last executing test programs: 18m12.176855375s ago: executing program 32 (id=189): socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) 14m50.990054274s ago: executing program 2 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB], 0x78}}, 0x0) 14m47.044105011s ago: executing program 2 (id=616): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) lchown(&(0x7f00000001c0)='./file0/../file0/file0\x00', r2, r3) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, {0x0, 0x6, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m46.812369401s ago: executing program 2 (id=618): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 14m46.436304799s ago: executing program 2 (id=620): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dde5bf3eba23db"}, 0x28) 14m46.002952756s ago: executing program 2 (id=621): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) 14m45.585554429s ago: executing program 2 (id=623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff000307"], 0x13) prlimit64(0x0, 0x0, &(0x7f0000000200)={0xff, 0x2000000000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00000000000000000000000000000000008000", [0x9, 0x400]}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) timer_create(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000001cc0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)="41f1b62427d58ce0149c"}) 14m30.106106543s ago: executing program 33 (id=623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200f2ffffffffffffff000307"], 0x13) prlimit64(0x0, 0x0, &(0x7f0000000200)={0xff, 0x2000000000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x103042, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00000000000000000000000000000000008000", [0x9, 0x400]}}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) timer_create(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000001cc0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)="41f1b62427d58ce0149c"}) 12m3.296181178s ago: executing program 3 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 12m2.994405883s ago: executing program 3 (id=977): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setpriority(0x0, 0x1, 0xa7a8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_getattr(r2, &(0x7f0000000080)={0x38}, 0xfed9, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102384, 0x18ff0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioperm(0x6, 0x88, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000e00314010028bd7000fedbdf25080001000000000008157ee98e12ce5af0cb9482018600010001000000b5f86d3db27f756b897ca74348c9175c1524ae8ead36dd692751aee4af335a6f4d43dcc22dfc28a84ece2ff54872925e41070eebc26bcc6b12363d7bfa4873f219e4c3a0513ceb0e33adaaad4fe8cba048f352813735c06e6f1939e7988bc099d7cc41bfadb4fea9b31fca87fb9771d9f747435184696b"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) 11m55.968538342s ago: executing program 3 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000e994) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, 0x0, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r7) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x20000001}) 11m46.844718993s ago: executing program 3 (id=1011): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r4, 0x0, 0x7ffff000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f00000006c0)=ANY=[], &(0x7f0000008b40)=""/8, 0x3f, 0x8, 0x1, 0x3}, 0x28) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) 11m45.082635132s ago: executing program 3 (id=1016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) 11m43.557484327s ago: executing program 3 (id=1017): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @gre_key=0x72c9, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r3, 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r6, &(0x7f0000000040)={r7, r6}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b}}) 11m28.273996502s ago: executing program 34 (id=1017): socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @gre_key=0x72c9, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r3, 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r6, &(0x7f0000000040)={r7, r6}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b}}) 10m46.815672521s ago: executing program 6 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 10m46.742570941s ago: executing program 6 (id=1150): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r0, 0x1, 0x61, 0x0, 0x48, 0x41, 0x1000, 0x9, 0xa, 0x1, 0x0, 'syz0\x00'}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0x1c, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 10m45.454510924s ago: executing program 6 (id=1156): ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 10m36.094689621s ago: executing program 6 (id=1183): r0 = syz_io_uring_setup(0xfdf, 0x0, &(0x7f0000000100), &(0x7f0000000200)) r1 = io_uring_setup(0x20fe, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xfefffffd, 0x0, r0}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000a06010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 10m35.419964363s ago: executing program 6 (id=1186): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet(r5, &(0x7f00000002c0)='!', 0x1fff8, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) socket$inet6(0xa, 0x3, 0xff) 10m33.810711116s ago: executing program 6 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "fb80"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 10m18.571407105s ago: executing program 35 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "fb80"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 10m7.852512678s ago: executing program 5 (id=1250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 10m3.458979362s ago: executing program 5 (id=1257): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0xfffffbdb, 0x4, '\x00', 0xfffff801}, 0x0, [0x7f, 0xd, 0x2, 0x10000, 0x8c08, 0x9, 0x10000, 0x2, 0xf0f3, 0xfffffffffffffbff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffc, 0x100, 0x64, 0x402, 0x400000004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1fb, 0x1, 0xbbd, 0x6, 0x8, 0x6, 0x5, 0x2002, 0xfff, 0x3, 0x9, 0x3, 0x8000000000000000, 0x803, 0x0, 0x1, 0x201, 0x3, 0x4, 0xdb4, 0x5, 0x19, 0x9, 0xe, 0x8f46, 0x7fff, 0x6, 0x0, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x6, 0x7ff, 0x1, 0xffff, 0x1, 0x5, 0x34c, 0x7, 0x7, 0x4, 0x4, 0xb77, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x9, 0x4, 0x5, 0x82, 0x0, 0x10, 0x8, 0xb, 0x8000000000000001, 0xf, 0x4, 0x2, 0x4, 0x8527, 0x80000001, 0x4, 0x10003, 0xe72, 0x3ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0xbbb283e000002, 0x100000000, 0x8bd, 0x1040, 0x1000000000001, 0x9, 0xc5, 0x0, 0x4006, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0x9, 0x7fffffff, 0x8, 0x5, 0x6d98, 0xdc, 0x6, 0x800000000, 0xffffffffffffff08, 0x2, 0x1f58, 0x4, 0x7, 0xfffffffffffffff7]}) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x3800000000000000, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6) 9m57.138839386s ago: executing program 5 (id=1280): r0 = syz_open_dev$loop(&(0x7f0000000180), 0xfff, 0x420040) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000380)={0x4cba7c19, 0x3, 0x1}) mknod(&(0x7f0000000040)='./file1/file4\x00', 0x8000, 0x3f) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) 9m56.406763248s ago: executing program 5 (id=1282): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20008840) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 9m51.986997438s ago: executing program 5 (id=1293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f00000017c0)={0x3}, 0x8, 0x0) 9m51.35415672s ago: executing program 5 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000e994) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) 9m36.295962066s ago: executing program 36 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000e994) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000480)=0x9) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) 5m46.963915988s ago: executing program 7 (id=1839): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) close_range(r3, 0xffffffffffffffff, 0x0) 5m45.628687969s ago: executing program 7 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 5m45.106512s ago: executing program 7 (id=1842): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r6, 0x114, 0x7, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) 5m43.677264036s ago: executing program 7 (id=1844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x40000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xd) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) 5m42.394572094s ago: executing program 7 (id=1850): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) close_range(r3, 0xffffffffffffffff, 0x0) 5m39.891006732s ago: executing program 7 (id=1856): r0 = syz_open_dev$cec(&(0x7f0000008280), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000002040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc02864cf, &(0x7f00000001c0)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) 5m23.816308074s ago: executing program 37 (id=1856): r0 = syz_open_dev$cec(&(0x7f0000008280), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000002040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc02864cf, &(0x7f00000001c0)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) 2m28.698773426s ago: executing program 1 (id=2224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"e008afbe442461ac54fcc4ae6656d97180f41de1cc638c8ed58a79c24398940b39ee45275de84a2b0a408812ff00f345142a241191d94b2a1f1475c8139cabead8505ea10745fd0f0c191fd5bfd325743e1baf2a452fbb5c86b382fa6b8b86eca86b1b0e6925633b3773d7044a5aac8fa02f39cc009ff081c7914dc691ac533f565496fc46ace6b0e21b2a778e0b0d01e11fc9c3424a19c03318ba1c853610d69de754533e660d7da51698051524645b887e1f0e6f0c0c12a606cd53bc0509247f274b33e1ff99c12207a2a4dfbef5aee0c475b401e66add2bd270d19f0c0aabf44454f5cf11ab05a8d29026b9cb87c80d982f63d801ae16a5ddd32379ea35e4bd37e3c925e6ff19d9f75f3e3ebebb381b2655da135055b2508e42cfd45d7f700351bf0045020d8261886267adbe000945c623e4af42d9fb990f3bf5f7d8050c335648f95378e1712382f1f5f0aaef77f2978b23fc3be6909e4fbfcc45530ec320560de751b77e8fc11e0254bc3af09c7bda59015dbd03f93ce38a79b4db86cb2862afb072e194a8de32eb1bb6c1729fd11fec7bdc7cf6816f118eb2bbe70a6ae59fb16eab0cda5a1dd9480fb011dbff3142955ee63e6cb3f9f21a14427256767c76fac8c5a45a676fa8f2c2649b62d3421bf5254aceba866a6b15466c8d651e2dd74a6594472b1a7b1f26c5e543c1d4e9aaf3c5e01681ac526bb8fecdcef55533e43b2908ca978c26e52873ddc38df4d5a55d32e62a277269d9f6e1659321287e2c54e4c23f19d6f2b91fd4f7cce895c1d636a58fcdfebf553955ed86e93a08eaf18662825cef5764f1a2ef60740976006b6e31d9b5182820bf59706add67cf80a156cf485ee83a8d62fd25231fc58eb73e37d94ade46541a3ae045ec5146298bc102b7e9a7e80e39c4f5897aa8219bf54d73408abe0cb4bd53faffb861ab4af030c0f3c0da8c029b8fe74e85e15b488694c9f79d6768610d9fd4b49b37fe836b4c50fe84497aa426d0f6646eef01f7a5b643fa67b52621f8bd6e846eb7dab927d9173bd2307f9da294e2a4517a8f473ef69b8cb0ad075e32353babfbf61a5fbb3dfe312bed9427c2eb71ce22312a7ed453f2aa3615dc3e92f439e579e7e70c1c20d93f327fec4a790c7ed6a05a4201edf4e155ca2d1d45a9628abfe10178dcd915cc05b73bd2a791e5600eb90db247a11a555f633172943538151bda9658c7ade4349317d8cef12080fe982e251683f6d57c6a209d1038c9d032d283a28fc8df773f7ddb5761a8dc7ca28d04ed5a8befafa5b1f9c3a2821d74b9ec6280b555f13e46c7b86b2f2f37ae49eaa9a7d99ee17b53bd2fa66a2b525a5b2da293a47c9f937b1baf1bf7297f10f491ef8bd3795ec44eadbc8843b687b14aab40f5ba2a595467b5dcfc5d0454e4d82445e057abd81354f4b8c9b1eeae30469e8b5ce474"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m28.152046118s ago: executing program 1 (id=2229): r0 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0x465d, 0x800, 0x6, 0x14a}, &(0x7f00000006c0), &(0x7f0000000280)) io_uring_enter(r0, 0x507, 0x966, 0x21, &(0x7f0000000000)={[0x10000]}, 0x8) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2m27.903027134s ago: executing program 1 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x4054) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='personality\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x40}, {0xffff1000, 0x58000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0xfe, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x43, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeef0000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xfdfcfffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) 2m26.555240959s ago: executing program 1 (id=2235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) 2m23.912956955s ago: executing program 1 (id=2240): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4085, 0x104a) 2m21.870394112s ago: executing program 1 (id=2244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000440)="42f7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 17.746241974s ago: executing program 4 (id=2483): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x98980, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@empty, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x21, 0x2, 0x0, 0x0, "432dfbf1808748b9a7c60b13ebbd35b531c8eaca3b5c0b707fad3ede52ba31895fc4acc5a4e83631b08255664c4a39ac634da0e719bbfdfd10d836b81d1625db"}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0183) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000100)={[0xff]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2040) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 14.952252878s ago: executing program 4 (id=2489): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 13.18736797s ago: executing program 0 (id=2491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x40}, {0xffff1000, 0x58000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0xfe, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x43, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeef0000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xfdfcfffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) 12.066113934s ago: executing program 9 (id=2492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 10.074016721s ago: executing program 4 (id=2494): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.845504495s ago: executing program 4 (id=2495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x2400e844) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e0000000130001", @ANYRES32=r2], 0xe0}], 0x1, 0x0, 0x0, 0x2000c0a0}, 0x20008890) open(&(0x7f0000000080)='./bus\x00', 0xf6df8900ba618934, 0x10) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x69000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.701967157s ago: executing program 4 (id=2496): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x14, 0x3, 0x1ef, &(0x7f0000000340)="8e4221b8fce432fd93233552ef6ff6573e74ef26db6ef4021d2186393357ab9009b78cb5a2fc01d60dc8cf22e5be5d76d761a40da17ab66c40a9e4d1c439dffe45f70acd9f2b4dc560503338af9dc841f7b7a3907f32ac8884988d5406aa9af0906c12a6c6b19623c5c8c710730931c8410acb4f8c895301ce36e1e0f8eb89ded80422fcd2e177a969d3e967dc9fea8732f6ae749aed3f9683b795e126fd377d9b52fbd09eee7aa9431b514726d5adb17a4a8b6635aec30ea4c4e926986643bf361c9cc7d8d2b48300ecc69abec74c38d66461a0db04136f442f4e0ad862dbec278432bcc3546ce4ccc1e5e17aaefce3b05ab9487eece839b75f4d87d45b27b16b10e4eb975c8d006953ee43cbecf611d44aaec8706159403c000bc13faf51f884a23da8438a23a5f90e0fa0986eca74cd3a1359b410e35e357b98640b7fe3b8f6e53ec8663395317a42c60d4cb39034eccf9c25429ef0c792649effb302de156c12e7dd78a47502bc98f046d7725315f429c26f3756ca36a5133a3520f1cf6d645651d9645ea81477df4b986b23ac6353babe8d482e8a7ef1e94bec819a4241fc049b2d19547b9400a414d71b0b686e1a74f19fa9cc845afec01deb2b7026370033195275d5aa8ca3586336533d528183ad38588a151ca100b575c5062f2728d277002a531131d04dfd4f64af1ef2dfc7f5b50f4e87c0cca9ac01bf107bc662894aca92450065ac331ab868cee7132c6090099c335f16a34c2df5225a57ec1d8a058a3f24a143b2c2ef59c1ad1321bbc8881ac6f951d96a523def3ae7036c0226fc2fe9cbe3b47b7b4bb944533c7e746fdd9c204d9d85bf61511c27054e0f1f760e879809749c83ebc7b68e6ea95a1c895c38c34b6ca6932342d2239e83035ccd80de646c392dd8ff743620f47e68a6cf0964f2541bcae8bd5cb10fd24a22f15a5e875db896f4eacf2522fa894adc3af9a0951b5fc6dd002d8ef91a82b6fcf8da2c1bb75140ef4a22c6d090f55d396742cb82a5dcc9d679c384395c22dc1c2b85a6a90a3901be8575e91d5264f0b65a1f80eb9b1792a8b487e3df7562e69c8e32c3c553fdc83104e7faf32794bd2d40ac14b0ff41090e09701d4151ce12a64949fd58e26ee7e2169012c7b3e9a790c381eca66644371088e110fa31238900483ffb44de1a6635a62b371e6ae8e3e61c5cdf45aed5b31c6cdbc9d38e9f7bedea8553c8347ddb9def125094e714fb5fe36925d6f7f963b5d884f689f63dc0a1debfc7047c4e6f12a0a133e36a9269f7d196e0d993754f97635498d841a0d7365e8c0ed2cb25e94c452a8369fdc2627f0fc1f783cafba85d864e6e24d5fd6860484ce07e0ebfd5c899981ed5d08dd6cbf0229c9c530e1c76955d5dfbf181c4cb9dbe93a5e70484dd4e580e1da580cf3f70e64333f239c380b06fc0d59feca732b3"}) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2b82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x2000) r3 