic: non byte read [ 1586.681355][ T5866] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1586.681402][ T5866] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1586.681443][ T5866] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1586.681465][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.804004][T22815] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1586.808707][ T5866] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1587.233319][T22828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.258851][T22828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.470768][ T5866] usb 7-1: USB disconnect, device number 103 [ 1588.825102][ T5807] usb 9-1: USB disconnect, device number 79 [ 1588.933636][ T50] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1589.437491][ T50] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1589.437539][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.437565][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.437584][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1589.448953][ T50] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1589.448985][ T50] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1589.449005][ T50] usb 7-1: Manufacturer: syz [ 1589.469930][ T50] usb 7-1: config 0 descriptor?? [ 1589.733436][ T5807] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1589.912973][ T5807] usb 9-1: Using ep0 maxpacket: 8 [ 1589.915261][ T5807] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1589.915310][ T5807] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1589.915333][ T5807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.920992][ T5807] usb 9-1: config 0 descriptor?? [ 1589.967758][T14019] wlan0: Trigger new scan to find an IBSS to join [ 1590.386865][ T5807] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1590.930700][T22865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.931348][T22865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.162277][T14019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.696712][T22864] input: syz1 as /devices/virtual/input/input77 [ 1593.053322][ T5807] usb 9-1: USB disconnect, device number 80 [ 1594.672288][ T50] usbhid 7-1:0.0: can't add hid device: -71 [ 1594.672372][ T50] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1594.733578][ T50] usb 7-1: USB disconnect, device number 104 [ 1594.949608][T22897] syzkaller0: entered promiscuous mode [ 1594.949625][T22897] syzkaller0: entered allmulticast mode [ 1595.642953][T10245] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1595.783055][T10245] usb 8-1: device descriptor read/64, error -71 [ 1596.033005][T10245] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1596.213623][T10245] usb 8-1: device descriptor read/64, error -71 [ 1596.283012][ T50] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1596.323304][T10245] usb usb8-port1: attempt power cycle [ 1596.452939][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 1596.455461][ T50] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.455494][ T50] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1596.457477][ T50] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1596.457494][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.457505][ T50] usb 2-1: Product: syz [ 1596.457513][ T50] usb 2-1: Manufacturer: syz [ 1596.457521][ T50] usb 2-1: SerialNumber: syz [ 1596.662919][T10245] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1596.683702][T10245] usb 8-1: device descriptor read/8, error -71 [ 1596.750449][ T50] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1596.750482][ T50] usb 2-1: MIDIStreaming interface descriptor not found [ 1597.152894][T10245] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1597.173715][T10245] usb 8-1: device descriptor read/8, error -71 [ 1597.201804][ T50] usb 2-1: USB disconnect, device number 58 [ 1597.260050][T22577] udevd[22577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1597.285839][T10245] usb usb8-port1: unable to enumerate USB device [ 1598.764254][T22948] fuse: Unknown parameter '0x0000000000000003' [ 1599.899650][T22964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1600.163105][T10245] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1600.332984][T10245] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1600.333015][T10245] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1600.333039][T10245] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1600.333052][T10245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.339509][T22966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1600.346195][T10245] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1600.688044][T10245] usb 5-1: USB disconnect, device number 74 [ 1601.083126][ T50] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1601.294542][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.294570][ T50] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1601.294598][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1601.294617][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.298094][ T50] usb 7-1: config 0 descriptor?? [ 1601.563590][T22991] fuse: Bad value for 'fd' [ 1601.822932][T10243] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1601.999478][T10243] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1601.999497][T10243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.999509][T10243] usb 5-1: Product: syz [ 1601.999516][T10243] usb 5-1: Manufacturer: syz [ 1601.999524][T10243] usb 5-1: SerialNumber: syz [ 1602.002350][T10243] usb 5-1: config 0 descriptor?? [ 1602.040203][T10243] hub 5-1:0.0: bad descriptor, ignoring hub [ 1602.040226][T10243] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1602.230527][T10243] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1602.263314][T10243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1602.264049][T10243] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1602.264103][T10243] usb 5-1: media controller created [ 1602.312440][T10243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1602.450614][T10243] DVB: Unable to find symbol dib7000p_attach() [ 1602.450626][T10243] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1602.533418][T10243] rc_core: IR keymap rc-dib0700-rc5 not found [ 1602.533440][T10243] Registered IR keymap rc-empty [ 1602.533721][T10243] dvb-usb: could not initialize remote control. [ 1602.533731][T10243] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1603.914050][T10243] usb 7-1: USB disconnect, device number 105 [ 1604.462955][T10243] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1604.527594][ T5807] usb 5-1: USB disconnect, device number 75 [ 1604.604552][ T5807] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1604.650839][T10243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.650873][T10243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.650892][T10243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1604.650915][T10243] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1604.650927][T10243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.739188][T10243] usb 7-1: config 0 descriptor?? [ 1604.933712][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3668'. [ 1605.367317][T10243] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1605.445755][T23039] syzkaller0: entered promiscuous mode [ 1605.445771][T23039] syzkaller0: entered allmulticast mode [ 1607.527253][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.527322][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.530871][ T5866] usb 7-1: USB disconnect, device number 106 [ 1607.882920][ T1233] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1608.032902][ T5866] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1608.052921][ T1233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1608.061693][ T1233] usb 5-1: not running at top speed; connect to a high speed hub [ 1608.067126][ T1233] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.067154][ T1233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1608.067203][ T1233] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1608.067231][ T1233] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1608.130804][ T1233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1608.130823][ T1233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1608.130834][ T1233] usb 5-1: Product: syz [ 1608.130842][ T1233] usb 5-1: Manufacturer: syz [ 1608.130850][ T1233] usb 5-1: SerialNumber: syz [ 1608.179064][T23053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1608.197017][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.197044][ T5866] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1608.197078][ T5866] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1608.197099][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.221132][ T5866] usb 7-1: config 0 descriptor?? [ 1608.463053][ T1233] usb 5-1: USB disconnect, device number 76 [ 1609.662936][ T1233] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1609.872974][ T1233] usb 9-1: Using ep0 maxpacket: 8 [ 1609.875722][ T1233] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.879623][ T1233] usb 9-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1609.880701][ T1233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.881461][ T1233] usb 9-1: Product: syz [ 1609.881477][ T1233] usb 9-1: Manufacturer: syz [ 1609.881492][ T1233] usb 9-1: SerialNumber: syz [ 1609.889680][ T1233] usb 9-1: config 0 descriptor?? [ 1609.901956][ T1233] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1609.902057][ T1233] usb 9-1: selecting invalid altsetting 1 [ 1610.474440][ T1233] gspca_stk014: reg_r err -110 [ 1610.474528][ T1233] stk014 9-1:0.0: probe with driver stk014 failed with error -110 [ 1610.678547][T23084] binder: 23083:23084 ioctl c0306201 0 returned -14 [ 1610.699882][ T1233] usb 7-1: USB disconnect, device number 107 [ 1611.708000][ T5807] usb 9-1: USB disconnect, device number 81 [ 1611.973045][ T5866] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1611.981912][T23100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1612.133004][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 1612.137173][ T5866] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1612.137201][ T5866] usb 7-1: config 0 has no interface number 0 [ 1612.141167][ T5866] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1612.141195][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.141206][ T5866] usb 7-1: Product: syz [ 1612.141213][ T5866] usb 7-1: Manufacturer: syz [ 1612.141221][ T5866] usb 7-1: SerialNumber: syz [ 1612.262110][ T5866] usb 7-1: config 0 descriptor?? [ 1612.269633][ T5866] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1612.481563][ T5866] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1612.515265][ T5866] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1612.652911][T10245] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1612.814746][T10245] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1612.814783][T10245] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1612.814823][T10245] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1612.814841][T10245] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.871107][T23104] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1612.903725][T10245] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1613.188558][T10245] usb 9-1: USB disconnect, device number 82 [ 1615.113048][ T1182] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1615.588462][T23126] input: syz1 as /devices/virtual/input/input80 [ 1616.001261][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1616.014784][ T5866] usb 7-1: USB disconnect, device number 108 [ 1616.032692][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1616.049148][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1616.050553][ T5866] quatech2 7-1:0.51: device disconnected [ 1616.675922][T23130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1616.782923][ T50] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1616.945315][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.945337][ T50] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1616.945358][ T50] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1616.945371][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.948253][ T50] usb 5-1: config 0 descriptor?? [ 1617.828204][T23145] IPVS: Error connecting to the multicast addr [ 1618.093014][ T5866] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1618.193104][T10245] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1618.264737][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 1618.266289][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1618.266318][ T5866] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1618.266331][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.271902][ T5866] usb 2-1: config 0 descriptor?? [ 1618.342896][T10245] usb 8-1: Using ep0 maxpacket: 16 [ 1618.345070][T10245] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 1618.347417][T10245] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1618.347447][T10245] usb 8-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1618.347465][T10245] usb 8-1: Product: syz [ 1618.347480][T10245] usb 8-1: Manufacturer: syz [ 1618.347491][T10245] usb 8-1: SerialNumber: syz [ 1618.422985][T10245] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1618.423011][T10245] r8152-cfgselector 8-1: config 0 descriptor?? [ 1618.529392][T23154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1618.721007][ T5866] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1618.813435][T10245] r8152-cfgselector 8-1: Needed 2 retries to read version [ 1618.813482][T10245] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1618.813923][T10245] r8152-cfgselector 8-1: bad CDC descriptors [ 1619.166984][T23161] picdev_read: 77 callbacks suppressed [ 1619.167007][T23161] kvm: pic: non byte read [ 1619.167070][T23161] kvm: pic: non byte read [ 1619.167132][T23161] kvm: pic: non byte read [ 1619.167190][T23161] kvm: pic: non byte read [ 1619.167251][T23161] kvm: pic: non byte read [ 1619.167309][T23161] kvm: pic: non byte read [ 1619.167365][T23161] kvm: pic: non byte read [ 1619.167424][T23161] kvm: pic: non byte read [ 1619.167482][T23161] kvm: pic: non byte read [ 1619.167564][T23161] kvm: pic: non byte read [ 1619.172153][T23161] kvm: pic: non byte write [ 1619.232224][T23161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.233073][T23161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.279806][ T5866] usb 5-1: USB disconnect, device number 77 [ 1620.979466][ T5807] r8152-cfgselector 8-1: USB disconnect, device number 85 [ 1621.195987][ T1233] usb 2-1: USB disconnect, device number 59 [ 1621.196172][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1621.443941][ T5807] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1621.605228][ T5807] usb 8-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.607219][ T5807] usb 8-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1621.607236][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.607247][ T5807] usb 8-1: Product: syz [ 1621.607255][ T5807] usb 8-1: Manufacturer: syz [ 1621.607262][ T5807] usb 8-1: SerialNumber: syz [ 1621.643091][ T5866] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1621.671839][ T5807] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1621.671876][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1621.701916][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1621.702607][ T5807] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1621.702648][ T5807] usb 8-1: media controller created [ 1621.759115][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1621.794934][ T5866] usb 7-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.797457][ T5866] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1621.797475][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.797485][ T5866] usb 7-1: Product: syz [ 1621.797493][ T5866] usb 7-1: Manufacturer: syz [ 1621.797501][ T5866] usb 7-1: SerialNumber: syz [ 1621.855905][ T5866] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1621.855946][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1621.917276][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1621.920032][ T5866] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1621.920069][ T5866] usb 7-1: media controller created [ 1621.996494][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1622.088910][ T5807] DVB: Unable to find symbol mt352_attach() [ 1622.088927][ T5807] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1622.089628][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1622.112987][ T5807] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1622.189864][ T5866] DVB: Unable to find symbol mt352_attach() [ 1622.189876][ T5866] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1622.190462][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1622.205339][ T5866] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1622.208641][ T5866] usb 7-1: USB disconnect, device number 109 [ 1622.212962][T10245] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1622.332270][ T5866] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1622.347015][T22448] udevd[22448]: setting mode of /dev/bus/usb/007/109 to 020664 failed: No such file or directory [ 1622.347121][T22448] udevd[22448]: setting owner of /dev/bus/usb/007/109 to uid=0, gid=0 failed: No such file or directory [ 1622.362882][T10245] usb 5-1: Using ep0 maxpacket: 16 [ 1622.368245][T10245] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1622.370563][T10245] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1622.370592][T10245] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1622.370611][T10245] usb 5-1: Product: syz [ 1622.370625][T10245] usb 5-1: Manufacturer: syz [ 1622.370720][T10245] usb 5-1: SerialNumber: syz [ 1622.431030][T10245] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1622.431098][T10245] r8152-cfgselector 5-1: config 0 descriptor?? [ 1622.664810][T10245] r8152-cfgselector 5-1: Needed 2 retries to read version [ 1622.664859][T10245] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1622.665332][T10245] r8152-cfgselector 5-1: bad CDC descriptors [ 1623.706593][T23199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3713'. [ 1624.073382][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1624.141895][ T7057] usb 8-1: USB disconnect, device number 86 [ 1624.236628][ T7057] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1624.468503][T23211] input: syz1 as /devices/virtual/input/input81 [ 1624.732650][T23220] netlink: 'syz.6.3718': attribute type 10 has an invalid length. [ 1624.739684][ T7057] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1624.892867][ T7057] usb 8-1: Using ep0 maxpacket: 32 [ 1624.936653][ T7057] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1624.936683][ T7057] usb 8-1: config 0 has no interface number 0 [ 1624.936730][ T7057] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1624.939666][ T7057] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1624.939695][ T7057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.939715][ T7057] usb 8-1: Product: syz [ 1624.939729][ T7057] usb 8-1: Manufacturer: syz [ 1624.939743][ T7057] usb 8-1: SerialNumber: syz [ 1624.997839][ T5866] r8152-cfgselector 5-1: USB disconnect, device number 78 [ 1625.006706][ T7057] usb 8-1: config 0 descriptor?? [ 1625.399508][T23220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1625.424797][ T7057] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1625.424848][ T7057] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1625.424865][ T7057] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1625.424928][ T7057] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1625.430008][ T7057] usb 8-1: USB disconnect, device number 87 [ 