last executing test programs: 6m42.723005881s ago: executing program 32 (id=213): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 6m2.70952372s ago: executing program 33 (id=417): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xf0fe, @loopback, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r0, 0x0, 0x0, 0x4004845) r1 = syz_usb_connect$hid(0x6, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRES64=r1, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=r1, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000001c0)='.\x00', 0x4000423) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb101}}, {0x0, 0x1e}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) 2m51.997685312s ago: executing program 3 (id=1104): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m51.603018015s ago: executing program 3 (id=1108): syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x64048080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={0x0, 0x2e8}}, 0x48000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 2m49.720349474s ago: executing program 0 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 2m49.644878949s ago: executing program 4 (id=1115): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2m49.640047749s ago: executing program 3 (id=1116): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000005300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @local}}}], 0x20}}], 0x1, 0x4000) 2m49.501825897s ago: executing program 0 (id=1117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m49.366145015s ago: executing program 0 (id=1119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x7fffffff, @remote, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000014c0)="b2", 0x1}], 0x1, &(0x7f0000000700)=[{0x10, 0x109, 0x4b}, {0x10, 0x84, 0x7}], 0x20}, 0x400c4) 2m49.203884444s ago: executing program 3 (id=1120): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x200088c4) 2m49.160912367s ago: executing program 0 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 2m49.015780965s ago: executing program 0 (id=1123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000040)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030e000000000000000400000005000600000000000a00000000000000fc000000000000000000000000000000000004000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) 2m48.93429774s ago: executing program 3 (id=1125): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x1}) 2m47.748652629s ago: executing program 0 (id=1127): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1) 2m47.524579342s ago: executing program 34 (id=1127): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/128, 0x80}], 0x1) 2m47.041873829s ago: executing program 4 (id=1131): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="02", 0x1}, {&(0x7f0000000200)="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", 0xfff}], 0x2) 2m46.601470805s ago: executing program 3 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m46.481910132s ago: executing program 35 (id=1132): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m46.465975113s ago: executing program 4 (id=1134): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4100, 0x1004}], 0x1, 0x6, 0x9) 2m45.962324802s ago: executing program 4 (id=1138): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x200088c4) 2m45.270901412s ago: executing program 4 (id=1140): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2m44.576573953s ago: executing program 4 (id=1143): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 2m43.875898873s ago: executing program 36 (id=1143): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 1m40.967356929s ago: executing program 8 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r5, 0x8926, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1m39.73852729s ago: executing program 8 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0xa070b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0e8}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m37.008122349s ago: executing program 8 (id=1376): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m36.660232429s ago: executing program 8 (id=1379): socket(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc0, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x401}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="c1a5000100"/18, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x50) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7e", 0xa, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r7, 0x0, 0x0, 0x2022, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) 1m35.179577094s ago: executing program 8 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) close_range(r0, r1, 0x0) 1m34.896149801s ago: executing program 8 (id=1386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000580)={0x40002000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m19.858673802s ago: executing program 37 (id=1386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(&(0x7f0000000580)={0x40002000, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m11.509212046s ago: executing program 5 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) 1m10.330162004s ago: executing program 5 (id=1476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m10.07076668s ago: executing program 5 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, 0x0, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m9.913615409s ago: executing program 5 (id=1481): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r7, 0x8926, 0x0) accept(r4, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1m9.288900775s ago: executing program 5 (id=1483): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) 1m9.096664176s ago: executing program 5 (id=1486): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x200088c4) 53.630146582s ago: executing program 38 (id=1486): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc13a, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x7, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x200088c4) 9.611856123s ago: executing program 6 (id=1729): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 9.461489482s ago: executing program 6 (id=1732): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000d80)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f00000006c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000980)={0x34, &(0x7f0000000780)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.340716339s ago: executing program 2 (id=1733): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x2d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898"}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @rthdr={{0x18}}], 0xb8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191", 0xb6}, {&(0x7f0000002840)="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", 0x576}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.555651593s ago: executing program 2 (id=1744): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x4, 0x4, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe}, @generic={0x80, 0xa, "09e12e5f0b6bdcf72f2e"}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hoplimit={{0x14}}], 0x70}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0xfffffffffffffe26) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.08858192s ago: executing program 2 (id=1748): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.045243172s ago: executing program 7 (id=1749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 6.991697895s ago: executing program 2 (id=1750): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) 6.925146979s ago: executing program 7 (id=1751): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(0x0, 0x80800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 6.086636408s ago: executing program 7 (id=1753): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 6.014451831s ago: executing program 7 (id=1754): connect$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x2}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.748663335s ago: executing program 7 (id=1757): ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000001100)={0x0, &(0x7f0000000100)="e9d9fb6b12376b65b45b8c28bcb5204d515593421746f4ebe1d89841a34dac5fc3b1863fbd57669963a97aadd6c91ef1800dd91bfff78aa009e59e31cb6e5634cd09391877faf79b7704a81b64b0e5711f870c27a4f853c7a0bb6a2983a112f540813f6bb8c2de75703c565c54f5d508d4658176defb748279f4b45fd547fa073dae70bc", 0x84}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000000c0)={0x40, 0x11, 0x4, "33f01a4c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 4.748308965s ago: executing program 9 (id=1758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a0753883"], 0x0}, 0x0) 4.31398357s ago: executing program 6 (id=1759): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r5, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42080}, 0x4000054) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b709, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 3.668502428s ago: executing program 6 (id=1760): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.529076716s ago: executing program 6 (id=1762): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.356142326s ago: executing program 1 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400003000008000640"], 0x6c}}, 0x0) 3.29281364s ago: executing program 6 (id=1764): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x9, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0xe, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f00000006c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.088688271s ago: executing program 1 (id=1765): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.852399055s ago: executing program 2 (id=1766): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 2.628537028s ago: executing program 1 (id=1767): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) utimes(&(0x7f0000000040)='./file1\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.43119165s ago: executing program 1 (id=1768): connect$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x2}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.72330146s ago: executing program 2 (id=1769): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212010000000000090401"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.476785435s ago: executing program 9 (id=1770): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r5, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42080}, 0x4000054) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x8004b709, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.355058392s ago: executing program 9 (id=1771): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f00000004c0)="393740701790ac45cb040c65b3b3de6e9b6854fea762efc1ed7920bb3ad7bef3520cc7682e5322996b1f86baecb39ff6e0256a699315ef30f190df037379c3", 0x3f}], 0x2) close(r0) 1.266446647s ago: executing program 1 (id=1772): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_getres(0x6, &(0x7f00000001c0)) 1.180924402s ago: executing program 9 (id=1773): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 1.122973606s ago: executing program 9 (id=1774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.009622122s ago: executing program 9 (id=1775): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x81, 0x1, 0x9}, {0x6, 0x24, 0x1a, 0x22, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xe8, 0x3, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xe, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x7f, 0x2}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 717.543349ms ago: executing program 7 (id=1776): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 1 (id=1777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 75][ T144] device veth0_vlan left promiscuous mode [ 374.389759][ T7219] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 374.744521][ T144] team0 (unregistering): Port device team_slave_1 removed [ 374.758706][ T144] team0 (unregistering): Port device team_slave_0 removed [ 374.774551][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.787722][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.819671][ T4664] Bluetooth: hci0: command 0x041b tx timeout [ 374.857500][ T144] bond0 (unregistering): Released all slaves [ 374.980092][ T4666] Bluetooth: hci1: command 0x0409 tx timeout [ 374.990174][ T7219] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 375.020374][ T7219] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 375.064763][ T7219] usb 6-1: Product: syz [ 375.069046][ T7219] usb 6-1: Manufacturer: syz [ 375.075954][ T7219] usb 6-1: SerialNumber: syz [ 375.079325][ T8640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.103083][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 375.128012][ T8640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.138314][ T8640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.155320][ T7219] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 375.209674][ T8640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.342181][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 375.416485][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.431216][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.448024][ T8689] device bridge_slave_0 entered promiscuous mode [ 375.459280][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.466617][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.475587][ T8689] device bridge_slave_1 entered promiscuous mode [ 375.520008][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.546714][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.575520][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.588210][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.589901][ T7219] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 375.597560][ T8710] device bridge_slave_0 entered promiscuous mode [ 375.621943][ T7219] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 375.669011][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.701168][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.708275][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.774189][ T8710] device bridge_slave_1 entered promiscuous mode [ 375.796067][ T7219] usb 6-1: USB disconnect, device number 4 [ 375.814812][ T4669] usb 7-1: USB disconnect, device number 3 [ 375.886063][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.899092][ T8689] team0: Port device team_slave_0 added [ 375.922165][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.939018][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.982354][ T8689] team0: Port device team_slave_1 added [ 375.991008][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.012498][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.030083][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.039144][ T4515] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.046329][ T4515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.075692][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.089731][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.098435][ T4515] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.105729][ T4515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.143422][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.184938][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.198689][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.208073][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.225879][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.245827][ T4669] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 376.256353][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.303839][ T8710] team0: Port device team_slave_0 added [ 376.323249][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.339651][ T4664] Bluetooth: hci2: command 0x0409 tx timeout [ 376.362276][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.397820][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.426379][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.458142][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.484227][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.512092][ T4669] usb 7-1: Using ep0 maxpacket: 16 [ 376.539778][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.583626][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.605799][ T8710] team0: Port device team_slave_1 added [ 376.640038][ T4669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.661249][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.678481][ T4669] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 376.684807][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.691761][ T4669] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.744352][ T4669] usb 7-1: config 0 descriptor?? [ 376.756197][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.772079][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.794178][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.878265][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.891349][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.899862][ T4659] Bluetooth: hci0: command 0x040f tx timeout [ 376.974683][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.011530][ T8640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.034453][ T8689] device hsr_slave_0 entered promiscuous mode [ 377.060011][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 377.067746][ T8689] device hsr_slave_1 entered promiscuous mode [ 377.087595][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.105280][ T8689] Cannot create hsr debugfs directory [ 377.129206][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.148002][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.212726][ T4669] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 377.248184][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.530767][ T8710] device hsr_slave_0 entered promiscuous mode [ 377.567954][ T8710] device hsr_slave_1 entered promiscuous mode [ 377.590985][ T8710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.616404][ T8710] Cannot create hsr debugfs directory [ 377.639594][ T4233] usb 7-1: USB disconnect, device number 4 [ 378.719899][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726245][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.749663][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 378.924949][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.943173][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.979802][ T4659] Bluetooth: hci0: command 0x0419 tx timeout [ 378.996422][ T8689] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 379.017405][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.041838][ T8689] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 379.071471][ T8689] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 379.125785][ T8689] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 379.149824][ T4195] Bluetooth: hci1: command 0x040f tx timeout [ 379.227917][ T8788] device syzkaller0 entered promiscuous mode [ 379.273333][ T8710] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 379.369775][ T8710] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 379.414366][ T8710] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 379.468449][ T8710] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 379.593030][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.700458][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.719080][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.755140][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.810325][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.824045][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.858855][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.890598][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.921864][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.929041][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.961751][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.977791][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.989740][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.007770][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.015081][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.028643][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.040833][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.050775][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.060177][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.072187][ T8640] device veth0_vlan entered promiscuous mode [ 380.102165][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.114917][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.133145][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.150048][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.170598][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.191165][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.208315][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.225885][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.243981][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.298664][ T8640] device veth1_vlan entered promiscuous mode [ 380.389177][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.405300][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.458661][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.483066][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.501025][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.542291][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.565538][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.576920][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.589408][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.596494][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.614225][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.630212][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.648833][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.655960][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.689839][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.709970][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.801749][ T8689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.820283][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 381.069808][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.323759][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 381.367073][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.389929][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.449691][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.477968][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 381.509746][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.528896][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.553375][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.569111][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.687473][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.714116][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.730230][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.875926][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.122189][ T8640] device veth0_macvtap entered promiscuous mode [ 382.257498][ T8640] device veth1_macvtap entered promiscuous mode [ 382.623814][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.767400][ T8710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.086275][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.276010][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 383.324029][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.336285][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.360886][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.388591][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.429377][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.488300][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.508494][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.518791][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.538270][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.657152][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.092067][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.200938][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.328523][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.469096][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.478981][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.559049][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.769082][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.977698][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.047501][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.086196][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.108081][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.127889][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.166394][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.178665][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.200525][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.326779][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.401928][ T8640] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.430031][ T8640] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.514827][ T8640] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.662094][ T8640] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.855199][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.881506][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.063600][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.079807][ T8877] program syz.6.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.241130][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.298797][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.379048][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.392879][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.432740][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.507142][ T8888] device syzkaller0 entered promiscuous mode [ 386.541708][ T731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.572055][ T731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.790136][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.826858][ T4517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.853438][ T4517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.897753][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.460826][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.564345][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.596473][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.791770][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.868756][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.885453][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.925626][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.946893][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.986756][ T8689] device veth0_vlan entered promiscuous mode [ 388.031073][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.809804][ T8689] device veth1_vlan entered promiscuous mode [ 388.840596][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.860363][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.906621][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.080098][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.111162][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.167026][ T8710] device veth0_vlan entered promiscuous mode [ 389.227570][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.269805][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.318383][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.357296][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.392596][ T8689] device veth0_macvtap entered promiscuous mode [ 389.474180][ T8710] device veth1_vlan entered promiscuous mode [ 389.490550][ T8689] device veth1_macvtap entered promiscuous mode [ 389.587740][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.607522][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.619343][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.649120][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.678183][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.690397][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.709406][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.723398][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.760361][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.768782][ T4259] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 389.808972][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.871799][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.901483][ T8710] device veth0_macvtap entered promiscuous mode [ 389.922235][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.944142][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.980968][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.008426][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.049517][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.084750][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.129240][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 390.161364][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 390.179254][ T4259] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 390.208769][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.209944][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.243564][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.253603][ T144] tipc: Left network mode [ 390.260785][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.273253][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.294800][ T4259] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 