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c05, r5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf0000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.447311969s ago: executing program 0 (id=2497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 9.101149216s ago: executing program 0 (id=2498): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x98980, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@empty, @multicast, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x21, 0x2, 0x0, 0x0, "432dfbf1808748b9a7c60b13ebbd35b531c8eaca3b5c0b707fad3ede52ba31895fc4acc5a4e83631b08255664c4a39ac634da0e719bbfdfd10d836b81d1625db"}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xa0183) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000100)={[0xff]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2040) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 8.863910989s ago: executing program 9 (id=2499): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 8.656187277s ago: executing program 8 (id=2500): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r10, 0x3ff}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r0, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 7.300408856s ago: executing program 8 (id=2501): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x400000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 5.001231026s ago: executing program 8 (id=2502): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x800, 0xfffe, 0xff80, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) epoll_create1(0x0) 4.683214945s ago: executing program 9 (id=2503): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 3.421576647s ago: executing program 9 (id=2504): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.421001988s ago: executing program 8 (id=2505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x2400e844) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e0000000130001", @ANYRES32=r2], 0xe0}], 0x1, 0x0, 0x0, 0x2000c0a0}, 0x20008890) open(&(0x7f0000000080)='./bus\x00', 0xf6df8900ba618934, 0x10) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x69000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.295609482s ago: executing program 8 (id=2506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x6, 0x40}, {0xffff1000, 0x58000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4000, 0x1000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0xfe, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x0, 0x1, 0x0, 0x9, 0xff, 0x8, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x43, 0x2, 0x0, 0x0, 0xff, 0x5}, {0xeeef0000, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0xfdfcfffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) 3.170858917s ago: executing program 0 (id=2507): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 3.103494792s ago: executing program 9 (id=2508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 2.780840955s ago: executing program 8 (id=2509): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = dup3(r3, r2, 0x0) recvmmsg$unix(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.759351127s ago: executing program 0 (id=2510): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r10, 0x3ff}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r0, @ANYBLOB="000000000000000008000d00000016"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x81) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 699.313181ms ago: executing program 0 (id=2511): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x2, 0x2019}}}, 0x7) 613.600454ms ago: executing program 4 (id=2512): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xa, 0x1000, 0x0, 0x0}, {0x4, 0xd809, 0x0, 0x0}], 0x2}) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 9 (id=2513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellinkprop={0x60, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2800}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}, {0xffffffffffffffd9, 0x35, 'wlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x7, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000006240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r6, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) kernel console output (not intermixed with test programs): number 7 [ 864.625134][T12612] input: syz0 as /devices/virtual/input/input15 [ 864.726756][T12067] veth1_macvtap: entered promiscuous mode [ 864.945539][T12067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.945620][T12235] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 865.065032][T12235] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 865.172197][T12235] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 865.443875][ T9432] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 865.443905][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 865.443943][ T9432] Tainted: [L]=SOFTLOCKUP [ 865.443951][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.443965][ T9432] Workqueue: hci4 hci_rx_work [ 865.443991][ T9432] Call Trace: [ 865.444000][ T9432] [ 865.444009][ T9432] dump_stack_lvl+0xe8/0x150 [ 865.444040][ T9432] sysfs_create_dir_ns+0x259/0x280 [ 865.444069][ T9432] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 865.444099][ T9432] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 865.444130][ T9432] ? rt_spin_unlock+0x161/0x200 [ 865.444160][ T9432] kobject_add_internal+0x6b1/0xcd0 [ 865.444193][ T9432] kobject_add+0x155/0x220 [ 865.444218][ T9432] ? __pfx_kobject_add+0x10/0x10 [ 865.444250][ T9432] ? get_device_parent+0x370/0x3a0 [ 865.444279][ T9432] device_add+0x408/0xb80 [ 865.444305][ T9432] hci_conn_add_sysfs+0xd5/0x210 [ 865.444338][ T9432] le_conn_complete_evt+0xf1d/0x1420 [ 865.444373][ T9432] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 865.444400][ T9432] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 865.444422][ T9432] ? lockdep_hardirqs_on+0x7b/0x110 [ 865.444445][ T9432] ? skb_pull_data+0xfb/0x200 [ 865.444480][ T9432] hci_le_conn_complete_evt+0x187/0x480 [ 865.444513][ T9432] hci_event_packet+0x78f/0x1260 [ 865.444537][ T9432] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 865.444565][ T9432] ? __pfx_hci_event_packet+0x10/0x10 [ 865.444596][ T9432] ? hci_send_to_monitor+0xe2/0x590 [ 865.444627][ T9432] hci_rx_work+0x3ee/0x1060 [ 865.444655][ T9432] ? process_scheduled_works+0x9ef/0x1770 [ 865.444682][ T9432] process_scheduled_works+0xad1/0x1770 [ 865.444733][ T9432] ? __pfx_process_scheduled_works+0x10/0x10 [ 865.444755][ T9432] ? do_raw_spin_lock+0x121/0x290 [ 865.444795][ T9432] worker_thread+0x8a0/0xda0 [ 865.444833][ T9432] ? __kthread_parkme+0x7b/0x200 [ 865.444868][ T9432] kthread+0x711/0x8a0 [ 865.444899][ T9432] ? __pfx_worker_thread+0x10/0x10 [ 865.444932][ T9432] ? __pfx_kthread+0x10/0x10 [ 865.444956][ T9432] ? rt_spin_unlock+0x150/0x200 [ 865.444987][ T9432] ? rt_spin_unlock+0x161/0x200 [ 865.445012][ T9432] ? __pfx_kthread+0x10/0x10 [ 865.445040][ T9432] ret_from_fork+0x510/0xa50 [ 865.445064][ T9432] ? __pfx_ret_from_fork+0x10/0x10 [ 865.445083][ T9432] ? __switch_to+0xc9e/0x1480 [ 865.445116][ T9432] ? __pfx_kthread+0x10/0x10 [ 865.445143][ T9432] ret_from_fork_asm+0x1a/0x30 [ 865.445188][ T9432] [ 865.450402][T12067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.452705][T12235] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 865.454954][ T9432] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 865.454996][ T9432] Bluetooth: hci4: failed to register connection device [ 865.792729][T12638] overlayfs: missing 'lowerdir' [ 865.823692][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.846909][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.850200][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.853300][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.355849][ T6785] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 866.431905][ T7513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.431925][ T7513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.505779][ T6785] usb 8-1: device descriptor read/64, error -71 [ 866.664433][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.664454][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.750410][ T6785] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 866.769047][T12235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.875814][ T6785] usb 8-1: device descriptor read/64, error -71 [ 866.888474][T12235] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.919307][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.919436][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.962897][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.963028][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.986123][ T6785] usb usb8-port1: attempt power cycle [ 868.194781][ T6785] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 868.245601][ T6785] usb 8-1: device descriptor read/8, error -71 [ 868.340042][T12662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1731'. [ 868.575865][ T6785] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 868.905904][ T6785] usb 8-1: device descriptor read/8, error -71 [ 869.828917][T12679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1733'. [ 869.866459][ T6785] usb usb8-port1: unable to enumerate USB device [ 870.075831][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.075905][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.232981][T12235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.456522][ T9432] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 870.831369][T12709] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1742'. [ 870.831660][T12708] binder: 12706:12708 ioctl 4018620d 0 returned -22 [ 870.885807][T12680] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 871.036533][T12680] usb 10-1: Using ep0 maxpacket: 32 [ 871.043225][T12680] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.043257][T12680] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.043296][T12680] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 871.043319][T12680] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.109545][T12680] usb 10-1: config 0 descriptor?? [ 871.206097][ T6013] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 871.318693][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.319170][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.585795][ T6013] usb 8-1: Using ep0 maxpacket: 32 [ 871.603723][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.603755][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.603794][ T6013] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 871.603818][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.616066][ T6013] usb 8-1: config 0 descriptor?? [ 872.552006][T12235] veth0_vlan: entered promiscuous mode [ 872.571467][T12728] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1746'. [ 872.622271][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.638683][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.898248][T12235] veth1_vlan: entered promiscuous mode [ 875.584964][T12235] veth0_macvtap: entered promiscuous mode [ 875.593671][T12235] veth1_macvtap: entered promiscuous mode [ 875.613951][T12235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.627943][T12235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.190520][T12680] usbhid 10-1:0.0: can't add hid device: -71 [ 876.190645][T12680] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 876.198279][T12680] usb 10-1: USB disconnect, device number 2 [ 876.659407][T12306] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.665879][ T6013] usbhid 8-1:0.0: can't add hid device: -71 [ 876.665996][ T6013] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 876.706224][ T9432] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 876.760228][T12306] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.762971][T12306] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.763012][T12306] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.796463][ T6013] usb 8-1: USB disconnect, device number 15 [ 876.978973][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1753'. [ 877.074904][T12755] fuse: Unknown parameter '0xffffffffffffffff;' [ 877.335308][T12767] binder: 12765:12767 ioctl 4018620d 0 returned -22 [ 877.446524][ T6013] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 877.575869][ T6013] usb 8-1: device descriptor read/64, error -71 [ 877.648638][ T2136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.648659][ T2136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.826112][ T6013] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 877.893712][ T2136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.893733][ T2136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.980168][ T6013] usb 8-1: device descriptor read/64, error -71 [ 878.124752][ T6013] usb usb8-port1: attempt power cycle [ 878.146090][T12779] netlink: 'syz.9.1756': attribute type 72 has an invalid length. [ 878.698721][ T6013] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 879.313200][ T6013] usb 8-1: device descriptor read/8, error -71 [ 880.465877][ T6013] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 880.516137][ T6013] usb 8-1: device descriptor read/8, error -71 [ 880.636431][ T6013] usb usb8-port1: unable to enumerate USB device [ 880.807040][ T9432] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 880.807071][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 880.807100][ T9432] Tainted: [L]=SOFTLOCKUP [ 880.807108][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 880.807123][ T9432] Workqueue: hci5 hci_rx_work [ 880.807147][ T9432] Call Trace: [ 880.807155][ T9432] [ 880.807164][ T9432] dump_stack_lvl+0xe8/0x150 [ 880.807197][ T9432] sysfs_create_dir_ns+0x259/0x280 [ 880.807227][ T9432] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 880.807258][ T9432] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 880.807291][ T9432] ? rt_spin_unlock+0x161/0x200 [ 880.807320][ T9432] kobject_add_internal+0x6b1/0xcd0 [ 880.807352][ T9432] kobject_add+0x155/0x220 [ 880.807380][ T9432] ? __pfx_kobject_add+0x10/0x10 [ 880.807412][ T9432] ? get_device_parent+0x370/0x3a0 [ 880.807440][ T9432] device_add+0x408/0xb80 [ 880.807467][ T9432] hci_conn_add_sysfs+0xd5/0x210 [ 880.807502][ T9432] le_conn_complete_evt+0xf1d/0x1420 [ 880.807540][ T9432] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 880.807582][ T9432] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.807605][ T9432] ? lockdep_hardirqs_on+0x7b/0x110 [ 880.807629][ T9432] ? skb_pull_data+0xfb/0x200 [ 880.807665][ T9432] hci_le_conn_complete_evt+0x187/0x480 [ 880.807707][ T9432] hci_event_packet+0x78f/0x1260 [ 880.807731][ T9432] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 880.807760][ T9432] ? __pfx_hci_event_packet+0x10/0x10 [ 880.807780][ T9432] ? rt_spin_unlock+0x150/0x200 [ 880.807818][ T9432] ? hci_send_to_monitor+0xe2/0x590 [ 880.807849][ T9432] hci_rx_work+0x3ee/0x1060 [ 880.807878][ T9432] ? process_scheduled_works+0x9ef/0x1770 [ 880.807904][ T9432] process_scheduled_works+0xad1/0x1770 [ 880.807956][ T9432] ? __pfx_process_scheduled_works+0x10/0x10 [ 880.807976][ T9432] ? do_raw_spin_lock+0x121/0x290 [ 880.808014][ T9432] worker_thread+0x8a0/0xda0 [ 880.808047][ T9432] ? __kthread_parkme+0x7b/0x200 [ 880.808080][ T9432] kthread+0x711/0x8a0 [ 880.808111][ T9432] ? __pfx_worker_thread+0x10/0x10 [ 880.808136][ T9432] ? __pfx_kthread+0x10/0x10 [ 880.808160][ T9432] ? rt_spin_unlock+0x150/0x200 [ 880.808190][ T9432] ? rt_spin_unlock+0x161/0x200 [ 880.808214][ T9432] ? __pfx_kthread+0x10/0x10 [ 880.808241][ T9432] ret_from_fork+0x510/0xa50 [ 880.808265][ T9432] ? __pfx_ret_from_fork+0x10/0x10 [ 880.808284][ T9432] ? __switch_to+0xc9e/0x1480 [ 880.808317][ T9432] ? __pfx_kthread+0x10/0x10 [ 880.808345][ T9432] ret_from_fork_asm+0x1a/0x30 [ 880.808389][ T9432] [ 880.808787][ T9432] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 880.808829][ T9432] Bluetooth: hci5: failed to register connection device [ 881.371939][T12815] binder: 12813:12815 ioctl 4018620d 0 returned -22 [ 883.301175][T12825] wireguard0: entered allmulticast mode [ 883.863720][T12836] netlink: 'syz.9.1768': attribute