1626.894180][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3724'. [ 1628.892962][ T7057] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1629.111950][ T7057] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1629.111986][ T7057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.112001][ T7057] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.112012][ T7057] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1629.113512][ T7057] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1629.113530][ T7057] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1629.113541][ T7057] usb 9-1: Manufacturer: syz [ 1629.141477][ T7057] usb 9-1: config 0 descriptor?? [ 1630.103030][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 1632.444392][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3735'. [ 1632.884686][ T5866] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1632.936235][T23299] ptrace attach of "./syz-executor exec"[13897] was attempted by "./syz-executor exec"[23299] [ 1633.149469][ T5866] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1633.149500][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.149521][ T5866] usb 7-1: Product: syz [ 1633.149535][ T5866] usb 7-1: Manufacturer: syz [ 1633.149549][ T5866] usb 7-1: SerialNumber: syz [ 1633.198011][ T5866] usb 7-1: config 0 descriptor?? [ 1633.254372][ T5866] hub 7-1:0.0: bad descriptor, ignoring hub [ 1633.254408][ T5866] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1633.439681][ T5866] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1633.478533][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1633.480890][ T5866] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1633.481000][ T5866] usb 7-1: media controller created [ 1633.518290][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1633.707463][ T7057] usbhid 9-1:0.0: can't add hid device: -71 [ 1633.707579][ T7057] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1633.726851][ T7057] usb 9-1: USB disconnect, device number 83 [ 1633.997384][T23310] i2c i2c-1: Invalid block size returned: 239 [ 1634.005904][ T5866] DVB: Unable to find symbol dib7000p_attach() [ 1634.005921][ T5866] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1634.251746][T23316] futex_wake_op: syz.7.3744 tries to shift op by 35; fix this program [ 1634.339397][ T5866] rc_core: IR keymap rc-dib0700-rc5 not found [ 1634.339417][ T5866] Registered IR keymap rc-empty [ 1634.339587][ T5866] dvb-usb: could not initialize remote control. [ 1634.339592][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1634.395854][ T5866] usb 7-1: USB disconnect, device number 110 [ 1634.510356][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1634.953669][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3748'. [ 1635.099585][T23327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1636.802958][ T5866] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1636.954211][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 1636.954229][ T36] audit: type=1326 audit(1774792593.253:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954270][ T36] audit: type=1326 audit(1774792593.253:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954307][ T36] audit: type=1326 audit(1774792593.253:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954345][ T36] audit: type=1326 audit(1774792593.253:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954382][ T36] audit: type=1326 audit(1774792593.253:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954424][ T36] audit: type=1326 audit(1774792593.253:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954460][ T36] audit: type=1326 audit(1774792593.263:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954498][ T36] audit: type=1326 audit(1774792593.263:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954536][ T36] audit: type=1326 audit(1774792593.263:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1636.954572][ T36] audit: type=1326 audit(1774792593.263:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23341 comm="syz.6.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119f42c799 code=0x7ffc0000 [ 1637.092886][T10243] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1637.113032][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 1637.149155][ T5866] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1637.149183][ T5866] usb 8-1: config 0 has no interface number 0 [ 1637.149229][ T5866] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1637.235743][ T5866] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1637.235774][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.235795][ T5866] usb 8-1: Product: syz [ 1637.235810][ T5866] usb 8-1: Manufacturer: syz [ 1637.235824][ T5866] usb 8-1: SerialNumber: syz [ 1637.256325][T10243] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1637.259621][T10243] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1637.259652][T10243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.259671][T10243] usb 5-1: Product: syz [ 1637.259686][T10243] usb 5-1: Manufacturer: syz [ 1637.259701][T10243] usb 5-1: SerialNumber: syz [ 1637.369353][T10243] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1637.369404][T10243] dvb-usb: bulk message failed: -22 (3/0) [ 1637.390991][ T5866] usb 8-1: config 0 descriptor?? [ 1637.403926][T10243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1637.407046][T10243] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1637.407192][T10243] usb 5-1: media controller created [ 1637.449237][T23352] futex_wake_op: syz.8.3756 tries to shift op by 35; fix this program [ 1637.471498][T10243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1637.703348][ T5866] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1637.703416][ T5866] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1637.703434][ T5866] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1637.703526][ T5866] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1637.768517][ T5866] usb 8-1: USB disconnect, device number 88 [ 1637.820319][T10243] DVB: Unable to find symbol mt352_attach() [ 1637.820336][T10243] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1637.821156][T10243] dvb-usb: bulk message failed: -22 (3/0) [ 1637.824882][T23355] fuse: Unknown parameter '0x0000000000000003' [ 1637.859246][T10243] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1637.876822][T10243] usb 5-1: USB disconnect, device number 79 [ 1637.950965][T10243] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1637.966459][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1638.942960][ T1233] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1639.138922][ T1233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.138956][ T1233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.138971][ T1233] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1639.138996][ T1233] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1639.139009][ T1233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.147714][ T1233] usb 8-1: config 0 descriptor?? [ 1639.587353][ T1233] usbhid 8-1:0.0: can't add hid device: -71 [ 1639.587431][ T1233] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1639.590417][ T1233] usb 8-1: USB disconnect, device number 89 [ 1639.912239][T23385] fuse: Unknown parameter '0x0000000000000003' [ 1641.505124][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3770'. [ 1642.053568][ T5807] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1642.112882][ T5866] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1642.222780][ T5807] usb 8-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.225890][ T5807] usb 8-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1642.225921][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.225941][ T5807] usb 8-1: Product: syz [ 1642.225955][ T5807] usb 8-1: Manufacturer: syz [ 1642.225969][ T5807] usb 8-1: SerialNumber: syz [ 1642.274063][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 1642.274685][T10245] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1642.294800][ T5866] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1642.301279][ T5807] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1642.301435][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1642.302141][ T5866] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1642.302157][ T5866] usb 2-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1642.302168][ T5866] usb 2-1: Product: syz [ 1642.302176][ T5866] usb 2-1: Manufacturer: syz [ 1642.302184][ T5866] usb 2-1: SerialNumber: syz [ 1642.399725][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1642.400684][ T5866] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1642.400700][ T5866] r8152-cfgselector 2-1: config 0 descriptor?? [ 1642.424801][T10245] usb 5-1: Using ep0 maxpacket: 8 [ 1642.427493][T10245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.432048][T10245] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1642.432078][T10245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.432097][T10245] usb 5-1: Product: syz [ 1642.432111][T10245] usb 5-1: Manufacturer: syz [ 1642.432125][T10245] usb 5-1: SerialNumber: syz [ 1642.441099][T10245] usb 5-1: config 0 descriptor?? [ 1642.488334][ T5807] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1642.488373][ T5807] usb 8-1: media controller created [ 1642.520778][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1642.634700][T10245] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1642.635885][T10245] usb 5-1: selecting invalid altsetting 1 [ 1642.659953][ T5866] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1642.660010][ T5866] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1642.660411][ T5866] r8152-cfgselector 2-1: bad CDC descriptors [ 1642.865254][ T1233] r8152-cfgselector 2-1: USB disconnect, device number 60 [ 1643.148991][T10245] gspca_stk014: reg_r err -110 [ 1643.149093][T10245] stk014 5-1:0.0: probe with