390.314186][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.325684][ T4259] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 390.335289][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.348813][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.359144][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.388598][ T4259] usb 6-1: config 0 descriptor?? [ 390.400010][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.412338][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.427258][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.448470][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.468697][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.510910][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.535030][ T8710] device veth1_macvtap entered promiscuous mode [ 390.559667][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 390.571451][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 390.591807][ T8689] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.601672][ T8689] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.615415][ T8689] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.628809][ T8689] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.655120][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.671043][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.682902][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.697263][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.728960][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.740744][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.755244][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.773248][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.783962][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.795240][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.844413][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.865204][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.891257][ T4259] pantherlord 0003:0810:0001.0002: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 390.896772][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.907018][ T4259] pantherlord 0003:0810:0001.0002: no output reports found [ 391.083658][ T4259] usb 6-1: USB disconnect, device number 5 [ 391.229147][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 391.250215][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 392.015545][ T8962] fido_id[8962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 392.202635][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.228659][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.318294][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.337844][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.358301][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.377618][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.388274][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.420481][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.459146][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.470542][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.480640][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.498484][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.533963][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.512083][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 393.563106][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 393.606717][ T8710] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.662612][ T8710] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.732638][ T8710] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.760944][ T8710] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.882569][ T4977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.939034][ T4977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.003088][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 394.127886][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.213703][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.243597][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.333131][ T4977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.362928][ T4977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.420007][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 394.452318][ T4977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.476582][ T4977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.488695][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 394.642670][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 394.818604][ T13] usb 8-1: Using ep0 maxpacket: 32 [ 395.100898][ T13] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 395.116572][ T13] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 395.129072][ T13] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 395.158973][ T13] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 396.025591][ T13] usb 8-1: config 0 interface 0 has no altsetting 0 [ 396.432338][ T13] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 396.463324][ T13] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 396.513226][ T13] usb 8-1: Product: syz [ 396.534580][ T13] usb 8-1: Manufacturer: syz [ 396.558649][ T13] usb 8-1: SerialNumber: syz [ 396.580720][ T13] usb 8-1: config 0 descriptor?? [ 396.614620][ T144] device veth0_to_bond left promiscuous mode [ 396.627154][ T144] bridge4: port 1(veth0_to_bond) entered disabled state [ 396.643053][ T13] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 396.686195][ T13] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 397.538991][ T144] device hsr_slave_0 left promiscuous mode [ 397.561848][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.578391][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.606797][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.650539][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.703272][ T144] device bridge_slave_1 left promiscuous mode [ 397.917588][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.936477][ T144] device bridge_slave_0 left promiscuous mode [ 397.944305][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.251645][ T144] device hsr_slave_0 left promiscuous mode [ 398.403146][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.619600][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.627491][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.634964][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.661466][ T144] device bridge_slave_1 left promiscuous mode [ 398.714378][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.726356][ T144] device bridge_slave_0 left promiscuous mode [ 398.733982][ T21] usb 8-1: USB disconnect, device number 2 [ 398.750681][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.790557][ T21] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 398.821642][ T144] device veth1_macvtap left promiscuous mode [ 398.829195][ T144] device veth0_macvtap left promiscuous mode [ 398.841684][ T144] device veth1_vlan left promiscuous mode [ 398.854955][ T144] device veth0_vlan left promiscuous mode [ 398.867065][ T144] device veth1_macvtap left promiscuous mode [ 398.882922][ T144] device veth0_macvtap left promiscuous mode [ 398.896259][ T144] device veth1_vlan left promiscuous mode [ 398.906514][ T144] device veth0_vlan left promiscuous mode [ 402.864312][ T144] team0 (unregistering): Port device team_slave_1 removed [ 402.883984][ T144] team0 (unregistering): Port device team_slave_0 removed [ 402.901549][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.922278][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.140517][ T144] bond0 (unregistering): Released all slaves [ 403.405041][ T144] team0 (unregistering): Port device team_slave_1 removed [ 403.433634][ T144] team0 (unregistering): Port device team_slave_0 removed [ 403.458485][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.476403][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.626569][ T144] bond0 (unregistering): Released all slaves [ 403.710818][ T9065] device vti0 entered promiscuous mode [ 404.115805][ T9129] loop9: detected capacity change from 0 to 1024 [ 404.882893][ T26] audit: type=1326 audit(2000000060.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.8.1222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13bfaf8eb9 code=0x0 [ 404.904574][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.038129][ T9129] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 405.096294][ T9129] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.257636][ T9129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 405.324579][ T9129] System zones: 0-1, 3-36 [ 405.416642][ T9129] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 405.437109][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.330462][ T9170] ptrace attach of "./syz-executor exec"[8640] was attempted by " [ 407.583888][ T9201] loop5: detected capacity change from 0 to 1024 [ 407.630573][ T4195] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 407.671165][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.160420][ T9201] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 408.187154][ T9201] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.275865][ T9201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 408.337952][ T9201] System zones: 0-1, 3-36 [ 408.415527][ T9201] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 408.523779][ T4195] usb 8-1: Using ep0 maxpacket: 32 [ 409.407858][ T4195] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 409.607701][ T4195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.698610][ T4195] usb 8-1: config 0 descriptor?? [ 409.759691][ T4195] usb 8-1: selecting invalid altsetting 3 [ 409.787810][ T4195] comedi comedi5: could not set alternate setting 3 in high speed [ 409.827656][ T4195] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 409.876314][ T4195] usbduxsigma: probe of 8-1:0.0 failed with error -22 [ 409.974331][ T4195] usb 8-1: USB disconnect, device number 3 [ 409.999107][ T9237] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 411.708933][ T9267] binder: 9253:9267 unknown command 1074553619 [ 411.715189][ T9267] binder: 9253:9267 ioctl c0306201 2000000001c0 returned -22 [ 412.287135][ T9271] loop8: detected capacity change from 0 to 1024 [ 412.444181][ T9271] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 412.490308][ T9271] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.688928][ T9271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 412.723445][ T9271] System zones: 0-1, 3-36 [ 412.822255][ T9285] tipc: Can't bind to reserved service type 0 [ 412.858883][ T9271] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 414.570374][ T9322] program syz.9.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.680504][ T9346] sp0: Synchronizing with TNC [ 416.131814][ T9352] syz.6.1270 (9352) used greatest stack depth: 18512 bytes left [ 417.569381][ T9396] ceph: No path or : separator in source [ 418.067479][ T9411] loop9: detected capacity change from 0 to 1024 [ 418.211755][ T9411] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 418.246628][ T9411] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.516705][ T9411] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 418.543912][ T9411] System zones: 0-1, 3-36 [ 418.557540][ T9411] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 420.297066][ T4290] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 421.476376][ T9476] loop7: detected capacity change from 0 to 1024 [ 421.517079][ T4290] usb 7-1: device descriptor read/all, error -71 [ 421.846554][ T9476] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 421.867128][ T9476] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.889192][ T9487] sp0: Synchronizing with TNC [ 421.935296][ T9476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 422.008622][ T9476] System zones: 0-1, 3-36 [ 422.029659][ T9476] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 424.701872][ T9550] overlayfs: missing 'workdir' [ 425.442876][ T9564] loop6: detected capacity change from 0 to 1024 [ 425.806905][ T9564] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 425.814281][ T9564] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.915506][ T9564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 425.926164][ T9564] System zones: 0-1, 3-36 [ 425.954502][ T9564] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 427.585100][ T26] audit: type=1804 audit(2000000083.464:16): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1326" name="/newroot/213/file1" dev="fuse" ino=1 res=1 errno=0 [ 427.986240][ T26] audit: type=1804 audit(2000000083.494:17): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1326" name="/newroot/213/file1" dev="fuse" ino=1 res=1 errno=0 [ 429.271135][ T9626] device syzkaller0 entered promiscuous mode [ 432.166698][ T4233] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 432.676969][ T4233] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 432.688088][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.822746][ T4233] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 432.915035][ T4233] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 433.725528][ T4233] usb 7-1: Manufacturer: syz [ 433.733039][ T4233] usb 7-1: config 0 descriptor?? [ 435.926261][ T4233] rc_core: IR keymap rc-hauppauge not found [ 435.932495][ T4233] Registered IR keymap rc-empty [ 435.961821][ T4233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 436.012351][ T4233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 436.075071][ T4233] usb 7-1: USB disconnect, device number 7 [ 436.226462][ T4666] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 436.508641][ T9709] sp0: Synchronizing with TNC [ 436.646222][ T4666] usb 6-1: Using ep0 maxpacket: 8 [ 436.677538][ T9719] device syzkaller0 entered promiscuous mode [ 436.836397][ T4666] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 436.855717][ T4666] usb 6-1: can't read configurations, error -71 [ 437.340564][ T9740] sp0: Synchronizing with TNC [ 437.511975][ T9751] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1367'. [ 437.633594][ T9751] IPVS: ip_vs_add_dest(): server weight less than zero [ 439.450020][ T9764] device syzkaller0 entered promiscuous mode [ 440.240813][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247231][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.416521][ T4259] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 440.950396][ T4259] usb 8-1: Using ep0 maxpacket: 16 [ 441.066040][ T4259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.108852][ T4259] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 441.144867][ T9790] sp0: Synchronizing with TNC [ 441.169976][ T4259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.221714][ T4259] usb 8-1: config 0 descriptor?? [ 442.581318][ T9805] sp0: Synchronizing with TNC [ 442.735900][ T4259] usbhid 