type 72 has an invalid length. [ 884.784354][T12854] fuse: Unknown parameter '0xffffffffffffffffŒ' [ 887.038164][T12871] binder: 12870:12871 ioctl c0306201 0 returned -14 [ 888.589307][T12887] netlink: 'syz.1.1781': attribute type 72 has an invalid length. [ 888.684866][T12890] Illegal XDP return value 4294967274 on prog (id 327) dev syz_tun, expect packet loss! [ 889.917779][T12895] fuse: Unknown parameter '0xffffffffffffffff_' [ 890.855887][ T7195] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 890.985816][ T7195] usb 8-1: device descriptor read/64, error -71 [ 891.375964][ T7195] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 891.515900][ T7195] usb 8-1: device descriptor read/64, error -71 [ 891.626136][ T7195] usb usb8-port1: attempt power cycle [ 892.692755][ T7195] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 892.819898][ T7195] usb 8-1: device descriptor read/8, error -71 [ 893.095867][ T7195] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 893.116814][ T7195] usb 8-1: device descriptor read/8, error -71 [ 893.180244][T12928] binder: 12927:12928 ioctl c0306201 0 returned -14 [ 893.226347][ T7195] usb usb8-port1: unable to enumerate USB device [ 894.313754][T12945] fuse: Unknown parameter '0xffffffffffffffffQ' [ 895.440018][ T37] kauditd_printk_skb: 212 callbacks suppressed [ 895.440034][ T37] audit: type=1326 audit(1768448443.424:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.440077][ T37] audit: type=1326 audit(1768448443.424:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.442968][T12953] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 895.443314][ T37] audit: type=1326 audit(1768448443.424:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.443367][ T37] audit: type=1326 audit(1768448443.424:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.443408][ T37] audit: type=1326 audit(1768448443.424:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.444295][ T37] audit: type=1326 audit(1768448443.424:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.444336][ T37] audit: type=1326 audit(1768448443.424:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.444376][ T37] audit: type=1326 audit(1768448443.424:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.444416][ T37] audit: type=1326 audit(1768448443.424:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.444456][ T37] audit: type=1326 audit(1768448443.424:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 895.451725][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 895.865894][ T7923] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 896.893382][ T7923] usb 2-1: Using ep0 maxpacket: 32 [ 896.908404][ T7923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.908445][ T7923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.908484][ T7923] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 896.908508][ T7923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.956406][ T7923] usb 2-1: config 0 descriptor?? [ 896.993323][T12964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1803'. [ 897.191504][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.200392][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.405816][ T7195] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 899.497691][ T7923] usbhid 2-1:0.0: can't add hid device: -71 [ 899.500401][ T7923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 899.536357][ T7923] usb 2-1: USB disconnect, device number 18 [ 899.544313][ T7195] usb 5-1: device descriptor read/64, error -71 [ 899.785913][ T7195] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 899.936071][ T7195] usb 5-1: device descriptor read/64, error -71 [ 900.046740][ T7195] usb usb5-port1: attempt power cycle [ 900.323278][T12983] binder: 12982:12983 ioctl c0306201 0 returned -14 [ 900.385797][ T7195] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 900.406652][ T7195] usb 5-1: device descriptor read/8, error -71 [ 900.645825][ T7195] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 900.669265][ T7195] usb 5-1: device descriptor read/8, error -71 [ 900.776128][ T7195] usb usb5-port1: unable to enumerate USB device [ 902.835722][T12997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 902.916726][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 902.970293][ T37] kauditd_printk_skb: 145 callbacks suppressed [ 902.970333][ T37] audit: type=1326 audit(1768448450.784:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.970585][ T37] audit: type=1326 audit(1768448450.784:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.985133][ T37] audit: type=1326 audit(1768448450.784:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.985359][ T37] audit: type=1326 audit(1768448450.794:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.985605][ T37] audit: type=1326 audit(1768448450.794:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.986332][ T37] audit: type=1326 audit(1768448450.794:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.986544][ T37] audit: type=1326 audit(1768448450.794:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.987108][ T37] audit: type=1326 audit(1768448450.794:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.987290][ T37] audit: type=1326 audit(1768448450.804:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 902.987485][ T37] audit: type=1326 audit(1768448450.804:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12991 comm="syz.4.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 903.042695][T12998] 9pnet_fd: Insufficient options for proto=fd [ 908.807809][T13039] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 908.821219][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 908.843330][ T37] kauditd_printk_skb: 242 callbacks suppressed [ 908.843345][ T37] audit: type=1326 audit(1768448456.784:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843392][ T37] audit: type=1326 audit(1768448456.784:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843433][ T37] audit: type=1326 audit(1768448456.784:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843474][ T37] audit: type=1326 audit(1768448456.784:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843513][ T37] audit: type=1326 audit(1768448456.784:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843554][ T37] audit: type=1326 audit(1768448456.784:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843593][ T37] audit: type=1326 audit(1768448456.784:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843634][ T37] audit: type=1326 audit(1768448456.784:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843674][ T37] audit: type=1326 audit(1768448456.784:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 908.843714][ T37] audit: type=1326 audit(1768448456.784:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13034 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1039c5f749 code=0x7ffc0000 [ 911.301504][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1830'. [ 911.301578][T13058] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1830'. [ 911.305260][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1830'. [ 911.306615][T13058] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1830'. [ 911.306681][T13058] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1830'. [ 915.934180][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1834'. [ 920.011140][T13120] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 924.106073][ T5876] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 924.914665][ T5876] usb 9-1: Using ep0 maxpacket: 32 [ 924.949646][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.949680][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.949718][ T5876] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 924.949741][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.999658][ T5876] usb 9-1: config 0 descriptor?? [ 925.267009][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.269595][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.927432][T13183] binder: BINDER_SET_CONTEXT_MGR already set [ 926.927448][T13183] binder: 13182:13183 ioctl 4018620d 2000000002c0 returned -16 [ 927.062775][ T5876] usbhid 9-1:0.0: can't add hid device: -71 [ 927.062889][ T5876] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 927.355894][ T5876] usb 9-1: USB disconnect, device number 2 [ 931.474149][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.474218][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.057279][ T7923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 933.335803][ T7923] usb 5-1: Using ep0 maxpacket: 32 [ 933.343119][ T7923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.343151][ T7923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.343190][ T7923] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 933.343214][ T7923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.357066][ T7923] usb 5-1: config 0 descriptor?? [ 934.207660][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.247528][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.057515][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.058014][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.204510][ T7923] usbhid 5-1:0.0: can't add hid device: -71 [ 937.204637][ T7923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 937.225169][ T7923] usb 5-1: USB disconnect, device number 12 [ 939.215778][ T5121] Bluetooth: hci5: command 0x0406 tx timeout [ 940.445963][ T5121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 940.459509][ T5121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 940.460827][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 940.462108][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 940.463847][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 942.342618][T13281] chnl_net:caif_netlink_parms(): no params data found [ 942.445930][ T7923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 942.515164][ T9432] Bluetooth: hci3: command tx timeout [ 942.605766][ T7923] usb 5-1: Using ep0 maxpacket: 32 [ 942.608165][ T7923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.608197][ T7923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.608321][ T7923] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 942.608345][ T7923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.755804][ T7923] usb 5-1: config 0 descriptor?? [ 943.055873][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.057947][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.530940][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.531457][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.580169][ T9432] Bluetooth: hci3: command tx timeout [ 947.650845][ T5121] Bluetooth: hci3: command tx timeout [ 947.941972][ T7923] usbhid 5-1:0.0: can't add hid device: -32 [ 947.942097][ T7923] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 948.135621][ T2136] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.405381][ T7923] usb 5-1: USB disconnect, device number 13 [ 949.376749][T13350] binder: 13349:13350 ioctl c0306201 0 returned -14 [ 949.699311][ T9432] Bluetooth: hci3: command tx timeout [ 950.002421][ T9432] Bluetooth: hci2: command 0x0406 tx timeout [ 953.963348][ T2136] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.017336][T13281] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.017453][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.017609][T13281] bridge_slave_0: entered allmulticast mode [ 954.032463][T13281] bridge_slave_0: entered promiscuous mode [ 954.040491][T13281] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.040682][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.040855][T13281] bridge_slave_1: entered allmulticast mode [ 954.065109][T13281] bridge_slave_1: entered promiscuous mode [ 954.306407][T13387] binder: 13386:13387 ioctl c0306201 0 returned -14 [ 955.574177][ T2136] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.631155][T13281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.921744][T13281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.419173][ T2136] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.453425][T13281] team0: Port device team_slave_0 added [ 958.502249][T13281] team0: Port device team_slave_1 added [ 958.557212][T13426] binder: 13425:13426 ioctl c0306201 0 returned -14 [ 961.437614][T13281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.437631][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.437667][T13281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.833897][T13281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.833940][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.833993][T13281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.750643][T13281] hsr_slave_0: entered promiscuous mode [ 962.752110][T13281] hsr_slave_1: entered promiscuous mode [ 962.753115][T13281] debugfs: 'hsr0' already exists in 'hsr' [ 962.753140][T13281] Cannot create hsr debugfs directory [ 963.142212][ T2136] bridge_slave_1: left allmulticast mode [ 963.142241][ T2136] bridge_slave_1: left promiscuous mode [ 963.142492][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.350306][ T2136] bridge_slave_0: left allmulticast mode [ 963.350333][ T2136] bridge_slave_0: left promiscuous mode [ 963.383130][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.174768][T13466] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 964.377786][T13461] delete_channel: no stack [ 966.385584][ T6023] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 966.955790][ T6023] usb 9-1: Using ep0 maxpacket: 8 [ 966.997166][ T6023] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.997191][ T6023] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 966.997240][ T6023] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 966.997258][ T6023] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 966.997283][ T6023] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 966.997295][ T6023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.094250][ T6023] hub 9-1:1.0: bad descriptor, ignoring hub [ 967.094288][ T6023] hub 9-1:1.0: probe with driver hub failed with error -5 [ 967.095172][ T6023] cdc_wdm 9-1:1.0: skipping garbage [ 967.095187][ T6023] cdc_wdm 9-1:1.0: skipping garbage [ 967.310498][ T6785] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 967.337017][ T6023] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 967.337050][ T6023] cdc_wdm 9-1:1.0: Unknown control protocol [ 967.655887][ T6785] usb 10-1: Using ep0 maxpacket: 32 [ 967.658169][ T6785] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.658193][ T6785] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 967.658228][ T6785] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 967.658252][ T6785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.708450][ T6785] usb 10-1: config 0 descriptor?? [ 969.375507][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1944'. [ 969.389434][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.426847][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.447992][ T2136] bond0 (unregistering): Released all slaves [ 970.686511][T12749] usb 10-1: USB disconnect, device number 3 [ 972.230485][ T2136] IPVS: stopping backup sync thread 13120 ... [ 972.651748][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.652296][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.745805][ T6007] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 975.905963][ T6007] usb 2-1: Using ep0 maxpacket: 32 [ 975.919412][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.919438][ T6007] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 975.919476][ T6007] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 975.919501][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.986886][ T6007] usb 2-1: config 0 descriptor?? [ 977.085508][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'. [ 979.027039][ T5876] usb 2-1: USB disconnect, device number 19 [ 984.995383][ T5803] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 985.027066][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'. [ 985.027082][T13629] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1973'. [ 985.027272][T13629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'. [ 985.027350][T13629] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1973'. [ 985.027359][T13629] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1973'. [ 985.307444][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 