driver stk014 failed with error -110 [ 1643.261796][ T5807] DVB: Unable to find symbol mt352_attach() [ 1643.261812][ T5807] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1643.280030][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1643.292914][ T5807] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1643.295736][ T5807] usb 8-1: USB disconnect, device number 90 [ 1643.417395][ T5807] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1643.615268][T23424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1643.901448][T23433] fuse: Unknown parameter '0x0000000000000003' [ 1644.358478][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3781'. [ 1644.938856][T23442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1645.213329][T10245] usb 5-1: USB disconnect, device number 80 [ 1645.782985][ T5807] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1645.952889][ T5807] usb 7-1: Using ep0 maxpacket: 32 [ 1645.956524][ T5807] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.956581][ T5807] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1645.956609][ T5807] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1645.959216][ T5807] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1645.959234][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.959244][ T5807] usb 7-1: Product: syz [ 1645.959252][ T5807] usb 7-1: Manufacturer: syz [ 1645.959260][ T5807] usb 7-1: SerialNumber: syz [ 1646.054123][T23449] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1646.314960][ T5807] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1646.315016][ T5807] usb 7-1: MIDIStreaming interface descriptor not found [ 1646.401902][ T5807] usb 7-1: USB disconnect, device number 111 [ 1646.519416][T22446] udevd[22446]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1646.612931][ T1233] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1646.652960][T10245] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1646.762896][ T1233] usb 9-1: Using ep0 maxpacket: 16 [ 1646.794489][ T1233] usb 9-1: config index 0 descriptor too short (expected 51443, got 18) [ 1646.796888][ T1233] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1646.796922][ T1233] usb 9-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1646.796945][ T1233] usb 9-1: Product: syz [ 1646.796960][ T1233] usb 9-1: Manufacturer: syz [ 1646.796975][ T1233] usb 9-1: SerialNumber: syz [ 1646.802661][ T1233] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1646.802686][ T1233] r8152-cfgselector 9-1: config 0 descriptor?? [ 1646.852547][T10245] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.856777][T10245] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1646.856807][T10245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.856873][T10245] usb 2-1: Product: syz [ 1646.856888][T10245] usb 2-1: Manufacturer: syz [ 1646.856902][T10245] usb 2-1: SerialNumber: syz [ 1647.056879][ T1233] r8152-cfgselector 9-1: Needed 1 retries to read version [ 1647.056911][ T1233] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1647.057949][ T1233] r8152-cfgselector 9-1: bad CDC descriptors [ 1647.112994][ T1124] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1647.128324][T10245] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1647.128377][T10245] dvb-usb: bulk message failed: -22 (3/0) [ 1647.161457][T10245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1647.171683][T10245] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1647.171740][T10245] usb 2-1: media controller created [ 1647.217759][T10245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1647.467203][T10245] DVB: Unable to find symbol mt352_attach() [ 1647.467219][T10245] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1647.474880][T10245] dvb-usb: bulk message failed: -22 (3/0) [ 1647.536730][T10245] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1647.619820][T10245] usb 2-1: USB disconnect, device number 61 [ 1647.738314][T10245] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1648.006383][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'. [ 1649.340264][ T5807] r8152-cfgselector 9-1: USB disconnect, device number 85 [ 1649.689765][T23498] futex_wake_op: syz.4.3796 tries to shift op by 35; fix this program [ 1650.730331][T23517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.536441][T23529] fuse: Bad value for 'fd' [ 1652.714960][ T5807] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1652.772893][ T5866] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1652.865450][T23533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1652.881612][ T5807] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.884040][ T5807] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1652.884058][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.884069][ T5807] usb 5-1: Product: syz [ 1652.884077][ T5807] usb 5-1: Manufacturer: syz [ 1652.884085][ T5807] usb 5-1: SerialNumber: syz [ 1652.897085][ T5807] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1652.897117][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1652.965516][ T5866] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1652.965546][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.965567][ T5866] usb 2-1: Product: syz [ 1652.965581][ T5866] usb 2-1: Manufacturer: syz [ 1652.965596][ T5866] usb 2-1: SerialNumber: syz [ 1652.981909][ T5866] usb 2-1: config 0 descriptor?? [ 1652.985215][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1653.016488][ T5866] hub 2-1:0.0: bad descriptor, ignoring hub [ 1653.016510][ T5866] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1653.036210][ T5807] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1653.036262][ T5807] usb 5-1: media controller created [ 1653.119345][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1653.189406][ T5866] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1653.202879][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1653.203543][ T5866] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1653.203577][ T5866] usb 2-1: media controller created [ 1653.246377][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1653.418203][ T5866] DVB: Unable to find symbol dib7000p_attach() [ 1653.418219][ T5866] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1653.504727][ T5807] DVB: Unable to find symbol mt352_attach() [ 1653.504745][ T5807] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1653.505610][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1653.532994][ T5866] rc_core: IR keymap rc-dib0700-rc5 not found [ 1653.533016][ T5866] Registered IR keymap rc-empty [ 1653.533193][ T5866] dvb-usb: could not initialize remote control. [ 1653.533199][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1653.568031][ T5807] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1653.603843][ T5807] usb 5-1: USB disconnect, device number 82 [ 1653.713417][ T5807] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1653.784120][ T5866] usb 2-1: USB disconnect, device number 62 [ 1653.931115][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1654.278801][T23549] futex_wake_op: syz.8.3809 tries to shift op by 35; fix this program [ 1656.011197][T10243] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1656.074999][ T1438] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1656.231994][T10243] usb 8-1: Using ep0 maxpacket: 8 [ 1656.254844][T10243] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.257408][T10243] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1656.257439][T10243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.257459][T10243] usb 8-1: Product: syz [ 1656.257470][T10243] usb 8-1: Manufacturer: syz [ 1656.257478][T10243] usb 8-1: SerialNumber: syz [ 1656.266317][T10243] usb 8-1: config 0 descriptor?? [ 1656.270072][T10243] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1656.270138][T10243] usb 8-1: selecting invalid altsetting 1 [ 1656.783152][T10243] gspca_stk014: reg_r err -110 [ 1656.783214][T10243] stk014 8-1:0.0: probe with driver stk014 failed with error -110 [ 1657.248813][ T1233] usb 8-1: USB disconnect, device number 91 [ 1657.488353][T23584] input: syz1 as /devices/virtual/input/input84 [ 1659.359336][T23599] fuse: Bad value for 'fd' [ 1659.453107][ T5866] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1659.603248][ T5807] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1659.644704][ T5866] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1659.644734][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.644748][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.644760][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1659.647728][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1659.647746][ T5866] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1659.647757][ T5866] usb 5-1: Manufacturer: syz [ 1659.650629][ T5866] usb 5-1: config 0 descriptor?? [ 1659.769176][ T5807] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1659.769196][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.769207][ T5807] usb 2-1: Product: syz [ 1659.769216][ T5807] usb 2-1: Manufacturer: syz [ 1659.769223][ T5807] usb 2-1: SerialNumber: syz [ 1659.776091][ T5807] usb 2-1: config 0 descriptor?? [ 1659.781306][ T5807] hub 2-1:0.0: bad descriptor, ignoring hub [ 1659.781391][ T5807] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1659.986437][ T5807] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1660.042199][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1660.044814][ T5807] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1660.044934][ T5807] usb 2-1: media controller created [ 1660.140799][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1660.351432][ T5807] DVB: Unable to find symbol dib7000p_attach() [ 1660.351443][ T5807] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1660.542354][T23611] i2c i2c-1: Invalid block size returned: 239 [ 1660.713306][ T5807] rc_core: IR keymap rc-dib0700-rc5 not found [ 1660.713326][ T5807] Registered IR keymap rc-empty [ 1660.713762][ T5807] dvb-usb: could not initialize remote control. [ 1660.713772][ T5807] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1660.828440][ T5807] usb 2-1: USB disconnect, device number 63 [ 1661.180313][ T5807] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1663.042949][T10243] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1663.237930][T10243] usb 9-1: Using ep0 maxpacket: 32 [ 1663.241423][T10243] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1663.241451][T10243] usb 9-1: config 0 has no interface number 0 [ 1663.265897][T10243] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1663.265955][T10243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.265975][T10243] usb 9-1: Product: syz [ 1663.265989][T10243] usb 9-1: Manufacturer: syz [ 1663.266003][T10243] usb 9-1: SerialNumber: syz [ 1663.271124][T10243] usb 9-1: config 0 descriptor?? [ 1663.288261][T10243] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1663.373245][ T5807] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1663.413160][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1663.509548][T10243] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1663.525514][T10243] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1663.553416][ T5807] usb 7-1: Using ep0 maxpacket: 8 [ 1663.557581][ T5807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.560966][ T5807] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1663.560984][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.560995][ T5807] usb 7-1: Product: syz [ 1663.561003][ T5807] usb 7-1: Manufacturer: syz [ 1663.561011][ T5807] usb 7-1: SerialNumber: syz [ 1663.585478][ T10] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.589230][ T10] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1663.589312][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.589332][ T10] usb 2-1: Product: syz [ 1663.589347][ T10] usb 2-1: Manufacturer: syz [ 1663.589361][ T10] usb 2-1: SerialNumber: syz [ 1663.697843][ T5807] usb 7-1: config 0 descriptor?? [ 1663.721693][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1663.722868][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1663.799338][ T5807] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1663.800800][ T5807] usb 7-1: selecting invalid altsetting 1 [ 1664.089425][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1664.119725][ T10] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1664.120949][ T10] usb 2-1: media controller created [ 1664.254360][T23639] input: syz1 as /devices/virtual/input/input86 [ 1664.316005][ T5807] gspca_stk014: reg_r err -110 [ 1664.316064][ T5807] stk014 7-1:0.0: probe with driver stk014 failed with error -110 [ 1664.344010][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1665.193376][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1665.193870][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1665.193983][ T5866] usbhid 5-1:0.0: can't add hid device: -32 [ 1665.194099][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1665.650972][ T5807] usb 7-1: USB disconnect, device number 112 [ 1665.661797][ T5866] usb 5-1: USB disconnect, device number 83 [ 1665.993733][ T10] DVB: Unable to find symbol mt352_attach() [ 1665.993745][ T10] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1665.994432][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1666.022880][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1666.027410][ T10] usb 2-1: USB disconnect, device number 64 [ 1666.154993][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1666.534898][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1666.574969][ T1233] usb 9-1: USB disconnect, device number 86 [ 1666.689048][ T1233] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1666.743827][ T1233] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1666.744535][ T1233] quatech2 9-1:0.51: device disconnected [ 1667.682892][ T5866] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1667.955092][T23684] netlink: 'syz.7.3835': attribute type 10 has an invalid length. [ 1668.097906][ T5866] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1668.097936][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.097950][ T5866] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.097962][ T5866] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1668.098999][ T5866] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1668.099015][ T5866] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1668.099026][ T5866] usb 9-1: Manufacturer: syz [ 1668.102218][ T5866] usb 9-1: config 0 descriptor?? [ 1668.877914][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.877994][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.003162][T23689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1672.711530][ T5866] usbhid 9-1:0.0: can't add hid device: -71 [ 1672.711608][ T5866] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1672.715602][ T5866] usb 9-1: USB disconnect, device number 87 [ 1673.020578][T23716] futex_wake_op: syz.8.3841 tries to shift op by 35; fix this program [ 1674.122921][ T10] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1674.302031][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1674.302051][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1674.302064][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1674.302087][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1674.302100][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.369439][ T10] usb 7-1: config 0 descriptor?? [ 1674.830936][ T10] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1676.824685][ T1233] usb 7-1: USB disconnect, device number 113 [ 1677.665891][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3857'. [ 1677.842956][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1678.042861][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1678.045511][ T10] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 1678.048088][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1678.048119][ T10] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 1678.048140][ T10] usb 5-1: Product: syz [ 1678.048154][ T10] usb 5-1: Manufacturer: syz [ 1678.048167][ T10] usb 5-1: SerialNumber: syz [ 1678.054344][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1678.054369][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 1678.283863][ T10] r8152-cfgselector 5-1: Needed 1 retries to read version [ 1678.283916][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1678.284373][ T10] r8152-cfgselector 5-1: bad CDC descriptors [ 1678.467351][T23779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3860'. [ 1678.545123][ T5807] r8152-cfgselector 5-1: USB disconnect, device number 84 [ 1679.113096][ T1182] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1679.212073][T23784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1679.296741][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.835714][T23819] input: syz1 as /devices/virtual/input/input88 [ 1683.630494][T23824] futex_wake_op: syz.7.3868 tries to shift op by 35; fix this program [ 1685.408827][T23846] ptrace attach of "./syz-executor exec"[22000] was attempted by "./syz-executor exec"[23846] [ 1686.156870][T23848] fuse: Bad value for 'fd' [ 1686.393229][T10245] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1686.548365][T10245] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1686.548396][T10245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.548413][T10245] usb 8-1: Product: syz [ 1686.548421][T10245] usb 8-1: Manufacturer: syz [ 1686.548428][T10245] usb 8-1: SerialNumber: syz [ 1686.551970][T10245] usb 8-1: config 0 descriptor?? [ 1686.597150][T10245] hub 8-1:0.0: bad descriptor, ignoring hub [ 1686.597187][T10245] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1686.778744][T10245] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1686.791561][T10245] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1686.794796][T10245] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1686.794851][T10245] usb 8-1: media controller created [ 1686.827780][T10245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1686.934252][T10245] DVB: Unable to find symbol dib7000p_attach() [ 1686.934271][T10245] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1687.073901][T10245] rc_core: IR keymap rc-dib0700-rc5 not found [ 1687.073916][T10245] Registered IR keymap rc-empty [ 1687.074089][T10245] dvb-usb: could not initialize remote control. [ 1687.074094][T10245] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1687.432928][ T1438] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1688.539219][T23839] IPVS: Error connecting to the multicast addr [ 1692.463289][ T10] usb 8-1: USB disconnect, device number 92 [ 1692.600467][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1692.922988][ T10] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1692.997078][ T5866] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1693.103710][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.103743][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1693.103787][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1693.103811][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.114879][ T10] usb 8-1: config 0 descriptor?? [ 1693.133831][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1693.166676][ T5866] usb 9-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.171744][ T5866] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1693.171763][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.171774][ T5866] usb 9-1: Product: syz [ 1693.171782][ T5866] usb 9-1: Manufacturer: syz [ 1693.171789][ T5866] usb 9-1: SerialNumber: syz [ 1693.188664][ T5866] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1693.188716][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1693.219885][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1693.229336][ T5866] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 1693.229375][ T5866] usb 9-1: media controller created [ 1693.279394][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1693.665244][ T5866] DVB: Unable to find symbol mt352_attach() [ 1693.665255][ T5866] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 1693.665850][ T5866] dvb-usb: bulk message failed: -22 (3/0) [ 1693.692851][ T5866] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 1693.726698][ T5866] usb 9-1: USB disconnect, device number 88 [ 1693.821039][ T5866] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 1695.514920][T10245] usb 8-1: USB disconnect, device number 93 [ 1695.833448][ T5866] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1696.003073][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 1696.004939][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1696.004988][ T5866] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1696.005012][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.079357][ T5866] usb 7-1: config 0 descriptor?? [ 1696.602026][ T5866] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1696.786939][T23914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.787784][T23914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.794513][ T1233] usb 7-1: USB disconnect, device number 114 [ 1700.346746][T23969] input: syz1 as /devices/virtual/input/input90 [ 1700.903638][T23980] Can't find ip_set type has [ 1701.055022][ T5807] kernel read not supported for file /input/mouse0 (pid: 5807 comm: kworker/0:3) [ 1701.269066][T23993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3900'. [ 1701.439246][T23993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1702.722919][ T10] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1702.884986][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1702.885025][ T10] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1702.885066][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1702.885088][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.890775][T24002] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1702.917945][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1702.991043][T14019] wlan0: Trigger new scan to find an IBSS to join [ 1703.413120][ T10] usb 8-1: USB disconnect, device number 94 [ 1705.123023][T24028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1705.427078][T24028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1706.533136][ T5866] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1706.702924][ T5866] usb 9-1: Using ep0 maxpacket: 32 [ 1706.706165][ T5866] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1706.706192][ T5866] usb 9-1: config 0 has no interface number 0 [ 1706.706236][ T5866] usb 9-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 1706.706256][ T5866] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1706.711683][ T5866] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1706.711704][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.711715][ T5866] usb 9-1: Product: syz [ 1706.711722][ T5866] usb 9-1: Manufacturer: syz [ 1706.711730][ T5866] usb 9-1: SerialNumber: syz [ 1706.715894][ T5866] usb 9-1: config 0 descriptor?? [ 1706.833645][ T5866] f81534 9-1:0.12: required endpoints missing [ 1706.964046][T24036] futex_wake_op: syz.8.3910 tries to shift op by 35; fix this program [ 1706.964242][ T57] wlan0: Trigger new scan to find an IBSS to join [ 1707.073097][ T5866] usb 9-1: USB disconnect, device number 89 [ 1707.932937][ T1233] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1708.462972][ T1233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1708.463002][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.463017][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.463028][ T1233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1708.466288][ T1233] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1708.466306][ T1233] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1708.466318][ T1233] usb 5-1: Manufacturer: syz [ 1708.469155][ T1233] usb 5-1: config 0 descriptor?? [ 1708.598150][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.480371][T24072] input: syz1 as /devices/virtual/input/input92 [ 1710.803922][T24072] input: failed to attach handler evdev to device input92, error: -4 [ 1711.122955][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1713.993147][ T1233] usbhid 5-1:0.0: can't add hid device: -110 [ 1713.993224][ T1233] usbhid 5-1:0.0: probe with driver usbhid failed with error -110 [ 1714.109785][ T10] usb 5-1: USB disconnect, device number 85 [ 1715.645484][T24096] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1716.324464][T24109] ptrace attach of "./syz-executor exec"[16943] was attempted by "./syz-executor exec"[24109] [ 1716.332866][T10245] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1716.505647][T10245] usb 9-1: Using ep0 maxpacket: 32 [ 1716.520200][T10245] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1716.520227][T10245] usb 9-1: config 0 has no interface number 0 [ 1716.522664][T10245] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1716.522682][T10245] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.522693][T10245] usb 9-1: Product: syz [ 1716.522700][T10245] usb 9-1: Manufacturer: syz [ 1716.599025][T10245] usb 9-1: SerialNumber: syz [ 1716.602419][T10245] usb 9-1: config 0 descriptor?? [ 1716.606113][T10245] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1716.606131][T10245] usb 9-1: selecting invalid altsetting 1 [ 1716.606141][T10245] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1716.608902][T10245] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1716.609306][T10245] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1716.609337][T10245] usb 9-1: media controller created [ 1716.690243][T10245] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1717.765369][T10245] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1717.766451][T10245] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1717.789639][T24105] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1717.978748][T24082] IPVS: Error connecting to the multicast addr [ 1718.056943][T10245] usb 9-1: USB disconnect, device number 90 [ 1718.228039][T24120] fuse: Bad value for 'fd' [ 1718.532848][ T5866] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1718.724632][ T5866] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1718.724663][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.724682][ T5866] usb 8-1: Product: syz [ 1718.724695][ T5866] usb 8-1: Manufacturer: syz [ 1718.724708][ T5866] usb 8-1: SerialNumber: syz [ 1718.728929][ T5866] usb 8-1: config 0 descriptor?? [ 1718.738507][ T5866] hub 8-1:0.0: bad descriptor, ignoring hub [ 1718.738545][ T5866] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1719.069937][T24133] syz2: rxe_newlink: already configured on ipvlan0 [ 1719.169875][ T5866] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1719.190796][ T5866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1719.205909][ T5866] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1719.205947][ T5866] usb 8-1: media controller created [ 1719.466839][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1719.474178][ T57] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1719.623835][T24138] i2c i2c-1: Invalid block size returned: 239 [ 1719.755445][ T10] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1719.913299][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1719.913348][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.913464][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.913479][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1719.996877][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1719.996909][ T10] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1719.996930][ T10] usb 7-1: Manufacturer: syz [ 1720.018112][ T10] usb 7-1: config 0 descriptor?? [ 1720.035098][ T5866] DVB: Unable to find symbol dib7000p_attach() [ 1720.035115][ T5866] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1720.143248][ T5866] rc_core: IR keymap rc-dib0700-rc5 not found [ 1720.143271][ T5866] Registered IR keymap rc-empty [ 1720.143720][ T5866] dvb-usb: could not initialize remote control. [ 1720.143731][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1721.138492][ T5866] usb 8-1: USB disconnect, device number 95 [ 1721.319783][ T5866] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1721.335876][T23981] udevd[23981]: setting owner of /dev/bus/usb/008/095 to uid=0, gid=0 failed: No such file or directory [ 1722.393272][ T1233] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1722.542924][ T1233] usb 2-1: Using ep0 maxpacket: 32 [ 1722.550482][ T1233] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1722.550509][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.550521][ T1233] usb 2-1: Product: syz [ 1722.550528][ T1233] usb 2-1: Manufacturer: syz [ 1722.550536][ T1233] usb 2-1: SerialNumber: syz [ 1722.593144][ T1233] usb 2-1: config 0 descriptor?? [ 1722.765007][T24159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1723.013991][ T1233] airspy 2-1:0.0: Board ID: 00 [ 1723.014007][ T1233] airspy 2-1:0.0: Firmware version: [ 1723.632889][ T7057] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1723.640725][ T1233] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 1723.668916][ T1233] airspy 2-1:0.0: Registered as swradio24 [ 1723.668937][ T1233] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1723.696935][ T1233] usb 2-1: USB disconnect, device number 65 [ 1723.782940][ T7057] usb 9-1: Using ep0 maxpacket: 32 [ 1723.785515][ T7057] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1723.785541][ T7057] usb 9-1: config 0 has no interface number 0 [ 1723.788518][ T7057] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1723.788546][ T7057] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.788566][ T7057] usb 