last executing test programs: 9m33.268185484s ago: executing program 3 (id=4): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) sendfile(r0, r0, 0x0, 0x6) 9m33.182596825s ago: executing program 3 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r7, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 9m31.713086167s ago: executing program 3 (id=7): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_devices(r7, 0x0, 0xffdd) fsmount(r0, 0x1, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) 9m30.140604389s ago: executing program 3 (id=8): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='{(:\x00'}, 0x30) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r8, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 9m26.247840316s ago: executing program 3 (id=11): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x1, 0x7, 0x7fff, 0xad, 0xa, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000019980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x11, 0x148, 0x160, 0x0, 0x270, 0x2a8, 0x2a8, 0x270, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast2, 0x9e8489871a29d3b4, 0x0, 'veth1_to_team\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x84, 0x1, 0x50}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x6, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x2, 0x4, [0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e24], [0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x9, 0xffffffff, 0x8, 0x316b, 0x9, 0x8, 0xaa}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 9m23.744796872s ago: executing program 3 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xd, r3}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096d1ca00e8f188564ff3725841fb"], 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "8cda6546d2f563ba", "66b43257a40da56982c19217e44e1a1c", "4d8bbf0e", "dcc5110b06dc61f0"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 9m20.287326552s ago: executing program 2 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 9m14.592848605s ago: executing program 2 (id=23): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) write$cgroup_devices(r7, 0x0, 0xffdd) fsmount(r0, 0x1, 0x0) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) 9m9.534706109s ago: executing program 2 (id=27): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16, @ANYRES32=r2], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x80, 0x5, 0x3a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="449df18d098dfcd2c50c61580cd0ba7d5524fac46e641423b01613908be1e46241affd2884d0acb6cde2156c7cbad852c33bb67db850bf9a3869224683ba8cc2d245a2dd7efc089c7dffeff32aab05e5ce9b7eebe34bbea122e427915249b4b662c8d9aca64c9872ad5feb42cebac0b127da8481bc0cf7fc83b057eee475bec953683a7b054d25f30cbfc72e629b217baa6df41c78bf8c328cdb786149a18fbe6e09f6e52e38e6a84a62150d6ee0240e01b2fa467c204a0d", 0xb8}, {&(0x7f00000000c0)="2bc9d0ab0a0169d6a88f99466c2904", 0xf}, {&(0x7f0000000440)="543a9a82b0ddaf4e28041970cb4a94cb3fd34be39b47bff70298a3750a875f445474a9144ae1c33a74ba15afa1ddc5750643c9f4db3b710c327bcb901225181f03fc254ca2c43f5e40aed38a6aad8acfd6ed7a3287b828bcfe087fbe4364e06e858883d7e13f68185ea008236571099482c60211f12d2aabc4ef99d44c7deb646fdd8ba8cee489afb1a56e8b185cc02922eb4499bec899a195e299f24e5be663", 0xa0}, {&(0x7f0000000500)="1723ef612486b918945fc9531d73c06c3eb2bf978afb5feaeb3825058e5e8b10c1247a31d772aa348005d54c79094049f029986ddb1ab18190d67bd4be2746f210a944be6999b102706bb6ace08bcc8160a7e8a3de852bad413db730e6b2afc90fe7e8a9de0a3c893637eb65308f72a2eec15a95aeec262a0bdef7104c4cd88cddb650df6f23a7dc3705b676d6317cdc5a5c545ce2f5023450958171a2970c4b2c3c7cbc93c82e405556b8bb2b28f5", 0xaf}], 0x4, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x8000) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r7, &(0x7f0000000640)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) 9m6.468925073s ago: executing program 32 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xd, r3}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096d1ca00e8f188564ff3725841fb"], 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "8cda6546d2f563ba", "66b43257a40da56982c19217e44e1a1c", "4d8bbf0e", "dcc5110b06dc61f0"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 9m6.395436374s ago: executing program 2 (id=31): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0xa, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0xffe0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_clone(0x4044011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m2.084998477s ago: executing program 2 (id=35): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003f40)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x20, 0x6, "801d6276c7fa"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m59.862740329s ago: executing program 2 (id=38): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 8m43.497186677s ago: executing program 33 (id=38): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 5.004580108s ago: executing program 0 (id=2647): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x9, 0x10, "0062ba7d8200000000f7ffffff00"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) 4.789158161s ago: executing program 5 (id=2648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.788810781s ago: executing program 6 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x404000c) 4.735994492s ago: executing program 0 (id=2650): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003e80)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000180)=0xe4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40, r4}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 4.720322142s ago: executing program 6 (id=2651): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x7}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, 0x0) r3 = syz_open_procfs(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="f4416eb4e859495d589fefa788a8", 