985.768662][ T5803] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 985.768706][ T5803] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 985.768719][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.799043][ T5803] usb 5-1: config 0 descriptor?? [ 985.819352][ T2136] hsr_slave_0: left promiscuous mode [ 985.857694][ T2136] hsr_slave_1: left promiscuous mode [ 985.859273][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.859289][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.908888][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.908915][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.946773][ T2136] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 985.946945][ T2136] batman_adv: batadv0: Removing interface: virt_wifi0 [ 986.096199][ T2136] veth1_macvtap: left promiscuous mode [ 986.096294][ T2136] veth0_macvtap: left promiscuous mode [ 986.096541][ T2136] veth1_vlan: left promiscuous mode [ 986.096750][ T2136] veth0_vlan: left promiscuous mode [ 987.505281][ T5876] usb 5-1: USB disconnect, device number 14 [ 987.743484][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1974'. [ 989.014845][T13660] binder: BINDER_SET_CONTEXT_MGR already set [ 989.014860][T13660] binder: 13658:13660 ioctl 4018620d 2000000002c0 returned -16 [ 991.995789][ T5876] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 992.155749][ T5876] usb 10-1: Using ep0 maxpacket: 32 [ 992.201137][ T5876] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.201166][ T5876] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 992.201179][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.204999][ T5876] usb 10-1: config 0 descriptor?? [ 992.848674][ T5803] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 992.914216][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.914286][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.035908][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 993.075241][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.075274][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.075301][ T5803] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 993.075314][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.102775][ T5803] usb 5-1: config 0 descriptor?? [ 993.187858][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 993.259401][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1989'. [ 993.352849][T13688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.354252][T13688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.580081][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 994.150572][T13697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.151092][T13697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.859296][ T7923] usb 10-1: USB disconnect, device number 4 [ 995.355842][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 995.515812][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 996.169728][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.169813][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.169855][ T31] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 996.169879][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.234605][ T31] usb 10-1: config 0 descriptor?? [ 996.508083][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.508893][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.451567][ T5803] usbhid 5-1:0.0: can't add hid device: -32 [ 998.451745][ T5803] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 999.463222][ T9432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.514543][ T9432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.522415][ T9432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.539686][ T9432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.542540][ T9432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 999.936523][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1983'. [ 999.936558][T13667] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1983'. [ 999.939273][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1983'. [ 999.939429][T13667] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1983'. [ 999.939447][T13667] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1983'. [ 1000.755702][ T37] kauditd_printk_skb: 371 callbacks suppressed [ 1000.755719][ T37] audit: type=1800 audit(1768448548.654:2557): pid=13725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.1.1995" name="/newroot/546/bus" dev="tmpfs" ino=2848 res=0 errno=0 [ 1001.165174][ T31] usbhid 10-1:0.0: can't add hid device: -71 [ 1001.165297][ T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1001.174427][ T31] usb 10-1: USB disconnect, device number 5 [ 1001.767345][ T5121] Bluetooth: hci4: command tx timeout [ 1001.775164][ T5889] usb 5-1: USB disconnect, device number 15 [ 1002.731963][ T5889] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1003.715794][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 1003.717805][ T5889] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1003.717846][ T5889] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1003.717870][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.722896][ T5889] usb 10-1: config 0 descriptor?? [ 1003.788363][ T5121] Bluetooth: hci4: command tx timeout [ 1003.981587][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1004.353035][T13754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.353548][T13754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.343885][T13720] chnl_net:caif_netlink_parms(): no params data found [ 1005.433426][ T5803] usb 10-1: USB disconnect, device number 6 [ 1005.855908][ T5121] Bluetooth: hci4: command tx timeout [ 1007.216919][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.217363][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.250383][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.250892][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.073311][ T5121] Bluetooth: hci4: command tx timeout [ 1008.080408][ T5803] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1008.985812][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 1008.988188][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.988219][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.988258][ T5803] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1008.988282][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.232737][ T5803] usb 2-1: config 0 descriptor?? [ 1009.835850][T13799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.836378][T13799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.574723][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.582017][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.994101][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2013'. [ 1011.308341][ T147] bridge_slave_1: left allmulticast mode [ 1011.308370][ T147] bridge_slave_1: left promiscuous mode [ 1011.311782][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.393116][ T147] bridge_slave_0: left allmulticast mode [ 1011.393135][ T147] bridge_slave_0: left promiscuous mode [ 1011.393625][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.905791][ T6007] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1011.909813][ T5803] usbhid 2-1:0.0: can't add hid device: -71 [ 1011.909927][ T5803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1012.469282][ T5803] usb 2-1: USB disconnect, device number 20 [ 1012.625750][ T7923] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1012.745791][ T6007] usb 5-1: Using ep0 maxpacket: 32 [ 1012.749055][ T6007] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1012.749083][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.761977][ T6007] usb 5-1: config 0 descriptor?? [ 1012.935779][ T7923] usb 10-1: Using ep0 maxpacket: 8 [ 1012.941295][ T7923] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.941320][ T7923] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.941370][ T7923] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1012.941399][ T7923] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1012.941450][ T7923] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1012.941473][ T7923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.952576][ T7923] hub 10-1:1.0: bad descriptor, ignoring hub [ 1012.952613][ T7923] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1012.953432][ T7923] cdc_wdm 10-1:1.0: skipping garbage [ 1012.953447][ T7923] cdc_wdm 10-1:1.0: skipping garbage [ 1013.759065][ T6007] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1013.770998][ T7923] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 1013.771018][ T7923] cdc_wdm 10-1:1.0: Unknown control protocol [ 1013.798531][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.877443][ T6007] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1013.877506][ T6007] dib0700: firmware download failed at 7 with -22 [ 1013.956295][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.997486][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2020'. [ 1014.024457][ T147] bond0 (unregistering): Released all slaves [ 1014.050058][ T6007] usb 10-1: USB disconnect, device number 7 [ 1014.454178][T13720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.454302][T13720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.454620][T13720] bridge_slave_0: entered allmulticast mode [ 1014.470360][T13720] bridge_slave_0: entered promiscuous mode [ 1014.494642][T13720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.505913][T13720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.506112][T13720] bridge_slave_1: entered allmulticast mode [ 1014.508347][T13720] bridge_slave_1: entered promiscuous mode [ 1014.675804][ T147] hsr_slave_0: left promiscuous mode [ 1014.835772][ T147] hsr_slave_1: left promiscuous mode [ 1014.836679][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.886319][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.886518][ T7923] usb 5-1: USB disconnect, device number 16 [ 1015.867816][T13869] binder: BINDER_SET_CONTEXT_MGR already set [ 1015.867831][T13869] binder: 13867:13869 ioctl 4018620d 2000000002c0 returned -16 [ 1016.126983][ T6023] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1016.275745][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 1016.279186][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.279205][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.279228][ T6023] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1016.279241][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.351025][ T6023] usb 5-1: config 0 descriptor?? [ 1016.589976][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.590429][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.830338][T13864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2024'. [ 1017.970019][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1018.066775][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1018.191584][ T7195] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1018.406193][ T7195] usb 10-1: Using ep0 maxpacket: 32 [ 1018.409212][ T7195] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.409245][ T7195] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.409284][ T7195] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1018.409309][ T7195] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.427171][ T7195] usb 10-1: config 0 descriptor?? [ 1018.645781][T13883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.646695][T13883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.469513][T13887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.477200][T13887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.249796][ T6023] usbhid 5-1:0.0: can't add hid device: -71 [ 1020.249914][ T6023] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1020.307874][ T6023] usb 5-1: USB disconnect, device number 17 [ 1020.386573][T13720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.461707][T13720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.844073][ T7195] usbhid 10-1:0.0: can't add hid device: -71 [ 1021.844195][ T7195] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1021.869763][ T7195] usb 10-1: USB disconnect, device number 8 [ 1022.117761][T13720] team0: Port device team_slave_0 added [ 1022.170442][T13720] team0: Port device team_slave_1 added [ 1024.008048][ T6023] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1024.580890][T13720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.580907][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.580936][T13720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.588147][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 1024.661040][ T6023] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1024.661059][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.669813][T13720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.669828][T13720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.669853][T13720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.794135][ T6023] usb 5-1: config 0 descriptor?? [ 1024.835562][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 1024.852804][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 1024.865060][T13932] ceph: No mds server is up or the cluster is laggy [ 1024.873886][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 1024.874064][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 1025.008220][ T6023] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1025.010052][ T6023] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1025.010098][ T6023] dib0700: firmware download failed at 7 with -22 [ 1025.453609][T13720] hsr_slave_0: entered promiscuous mode [ 1025.464875][T13720] hsr_slave_1: entered promiscuous mode [ 1025.474484][T13720] debugfs: 'hsr0' already exists in 'hsr' [ 1025.474501][T13720] Cannot create hsr debugfs directory [ 1025.605787][ T6023] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1025.775839][ T6023] usb 10-1: Using ep0 maxpacket: 32 [ 1025.778858][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.778889][ T6023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.778927][ T6023] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1025.778950][ T6023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.830353][ T6023] usb 10-1: config 0 descriptor?? [ 1026.053608][T13939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.075424][T13939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.838517][ T7195] usb 5-1: USB disconnect, device number 18 [ 1027.025921][ T6007] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1028.096257][ T7923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1028.195779][ T6007] usb 2-1: Using ep0 maxpacket: 32 [ 1028.199527][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.199558][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.199596][ T6007] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1028.199619][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.215475][ T6007] usb 2-1: config 0 descriptor?? [ 1028.364457][ T6023] usbhid 10-1:0.0: can't add hid device: -71 [ 1028.364577][ T6023] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1028.416453][ T6023] usb 10-1: USB disconnect, device number 9 [ 1028.435754][ T7923] usb 5-1: Using ep0 maxpacket: 16 [ 1028.454116][ T7923] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1028.454144][ T7923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.454244][ T7923] usb 5-1: Product: syz [ 1028.454259][ T7923] usb 5-1: Manufacturer: syz [ 1028.454274][ T7923] usb 5-1: SerialNumber: syz [ 1028.462058][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.506367][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.742706][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.743200][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.412253][T13720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1030.473648][T13720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1030.598661][ T7923] usb 5-1: USB disconnect, device number 19 [ 1030.634992][T13720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1030.710296][T13720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1030.713465][T13994] loop2: detected capacity change from 0 to 7 [ 1031.015554][T13988] Dev loop2: unable to read RDB block 7 [ 1031.018674][T13988] loop2: unable to read partition table [ 1031.028970][T13988] loop2: partition table beyond EOD, truncated [ 1031.218745][T13994] Dev loop2: unable to read RDB