8-1:0.0: can't add hid device: -71 [ 442.742106][ T4259] usbhid: probe of 8-1:0.0 failed with error -71 [ 442.791985][ T4259] usb 8-1: USB disconnect, device number 4 [ 444.775514][ T9826] device syzkaller0 entered promiscuous mode [ 445.588806][ T9839] virtio-fs: tag not found [ 446.131554][ T9855] sp0: Synchronizing with TNC [ 447.358557][ T9890] device syzkaller0 entered promiscuous mode [ 448.269456][ T9906] autofs4:pid:9906:autofs_fill_super: called with bogus options [ 448.367909][ T9907] loop5: detected capacity change from 0 to 1024 [ 448.588923][ T9907] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 448.605504][ T9907] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.959277][ T9907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 448.989718][ T9907] System zones: 0-1, 3-36 [ 449.035605][ T4664] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 449.050520][ T9907] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 449.315608][ T4664] usb 10-1: Using ep0 maxpacket: 8 [ 449.689735][ T4664] usb 10-1: config index 0 descriptor too short (expected 51967, got 27) [ 449.733794][ T4664] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.772295][ T9919] loop7: detected capacity change from 0 to 1024 [ 449.788225][ T4664] usb 10-1: config 0 has no interfaces? [ 449.804481][ T4664] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 449.850856][ T4664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.964988][ T4664] usb 10-1: config 0 descriptor?? [ 451.526712][ T4195] usb 10-1: USB disconnect, device number 2 [ 451.961359][ T9940] sp0: Synchronizing with TNC [ 452.264723][ T9942] sp1: Synchronizing with TNC [ 452.614547][ T9950] loop6: detected capacity change from 0 to 1024 [ 452.759597][ T9951] loop7: detected capacity change from 0 to 1024 [ 452.885869][ T9951] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 452.912113][ T9951] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.966482][ T9951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 453.202981][ T9951] System zones: 0-1, 3-36 [ 453.226626][ T9951] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 457.478381][ T9988] netlink: 'syz.5.1434': attribute type 12 has an invalid length. [ 457.716680][ T9990] sp0: Synchronizing with TNC [ 458.317485][T10007] sp0: Synchronizing with TNC [ 458.362408][T10008] loop6: detected capacity change from 0 to 1024 [ 458.441915][T10008] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 458.483314][T10008] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 458.571129][T10008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 458.589925][T10008] System zones: 0-1, 3-36 [ 458.623319][T10008] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 461.958935][T10063] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.093248][T10063] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.239984][T10063] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.331042][T10063] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.427666][T10080] loop9: detected capacity change from 0 to 1024 [ 462.467334][T10025] chnl_net:caif_netlink_parms(): no params data found [ 462.494948][ T4659] Bluetooth: hci3: command 0x0409 tx timeout [ 462.549286][T10080] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 462.577368][T10080] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.643717][T10080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 462.705304][T10080] System zones: 0-1, 3-36 [ 462.782281][T10080] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 463.940050][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.024640][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.062847][T10025] device bridge_slave_0 entered promiscuous mode [ 464.065973][T10101] autofs4:pid:10101:autofs_fill_super: called with bogus options [ 464.072252][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.084604][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.093672][T10025] device bridge_slave_1 entered promiscuous mode [ 464.260558][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.291595][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.535526][T10109] sp0: Synchronizing with TNC [ 465.127555][ T4659] Bluetooth: hci3: command 0x041b tx timeout [ 465.247352][T10025] team0: Port device team_slave_0 added [ 465.278914][T10025] team0: Port device team_slave_1 added [ 465.384700][T10136] loop6: detected capacity change from 0 to 1024 [ 465.417337][T10136] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 465.425021][T10136] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 465.446231][T10136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 465.458735][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.475968][T10136] System zones: 0-1, 3-36 [ 465.478746][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.509975][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.513292][T10136] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 465.726986][ T4195] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 465.757130][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.764930][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.791681][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.124635][ T4195] usb 8-1: Using ep0 maxpacket: 32 [ 466.344974][ T4195] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.353048][ T4195] usb 8-1: config 0 has no interface number 0 [ 466.406640][ T4195] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.448239][ T4195] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.473062][ T4195] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 466.507787][ T4195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.551707][ T4195] usb 8-1: config 0 descriptor?? [ 466.583287][T10025] device hsr_slave_0 entered promiscuous mode [ 466.632929][T10025] device hsr_slave_1 entered promiscuous mode [ 467.557251][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 467.640528][T10165] autofs4:pid:10165:autofs_fill_super: called with bogus options [ 467.798825][ T4195] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0094.0003/input/input9 [ 467.940374][ T4195] uclogic 0003:28BD:0094.0003: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.7-1/input1 [ 468.000980][ T4195] usb 8-1: USB disconnect, device number 5 [ 468.289268][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1480'. [ 468.399232][T10186] fido_id[10186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 468.832132][T10205] loop7: detected capacity change from 0 to 1024 [ 469.305358][T10205] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 469.313810][T10205] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.439360][T10205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 469.475039][T10205] System zones: 0-1, 3-36 [ 469.541759][T10205] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 469.614320][ T4670] Bluetooth: hci3: command 0x0419 tx timeout [ 469.955547][T10063] device hsr_slave_0 left promiscuous mode [ 470.009451][T10063] device hsr_slave_1 left promiscuous mode [ 470.766688][T10063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.795623][T10063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.952037][T10063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.960849][T10063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.980513][T10063] device bridge_slave_1 left promiscuous mode [ 470.992009][T10227] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 471.018597][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.031973][T10063] device bridge_slave_0 left promiscuous mode [ 471.044010][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.067321][T10063] device veth1_macvtap left promiscuous mode [ 471.073395][T10063] device veth0_macvtap left promiscuous mode [ 471.114372][T10063] device veth1_vlan left promiscuous mode [ 471.120208][T10063] device veth0_vlan left promiscuous mode [ 471.467831][T10063] team0 (unregistering): Port device team_slave_1 removed [ 471.494644][T10063] team0 (unregistering): Port device team_slave_0 removed [ 471.508842][T10063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.527069][T10063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.467744][T10063] bond0 (unregistering): Released all slaves [ 472.790514][T10025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.835044][T10025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.895519][T10025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.908463][T10025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.994209][ T4233] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 473.268475][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.343876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.361458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.374391][ T4233] usb 10-1: config 5 has an invalid interface number: 150 but max is 2 [ 473.391159][ T4233] usb 10-1: config 5 has an invalid interface association descriptor of length 2, skipping [ 473.425854][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.433960][ T4233] usb 10-1: config 5 has an invalid interface number: 223 but max is 2 [ 473.468066][ T4233] usb 10-1: config 5 has an invalid interface number: 142 but max is 2 [ 473.505987][ T4233] usb 10-1: config 5 has no interface number 0 [ 473.513717][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.534211][ T4233] usb 10-1: config 5 has no interface number 1 [ 473.555052][ T4233] usb 10-1: config 5 has no interface number 2 [ 473.561424][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.570054][ T4233] usb 10-1: config 5 interface 223 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 473.611447][ T4233] usb 10-1: config 5 interface 142 altsetting 16 bulk endpoint 0xE has invalid maxpacket 1024 [ 473.641978][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.649119][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.659280][ T4233] usb 10-1: config 5 interface 142 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 473.692637][ T4233] usb 10-1: config 5 interface 142 altsetting 16 endpoint 0x8 has invalid maxpacket 959, setting to 64 [ 473.716091][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.741257][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.754357][ T4233] usb 10-1: config 5 interface 142 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 473.785596][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.793831][ T4233] usb 10-1: config 5 interface 150 has no altsetting 0 [ 473.815235][ T4233] usb 10-1: config 5 interface 223 has no altsetting 0 [ 473.823475][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.830629][T10062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.859127][ T4233] usb 10-1: config 5 interface 142 has no altsetting 0 [ 473.892453][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.950047][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.983126][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 474.021053][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 474.044281][ T4233] usb 10-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 6.51 [ 474.064950][ T4233] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.073852][ T4233] usb 10-1: Product: syz [ 474.081714][ T4233] usb 10-1: Manufacturer: syz [ 474.087688][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 474.099521][ T4233] usb 10-1: SerialNumber: syz [ 474.123519][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.148799][T10025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.161080][T10025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.180446][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 474.197575][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.228608][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.261259][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.286356][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.312633][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.546039][ T4233] usb 10-1: USB disconnect, device number 3 [ 474.875318][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 474.916418][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.172989][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.742917][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.794663][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.990421][T10293] sp0: Synchronizing with TNC [ 476.059311][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.070396][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.106177][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.125221][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.156018][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1503'. [ 476.250267][T10025] device veth0_vlan entered promiscuous mode [ 476.308046][T10025] device veth1_vlan entered promiscuous mode [ 476.406158][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 476.435440][T10303] device syzkaller0 entered promiscuous mode [ 476.446819][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.481557][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.531402][T10025] device veth0_macvtap entered promiscuous mode [ 476.549453][T10025] device veth1_macvtap entered promiscuous mode [ 476.729148][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.769578][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.793909][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.809311][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.832570][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.853197][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.871174][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.885763][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.907708][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.920608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 476.933605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 476.948232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 476.990674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.049142][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.104742][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.133972][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.157389][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.167800][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.188730][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.203891][T10025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.223456][T10025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.245581][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.265937][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.277430][ T4659] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 477.279211][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.302433][T10025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.318889][T10025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.341180][T10025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.362661][T10025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.523877][ T4659] usb 7-1: Using ep0 maxpacket: 32 [ 477.579186][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.602878][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.645208][ T4659] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 477.649695][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.668727][ T4659] usb 7-1: config 0 has no interface number 0 [ 477.700936][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.730789][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.771541][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.864115][ T4659] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 477.888168][ T4659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.916067][ T4659] usb 7-1: Product: syz [ 477.920591][ T4659] usb 7-1: Manufacturer: syz [ 477.941735][ T4659] usb 7-1: SerialNumber: syz [ 478.150271][ T4659] usb 7-1: config 0 descriptor?? [ 478.287437][ T4659] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 478.973817][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 479.064598][ T4659] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 479.097233][ T4659] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 479.119474][ T4659] usb 7-1: USB disconnect, device number 8 [ 479.134095][ T4659] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 479.150032][ T4659] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 479.162520][ T4659] quatech2 7-1:0.51: device disconnected [ 479.281350][T10363] sp0: Synchronizing with TNC [ 479.518772][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 480.203958][ T4659] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 480.513910][ T4659] usb 10-1: Using ep0 maxpacket: 8 [ 480.783839][ T4659] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 480.792252][ T4659] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.865038][ T4659] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.865570][T10388] autofs4:pid:10388:autofs_fill_super: called with bogus options [ 480.903284][ T4659] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.930592][ T4659] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.975001][ T4659] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 481.016428][ T4659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.323791][ T4659] usb 10-1: GET_CAPABILITIES returned 0 [ 481.329438][ T4659] usbtmc 10-1:16.0: can't read capabilities [ 481.563309][ T4659] usb 10-1: USB disconnect, device number 4 [ 481.665740][T10413] sp0: Synchronizing with TNC [ 481.723622][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 482.203877][ T13] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.212471][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.793823][ T13] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.802954][ T13] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.828395][ T13] usb 2-1: Manufacturer: syz [ 482.838453][ T13] usb 2-1: config 0 descriptor?? [ 482.940815][T10431] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 482.983667][ T13] rc_core: IR keymap rc-hauppauge not found [ 482.989753][ T13] Registered IR keymap rc-empty [ 483.017461][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 483.066661][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 483.124314][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1531'. [ 483.533494][ C0] igorplugusb 2-1:0.0: receive overflow, at least 8 lost [ 484.227718][ T13] usb 2-1: USB disconnect, device number 2 [ 484.527657][T10464] sp0: Synchronizing with TNC [ 485.053673][ T4233] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 485.087743][ T4668] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 485.164304][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.283891][ T4664] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 485.333483][ T4668] usb 10-1: Using ep0 maxpacket: 8 [ 485.338752][ T4233] usb 8-1: Using ep0 maxpacket: 32 [ 485.565663][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.040348][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.103723][ T4668] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 486.171369][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.276497][ T4233] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.285305][ T4233] usb 8-1: config 0 has no interface number 0 [ 486.432148][T10500] sp0: Synchronizing with TNC [ 486.512099][ T4664] usb 2-1: Using ep0 maxpacket: 16 [ 486.553900][ T4233] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 486.563718][ T4668] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 486.652206][ T4233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.661555][ T4668] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 486.840897][ T4233] usb 8-1: Product: syz [ 486.853029][ T4668] usb 10-1: Product: syz [ 486.929385][ T4233] usb 8-1: Manufacturer: syz [ 487.028876][ T4668] usb 10-1: Manufacturer: syz [ 487.075091][ T4233] usb 8-1: SerialNumber: syz [ 487.084726][ T4668] usb 10-1: SerialNumber: syz [ 487.105981][ T4666] Bluetooth: hci1: command 0x0409 tx timeout [ 487.123870][ T4233] usb 8-1: config 0 descriptor?? [ 487.153002][T10465] chnl_net:caif_netlink_parms(): no params data found [ 487.169917][ T4233] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 487.260560][ T4664] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.294886][ T4233] usb 8-1: selecting invalid altsetting 1 [ 487.314294][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.321424][ T4664] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.339881][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.343763][ T4233] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 487.348526][T10465] device bridge_slave_0 entered promiscuous mode [ 487.374133][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.377573][ T4668] usb 10-1: Handspring Visor / Palm OS: No valid connect info available [ 487.381416][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.399612][T10465] device bridge_slave_1 entered promiscuous mode [ 487.411721][ T4668] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 487.428823][ T4233] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.449945][ T4668] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 487.461680][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.471391][ T4233] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 487.471432][ T4233] usb 8-1: media controller created [ 487.483338][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.498243][ T4668] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2 [ 487.516764][T10465] team0: Port device team_slave_0 added [ 487.527481][T10465] team0: Port device team_slave_1 added [ 487.563489][ T4664] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.573002][ T4664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.577121][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.599808][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.608632][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.608669][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.623691][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.641280][ T4668] visor 10-1:1.0: Handspring Visor / Palm OS converter detected [ 487.657546][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.678757][ T4664] usb 2-1: Product: syz [ 487.691358][ T4664] usb 2-1: Manufacturer: syz [ 487.697342][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.697752][ T4664] usb 2-1: SerialNumber: syz [ 487.717765][ T4668] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 487.737436][ T4668] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 487.843416][ T4233] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 487.855456][ T9] tipc: Left network mode [ 487.882972][ T4233] zl10353_read_register: readreg error (reg=127, ret==-71) [ 488.004128][ T4233] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 488.040230][ T4290] usb 10-1: USB disconnect, device number 5 [ 488.479748][ T4290] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 488.732077][ T4290] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 488.797401][T10465] device hsr_slave_0 entered promiscuous mode [ 488.820852][T10519] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 488.833533][T10519] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 488.833777][ T4290] visor 10-1:1.0: device disconnected [ 488.843375][ T4664] usb 2-1: 0:2 : does not exist [ 488.874114][ T4233] usb 8-1: USB disconnect, device number 6 [ 488.983520][T10465] device hsr_slave_1 entered promiscuous mode [ 489.021604][T10465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.042904][T10465] Cannot create hsr debugfs directory [ 489.048848][ T4664] usb 2-1: USB disconnect, device number 3 [ 489.239051][ T4173] Bluetooth: hci1: command 0x041b tx timeout [ 489.305966][ T8942] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 489.777018][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.913472][ T8942] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 489.933392][ T8942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.939404][ T4233] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 489.941512][ T8942] usb 7-1: Product: syz [ 489.960609][ T8942] usb 7-1: Manufacturer: syz [ 489.966085][ T8942] usb 7-1: SerialNumber: syz [ 490.313390][ T4233] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.336617][ T4233] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.423367][ T4233] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 490.439569][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.459181][ T8942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 490.465844][ T4233] usb 8-1: SerialNumber: syz [ 490.716523][T10465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.743717][T10465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.796869][ T4233] usb 8-1: 0:2 : does not exist [ 490.817921][ T9] device hsr_slave_0 left promiscuous mode [ 490.844690][ T4233] usb 8-1: USB disconnect, device number 7 [ 490.867633][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.878584][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.906797][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.937849][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.963480][ T9] device bridge_slave_1 left promiscuous mode [ 490.972953][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.994172][ T9] device bridge_slave_0 left promiscuous mode [ 491.000679][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.018128][ T9] device veth1_macvtap left promiscuous mode [ 491.028200][ T9] device veth0_macvtap left promiscuous mode [ 491.038661][ T9] device veth1_vlan left promiscuous mode [ 491.050213][ T9] device veth0_vlan left promiscuous mode [ 491.164461][ T8942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 491.178461][ T8942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 491.192772][ T8942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 491.205109][ T8942] lan78xx: probe of 7-1:1.0 failed with error -71 [ 491.233765][ T8942] usb 7-1: USB disconnect, device number 9 [ 491.295473][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 491.707709][ T9] team0 (unregistering): Port device team_slave_1 removed [ 491.723004][ T4195] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 491.755865][ T9] team0 (unregistering): Port device team_slave_0 removed [ 491.803862][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.908734][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.006812][ T4195] usb 8-1: Using ep0 maxpacket: 32 [ 492.133356][ T4195] usb 8-1: config 0 interface 0 has no altsetting 0 [ 492.312131][ T4195] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 492.325907][ T9] bond0 (unregistering): Released all slaves [ 492.652216][T10465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 492.803641][T10465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.145543][ T4195] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.153943][ T4195] usb 8-1: Product: syz [ 493.158378][ T4195] usb 8-1: Manufacturer: syz [ 493.163411][ T4195] usb 8-1: SerialNumber: syz [ 493.170181][ T4195] usb 8-1: config 0 descriptor?? [ 493.373261][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 493.399886][T10465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.419516][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.427752][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.440521][T10465] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.490462][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.507967][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.521917][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.529124][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.547390][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.558821][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.568224][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.575365][T10062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.590327][ T4195] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 493.593732][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.607880][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.617265][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.640022][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.652351][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.666203][ T4173] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 493.679803][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 493.710219][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.731290][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.762322][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.780329][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.792550][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.822392][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.853790][T10465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.873015][ T4195] usb 2-1: Using ep0 maxpacket: 32 [ 494.013126][ T4195] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 494.030120][ T4195] usb 2-1: config 0 has no interface number 0 [ 494.043243][ T4173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.079234][ T4173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.112395][ T4173] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.115403][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.132319][ T4173] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.149672][ T4173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.158257][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.179998][ T4173] usb 10-1: config 0 descriptor?? [ 494.200170][T10465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.243126][ T4195] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 