9-1: Product: syz [ 1723.788580][ T7057] usb 9-1: Manufacturer: syz [ 1723.788594][ T7057] usb 9-1: SerialNumber: syz [ 1723.846406][ T7057] usb 9-1: config 0 descriptor?? [ 1723.876279][ T7057] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1723.876306][ T7057] usb 9-1: selecting invalid altsetting 1 [ 1723.876323][ T7057] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1723.918219][ T7057] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1723.918574][ T7057] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1723.918780][ T7057] usb 9-1: media controller created [ 1723.985760][ T7057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1724.292980][ T1233] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1724.452937][ T1233] usb 8-1: Using ep0 maxpacket: 16 [ 1724.455529][ T1233] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.455563][ T1233] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1724.455660][ T1233] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1724.455680][ T1233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.538181][ T1233] usb 8-1: config 0 descriptor?? [ 1725.116505][ T7057] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1725.116594][ T7057] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1725.144220][T24165] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1725.171009][ T1233] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1725.318404][T24177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.319336][T24177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.468767][ T1233] usb 8-1: USB disconnect, device number 96 [ 1725.622960][ T7057] usb 9-1: USB disconnect, device number 91 [ 1726.082939][T10245] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1726.153210][ T10] usbhid 7-1:0.0: can't add hid device: -110 [ 1726.153370][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -110 [ 1726.193496][ T1233] usb 7-1: USB disconnect, device number 115 [ 1726.242881][T10245] usb 2-1: Using ep0 maxpacket: 8 [ 1726.247682][T10245] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.263505][T10245] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1726.263536][T10245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.263556][T10245] usb 2-1: Product: syz [ 1726.263570][T10245] usb 2-1: Manufacturer: syz [ 1726.263584][T10245] usb 2-1: SerialNumber: syz [ 1726.321460][T10245] usb 2-1: config 0 descriptor?? [ 1726.371067][T10245] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1726.371168][T10245] usb 2-1: selecting invalid altsetting 1 [ 1726.877988][T10245] gspca_stk014: reg_r err -110 [ 1726.878084][T10245] stk014 2-1:0.0: probe with driver stk014 failed with error -110 [ 1727.852849][ T10] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1728.617972][ T10] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1728.618001][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.618016][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.618027][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1728.655570][T10243] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1728.666889][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1728.666920][ T10] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1728.666942][ T10] usb 8-1: Manufacturer: syz [ 1728.719404][ T10] usb 8-1: config 0 descriptor?? [ 1728.829884][T10243] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1728.829913][T10243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.830148][T10243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.830173][T10243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1728.834134][T10243] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1728.834159][T10243] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1728.834213][T10243] usb 5-1: Manufacturer: syz [ 1728.850855][T10243] usb 5-1: config 0 descriptor?? [ 1728.999819][ T5807] usb 2-1: USB disconnect, device number 66 [ 1729.721902][ T1233] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1729.882810][ T1233] usb 9-1: Using ep0 maxpacket: 32 [ 1729.885776][ T1233] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1729.885802][ T1233] usb 9-1: config 0 has no interface number 0 [ 1729.889715][ T1233] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1729.889868][ T1233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.889889][ T1233] usb 9-1: Product: syz [ 1729.890028][ T1233] usb 9-1: Manufacturer: syz [ 1729.890042][ T1233] usb 9-1: SerialNumber: syz [ 1729.983687][ T1233] usb 9-1: config 0 descriptor?? [ 1730.001903][ T1233] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1730.001932][ T1233] usb 9-1: selecting invalid altsetting 1 [ 1730.001949][ T1233] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1730.032667][ T1233] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1730.043981][ T1233] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1730.044066][ T1233] usb 9-1: media controller created [ 1730.072915][ T1233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1730.501522][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.502020][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.194822][ T1233] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1731.195004][ T1233] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1731.213283][T24230] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1731.851682][ T1233] usb 9-1: USB disconnect, device number 92 [ 1731.869967][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1731.870080][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1731.897824][ T10] usb 8-1: USB disconnect, device number 97 [ 1732.546600][T22002] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1732.546640][T22002] CPU: 0 UID: 0 PID: 22002 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1732.546656][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.546665][T22002] Workqueue[ 1732.546665][T22002] Workqueue: hci3 hci_rx_work [ 1732.546780][T22002] Call Trace: [ 1732.546786][T22002] [ 1732.546794][T22002] dump_stack_lvl+0xe8/0x150 [ 1732.546825][T22002] sysfs_create_dir_ns+0x271/0x2a0 [ 1732.546877][T22002] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1732.546925][T22002] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1732.546941][T22002] ? rt_spin_unlock+0x160/0x200 [ 1732.546957][T22002] kobject_add_internal+0x631/0xd10 [ 1732.547006][T22002] kobject_add+0x163/0x240 [ 1732.547023][T22002] ? __pfx_kobject_add+0x10/0x10 [ 1732.547039][T22002] ? get_device_parent+0x370/0x3a0 [ 1732.547090][T22002] device_add+0x408/0xb80 [ 1732.547106][T22002] hci_conn_add_sysfs+0xd5/0x210 [ 1732.547167][T22002] le_conn_complete_evt+0xf1d/0x1430 [ 1732.547220][T22002] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1732.547234][T22002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.547247][T22002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.547260][T22002] ? skb_pull_data+0xfb/0x200 [ 1732.547323][T22002] hci_le_conn_complete_evt+0x187/0x470 [ 1732.547342][T22002] hci_event_packet+0x7af/0x12c0 [ 1732.547383][T22002] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1732.547396][T22002] ? __pfx_hci_event_packet+0x10/0x10 [ 1732.547413][T22002] ? rt_spin_unlock+0x14f/0x200 [ 1732.547432][T22002] ? hci_send_to_monitor+0xe2/0x590 [ 1732.547448][T22002] hci_rx_work+0x3ee/0x1030 [ 1732.547463][T22002] ? process_scheduled_works+0xa8d/0x18c0 [ 1732.547488][T22002] process_scheduled_works+0xb6e/0x18c0 [ 1732.547519][T22002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1732.547537][T22002] ? assign_work+0x3d5/0x5e0 [ 1732.547554][T22002] worker_thread+0xa53/0xfc0 [ 1732.547584][T22002] kthread+0x388/0x470 [ 1732.547597][T22002] ? __pfx_worker_thread+0x10/0x10 [ 1732.547610][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.547622][T22002] ret_from_fork+0x51e/0xb90 [ 1732.547640][T22002] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.547654][T22002] ? __switch_to+0xc7d/0x1450 [ 1732.547675][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.547687][T22002] ret_from_fork_asm+0x1a/0x30 [ 1732.547707][T22002] [ 1732.547785][T22002] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1732.547817][T22002] Bluetooth: hci3: failed to register connection device [ 1732.559382][T24250] netlink: 'syz.8.3962': attribute type 10 has an invalid length. [ 1732.619110][T22002] ================================================================== [ 1732.619133][T22002] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.619248][T22002] Read of size 8 at addr ffff888097cd07b0 by task kworker/u9:1/22002 [ 1732.619265][T22002] [ 1732.619279][T22002] CPU: 1 UID: 0 PID: 22002 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1732.619303][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.619318][T22002] Workqueue: hci3 hci_rx_work [ 1732.619340][T22002] Call Trace: [ 1732.619348][T22002] [ 1732.619358][T22002] dump_stack_lvl+0xe8/0x150 [ 1732.619389][T22002] print_report+0xba/0x230 [ 1732.619431][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.619460][T22002] kasan_report+0x117/0x150 [ 1732.619516][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.619549][T22002] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.619580][T22002] l2cap_connect_cfm+0x368/0x1560 [ 1732.619611][T22002] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1732.619636][T22002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.619655][T22002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.619675][T22002] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1732.619695][T22002] ? mutex_lock_nested+0x152/0x1d0 [ 1732.619720][T22002] ? hci_connect_cfm+0x2c/0x140 [ 1732.619741][T22002] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1732.619767][T22002] hci_connect_cfm+0x95/0x140 [ 1732.619788][T22002] le_conn_complete_evt+0xf65/0x1430 [ 1732.619816][T22002] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1732.619841][T22002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.619861][T22002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.619881][T22002] ? skb_pull_data+0xfb/0x200 [ 1732.619907][T22002] hci_le_conn_complete_evt+0x187/0x470 [ 1732.619933][T22002] hci_event_packet+0x7af/0x12c0 [ 1732.619966][T22002] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1732.619987][T22002] ? __pfx_hci_event_packet+0x10/0x10 [ 1732.620015][T22002] ? rt_spin_unlock+0x14f/0x200 [ 1732.620052][T22002] ? hci_send_to_monitor+0xe2/0x590 [ 1732.620079][T22002] hci_rx_work+0x3ee/0x1030 [ 1732.620101][T22002] ? process_scheduled_works+0xa8d/0x18c0 [ 1732.620134][T22002] process_scheduled_works+0xb6e/0x18c0 [ 1732.620174][T22002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1732.620204][T22002] ? assign_work+0x3d5/0x5e0 [ 1732.620232][T22002] worker_thread+0xa53/0xfc0 [ 1732.620270][T22002] kthread+0x388/0x470 [ 1732.620289][T22002] ? __pfx_worker_thread+0x10/0x10 [ 1732.620315][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.620335][T22002] ret_from_fork+0x51e/0xb90 [ 1732.620363][T22002] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.620389][T22002] ? __switch_to+0xc7d/0x1450 [ 1732.620423][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.620445][T22002] ret_from_fork_asm+0x1a/0x30 [ 1732.620471][T22002] [ 1732.620479][T22002] [ 1732.620485][T22002] Allocated by task 22002: [ 1732.620495][T22002] kasan_save_track+0x3e/0x80 [ 1732.620559][T22002] __kasan_kmalloc+0x93/0xb0 [ 1732.620585][T22002] __kmalloc_noprof+0x3e7/0x7b0 [ 1732.620628][T22002] sk_prot_alloc+0xe7/0x210 [ 1732.620681][T22002] sk_alloc+0x3a/0x390 [ 1732.620697][T22002] bt_sock_alloc+0x3b/0x310 [ 1732.620716][T22002] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1732.620743][T22002] l2cap_connect_cfm+0x368/0x1560 [ 1732.620765][T22002] hci_connect_cfm+0x95/0x140 [ 1732.620784][T22002] le_conn_complete_evt+0xf65/0x1430 [ 1732.620805][T22002] hci_le_conn_complete_evt+0x187/0x470 [ 1732.620825][T22002] hci_event_packet+0x7af/0x12c0 [ 1732.620850][T22002] hci_rx_work+0x3ee/0x1030 [ 1732.620866][T22002] process_scheduled_works+0xb6e/0x18c0 [ 1732.620889][T22002] worker_thread+0xa53/0xfc0 [ 1732.620913][T22002] kthread+0x388/0x470 [ 1732.620929][T22002] ret_from_fork+0x51e/0xb90 [ 1732.620952][T22002] ret_from_fork_asm+0x1a/0x30 [ 1732.620968][T22002] [ 1732.620973][T22002] Freed by task 24253: [ 1732.620983][T22002] kasan_save_track+0x3e/0x80 [ 1732.621008][T22002] kasan_save_free_info+0x46/0x50 [ 1732.621035][T22002] __kasan_slab_free+0x5c/0x80 [ 1732.621063][T22002] kfree+0x1c1/0x6c0 [ 1732.621112][T22002] __sk_destruct+0x626/0x880 [ 1732.621130][T22002] l2cap_sock_cleanup_listen+0xe0/0x440 [ 1732.621155][T22002] l2cap_sock_release+0x6e/0x270 [ 1732.621178][T22002] sock_close+0xc3/0x240 [ 1732.621227][T22002] __fput+0x461/0xa90 [ 1732.621281][T22002] task_work_run+0x1d9/0x270 [ 1732.621301][T22002] exit_to_user_mode_loop+0xed/0x480 [ 1732.621337][T22002] do_syscall_64+0x32d/0xf80 [ 1732.621356][T22002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.621393][T22002] [ 1732.621399][T22002] The buggy address belongs to the object at ffff888097cd0000 [ 1732.621399][T22002] which belongs to the cache kmalloc-2k of size 2048 [ 1732.621417][T22002] The buggy address is located 1968 bytes inside of [ 1732.621417][T22002] freed 2048-byte region [ffff888097cd0000, ffff888097cd0800) [ 1732.621438][T22002] [ 1732.621444][T22002] The buggy address belongs to the physical page: [ 1732.621461][T22002] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888097cd1000 pfn:0x97cd0 [ 1732.621483][T22002] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1732.621501][T22002] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1732.621524][T22002] page_type: f5(slab) [ 1732.621542][T22002] raw: 0080000000000240 ffff88813fe1a000 ffff88813fe18c88 ffff88813fe18c88 [ 1732.621562][T22002] raw: ffff888097cd1000 0000000800080001 00000000f5000000 0000000000000000 [ 1732.621580][T22002] head: 0080000000000240 ffff88813fe1a000 ffff88813fe18c88 ffff88813fe18c88 [ 1732.621598][T22002] head: ffff888097cd1000 0000000800080001 00000000f5000000 0000000000000000 [ 1732.621618][T22002] head: 0080000000000003 ffffea00025f3401 00000000ffffffff 00000000ffffffff [ 1732.621634][T22002] head: 000000000000033d 0000000000000000 00000000ffffffff 0000000000000008 [ 1732.621646][T22002] page dumped because: kasan: bad access detected [ 1732.621663][T22002] page_owner tracks the page as allocated [ 1732.621670][T22002] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22002, tgid 22002 (kworker/u9:1), ts 1732600176811, free_ts 1732122410339 [ 1732.621707][T22002] post_alloc_hook+0x231/0x280 [ 1732.621766][T22002] get_page_from_freelist+0x28bb/0x2950 [ 1732.621786][T22002] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1732.621805][T22002] allocate_slab+0x77/0x660 [ 1732.621825][T22002] refill_objects+0x334/0x3c0 [ 1732.621845][T22002] __pcs_replace_empty_main+0x35c/0x710 [ 1732.621868][T22002] __kmalloc_noprof+0x530/0x7b0 [ 1732.621883][T22002] sk_prot_alloc+0xe7/0x210 [ 1732.621899][T22002] sk_alloc+0x3a/0x390 [ 1732.621914][T22002] bt_sock_alloc+0x3b/0x310 [ 1732.621932][T22002] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 1732.621958][T22002] l2cap_connect_cfm+0x368/0x1560 [ 1732.621980][T22002] hci_connect_cfm+0x95/0x140 [ 1732.621998][T22002] le_conn_complete_evt+0xf65/0x1430 [ 1732.622020][T22002] hci_le_conn_complete_evt+0x187/0x470 [ 1732.622046][T22002] hci_event_packet+0x7af/0x12c0 [ 1732.622073][T22002] page last free pid 5172 tgid 5172 stack trace: [ 1732.622085][T22002] __free_frozen_pages+0xfe3/0x1170 [ 1732.622102][T22002] __slab_free+0x24f/0x2a0 [ 1732.622118][T22002] qlist_free_all+0x97/0x100 [ 1732.622142][T22002] kasan_quarantine_reduce+0x148/0x160 [ 1732.622164][T22002] __kasan_slab_alloc+0x22/0x80 [ 1732.622187][T22002] kmem_cache_alloc_noprof+0x33b/0x680 [ 1732.622213][T22002] do_getname+0x2e/0x250 [ 1732.622290][T22002] do_sys_openat2+0xca/0x200 [ 1732.622312][T22002] __x64_sys_openat+0x138/0x170 [ 1732.622333][T22002] do_syscall_64+0x14d/0xf80 [ 1732.622352][T22002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.622370][T22002] [ 1732.622375][T22002] Memory state around the buggy address: [ 1732.622386][T22002] ffff888097cd0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1732.622401][T22002] ffff888097cd0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1732.622416][T22002] >ffff888097cd0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1732.622426][T22002] ^ [ 1732.622437][T22002] ffff888097cd0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1732.622450][T22002] ffff888097cd0880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1732.622461][T22002] ================================================================== [ 1732.622665][T22002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1732.622684][T22002] CPU: 1 UID: 0 PID: 22002 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1732.622711][T22002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1732.622725][T22002] Workqueue: hci3 hci_rx_work [ 1732.622746][T22002] Call Trace: [ 1732.622755][T22002] [ 1732.622765][T22002] vpanic+0x56c/0xa60 [ 1732.622797][T22002] ? __pfx_vpanic+0x10/0x10 [ 1732.622825][T22002] ? __pfx___schedule+0x10/0x10 [ 1732.622859][T22002] panic+0xc5/0xd0 [ 1732.622886][T22002] ? __pfx_panic+0x10/0x10 [ 1732.622915][T22002] ? preempt_schedule_common+0x82/0xd0 [ 1732.622935][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.622963][T22002] check_panic_on_warn+0x89/0xb0 [ 1732.622986][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.623015][T22002] end_report+0x73/0x180 [ 1732.623041][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.623071][T22002] kasan_report+0x128/0x150 [ 1732.623095][T22002] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.623133][T22002] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 1732.623172][T22002] l2cap_connect_cfm+0x368/0x1560 [ 1732.623211][T22002] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1732.623244][T22002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.623265][T22002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.623285][T22002] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1732.623305][T22002] ? mutex_lock_nested+0x152/0x1d0 [ 1732.623329][T22002] ? hci_connect_cfm+0x2c/0x140 [ 1732.623350][T22002] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1732.623374][T22002] hci_connect_cfm+0x95/0x140 [ 1732.623397][T22002] le_conn_complete_evt+0xf65/0x1430 [ 1732.623424][T22002] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1732.623447][T22002] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1732.623467][T22002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1732.623487][T22002] ? skb_pull_data+0xfb/0x200 [ 1732.623512][T22002] hci_le_conn_complete_evt+0x187/0x470 [ 1732.623537][T22002] hci_event_packet+0x7af/0x12c0 [ 1732.623569][T22002] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1732.623591][T22002] ? __pfx_hci_event_packet+0x10/0x10 [ 1732.623618][T22002] ? rt_spin_unlock+0x14f/0x200 [ 1732.623648][T22002] ? hci_send_to_monitor+0xe2/0x590 [ 1732.623674][T22002] hci_rx_work+0x3ee/0x1030 [ 1732.623695][T22002] ? process_scheduled_works+0xa8d/0x18c0 [ 1732.623723][T22002] process_scheduled_works+0xb6e/0x18c0 [ 1732.623762][T22002] ? __pfx_process_scheduled_works+0x10/0x10 [ 1732.623817][T22002] ? assign_work+0x3d5/0x5e0 [ 1732.623845][T22002] worker_thread+0xa53/0xfc0 [ 1732.623884][T22002] kthread+0x388/0x470 [ 1732.623904][T22002] ? __pfx_worker_thread+0x10/0x10 [ 1732.623929][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.623949][T22002] ret_from_fork+0x51e/0xb90 [ 1732.623977][T22002] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.624002][T22002] ? __switch_to+0xc7d/0x1450 [ 1732.624026][T22002] ? __pfx_kthread+0x10/0x10 [ 1732.624052][T22002] ret_from_fork_asm+0x1a/0x30 [ 1732.624078][T22002] [ 1732.624434][T22002] Kernel Offset: disabled