block 7 [ 1031.218792][T13994] loop2: unable to read partition table [ 1031.220700][T13994] loop2: partition table beyond EOD, truncated [ 1031.221160][T13994] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1031.399040][T13720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.693999][T13720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.816455][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.818103][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.983269][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.983363][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.282366][ T6007] usbhid 2-1:0.0: can't add hid device: -71 [ 1033.282486][ T6007] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1033.323635][ T6007] usb 2-1: USB disconnect, device number 21 [ 1033.587154][ T5803] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1033.736287][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 1033.739663][ T5803] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1033.739680][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.790340][ T5803] usb 5-1: config 0 descriptor?? [ 1034.778635][ T5803] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1034.780621][ T5803] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1034.780668][ T5803] dib0700: firmware download failed at 7 with -22 [ 1034.995585][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.170355][T13720] veth0_vlan: entered promiscuous mode [ 1035.237205][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1035.244768][T13720] veth1_vlan: entered promiscuous mode [ 1035.258019][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2053'. [ 1035.370336][T13720] veth0_macvtap: entered promiscuous mode [ 1035.384814][T13720] veth1_macvtap: entered promiscuous mode [ 1035.385952][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1035.411409][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.411428][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.411449][ T5876] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1035.411462][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.420995][ T5876] usb 2-1: config 0 descriptor?? [ 1035.554896][T13720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.624751][T14038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.636774][T14038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.825595][T13720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.774625][T13622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.775026][T13622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.775564][T13622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.776607][T13622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.855524][ T6007] usb 5-1: USB disconnect, device number 20 [ 1038.037708][ T5876] usbhid 2-1:0.0: can't add hid device: -71 [ 1038.039871][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1038.066038][ T5876] usb 2-1: USB disconnect, device number 22 [ 1038.080077][ T7540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.080095][ T7540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.822008][T11002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.822031][T11002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.076222][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.076775][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.244269][T14072] loop2: detected capacity change from 0 to 7 [ 1039.321323][T13988] Dev loop2: unable to read RDB block 7 [ 1039.321384][T13988] loop2: unable to read partition table [ 1039.322207][T13988] loop2: partition table beyond EOD, truncated [ 1039.356475][T14072] Dev loop2: unable to read RDB block 7 [ 1039.356522][T14072] loop2: unable to read partition table [ 1039.356733][T14072] loop2: partition table beyond EOD, truncated [ 1039.356764][T14072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1040.996583][ T6007] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1042.042266][ T6007] usb 2-1: Using ep0 maxpacket: 32 [ 1042.073847][ T6007] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1042.073878][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.107487][ T6007] usb 2-1: config 0 descriptor?? [ 1042.585821][ T6007] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1042.588417][ T6007] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1042.588474][ T6007] dib0700: firmware download failed at 7 with -22 [ 1044.031532][ T6007] usb 2-1: USB disconnect, device number 23 [ 1045.105534][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2066'. [ 1046.712603][ T5121] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1048.387360][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.387869][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.772390][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1050.985728][ T5916] usb 5-1: device not accepting address 21, error -71 [ 1051.125762][T12749] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1051.275828][T12749] usb 10-1: Using ep0 maxpacket: 32 [ 1051.292588][T12749] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1051.292605][T12749] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.354028][T12749] usb 10-1: config 0 descriptor?? [ 1051.588427][ T6007] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1051.685820][T12749] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1051.688338][T12749] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1051.688389][T12749] dib0700: firmware download failed at 7 with -22 [ 1051.755791][ T6007] usb 2-1: Using ep0 maxpacket: 16 [ 1051.759953][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.759990][ T6007] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1051.760003][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.763065][ T6007] usb 2-1: config 0 descriptor?? [ 1052.410594][ T6007] usbhid 2-1:0.0: can't add hid device: -71 [ 1052.440323][ T6007] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1052.539450][ T6007] usb 2-1: USB disconnect, device number 24 [ 1052.554861][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2086'. [ 1053.591635][ T5916] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1054.389094][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.389557][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.613745][ T31] usb 10-1: USB disconnect, device number 10 [ 1054.624407][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 1054.639189][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.639223][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.639246][ T5916] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1054.639259][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.713958][ T5916] usb 2-1: config 0 descriptor?? [ 1054.927221][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.927809][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.060425][T14222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.060918][T14222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.568868][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 1057.568985][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1057.596393][ T5916] usb 2-1: USB disconnect, device number 25 [ 1057.695818][ T31] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1057.845726][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 1057.849925][ T31] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1057.849953][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.850077][ T31] usb 10-1: Product: syz [ 1057.850092][ T31] usb 10-1: Manufacturer: syz [ 1057.850106][ T31] usb 10-1: SerialNumber: syz [ 1057.977914][T14235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.980699][T14235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.278193][ T31] usb 10-1: USB disconnect, device number 11 [ 1061.957720][ T6023] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1062.105721][ T6023] usb 1-1: Using ep0 maxpacket: 32 [ 1062.108797][ T6023] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1062.108815][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.177789][ T6023] usb 1-1: config 0 descriptor?? [ 1062.422514][ T6023] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1062.424477][ T6023] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1062.424504][ T6023] dib0700: firmware download failed at 7 with -22 [ 1062.581655][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2098'. [ 1064.253077][T12749] usb 1-1: USB disconnect, device number 2 [ 1064.812359][T12749] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1065.965775][T12749] usb 10-1: Using ep0 maxpacket: 32 [ 1066.045694][T12749] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.045727][T12749] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.045766][T12749] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1066.045788][T12749] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.120883][T12749] usb 10-1: config 0 descriptor?? [ 1066.375295][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.393581][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.308421][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.312168][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.504137][T12749] usbhid 10-1:0.0: can't add hid device: -71 [ 1069.504503][T12749] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1069.521103][T12749] usb 10-1: USB disconnect, device number 12 [ 1070.847807][ T5916] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1071.017849][ T5916] usb 10-1: Using ep0 maxpacket: 32 [ 1071.302375][T14355] netlink: zone id is out of range [ 1071.302398][T14355] netlink: zone id is out of range [ 1071.302828][T14355] netlink: zone id is out of range [ 1071.302882][T14355] netlink: zone id is out of range [ 1071.303050][T14355] netlink: zone id is out of range [ 1071.303263][T14355] netlink: zone id is out of range [ 1071.303471][T14355] netlink: zone id is out of range [ 1071.303479][T14355] netlink: zone id is out of range [ 1071.303487][T14355] netlink: zone id is out of range [ 1071.303694][T14355] netlink: zone id is out of range [ 1071.441062][ T5916] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1071.441088][ T5916] usb 10-1: config 0 has no interface number 0 [ 1071.520035][ T5916] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1071.520053][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.520064][ T5916] usb 10-1: Product: syz [ 1071.520073][ T5916] usb 10-1: Manufacturer: syz [ 1071.520081][ T5916] usb 10-1: SerialNumber: syz [ 1071.538697][ T5916] usb 10-1: config 0 descriptor?? [ 1071.588345][ T5916] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1071.588370][ T5916] usb 10-1: selecting invalid altsetting 1 [ 1071.588391][ T5916] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1071.639853][ T5916] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1071.640087][ T5916] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1071.640122][ T5916] usb 10-1: media controller created [ 1071.695181][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.283360][ T5916] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1073.283416][ T5916] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1073.283889][ T5916] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1073.543502][ T5916] usb 10-1: USB disconnect, device number 13 [ 1073.735790][ T6023] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1074.115823][ T6023] usb 2-1: Using ep0 maxpacket: 32 [ 1074.118678][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.118710][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.118748][ T6023] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1074.118770][ T6023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.123877][ T6023] usb 2-1: config 0 descriptor?? [ 1074.945782][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.946353][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.067881][T14388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.068391][T14388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.049905][ T6023] usbhid 2-1:0.0: can't add hid device: -71 [ 1078.050034][ T6023] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1078.115826][ T6023] usb 2-1: USB disconnect, device number 26 [ 1078.525919][T14421] binder: 14407:14421 ioctl c0306201 0 returned -14 [ 1080.786884][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 1080.795299][T14442] erspan0: entered promiscuous mode [ 1081.690418][T14442] erspan0: left promiscuous mode [ 1083.474337][ T6785] libceph: connect (1)[c::]:6789 error -101 [ 1083.474516][ T6785] libceph: mon0 (1)[c::]:6789 connect error [ 1084.442607][T14454] ceph: No mds server is up or the cluster is laggy [ 1084.486119][ T6785] libceph: connect (1)[c::]:6789 error -101 [ 1084.486305][ T6785] libceph: mon0 (1)[c::]:6789 connect error [ 1085.940029][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1085.940648][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1086.094100][T14481] binder: 14474:14481 ioctl c0306201 0 returned -14 [ 1092.409465][T14541] binder: 14538:14541 ioctl c0306201 0 returned -14 [ 1094.765776][ T7923] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1095.163372][ T7923] usb 10-1: Using ep0 maxpacket: 32 [ 1095.196869][ T7923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.196901][ T7923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.196944][ T7923] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1095.196969][ T7923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.277830][ T7923] usb 10-1: config 0 descriptor?? [ 1097.622405][ T7923] usbhid 10-1:0.0: can't add hid device: -71 [ 1097.622526][ T7923] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1097.634511][T14594] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.634525][T14594] binder: 14593:14594 ioctl 4018620d 2000000002c0 returned -16 [ 1097.644220][ T7923] usb 10-1: USB disconnect, device number 14 [ 1105.017410][ T37] audit: type=1800 audit(1768448652.994:2558): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2194" name="file0" dev="overlay" ino=532 res=0 errno=0 [ 1109.248069][ T5121] Bluetooth: hci3: command 0x1003 tx timeout [ 1109.248451][ T9432] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1112.861804][ T1159] Bluetooth: hci3: Frame reassembly failed (-84) [ 1114.895759][ T9987] Bluetooth: hci3: command 0x1003 tx timeout [ 1114.896105][T14706] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1115.965453][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.965523][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.562648][T14823] fuse: Unknown parameter '0xffffffffffffffffˆ' [ 1120.707224][ T37] audit: type=1326 audit(1768448668.694:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.716754][ T37] audit: type=1326 audit(1768448668.704:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.717390][ T37] audit: type=1326 audit(1768448668.704:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.723632][ T37] audit: type=1326 audit(1768448668.704:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.724035][ T37] audit: type=1326 audit(1768448668.704:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.880808][ T37] audit: type=1326 audit(1768448668.704:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.880859][ T37] audit: type=1326 audit(1768448668.864:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.880902][ T37] audit: type=1326 audit(1768448668.864:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1120.880944][ T37] audit: type=1326 audit(1768448668.864:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1121.045753][ T37] audit: type=1326 audit(1768448669.014:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14814 comm="syz.9.