494.248516][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.267628][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.274426][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.296405][ T4195] usb 2-1: Product: syz [ 494.306553][ T4195] usb 2-1: Manufacturer: syz [ 494.311943][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.321492][ T4195] usb 2-1: SerialNumber: syz [ 494.328905][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.348089][ T4195] usb 2-1: config 0 descriptor?? [ 494.357616][T10465] device veth0_vlan entered promiscuous mode [ 494.365730][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.384058][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.397748][T10465] device veth1_vlan entered promiscuous mode [ 494.419447][ T4195] smsc95xx v2.0.0 [ 494.464903][ T4664] usb 8-1: USB disconnect, device number 8 [ 494.478292][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 494.519374][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 494.548579][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.566583][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.587509][T10465] device veth0_macvtap entered promiscuous mode [ 494.629540][T10465] device veth1_macvtap entered promiscuous mode [ 494.655102][ T4173] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 494.668630][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.684567][ T4173] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 494.707503][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.723374][ T6472] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 494.745463][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.758349][ T4173] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 494.781600][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.830993][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.893778][ T4195] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 494.905804][ T4195] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 494.922947][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.962650][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.214231][ T6472] usb 7-1: Using ep0 maxpacket: 32 [ 495.220645][ T13] usb 10-1: USB disconnect, device number 6 [ 495.260423][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.341833][T10633] fido_id[10633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 495.358062][T10465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.383595][ T6472] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.400947][ T6472] usb 7-1: config 0 has no interface number 0 [ 495.411443][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.448245][ T6472] usb 7-1: config 0 interface 184 has no altsetting 0 [ 495.465906][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.538159][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.548743][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.559392][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.570053][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.598448][T10465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.621920][T10465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.653108][ T4195] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 495.673435][T10465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.682988][ T6472] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.692195][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 495.703637][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.708816][ T4195] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 495.718207][ T6472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.727549][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.764229][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.767247][ T6472] usb 7-1: Product: syz [ 495.812057][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.812899][ T6472] usb 7-1: Manufacturer: syz [ 495.840620][T10062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.849012][ T6472] usb 7-1: SerialNumber: syz [ 495.868213][ T6472] usb 7-1: config 0 descriptor?? [ 495.895486][T10465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.916242][T10465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.926554][ T6472] smsc75xx v1.0.0 [ 495.966130][T10465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.984708][T10465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.015338][T10646] device syzkaller1 entered promiscuous mode [ 496.228209][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.280039][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.340871][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.362155][T10062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.417969][T10062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.458339][ T4515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.623056][ T6472] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.648206][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 496.659845][ T6472] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.733396][ T4290] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 497.697110][ T4173] usb 2-1: USB disconnect, device number 4 [ 497.762810][ T6472] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 497.782705][ T6472] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 497.799915][ T6472] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 497.810033][ T4290] usb 8-1: Using ep0 maxpacket: 32 [ 497.822584][ T6472] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 497.850194][ T6472] usb 7-1: USB disconnect, device number 10 [ 498.098198][T10701] sp0: Synchronizing with TNC [ 499.432736][ T4290] usb 8-1: config 0 has an invalid interface number: 46 but max is 0 [ 499.440895][ T4290] usb 8-1: config 0 has no interface number 0 [ 499.462800][ T4290] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 499.499469][ T4290] usb 8-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 499.554753][T10720] tipc: Enabling of bearer rejected, failed to enable media [ 499.570287][T10720] device syzkaller0 entered promiscuous mode [ 499.716079][T10727] device syzkaller1 entered promiscuous mode [ 499.742796][ T4290] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d8.55 [ 499.774913][ T4290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.783219][ T6472] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 499.796817][ T4290] usb 8-1: Product: syz [ 499.801048][ T4290] usb 8-1: Manufacturer: syz [ 499.806700][ T4290] usb 8-1: SerialNumber: syz [ 499.822122][ T4290] usb 8-1: config 0 descriptor?? [ 499.873423][ T4290] ttusbir 8-1:0.46: cannot find expected altsetting [ 500.082772][ T6472] usb 7-1: Using ep0 maxpacket: 16 [ 500.126705][ T4290] usb 8-1: USB disconnect, device number 9 [ 500.233450][ T6472] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 500.490917][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1595'. [ 500.534796][ T6472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.684465][ T6472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.758791][ T6472] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 500.832678][ T4664] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 500.840821][ T6472] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 500.912845][ T6472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.939887][ T6472] usb 7-1: config 0 descriptor?? [ 501.192812][ T4664] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 501.203613][ T4664] usb 3-1: config 0 has no interface number 0 [ 501.433395][ T4664] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=90.6c [ 501.525516][ T4664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.539415][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.549072][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.680857][ T4664] usb 3-1: Product: syz [ 501.769527][ T4664] usb 3-1: Manufacturer: syz [ 501.833235][ T4664] usb 3-1: SerialNumber: syz [ 502.012306][ T4664] usb 3-1: config 0 descriptor?? [ 502.052735][ T4670] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 502.116215][ T6472] kye 0003:0458:5013.0005: unknown main item tag 0x6 [ 502.126614][ T6472] kye 0003:0458:5013.0005: unknown main item tag 0x5 [ 502.133538][ T6472] kye 0003:0458:5013.0005: unknown main item tag 0x4 [ 502.140441][ T6472] kye 0003:0458:5013.0005: item fetching failed at offset 31/160 [ 502.153716][ T6472] kye 0003:0458:5013.0005: parse failed [ 502.161291][ T6472] kye: probe of 0003:0458:5013.0005 failed with error -22 [ 502.170729][ T6472] usb 7-1: USB disconnect, device number 11 [ 502.324375][ T4664] pcwd_usb: The device isn't a Human Interface Device [ 502.332501][ T4670] usb 2-1: Using ep0 maxpacket: 32 [ 502.373165][ T4664] usb 3-1: USB disconnect, device number 4 [ 502.452676][ T4670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1024 [ 502.484588][ T4670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 502.843311][ T4670] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 502.962293][ T4670] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 503.208944][ T4670] usb 2-1: Product: syz [ 503.323279][ T4670] usb 2-1: Manufacturer: syz [ 503.477746][ T4670] usb 2-1: SerialNumber: syz [ 503.519098][ T4670] usb 2-1: config 0 descriptor?? [ 503.612808][T10761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 503.633720][ T4670] hub 2-1:0.0: bad descriptor, ignoring hub [ 503.639676][ T4670] hub: probe of 2-1:0.0 failed with error -5 [ 503.862436][ T4659] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 504.002815][ T4670] usb 2-1: USB disconnect, device number 5 [ 504.244908][ T4659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.282506][ T4659] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 504.301848][ T4659] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.386671][ T4173] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 504.486326][ T4659] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.509955][ T4659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.559901][ T4659] usb 3-1: Product: syz [ 504.579707][ T4659] usb 3-1: Manufacturer: syz [ 504.582418][ T6472] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 504.592407][ T4659] usb 3-1: SerialNumber: syz [ 504.893456][ T4659] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 504.903800][ T4659] cdc_ncm 3-1:1.0: bind() failure [ 504.922573][ T4173] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 504.959860][ T4659] usb 3-1: USB disconnect, device number 5 [ 504.972951][ T6472] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 504.979152][ T4173] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 505.008737][ T4173] usb 8-1: Product: syz [ 505.012281][ T6472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.035457][ T4173] usb 8-1: Manufacturer: syz [ 505.040121][ T4173] usb 8-1: SerialNumber: syz [ 505.073572][ T6472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.094659][ T4173] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 505.104869][ T6472] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 505.212592][ T6472] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 505.238571][ T6472] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 505.247644][T10845] loop9: detected capacity change from 0 to 1024 [ 505.262491][ T6472] usb 7-1: Manufacturer: syz [ 505.272910][ T6472] usb 7-1: config 0 descriptor?? [ 505.300037][T10845] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 505.338011][T10845] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.383396][T10845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 505.412664][T10845] System zones: 0-1, 3-36 [ 505.450892][T10845] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 505.479114][ T4195] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 505.512443][ T4173] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 505.533550][ T4173] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 505.699437][T10857] binder: 10855:10857 ioctl c0306201 0 returned -14 [ 505.725717][ T4173] usb 8-1: USB disconnect, device number 10 [ 505.995371][T10857] binder: BINDER_SET_CONTEXT_MGR already set [ 506.050199][T10857] binder: 10855:10857 ioctl 4018620d 200000004a80 returned -16 [ 506.152516][ T4195] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 506.160824][ T4195] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 506.228388][ T4195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 506.268154][ T4195] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 506.341537][ T4195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 506.358261][ T6472] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 506.399218][ T6472] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 506.431841][ T4195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 506.443523][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 506.459809][ T6472] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 506.752468][ T4195] usb 2-1: string descriptor 0 read error: -22 [ 506.768837][ T4195] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 506.888204][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.111542][ T4195] usb 2-1: config 0 descriptor?? [ 507.274255][ T4195] hub 2-1:0.0: bad descriptor, ignoring hub [ 507.381122][ T4195] hub: probe of 2-1:0.0 failed with error -5 [ 507.544759][ T4195] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 507.685906][ T4195] usb 2-1: USB disconnect, device number 6 [ 507.776438][ T4259] usb 7-1: USB disconnect, device number 12 [ 507.891976][T10889] device syzkaller0 entered promiscuous mode [ 508.085383][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 508.813063][ T4659] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 509.222296][ T4659] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 509.282112][ T4659] usb 7-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.452262][ T4659] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 509.461445][ T4659] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 509.512244][ T4659] usb 7-1: Manufacturer: syz [ 509.516906][ T4659] usb 7-1: SerialNumber: syz [ 509.577726][T10921] loop9: detected capacity change from 0 to 1024 [ 509.874507][ T4659] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 509.969391][T10921] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 509.999377][T10921] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 510.532068][T10921] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 510.693309][ T4659] usb 7-1: USB disconnect, device number 13 [ 510.705574][T10921] System zones: 0-1, 3-36 [ 510.815122][T10921] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 511.042511][ T4664] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 511.785898][ T4659] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 511.912058][ T4664] usb 8-1: Using ep0 maxpacket: 16 [ 511.915785][T10956] device syzkaller0 entered promiscuous mode [ 512.028652][T10962] netlink: 'syz.9.1641': attribute type 6 has an invalid length. [ 512.032023][ T4664] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.056805][ T4664] usb 8-1: config 0 has no interface number 0 [ 512.202673][ T4659] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 512.226403][ T4659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.266732][ T4659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.277343][ T4664] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 512.327107][ T4664] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.342963][ T4659] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 512.358832][ T4664] usb 8-1: Product: syz [ 512.368449][ T4664] usb 8-1: Manufacturer: syz [ 512.408264][ T4664] usb 8-1: SerialNumber: syz [ 512.423729][ T4659] usb 7-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00 [ 512.446206][T10972] tipc: Started in network mode [ 512.451759][T10972] tipc: Node identity 4, cluster identity 4711 [ 512.458266][T10972] tipc: Node number set to 4 [ 512.925893][ T4664] usb 8-1: config 0 descriptor?? [ 513.045319][ T4659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.056401][ T4659] usb 7-1: config 0 descriptor?? [ 513.093977][ T4664] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 513.473901][ T4259] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 513.545607][ T4659] wacom 0003:056A:0131.0007: Unknown device_type for 'HID 056a:0131'. Ignoring. [ 513.591811][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 513.743976][ T4259] usb 10-1: Using ep0 maxpacket: 32 [ 513.767548][ T4659] usb 7-1: USB disconnect, device number 14 [ 513.882879][ T4259] usb 10-1: config 1 interface 0 altsetting 25 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.899050][ T4259] usb 10-1: config 1 interface 0 has no altsetting 0 [ 514.032610][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.072095][ T4259] usb 10-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 514.087619][ T4259] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.099617][ T4259] usb 10-1: Product: syz [ 514.109537][ T4259] usb 10-1: Manufacturer: syz [ 514.115874][ T4259] usb 10-1: SerialNumber: syz [ 514.126984][ T13] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 514.137946][ T13] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 514.155453][ T13] usb 2-1: config 14 has no interface number 0 [ 514.164563][ T13] usb 2-1: config 14 interface 21 has no altsetting 0 [ 514.342134][ T13] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 514.353348][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.361479][ T13] usb 2-1: Product: syz [ 514.367448][ T13] usb 2-1: Manufacturer: syz [ 514.372435][ T13] usb 2-1: SerialNumber: syz [ 514.612017][ T4259] usbhid 10-1:1.0: can't add hid device: -71 [ 514.622167][ T4259] usbhid: probe of 10-1:1.0 failed with error -71 [ 514.649950][ T4259] usb 10-1: USB disconnect, device number 7 [ 514.799009][T11064] device syzkaller0 entered promiscuous mode [ 514.847172][ T13] usb 2-1: MIDIStreaming interface descriptor not found [ 514.911845][ T4664] gspca_spca1528: reg_r err -71 [ 514.916821][ T4664] spca1528: probe of 8-1:0.1 failed with error -71 [ 514.949743][ T4664] usb 8-1: USB disconnect, device number 11 [ 514.983285][ T13] usb 2-1: USB disconnect, device number 7 [ 514.994802][T11068] sp0: Synchronizing with TNC [ 515.431590][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1654'. [ 516.428502][T11101] device syzkaller0 entered promiscuous mode [ 516.512460][ T4669] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 516.536425][ T4195] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 516.757189][T11114] device syzkaller0 entered promiscuous mode [ 516.822310][ T4195] usb 10-1: Using ep0 maxpacket: 8 [ 516.871928][ T4669] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 516.887381][ T4669] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.923674][ T4669] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 516.981721][ T4195] usb 10-1: unable to get BOS descriptor or descriptor too short [ 517.021885][ T4669] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 517.041704][ T4669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.049760][ T4669] usb 8-1: SerialNumber: syz [ 517.085406][ T4195] usb 10-1: config 8 has an invalid interface number: 61 but max is 0 [ 517.095167][ T4669] usb 8-1: config 0 descriptor?? [ 517.099603][ T4195] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 517.127197][ T4195] usb 10-1: config 8 has no interface number 0 [ 517.135493][ T4669] usbtest 8-1:0.0: couldn't get endpoints, -22 [ 517.150085][ T4669] usbtest: probe of 8-1:0.0 failed with error -22 [ 517.158566][ T4195] usb 10-1: config 8 interface 61 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.197817][ T4195] usb 10-1: config 8 interface 61 has no altsetting 0 [ 517.340188][ T4669] usb 8-1: USB disconnect, device number 12 [ 517.401862][ T4195] usb 10-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 517.421432][ T4195] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.447922][ T4195] usb 10-1: Product: syz [ 517.458051][ T4195] usb 10-1: Manufacturer: syz [ 517.465036][ T4195] usb 10-1: SerialNumber: syz [ 517.774239][ T4195] bfusb: probe of 10-1:8.61 failed with error -5 [ 517.797037][ T4195] usb 10-1: USB disconnect, device number 8 [ 518.009664][T11154] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1668'. [ 518.095310][T11129] binfmt_misc: register: failed to install interpreter file ./file0 [ 518.779883][T11159] device syzkaller0 entered promiscuous mode [ 519.144087][T11179] device syzkaller1 entered promiscuous mode [ 519.190226][T11182] binder: BINDER_SET_CONTEXT_MGR already set [ 519.210384][T11182] binder: 11181:11182 ioctl 4018620d 200000004a80 returned -16 [ 519.465005][T11186] trusted_key: encrypted_key: insufficient parameters specified [ 520.008830][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1683'. [ 520.161573][ T4173] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 520.220406][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1683'. [ 520.324892][T11218] device syzkaller0 entered promiscuous mode [ 520.331830][ T4669] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 520.457698][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1683'. [ 520.531954][ T4173] usb 3-1: config 54 has an invalid interface number: 57 but max is 0 [ 520.571588][ T4669] usb 2-1: Using ep0 maxpacket: 16 [ 520.581985][ T4173] usb 3-1: config 54 has no interface number 0 [ 520.647324][T11232] tipc: Started in network mode [ 520.652566][T11232] tipc: Node identity ac141441, cluster identity 4711 [ 520.666162][T11232] tipc: Enabled bearer , priority 10 [ 520.691686][ T4669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.759143][ T4669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.769282][ T4173] usb 3-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=35.c3 [ 520.794262][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.811420][ T4669] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.841440][ T4173] usb 3-1: Product: syz [ 520.846263][ T4173] usb 3-1: Manufacturer: syz [ 520.850891][ T4173] usb 3-1: SerialNumber: syz [ 520.860382][ T4669] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.872283][ T4669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.895788][ T4669] usb 2-1: config 0 descriptor?? [ 521.184404][T11257] trusted_key: encrypted_key: insufficient parameters specified [ 521.325718][ T4173] usb 3-1: Could not find all expected endpoints [ 521.462831][ T4173] usb 3-1: USB disconnect, device number 6 [ 521.686152][ T4259] tipc: Node number set to 2886997057 [ 521.773813][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.785765][ T4669] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 521.818374][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.826934][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.834518][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.870394][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.879169][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.886893][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.898486][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.910977][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 521.914676][T11245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.007701][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 522.019989][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 522.027629][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 522.039415][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 522.047698][ T4669] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 522.118680][ T4669] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input17 [ 522.260412][ T4669] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 522.323001][ T4669] usb 2-1: USB disconnect, device number 8 [ 522.547247][ T9492] udevd[9492]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 522.934184][T11269] fido_id[11269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 523.182099][T11289] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 523.210600][T11289] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 523.292446][T11300] tmpfs: Unknown parameter 'usrquota' [ 523.321350][ T4195] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 524.084220][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.339166][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.349631][ T4195] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 524.360109][ T4195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.394679][ T4195] usb 3-1: config 0 descriptor?? [ 524.560386][T11324] trusted_key: encrypted_key: insufficient parameters specified [ 525.036693][ T4195] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 525.062806][ T4195] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 525.086623][ T4195] kone 0003:1E7D:2CED.0009: unknown main item tag 0x0 [ 525.112533][ T4195] kone 0003:1E7D:2CED.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 525.285391][ T4195] usb 3-1: USB disconnect, device number 7 [ 525.396414][T11334] fido_id[11334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 525.457316][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1709'. [ 525.931317][ T4195] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 526.201334][ T4195] usb 8-1: Using ep0 maxpacket: 8 [ 526.338461][ T4195] usb 8-1: config 0 has an invalid interface number: 200 but max is 0 [ 526.616634][ T4195] usb 8-1: config 0 has no interface number 0 [ 526.751197][ T4195] usb 8-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xD8, skipping [ 526.861292][ T4195] usb 8-1: config 0 interface 200 has no altsetting 0 [ 527.051556][ T4195] usb 8-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 527.071263][ T4195] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.079323][ T4195] usb 8-1: Product: syz [ 527.114141][ T4195] usb 8-1: Manufacturer: syz [ 527.118893][ T4195] usb 8-1: SerialNumber: syz [ 527.186022][T11379] trusted_key: encrypted_key: insufficient parameters specified [ 527.743167][ T4195] usb 8-1: config 0 descriptor?? [ 527.924801][T11378] kvm: pic: non byte write [ 528.078987][ T4195] usbhid 8-1:0.200: couldn't find an input interrupt endpoint [ 528.121357][ T4195] usb 8-1: USB disconnect, device number 13 [ 528.397913][T11400] binder: 11398:11400 unknown command 1074553620 [ 528.421511][T11400] binder: 11398:11400 ioctl c0306201 2000000001c0 returned -22 [ 528.470850][T11404] device syzkaller1 entered promiscuous mode [ 528.761099][ T4173] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 529.071253][ T4173] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 529.549893][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1739'. [ 530.221076][ T4659] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 530.441142][ T4173] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 530.445664][T11452] device syzkaller0 entered promiscuous mode [ 530.471166][ T4173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.479455][ T4173] usb 7-1: Product: syz [ 530.484164][ T4659] usb 10-1: Using ep0 maxpacket: 32 [ 530.502245][ T4173] usb 7-1: Manufacturer: syz [ 530.515673][ T4173] usb 7-1: SerialNumber: syz [ 530.601165][ T4659] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 530.609405][ T4659] usb 10-1: config 0 has no interface number 0 [ 530.626195][ T4659] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.658061][ T4659] usb 10-1: config 0 interface 85 has no altsetting 0 [ 530.830974][ T4659] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 530.870827][ T4659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.894612][ T4659] usb 10-1: Product: syz [ 530.909917][ T4659] usb 10-1: Manufacturer: syz [ 530.920073][ T4659] usb 10-1: SerialNumber: syz [ 530.947604][ T4659] usb 10-1: config 0 descriptor?? [ 531.024330][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 531.790960][ T4659] appletouch 10-1:0.85: Geyser mode initialized. [ 531.802387][ T4659] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input18 [ 532.002048][ T4669] usb 10-1: USB disconnect, device number 9 [ 532.059978][ T4669] appletouch 10-1:0.85: input: appletouch disconnected [ 532.237896][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1754'. [ 533.200368][T11510] loop1: detected capacity change from 0 to 1024 [ 533.271010][T11510] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 533.280746][T11510] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.348877][T11510] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 533.363088][T11510] System zones: 0-1, 3-36 [ 533.385763][T11510] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 533.440707][ T4659] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 533.541239][ T4669] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 533.590908][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 534.370829][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 534.400709][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 534.412501][ T4659] usb 8-1: Using ep0 maxpacket: 32 [ 534.450728][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 534.470780][ T4669] usb 10-1: Using ep0 maxpacket: 16 [ 534.500975][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 534.540981][ T4659] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 534.549195][ T4659] usb 8-1: config 0 has no interface number 0 [ 534.556028][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 534.589769][ T4659] usb 8-1: config 0 interface 184 has no altsetting 0 [ 534.597213][ T4669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.620755][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 534.633104][ T4669] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.650082][ T4669] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.663641][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 