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee77d8f749 code=0x7ffc0000 [ 1122.758810][T14849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1122.771044][T14849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1122.772350][T14849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1122.773795][T14849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1122.775043][T14849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1122.819383][T14849] Bluetooth: hci3: command 0x1003 tx timeout [ 1122.819562][T14706] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1123.085734][ T9987] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.931193][ T9987] Bluetooth: hci6: command tx timeout [ 1126.986861][ T9432] Bluetooth: hci6: command tx timeout [ 1128.534382][T14886] fuse: Unknown parameter '0xffffffffffffffff~' [ 1129.055725][ T9432] Bluetooth: hci6: command tx timeout [ 1129.348683][T14901] loop2: detected capacity change from 0 to 7 [ 1129.365825][T14901] Dev loop2: unable to read RDB block 7 [ 1129.365874][T14901] loop2: unable to read partition table [ 1129.366069][T14901] loop2: partition table beyond EOD, truncated [ 1129.366087][T14901] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1131.148558][ T9432] Bluetooth: hci6: command tx timeout [ 1131.430771][ T7513] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.870881][T14939] fuse: Unknown parameter '0xffffffffffffffff¬' [ 1135.026514][T14952] loop9: detected capacity change from 0 to 8 [ 1135.234997][T14952] Dev loop9: unable to read RDB block 8 [ 1135.235053][T14952] loop9: unable to read partition table [ 1135.235284][T14952] loop9: partition table beyond EOD, truncated [ 1135.235303][T14952] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 1135.564325][ T7513] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.945249][ T7513] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.397443][T14979] fuse: Unknown parameter '0xffffffffffffffffŒ' [ 1140.865345][ T7513] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.203323][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.205167][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.186385][T14847] chnl_net:caif_netlink_parms(): no params data found [ 1145.435773][ T6013] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1145.596298][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 1145.600713][ T6013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.600729][ T6013] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1145.600759][ T6013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1145.600775][ T6013] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1145.600799][ T6013] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1145.600812][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.704742][ T6013] hub 1-1:1.0: bad descriptor, ignoring hub [ 1145.704782][ T6013] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1145.725867][ T6013] cdc_wdm 1-1:1.0: skipping garbage [ 1145.725886][ T6013] cdc_wdm 1-1:1.0: skipping garbage [ 1145.763764][ T6013] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1145.763784][ T6013] cdc_wdm 1-1:1.0: Unknown control protocol [ 1146.036295][ T7513] bridge_slave_1: left allmulticast mode [ 1146.036330][ T7513] bridge_slave_1: left promiscuous mode [ 1146.036565][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.156331][ T7513] bridge_slave_0: left allmulticast mode [ 1146.156361][ T7513] bridge_slave_0: left promiscuous mode [ 1146.156724][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.316036][ T6023] usb 1-1: USB disconnect, device number 3 [ 1146.573191][ T7513] batman_adv: batadv0: Interface deactivated: gretap1 [ 1146.805699][ T6023] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1146.981345][T15066] fuse: Unknown parameter '0xffffffffffffffffÉ' [ 1147.067513][ T6023] usb 5-1: Using ep0 maxpacket: 16 [ 1147.078456][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.078505][ T6023] usb 5-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1147.078527][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.117401][ T6023] usb 5-1: config 0 descriptor?? [ 1148.462253][ T6023] usbhid 5-1:0.0: can't add hid device: -71 [ 1148.462326][ T6023] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1148.551374][ T6023] usb 5-1: USB disconnect, device number 23 [ 1150.029896][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.030390][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.294943][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1152.235696][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1152.238138][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.238170][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.238209][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1152.238233][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.315983][ T31] usb 5-1: config 0 descriptor?? [ 1152.523902][T15102] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.523917][T15102] binder: 15101:15102 ioctl 4018620d 2000000002c0 returned -16 [ 1152.586512][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.597881][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.308656][T15108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.312553][T15108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.870708][ T7513] batman_adv: batadv0: Removing interface: gretap1 [ 1154.705724][ T6023] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1154.906389][ T6023] usb 1-1: Using ep0 maxpacket: 8 [ 1154.954023][ T6023] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.954050][ T6023] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1154.954869][ T6023] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1154.954901][ T6023] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1154.955041][ T6023] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1154.955065][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.989777][ T6023] hub 1-1:1.0: bad descriptor, ignoring hub [ 1154.990025][ T6023] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1154.992450][ T6023] cdc_wdm 1-1:1.0: skipping garbage [ 1154.992465][ T6023] cdc_wdm 1-1:1.0: skipping garbage [ 1155.252960][ T6023] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 1155.252983][ T6023] cdc_wdm 1-1:1.0: Unknown control protocol [ 1155.807296][ T7513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.840747][ T5916] usb 1-1: USB disconnect, device number 4 [ 1155.866212][ T3462] raw-gadget.0 gadget.8: failed to queue suspend event [ 1155.907636][ T7513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.948451][ T7513] bond0 (unregistering): Released all slaves [ 1156.587331][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 1156.587450][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1156.609285][ T31] usb 5-1: USB disconnect, device number 24 [ 1157.895750][ T6152] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1158.155705][ T6152] usb 10-1: Using ep0 maxpacket: 16 [ 1158.157495][ T6152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.157523][ T6152] usb 10-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1158.157536][ T6152] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.161031][ T6152] usb 10-1: config 0 descriptor?? [ 1159.041361][T15129] fuse: Unknown parameter '0xffffffffffffffff×' [ 1159.445293][T14847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.453545][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.454170][T14847] bridge_slave_0: entered allmulticast mode [ 1159.501125][T14847] bridge_slave_0: entered promiscuous mode [ 1159.583267][T14847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.589894][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.593020][T14847] bridge_slave_1: entered allmulticast mode [ 1159.654272][T14847] bridge_slave_1: entered promiscuous mode [ 1160.510832][ T6152] usbhid 10-1:0.0: can't add hid device: -71 [ 1160.510905][ T6152] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1160.524376][ T6152] usb 10-1: USB disconnect, device number 15 [ 1162.255441][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.292549][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.476159][ T7513] hsr_slave_0: left promiscuous mode [ 1162.516925][ T7513] hsr_slave_1: left promiscuous mode [ 1162.517555][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.517573][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.555694][ T6023] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1162.576560][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.576579][ T7513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.672641][ T7513] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1162.672668][ T7513] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1162.706281][ T6023] usb 10-1: Using ep0 maxpacket: 32 [ 1162.707767][ T6023] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1162.707781][ T6023] usb 10-1: config 0 has no interface number 0 [ 1162.709600][ T6023] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1162.709616][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.709626][ T6023] usb 10-1: Product: syz [ 1162.709634][ T6023] usb 10-1: Manufacturer: syz [ 1162.709641][ T6023] usb 10-1: SerialNumber: syz [ 1162.723302][ T6023] usb 10-1: config 0 descriptor?? [ 1162.788126][ T6023] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1162.788142][ T6023] usb 10-1: selecting invalid altsetting 1 [ 1162.788151][ T6023] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1162.871890][ T6023] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1162.872097][ T6023] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1162.872131][ T6023] usb 10-1: media controller created [ 1164.272073][ T6023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1164.340832][ T7513] veth1_macvtap: left promiscuous mode [ 1164.340933][ T7513] veth0_macvtap: left promiscuous mode [ 1164.341173][ T7513] veth1_vlan: left promiscuous mode [ 1164.341337][ T7513] veth0_vlan: left promiscuous mode [ 1164.505826][ T6023] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1164.505881][ T6023] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1164.506340][ T6023] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1164.605834][T15169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.606313][T15169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.691560][ T6023] usb 10-1: USB disconnect, device number 16 [ 1164.779030][T15171] raw-gadget.0 gadget.8: failed to queue resume event [ 1164.826679][ T3954] raw-gadget.0 gadget.8: failed to queue suspend event [ 1164.928657][T15167] raw-gadget.0 gadget.8: failed to queue resume event [ 1164.962712][ T1512] raw-gadget.0 gadget.8: failed to queue suspend event [ 1166.157491][T15187] loop2: detected capacity change from 0 to 7 [ 1166.158500][T15187] Dev loop2: unable to read RDB block 7 [ 1166.158543][T15187] loop2: unable to read partition table [ 1166.158752][T15187] loop2: partition table beyond EOD, truncated [ 1166.158770][T15187] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1167.868338][T15192] fuse: Unknown parameter '0xffffffffffffffffÑ' [ 1167.894229][ T6023] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1168.065749][ T6023] usb 5-1: Using ep0 maxpacket: 16 [ 1168.068426][ T6023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.068472][ T6023] usb 5-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 1168.068497][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.075014][ T6023] usb 5-1: config 0 descriptor?? [ 1168.075733][ T5803] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1168.275715][ T5803] usb 10-1: Using ep0 maxpacket: 32 [ 1168.278294][ T5803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.278333][ T5803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.278416][ T5803] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1168.278440][ T5803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.336573][ T5803] usb 10-1: config 0 descriptor?? [ 1168.582803][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.631812][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.844160][ T6023] usbhid 5-1:0.0: can't add hid device: -71 [ 1168.844341][ T6023] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1168.870045][ T6023] usb 5-1: USB disconnect, device number 25 [ 1169.329800][T15214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.333835][T15214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.845714][ T6152] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1172.037448][ T6023] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1172.065733][ T6152] usb 1-1: Using ep0 maxpacket: 32 [ 1172.071031][ T6152] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1172.071050][ T6152] usb 1-1: config 0 has no interface number 0 [ 1172.099896][ T7513] team0 (unregistering): Port device team_slave_1 removed [ 1172.149594][ T6152] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1172.149613][ T6152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.149624][ T6152] usb 1-1: Product: syz [ 1172.149632][ T6152] usb 1-1: Manufacturer: syz [ 1172.149640][ T6152] usb 1-1: SerialNumber: syz [ 1172.212397][ T6152] usb 1-1: config 0 descriptor?? [ 1172.234903][ T6152] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1172.234928][ T6152] usb 1-1: selecting invalid altsetting 1 [ 1172.234944][ T6152] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1172.265764][ T6023] usb 5-1: Using ep0 maxpacket: 8 [ 1172.269800][ T6023] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.269816][ T6023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1172.269844][ T6023] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1172.269860][ T6023] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1172.269883][ T6023] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1172.269936][ T6023] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.405848][ T6152] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1172.412851][ T6152] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1172.412887][ T6152] usb 1-1: media controller created [ 1173.273842][ T7513] team0 (unregistering): Port device team_slave_0 removed [ 1173.315463][ T6023] hub 5-1:1.0: bad descriptor, ignoring hub [ 1173.315503][ T6023] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1173.386707][ T6023] cdc_wdm 5-1:1.0: skipping garbage [ 1173.386728][ T6023] cdc_wdm 5-1:1.0: skipping garbage [ 1173.660717][ T5803] usbhid 10-1:0.0: can't add hid device: -32 [ 1173.806265][ T5803] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1173.878156][T15228] raw-gadget.0 gadget.8: failed to queue resume event [ 1173.882909][ T6152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1173.948830][ T43] raw-gadget.0 gadget.8: failed to queue suspend event [ 1174.014777][ T6023] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1174.014799][ T6023] cdc_wdm 5-1:1.0: Unknown control protocol [ 1174.228017][ T6152] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1174.228071][ T6152] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1174.232903][ T6152] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1174.347708][ T6152] usb 1-1: USB disconnect, device number 5 [ 1174.436945][T15227] raw-gadget.0 gadget.8: failed to queue resume event [ 1174.518064][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1174.522013][ T13] raw-gadget.0 gadget.8: failed to queue suspend event [ 1174.694630][T15226] raw-gadget.0 gadget.8: failed to queue resume event [ 1174.735854][T13622] raw-gadget.0 gadget.8: failed to queue suspend event [ 1174.847352][T15238] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2332'. [ 1175.556070][ T8279] usb 5-1: USB disconnect, device number 26 [ 1177.229487][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.229789][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.152141][T15238] erspan0: entered promiscuous mode [ 1178.166637][T15238] erspan0: left promiscuous mode [ 1179.462056][T15264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.462559][T15264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.790992][T14847] team0: Port device team_slave_0 added [ 1179.801014][ T5889] usb 10-1: USB disconnect, device number 17 [ 1179.816455][T14847] team0: Port device team_slave_1 added [ 1181.747307][ T8279] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1182.185693][ T8279] usb 1-1: Using ep0 maxpacket: 32 [ 1182.834073][ T8279] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1182.834090][ T8279] usb 1-1: config 0 has no interface number 0 [ 1182.859305][ T8279] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1182.859325][ T8279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.859335][ T8279] usb 1-1: Product: syz [ 1182.859343][ T8279] usb 1-1: Manufacturer: syz [ 1182.859351][ T8279] usb 1-1: SerialNumber: syz [ 1182.907617][ T8279] usb 1-1: config 0 descriptor?? [ 1182.927761][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.927778][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.927803][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.930573][ T8279] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1182.930600][ T8279] usb 1-1: selecting invalid altsetting 1 [ 1182.930625][ T8279] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1184.394047][ T8279] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1184.394445][ T8279] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1184.394496][ T8279] usb 1-1: media controller created [ 1184.397511][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.397526][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.397552][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.499478][ T8279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1184.757671][T15300] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 1184.806538][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2346'. [ 1185.049033][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1185.049076][ T37] audit: type=1326 audit(1768448732.714:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.049443][ T37] audit: type=1326 audit(1768448732.714:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.049669][ T37] audit: type=1326 audit(1768448732.714:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.049921][ T37] audit: type=1326 audit(1768448732.714:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.050187][ T37] audit: type=1326 audit(1768448732.724:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.050461][ T37] audit: type=1326 audit(1768448732.724:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.050729][ T37] audit: type=1326 audit(1768448732.724:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.051012][ T37] audit: type=1326 audit(1768448732.724:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.054650][ T37] audit: type=1326 audit(1768448732.724:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.054857][ T37] audit: type=1326 audit(1768448732.724:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15292 comm="syz.8.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4d2df749 code=0x7ffc0000 [ 1185.695952][ T8279] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1185.696006][ T8279] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1185.955740][ T7195] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1186.125658][ T7195] usb 5-1: Using ep0 maxpacket: 32 [ 1186.128340][ T7195] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1186.128368][ T7195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.163970][ T7195] usb 5-1: config 0 descriptor?? [ 1186.231301][ T9987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1186.248103][ T8279] usb 1-1: USB disconnect, device number 6 [ 1186.251631][ T9987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1186.257160][ T9987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1186.261833][ T9987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1186.262926][ T9987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1186.440418][ T7195] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1186.494281][ T7195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1186.495108][ T7195] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1186.495170][ T7195] usb 5-1: media controller created [ 1186.657596][ T7195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1186.879643][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.880195][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.882437][T15313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.882934][T15313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.138136][ T7195] DVB: Unable to find symbol dib7000p_attach() [ 1187.138164][ T7195] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1188.138451][ T7195] rc_core: IR keymap rc-dib0700-rc5 not found [ 1188.138472][ T7195] Registered IR keymap rc-empty [ 1188.139591][ T7195] dvb-usb: could not initialize remote control. [ 1188.139602][ T7195] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1188.188215][ T7195] usb 5-1: USB disconnect, device number 27 [ 1188.345736][ T9432] Bluetooth: hci1: command tx timeout [ 1189.461304][ T7195] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1190.450482][ T9432] Bluetooth: hci1: command tx timeout [ 1192.525005][ T9432] Bluetooth: hci1: command tx timeout [ 1192.836599][ T8279] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1192.852233][T15307] chnl_net:caif_netlink_parms(): no params data found [ 1192.885765][ T805] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1192.947919][ T1512] bridge_slave_1: left allmulticast mode [ 1192.947948][ T1512] bridge_slave_1: left promiscuous mode [ 1192.948185][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.988106][ T8279] usb 5-1: Using ep0 maxpacket: 32 [ 1192.994411][ T8279] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.994428][ T8279] usb 5-1: config 0 has no interface number 0 [ 1193.019384][ T8279] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1193.019402][ T8279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.019413][ T8279] usb 5-1: Product: syz [ 1193.019421][ T8279] usb 5-1: Manufacturer: syz [ 1193.019429][ T8279] usb 5-1: SerialNumber: syz [ 1193.055212][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 1193.071415][ T805] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1193.071453][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.073729][ T1512] bridge_slave_0: left allmulticast mode [ 1193.073753][ T1512] bridge_slave_0: left promiscuous mode [ 1193.074097][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.084494][ T8279] usb 5-1: config 0 descriptor?? [ 1193.093801][ T805] usb 1-1: config 0 descriptor?? [ 1193.124723][ T8279] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1193.124739][ T8279] usb 5-1: selecting invalid altsetting 1 [ 1193.124748][ T8279] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1193.159597][ T8279] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1193.159860][ T8279] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1193.159888][ T8279] usb 5-1: media controller created [ 1193.361222][ T805] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1193.376774][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1193.384666][ T8279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.152364][ T805] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1194.168755][ T805] usb 1-1: media controller created [ 1194.373348][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.394745][ T8279] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1194.394800][ T8279] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1194.396192][ T8279] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1194.576421][ T9432] Bluetooth: hci1: command tx timeout [ 1194.609844][ T805] DVB: Unable to find symbol dib7000p_attach() [ 1194.609859][ T805] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1194.696595][ T805] rc_core: IR keymap rc-dib0700-rc5 not found [ 1194.696609][ T805] Registered IR keymap rc-empty [ 1194.696772][ T805] dvb-usb: could not initialize remote control. [ 1194.696777][ T805] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1194.734219][ T8279] usb 5-1: USB disconnect, device number 28 [ 1194.742703][ T805] usb 1-1: USB disconnect, device number 7 [ 1194.887965][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.966016][ T805] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1195.000570][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.076526][ T1512] bond0 (unregistering): Released all slaves [ 1195.429096][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.516622][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.980527][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 1197.610253][T15414] loop2: detected capacity change from 0 to 7 [ 1197.666870][T15414] Dev loop2: unable to read RDB block 7 [ 1197.666914][T15414] loop2: unable to read partition table [ 1197.667115][T15414] loop2: partition table beyond EOD, truncated [ 1197.672954][T15414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1198.007677][T15232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1198.908627][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 1198.925652][T15232] usb 1-1: Using ep0 maxpacket: 32 [ 1198.927378][T15232] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1198.927394][T15232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.987777][T15232] usb 1-1: config 0 descriptor?? [ 1199.247118][T15232] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1199.267096][T15232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1199.268082][T15232] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1199.268133][T15232] usb 1-1: media controller created [ 1199.310458][T15232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1199.597550][T15232] DVB: Unable to find symbol dib7000p_attach() [ 1199.597566][T15232] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1199.755677][T15232] rc_core: IR keymap rc-dib0700-rc5 not found [ 1199.755697][T15232] Registered IR keymap rc-empty [ 1199.756025][T15232] dvb-usb: could not initialize remote control. [ 1199.756036][T15232] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1199.825795][T15232] usb 1-1: USB disconnect, device number 8 [ 1199.919070][T15232] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1201.763638][T15307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.763834][T15307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.764051][T15307] bridge_slave_0: entered allmulticast mode [ 1201.772628][T15307] bridge_slave_0: entered promiscuous mode [ 1201.799483][T15307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.799670][T15307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.799862][T15307] bridge_slave_1: entered allmulticast mode [ 1201.806160][T15307] bridge_slave_1: entered promiscuous mode [ 1204.558546][T15307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.665185][T15307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.312796][T15514] loop9: detected capacity change from 0 to 8 [ 1207.874108][T15514] Dev loop9: unable to read RDB block 8 [ 1207.874166][T15514] loop9: unable to read partition table [ 1207.874390][T15514] loop9: partition table beyond EOD, truncated [ 1207.874408][T15514] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 1208.968401][T15307] team0: Port device team_slave_0 added [ 1209.040031][T15307] team0: Port device team_slave_1 added [ 1210.846902][T15307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.846918][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.846944][T15307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.849165][T15307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.849178][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.849204][T15307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.319409][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2405'. [ 1212.603278][T15573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.605478][T15573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.874617][T15568] erspan0: entered promiscuous mode [ 1213.025681][T15568] erspan0: left promiscuous mode [ 1216.088511][T15307] hsr_slave_0: entered promiscuous mode [ 1216.094568][T15307] hsr_slave_1: entered promiscuous mode [ 1216.203542][T15601] kAFS: No cell specified [ 1217.497225][ T6007] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1217.922674][ T6007] usb 10-1: Using ep0 maxpacket: 32 [ 1217.930110][ T6007] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1217.930144][ T6007] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1217.930165][ T6007] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1217.930198][ T6007] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1217.930222][ T6007] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.980247][ T6007] usb 10-1: config 0 descriptor?? [ 1218.255773][ T6152] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1218.405756][ T6152] usb 5-1: Using ep0 maxpacket: 32 [ 1218.608351][ T6152] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1218.608378][ T6152] usb 5-1: config 0 has no interface number 0 [ 1219.398810][ T6152] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1219.398842][ T6152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.398864][ T6152] usb 5-1: Product: syz [ 1219.398879][ T6152] usb 5-1: Manufacturer: syz [ 1219.398893][ T6152] usb 5-1: SerialNumber: syz [ 1219.479955][ T6152] usb 5-1: config 0 descriptor?? [ 1219.502555][ T6152] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1219.502590][ T6152] usb 5-1: selecting invalid altsetting 1 [ 1219.502605][ T6152] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1219.574455][ T6152] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1219.574836][ T6152] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1219.574890][ T6152] usb 5-1: media controller created [ 1219.586265][ T6007] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.9-1/input0 [ 1219.627173][ T6152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1219.710218][ T6007] corsair-cpro 0003:1B1C:0C10.0004: probe with driver corsair-cpro failed with error -90 [ 1220.582755][ T6007] usb 10-1: USB disconnect, device number 18 [ 1221.153346][T15642] fido_id[15642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1221.202841][ T6152] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1221.202885][ T6152] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1221.203309][ T6152] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1221.260840][T15651] afs: Unknown parameter 'dy' [ 1221.300121][ T6152] usb 5-1: USB disconnect, device number 29 [ 1226.163694][T15696] afs: Unknown parameter 'dy' [ 1226.527090][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1228.205629][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1228.208056][ T5876] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1228.208087][ T5876] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1228.208110][ T5876] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1228.208143][ T5876] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1228.208166][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.428405][ T6007] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1229.150872][ T5876] usb 1-1: config 0 descriptor?? [ 1229.294238][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 1229.294363][ T5876] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1229.311842][ T5876] usb 1-1: USB disconnect, device number 9 [ 1229.315775][ T6007] usb 10-1: Using ep0 maxpacket: 32 [ 1229.318248][ T6007] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1229.318271][ T6007] usb 10-1: config 0 has no interface number 0 [ 1229.322461][ T6007] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1229.322487][ T6007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.322507][ T6007] usb 10-1: Product: syz [ 1229.322522][ T6007] usb 10-1: Manufacturer: syz [ 1229.322535][ T6007] usb 10-1: SerialNumber: syz [ 1230.685182][ T6007] usb 10-1: config 0 descriptor?? [ 1230.715459][ T6007] usb 10-1: can't set config #0, error -71 [ 1230.889858][ T6007] usb 10-1: USB disconnect, device number 19 [ 1230.914258][T15733] afs: Unknown parameter 'dy' [ 1233.568362][T15773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.568862][T15773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.411044][ T5803] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1234.965669][ T5803] usb 5-1: Using ep0 maxpacket: 32 [ 1234.970942][ T5803] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1234.970976][ T5803] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1234.971002][ T5803] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1234.971035][ T5803] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1234.971059][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.090155][ T5803] usb 5-1: config 0 descriptor?? [ 1235.920555][ T5803] usbhid 5-1:0.0: can't add hid device: -71 [ 1235.920674][ T5803] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1236.033164][ T5803] usb 5-1: USB disconnect, device number 30 [ 1237.491793][T15307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1237.599404][T15307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1237.692884][T15307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1238.696958][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.697364][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.864547][T15307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1239.087125][T15817] overlayfs: failed to resolve './bus': -2 [ 