534.679303][ T4669] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 534.689778][ T4669] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.700980][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 534.727834][ T4669] usb 10-1: config 0 descriptor?? [ 534.740736][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 534.740846][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 534.780955][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 534.800849][ T4659] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 534.817231][ T4173] lan78xx: probe of 7-1:1.0 failed with error -71 [ 534.824378][ T4659] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.846955][ T4659] usb 8-1: Product: syz [ 534.874810][ T4173] usb 7-1: USB disconnect, device number 15 [ 534.890628][ T4659] usb 8-1: Manufacturer: syz [ 534.903385][ T4659] usb 8-1: SerialNumber: syz [ 534.929152][ T4659] usb 8-1: config 0 descriptor?? [ 534.981732][ T4659] smsc75xx v1.0.0 [ 535.312500][ T4669] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 535.319785][ T4669] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 535.737519][ T4669] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 535.763407][ T4669] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 535.777154][ T4669] microsoft 0003:045E:07DA.000A: unknown main item tag 0x1 [ 535.786434][ T4669] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 535.796170][ T4173] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 535.830711][ T4669] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000A/input/input19 [ 535.871568][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 535.915236][ T4669] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 536.076410][ T4669] usb 10-1: USB disconnect, device number 10 [ 536.191423][ T4173] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 536.271438][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 536.283697][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 536.490632][ T4670] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 536.540806][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 536.570826][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 536.599680][T11592] fido_id[11592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 536.637267][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 536.662152][ T4659] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 536.688457][ T4659] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 536.737802][T11601] loop1: detected capacity change from 0 to 1024 [ 536.738819][ T4659] usb 8-1: USB disconnect, device number 14 [ 536.750907][ T4670] usb 3-1: Using ep0 maxpacket: 32 [ 536.819394][T11601] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 536.839765][T11601] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 536.870840][ T4670] usb 3-1: config index 0 descriptor too short (expected 274, got 18) [ 536.883885][ T4670] usb 3-1: config 0 has an invalid interface number: 1 but max is -1 [ 536.908825][T11601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 536.922634][ T4670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 536.936526][T11601] System zones: 0-1, 3-36 [ 536.941967][ T4670] usb 3-1: config 0 has no interface number 0 [ 536.958404][T11601] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 537.040732][ T4173] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 537.070966][ T4173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.079015][ T4173] usb 7-1: Product: syz [ 537.102182][ T4173] usb 7-1: Manufacturer: syz [ 537.115891][ T4670] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 537.127858][ T4173] usb 7-1: SerialNumber: syz [ 537.160494][ T4670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.168539][ T4670] usb 3-1: Product: syz [ 537.301754][ T8942] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 537.826749][ T8942] usb 10-1: config 0 has an invalid interface number: 168 but max is 0 [ 537.849407][ T8942] usb 10-1: config 0 has no interface number 0 [ 537.867364][ T8942] usb 10-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 537.894248][ T8942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.900431][ T4670] usb 3-1: Manufacturer: syz [ 537.906977][ T4670] usb 3-1: SerialNumber: syz [ 537.922799][ T4670] usb 3-1: config 0 descriptor?? [ 537.935018][ T8942] usb 10-1: config 0 descriptor?? [ 537.962597][ T4670] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 537.980450][ T4670] usb 3-1: selecting invalid altsetting 1 [ 537.986339][ T4670] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 538.015037][ T4670] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 538.040695][ T4670] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 538.049800][ T4670] usb 3-1: media controller created [ 538.070552][ T4173] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 538.094631][ T4670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.211825][T11608] udc-core: couldn't find an available UDC or it's busy [ 538.234419][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 538.244952][ T146] Bluetooth: hci2: Unknown advertising packet type: 0x5c [ 538.245051][ T146] Bluetooth: hci2: Unknown advertising packet type: 0x100 [ 538.253769][ T146] ================================================================== [ 538.269377][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 538.277235][ T146] Read of size 1 at addr ffff888075092c02 by task kworker/u5:0/146 [ 538.285149][ T146] [ 538.287497][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 538.294976][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.305066][ T146] Workqueue: hci2 hci_rx_work [ 538.309780][ T146] Call Trace: [ 538.313078][ T146] [ 538.316046][ T146] dump_stack_lvl+0x188/0x250 [ 538.320761][ T146] ? show_regs_print_info+0x20/0x20 [ 538.325993][ T146] ? load_image+0x400/0x400 [ 538.330528][ T146] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 538.336113][ T146] print_address_description+0x60/0x2d0 [ 538.341682][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 538.346904][ T146] kasan_report+0xdf/0x130 [ 538.351349][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 538.356574][ T146] hci_le_meta_evt+0x1324/0x3c90 [ 538.361642][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 538.367743][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 538.373419][ T146] ? mark_lock+0x94/0x320 [ 538.377795][ T146] ? mutex_unlock+0x10/0x10 [ 538.382336][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 538.388538][ T146] ? lock_chain_count+0x20/0x20 [ 538.393428][ T146] ? __rwlock_init+0x140/0x140 [ 538.398334][ T146] hci_event_packet+0xe48/0x1370 [ 538.403308][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 538.408552][ T146] ? rcu_lock_release+0x20/0x20 [ 538.413448][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 538.414574][ T4670] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 538.418679][ T146] hci_rx_work+0x255/0xa10 [ 538.430219][ T146] process_one_work+0x85f/0x1010 [ 538.435206][ T146] ? worker_detach_from_pool+0x240/0x240 [ 538.440958][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 538.446390][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 538.451601][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 538.457191][ T146] ? wq_worker_running+0x97/0x170 [ 538.462354][ T146] worker_thread+0xaa6/0x1290 [ 538.467099][ T146] kthread+0x436/0x520 [ 538.471202][ T146] ? rcu_lock_release+0x20/0x20 [ 538.476301][ T146] ? kthread_blkcg+0xd0/0xd0 [ 538.480919][ T146] ret_from_fork+0x1f/0x30 [ 538.485386][ T146] [ 538.488424][ T146] [ 538.490769][ T146] Allocated by task 11608: [ 538.495205][ T146] __kasan_kmalloc+0xb5/0xf0 [ 538.499822][ T146] __alloc_skb+0x22c/0x750 [ 538.504364][ T146] vhci_write+0xbc/0x450 [ 538.508821][ T146] vfs_write+0x745/0xd60 [ 538.513115][ T146] ksys_write+0x152/0x260 [ 538.517563][ T146] do_syscall_64+0x4c/0xa0 [ 538.519279][ T4670] usb 3-1: USB disconnect, device number 8 [ 538.522007][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.522032][ T146] [ 538.522038][ T146] Last potentially related work creation: [ 538.522045][ T146] kasan_save_stack+0x35/0x60 [ 538.522064][ T146] kasan_record_aux_stack+0xb8/0x100 [ 538.522082][ T146] kvfree_call_rcu+0x105/0x7d0 [ 538.522099][ T146] neigh_periodic_work+0x407/0xc70 [ 538.522118][ T146] process_one_work+0x85f/0x1010 [ 538.522135][ T146] worker_thread+0xaa6/0x1290 [ 538.522151][ T146] kthread+0x436/0x520 [ 538.522175][ T146] ret_from_fork+0x1f/0x30 [ 538.580425][ T146] [ 538.582771][ T146] Second to last potentially related work creation: [ 538.589379][ T146] kasan_save_stack+0x35/0x60 [ 538.594099][ T146] kasan_record_aux_stack+0xb8/0x100 [ 538.599423][ T146] kvfree_call_rcu+0x105/0x7d0 [ 538.604236][ T146] neigh_remove_one+0x4e8/0x5f0 [ 538.609207][ T146] ___neigh_create+0x468/0x2250 [ 538.614086][ T146] ip6_finish_output2+0x9f6/0x1510 [ 538.619224][ T146] ndisc_send_skb+0xc2a/0x1500 [ 538.624031][ T146] addrconf_rs_timer+0x2d1/0x630 [ 538.628999][ T146] call_timer_fn+0x17b/0x540 [ 538.633621][ T146] __run_timers+0x53a/0x7f0 [ 538.638154][ T146] run_timer_softirq+0x63/0xf0 [ 538.643021][ T146] handle_softirqs+0x339/0x830 [ 538.647812][ T146] __irq_exit_rcu+0x13b/0x230 [ 538.652498][ T146] irq_exit_rcu+0x5/0x20 [ 538.656756][ T146] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 538.662389][ T146] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 538.668367][ T146] [ 538.670693][ T146] The buggy address belongs to the object at ffff888075092800 [ 538.670693][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 538.684845][ T146] The buggy address is located 2 bytes to the right of [ 538.684845][ T146] 1024-byte region [ffff888075092800, ffff888075092c00) [ 538.698722][ T146] The buggy address belongs to the page: [ 538.704347][ T146] page:ffffea0001d42400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75090 [ 538.714494][ T146] head:ffffea0001d42400 order:3 compound_mapcount:0 compound_pincount:0 [ 538.722911][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 538.730896][ T146] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 538.739478][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 538.748064][ T146] page dumped because: kasan: bad access detected [ 538.754468][ T146] page_owner tracks the page as allocated [ 538.760182][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4187, ts 59978954641, free_ts 59170514858 [ 538.779277][ T146] get_page_from_freelist+0x1bbd/0x1ca0 [ 538.784832][ T146] __alloc_pages+0x1ee/0x480 [ 538.789439][ T146] new_slab+0xc0/0x4b0 [ 538.793515][ T146] ___slab_alloc+0x80a/0xdd0 [ 538.798101][ T146] __kmalloc+0x1cd/0x330 [ 538.802338][ T146] alloc_workqueue+0x172/0x1410 [ 538.807359][ T146] wg_newlink+0x37a/0x760 [ 538.811689][ T146] rtnl_newlink+0x1359/0x1a50 [ 538.816473][ T146] rtnetlink_rcv_msg+0x844/0xf30 [ 538.821414][ T146] netlink_rcv_skb+0x1f5/0x440 [ 538.826191][ T146] netlink_unicast+0x774/0x920 [ 538.831040][ T146] netlink_sendmsg+0x8ba/0xbe0 [ 538.835800][ T146] __sys_sendto+0x46d/0x620 [ 538.840303][ T146] __x64_sys_sendto+0xda/0xf0 [ 538.844980][ T146] do_syscall_64+0x4c/0xa0 [ 538.849438][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.855333][ T146] page last free stack trace: [ 538.860002][ T146] free_unref_page_prepare+0x637/0x6c0 [ 538.865460][ T146] free_unref_page+0x8f/0x2a0 [ 538.870134][ T146] skb_release_data+0x3b1/0x800 [ 538.874999][ T146] __kfree_skb+0x4c/0x60 [ 538.879244][ T146] tcp_recvmsg_locked+0x14e1/0x27f0 [ 538.884441][ T146] tcp_recvmsg+0x232/0x770 [ 538.888856][ T146] inet_recvmsg+0x146/0x200 [ 538.893362][ T146] sock_read_iter+0x2b8/0x380 [ 538.898042][ T146] vfs_read+0x759/0xd60 [ 538.902236][ T146] ksys_read+0x152/0x260 [ 538.906478][ T146] do_syscall_64+0x4c/0xa0 [ 538.910891][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.916870][ T146] [ 538.919208][ T146] Memory state around the buggy address: [ 538.924857][ T146] ffff888075092b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.932915][ T146] ffff888075092b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 538.940987][ T146] >ffff888075092c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.949046][ T146] ^ [ 538.953159][ T146] ffff888075092c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.961238][ T146] ffff888075092d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.969315][ T146] ================================================================== [ 538.977387][ T146] Disabling lock debugging due to kernel taint [ 538.990030][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.997274][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 539.006416][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.016633][ T146] Workqueue: hci2 hci_rx_work [ 539.021359][ T146] Call Trace: [ 539.024705][ T146] [ 539.027663][ T146] dump_stack_lvl+0x188/0x250 [ 539.032470][ T146] ? show_regs_print_info+0x20/0x20 [ 539.037704][ T146] ? load_image+0x400/0x400 [ 539.042235][ T146] panic+0x2e5/0x810 [ 539.046159][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 539.050689][ T146] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 539.056694][ T146] ? _raw_spin_unlock+0x40/0x40 [ 539.061577][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 539.066720][ T146] check_panic_on_warn+0x80/0xa0 [ 539.071682][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 539.076823][ T146] end_report+0x6d/0xf0 [ 539.081006][ T146] kasan_report+0x102/0x130 [ 539.085540][ T146] ? hci_le_meta_evt+0x1324/0x3c90 [ 539.090678][ T146] hci_le_meta_evt+0x1324/0x3c90 [ 539.095637][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 539.101732][ T146] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 539.107396][ T146] ? mark_lock+0x94/0x320 [ 539.111749][ T146] ? mutex_unlock+0x10/0x10 [ 539.116284][ T146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 539.122297][ T146] ? lock_chain_count+0x20/0x20 [ 539.127187][ T146] ? __rwlock_init+0x140/0x140 [ 539.131978][ T146] hci_event_packet+0xe48/0x1370 [ 539.136946][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 539.142178][ T146] ? rcu_lock_release+0x20/0x20 [ 539.147062][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 539.152291][ T146] hci_rx_work+0x255/0xa10 [ 539.156913][ T146] process_one_work+0x85f/0x1010 [ 539.161970][ T146] ? worker_detach_from_pool+0x240/0x240 [ 539.167637][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 539.172952][ T146] ? _raw_spin_lock_irq+0xb7/0xf0 [ 539.178011][ T146] ? _raw_spin_lock_irqsave+0x100/0x100 [ 539.183585][ T146] ? wq_worker_running+0x97/0x170 [ 539.188636][ T146] worker_thread+0xaa6/0x1290 [ 539.193346][ T146] kthread+0x436/0x520 [ 539.197546][ T146] ? rcu_lock_release+0x20/0x20 [ 539.202418][ T146] ? kthread_blkcg+0xd0/0xd0 [ 539.207119][ T146] ret_from_fork+0x1f/0x30 [ 539.211580][ T146] [ 539.214989][ T146] Kernel Offset: disabled [ 539.219410][ T146] Rebooting in 86400 seconds..