1239.634271][T15307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.697669][T15307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.753560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.753759][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.775321][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.775456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.659209][T15307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.860317][T15307] veth0_vlan: entered promiscuous mode [ 1240.929700][T15307] veth1_vlan: entered promiscuous mode [ 1241.089052][T15307] veth0_macvtap: entered promiscuous mode [ 1241.638083][T15307] veth1_macvtap: entered promiscuous mode [ 1241.748766][T15307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.778823][T15307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.827423][T12306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.828130][T12306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.858657][T12306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.921880][ T7513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.598681][T15878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.613703][T15878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.447544][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.447565][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.325703][ T5803] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1245.344510][ T9987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1245.370263][ T9987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1245.385661][T15301] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1245.388455][ T9987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1245.391807][ T9987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1245.392513][ T9987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1245.485680][ T5803] usb 1-1: Using ep0 maxpacket: 32 [ 1245.491424][ T5803] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1245.491454][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.535686][T15301] usb 5-1: Using ep0 maxpacket: 32 [ 1245.537815][T15301] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1245.537960][T15301] usb 5-1: config 0 has no interface number 0 [ 1245.544526][T15301] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1245.544552][T15301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.544572][T15301] usb 5-1: Product: syz [ 1245.544586][T15301] usb 5-1: Manufacturer: syz [ 1245.544601][T15301] usb 5-1: SerialNumber: syz [ 1245.551828][ T5803] usb 1-1: config 0 descriptor?? [ 1245.619160][T15301] usb 5-1: config 0 descriptor?? [ 1245.624782][T15301] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1245.624807][T15301] usb 5-1: selecting invalid altsetting 1 [ 1245.624823][T15301] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1245.661107][T15301] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1245.661503][T15301] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1245.661554][T15301] usb 5-1: media controller created [ 1245.708455][T15301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1245.825634][ T5803] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1246.888737][T15301] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1246.888788][T15301] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1246.906689][T15890] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 1246.944468][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1246.958848][ T5803] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1246.958903][ T5803] usb 1-1: media controller created [ 1247.013711][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1247.130612][ T5803] DVB: Unable to find symbol dib7000p_attach() [ 1247.130628][ T5803] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1247.365812][ T5803] rc_core: IR keymap rc-dib0700-rc5 not found [ 1247.365833][ T5803] Registered IR keymap rc-empty [ 1247.366114][ T5803] dvb-usb: could not initialize remote control. [ 1247.366124][ T5803] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1247.395974][T15301] usb 5-1: USB disconnect, device number 31 [ 1247.442269][ T5803] usb 1-1: USB disconnect, device number 10 [ 1247.465756][ T9432] Bluetooth: hci3: command tx timeout [ 1247.501050][ T5803] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1247.641465][T15922] overlayfs: failed to resolve './file0': -2 [ 1249.549416][ T9432] Bluetooth: hci3: command tx timeout [ 1249.834704][T15897] chnl_net:caif_netlink_parms(): no params data found [ 1251.021051][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.021543][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.625727][ T9432] Bluetooth: hci3: command tx timeout [ 1252.809695][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.464631][T15992] overlayfs: failed to resolve './file0': -2 [ 1253.495130][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.695643][ T9432] Bluetooth: hci3: command tx timeout [ 1253.826015][T15897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.829357][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.829518][T15897] bridge_slave_0: entered allmulticast mode [ 1253.836222][T15897] bridge_slave_0: entered promiscuous mode [ 1254.045727][T15301] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1254.345638][T15301] usb 1-1: Using ep0 maxpacket: 32 [ 1254.354350][T15301] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1254.354376][T15301] usb 1-1: config 0 has no interface number 0 [ 1254.377340][T15301] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1254.377357][T15301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.377369][T15301] usb 1-1: Product: syz [ 1254.377377][T15301] usb 1-1: Manufacturer: syz [ 1254.377384][T15301] usb 1-1: SerialNumber: syz [ 1255.485717][T15301] usb 1-1: config 0 descriptor?? [ 1255.500050][T15301] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1255.500078][T15301] usb 1-1: selecting invalid altsetting 1 [ 1255.500095][T15301] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1255.518986][T15301] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1255.519435][T15301] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1255.519483][T15301] usb 1-1: media controller created [ 1255.711225][ T5916] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1257.705238][T15301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1257.749631][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.991332][T15301] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1257.991369][T15301] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1257.992329][T15301] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1258.257469][T15301] usb 1-1: USB disconnect, device number 11 [ 1258.282921][T15897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.283046][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.283270][T15897] bridge_slave_1: entered allmulticast mode [ 1258.293056][T15897] bridge_slave_1: entered promiscuous mode [ 1259.834044][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.035750][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.036335][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.081671][T15897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.091543][T15897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.380661][T15897] team0: Port device team_slave_0 added [ 1260.391981][T15897] team0: Port device team_slave_1 added [ 1261.334654][T15897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.334671][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.334697][T15897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.246636][T15897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.246652][T15897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.246677][T15897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.625845][ T5916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1262.776055][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 1262.778814][ T5916] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1262.778842][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.784060][ T5916] usb 5-1: config 0 descriptor?? [ 1262.798924][T15897] hsr_slave_0: entered promiscuous mode [ 1262.800118][T15897] hsr_slave_1: entered promiscuous mode [ 1262.800948][T15897] debugfs: 'hsr0' already exists in 'hsr' [ 1262.800977][T15897] Cannot create hsr debugfs directory [ 1262.972336][ T3462] bridge_slave_1: left allmulticast mode [ 1262.972357][ T3462] bridge_slave_1: left promiscuous mode [ 1262.974354][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.018590][ T5916] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1263.031213][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1263.044711][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1263.044768][ T5916] usb 5-1: media controller created [ 1263.476994][ T3462] bridge_slave_0: left allm[ 1263.476994][ T3462] bridge_slave_0: left allmulticast mode [ 1263.477022][ T3462] bridge_slave_0: left promiscuous mode [ 1263.477296][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.490577][T16067] ------------[ cut here ]------------ [ 1263.490587][T16067] usb 5-1: BOGUS control dir, pipe 80002080 doesn't match bRequestType c0 [ 1263.490599][T16067] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#0: syz.4.2512/16067 [ 1263.490626][T16067] Modules linked in: [ 1263.490640][T16067] CPU: 0 UID: 0 PID: 16067 Comm: syz.4.2512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1263.490656][T16067] Tainted: [L]=SOFTLOCKUP [ 1263.490661][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1263.490668][T16067] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1263.490681][T16067] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1263.490690][T16067] RSP: 0018:ffffc9000df0f940 EFLAGS: 00010246 [ 1263.490700][T16067] RAX: 0000000000000000 RBX: ffff88801dacd400 RCX: 0000000080002080 [ 1263.490709][T16067] RDX: ffff888027c7dde0 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e680 [ 1263.490717][T16067] RBP: 1ffff11004ca4d2c R08: 00000000000000c0 R09: 0000000000000000 [ 1263.490724][T16067] R10: ffffc9000df0fa40 R11: fffff52001be1f54 R12: ffff888144bd4100 [ 1263.490733][T16067] R13: ffff888026526960 R14: 0000000080002080 R15: ffff888027c7dde0 [ 1263.490741][T16067] FS: 00007f1037ebe6c0(0000) GS:ffff888126cee000(0000) knlGS:0000000000000000 [ 1263.490751][T16067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.490759][T16067] CR2: 000000110c3a4de4 CR3: 0000000077bc0000 CR4: 00000000003526f0 [ 1263.490769][T16067] Call Trace: [ 1263.490774][T16067] [ 1263.490782][T16067] ? __init_swait_queue_head+0xa9/0x150 [ 1263.490799][T16067] usb_start_wait_urb+0x115/0x4f0 [ 1263.490816][T16067] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1263.490840][T16067] usb_control_msg+0x232/0x3e0 [ 1263.490855][T16067] dib0700_i2c_xfer+0xba7/0xf70 [ 1263.490882][T16067] __i2c_transfer+0x79a/0x1f00 [ 1263.490897][T16067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1263.490910][T16067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1263.490922][T16067] ? i2c_transfer+0xc8/0x2d0 [ 1263.490936][T16067] i2c_transfer+0x1cc/0x2d0 [ 1263.490950][T16067] i2cdev_ioctl_rdwr+0x460/0x740 [ 1263.490968][T16067] i2cdev_ioctl+0x64e/0x820 [ 1263.490981][T16067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1263.490995][T16067] ? __fget_files+0x3a6/0x420 [ 1263.491006][T16067] ? __fget_files+0x2a/0x420 [ 1263.491018][T16067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1263.491034][T16067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1263.491047][T16067] __se_sys_ioctl+0xff/0x170 [ 1263.491062][T16067] do_syscall_64+0xec/0xf80 [ 1263.491073][T16067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.491083][T16067] ? trace_irq_disable+0x37/0x100 [ 1263.491094][T16067] ? clear_bhb_loop+0x60/0xb0 [ 1263.491107][T16067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.491117][T16067] RIP: 0033:0x7f1039c5f749 [ 1263.491132][T16067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.491141][T16067] RSP: 002b:00007f1037ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.491158][T16067] RAX: ffffffffffffffda RBX: 00007f1039eb5fa0 RCX: 00007f1039c5f749 [ 1263.491167][T16067] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1263.491174][T16067] RBP: 00007f1039ce3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1263.491182][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.491189][T16067] R13: 00007f1039eb6038 R14: 00007f1039eb5fa0 R15: 00007ffdb966d108 [ 1263.491206][T16067] [ 1263.491219][T16067] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1263.491229][T16067] CPU: 0 UID: 0 PID: 16067 Comm: syz.4.2512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1263.491244][T16067] Tainted: [L]=SOFTLOCKUP [ 1263.491248][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1263.491255][T16067] Call Trace: [ 1263.491259][T16067] [ 1263.491264][T16067] vpanic+0x1e0/0x670 [ 1263.491281][T16067] panic+0xb9/0xc0 [ 1263.491295][T16067] ? __pfx_panic+0x10/0x10 [ 1263.491317][T16067] __warn+0x317/0x4b0 [ 1263.491331][T16067] ? usb_submit_urb+0x105c/0x18d0 [ 1263.491345][T16067] ? usb_submit_urb+0x105c/0x18d0 [ 1263.491357][T16067] __report_bug+0x288/0x500 [ 1263.491367][T16067] ? unwind_get_return_address+0x4d/0x90 [ 1263.491381][T16067] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1263.491394][T16067] ? usb_submit_urb+0x105c/0x18d0 [ 1263.491409][T16067] ? __pfx___report_bug+0x10/0x10 [ 1263.491422][T16067] ? __pfx_stack_trace_save+0x10/0x10 [ 1263.491441][T16067] report_bug_entry+0x19a/0x290 [ 1263.491451][T16067] ? usb_submit_urb+0x111c/0x18d0 [ 1263.491463][T16067] ? usb_submit_urb+0x1121/0x18d0 [ 1263.491474][T16067] handle_bug+0xca/0x200 [ 1263.491488][T16067] exc_invalid_op+0x1a/0x50 [ 1263.491500][T16067] asm_exc_invalid_op+0x1a/0x20 [ 1263.491510][T16067] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 1263.491523][T16067] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 1263.491532][T16067] RSP: 0018:ffffc9000df0f940 EFLAGS: 00010246 [ 1263.491540][T16067] RAX: 0000000000000000 RBX: ffff88801dacd400 RCX: 0000000080002080 [ 1263.491548][T16067] RDX: ffff888027c7dde0 RSI: ffffffff8b83ac20 RDI: ffffffff8ee6e680 [ 1263.491556][T16067] RBP: 1ffff11004ca4d2c R08: 00000000000000c0 R09: 0000000000000000 [ 1263.491564][T16067] R10: ffffc9000df0fa40 R11: fffff52001be1f54 R12: ffff888144bd4100 [ 1263.491572][T16067] R13: ffff888026526960 R14: 0000000080002080 R15: ffff888027c7dde0 [ 1263.491592][T16067] ? __init_swait_queue_head+0xa9/0x150 [ 1263.491606][T16067] usb_start_wait_urb+0x115/0x4f0 [ 1263.491623][T16067] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1263.491645][T16067] usb_control_msg+0x232/0x3e0 [ 1263.491662][T16067] dib0700_i2c_xfer+0xba7/0xf70 [ 1263.491687][T16067] __i2c_transfer+0x79a/0x1f00 [ 1263.491700][T16067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1263.491713][T16067] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1263.491725][T16067] ? i2c_transfer+0xc8/0x2d0 [ 1263.491739][T16067] i2c_transfer+0x1cc/0x2d0 [ 1263.491753][T16067] i2cdev_ioctl_rdwr+0x460/0x740 [ 1263.491771][T16067] i2cdev_ioctl+0x64e/0x820 [ 1263.491784][T16067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1263.491798][T16067] ? __fget_files+0x3a6/0x420 [ 1263.491809][T16067] ? __fget_files+0x2a/0x420 [ 1263.491821][T16067] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1263.491837][T16067] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1263.491850][T16067] __se_sys_ioctl+0xff/0x170 [ 1263.491865][T16067] do_syscall_64+0xec/0xf80 [ 1263.491876][T16067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.491886][T16067] ? trace_irq_disable+0x37/0x100 [ 1263.491897][T16067] ? clear_bhb_loop+0x60/0xb0 [ 1263.491910][T16067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.491920][T16067] RIP: 0033:0x7f1039c5f749 [ 1263.491929][T16067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.491938][T16067] RSP: 002b:00007f1037ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.491949][T16067] RAX: ffffffffffffffda RBX: 00007f1039eb5fa0 RCX: 00007f1039c5f749 [ 1263.491957][T16067] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1263.491964][T16067] RBP: 00007f1039ce3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1263.491970][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.491977][T16067] R13: 00007f1039eb6038 R14: 00007f1039eb5fa0 R15: 00007ffdb966d108 [ 1263.491994][T16067] [ 1263.492349][T16067] Kernel Offset: disabled