0x12, 0x5, &(0x7f0000002780)={0x11, 0x0, r7, 0x1, 0x75, 0x6, @link_local}, 0x14) 4.608902304s ago: executing program 5 (id=2652): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x24, &(0x7f00000002c0)={0x40, 0x16, 0xfb, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x200, 0x800, 0x37a2, 0x6, 0x98b1, 0x7, 0x14, 0x2f, 0x0, 0xd2d8, 0x9, 0xb3}}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x87, 0x2, 0xb33}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat$nullb(0xffffff9c, &(0x7f00000001c0), 0x20001, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) brk(0x7fffffffffffffff) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x1, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRESDEC=r1, @ANYRES64=r3, @ANYRES64=r2, @ANYRES32=0x0], 0x0) syz_usb_connect$cdc_ecm(0x7, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0x100, 0xfb, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xb, 0x2, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xf, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x6, 0x5}}}}}]}}]}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.515985665s ago: executing program 6 (id=2653): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80000006}]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) 3.266332353s ago: executing program 1 (id=2662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.148202415s ago: executing program 6 (id=2663): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.050014977s ago: executing program 4 (id=2664): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2.931586638s ago: executing program 1 (id=2665): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) 2.914394298s ago: executing program 6 (id=2666): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.697746131s ago: executing program 1 (id=2667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) 2.582714133s ago: executing program 0 (id=2668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0x3eca, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0xf0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x5}, {0x1, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x82, 0xbc}, {0x40, 0x6, 0x9}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xc, '\x00', 0x42}, {0x1, 0x2}, {0x0, 0x50, 0x40}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x74, 0xfc}, {0x2, 0x2, 0x8, '\x00', 0x9}, {0x0, 0x0, 0x6}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x13}, {0x80, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0xfe, 0x0, '\x00', 0xe}, {0x10, 0x83, 0x9}]}}) 2.410997606s ago: executing program 1 (id=2669): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4048aecb, &(0x7f00000000c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.347482677s ago: executing program 4 (id=2670): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x0, &(0x7f00000001c0)) 2.225202978s ago: executing program 1 (id=2671): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="173fa8e4", 0x4}], 0x1, 0x4, 0x40000) 2.09575871s ago: executing program 4 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r1, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.09109992s ago: executing program 0 (id=2673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd"], 0xffe) 1.837050334s ago: executing program 4 (id=2674): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80000006}]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) 1.747917075s ago: executing program 0 (id=2675): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f00000001c0)="067c", 0x2, 0x3ca611852b6aee4, &(0x7f0000000000)={0x2, 0x8, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000006c0)='A', 0x1, 0x40000, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) 1.533266048s ago: executing program 0 (id=2676): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.006393806s ago: executing program 5 (id=2678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x7}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, 0x0) r3 = syz_open_procfs(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="f4416eb4e859495d589fefa788a8", 0x12, 0x5, &(0x7f0000002780)={0x11, 0x0, r7, 0x1, 0x75, 0x6, @link_local}, 0x14) 681.114451ms ago: executing program 5 (id=2679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209b"}) 672.240101ms ago: executing program 1 (id=2680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002340)=@delchain={0xce8, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xfff2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1d}}, @filter_kind_options=@f_u32={{0x8}, {0xc78, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x8, 0x5}}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfffe}}, @TCA_U32_SEL={0x7e4, 0x5, {0x9, 0x0, 0x9, 0x8, 0xa1e, 0x5, 0x8, 0x2, [{0x5, 0x9, 0x6, 0xf865}, {0x1, 0x5, 0x3, 0x9}, {0x6, 0x8, 0x3, 0x1000}, {0x4, 0x5, 0x0, 0x6}, {0x4, 0xf, 0x3}, {0x1, 0x7, 0x1, 0xa}, {0x6, 0x8001, 0xa80, 0xf}, {0x0, 0x10001, 0x6, 0x3}, {0x6, 0x3, 0x85, 0x3}, {0x8, 0x25, 0xfffffffd, 0x101}, {0x7, 0xe, 0x0, 0x8}, {0x6, 0x6, 0x0, 0x10000}, {0x7, 0x8, 0x24, 0x8ce}, {0x7, 0x89e, 0x8000, 0x3}, {0x9, 0x1, 0xc, 0xa}, {0x8, 0x5, 0x17, 0x10}, {0xb, 0x1ff, 0x7, 0x9}, {0x6, 0xb, 0x80000000, 0x5}, {0x6, 0x9, 0x2, 0xe}, {0xcacc, 0x8, 0xffffffff}, {0xd97, 0xdc, 0x1000, 0x6}, {0x4f1296d, 0x9, 0x6, 0x9}, {0x9da, 0x100, 0x8, 0xa2}, {0x9, 0x0, 0x9, 0x4}, {0x6, 0x0, 0x7, 0x4}, {0x3, 0x1, 0x9, 0x7}, {0x100, 0x50f, 0x2, 0x3}, {0x6, 0x9d, 0x7fff, 0xe9db}, {0x100, 0xb, 0x9, 0x3}, {0x3d342614, 0x80, 0x6, 0x6}, {0x7e1, 0x9, 0x5, 0x79e}, {0x4, 0x5, 0x5}, {0xe89, 0x10000, 0x3, 0x6}, {0x7, 0x8954, 0x7, 0x5}, {0x7, 0xfffffff6, 0x6, 0xf2}, {0x4, 0x9, 0x80000000, 0x1}, {0x95, 0x7, 0x3, 0x9}, {0x4dc4, 0x8, 0x1, 0x1db}, {0x100, 0x8000, 0x93c, 0x9}, {0x2b, 0x4, 0x2, 0x1}, {0xe, 0x7, 0xd, 0x10}, {0x2, 0xfffffffe, 0x400, 0xca}, {0x5, 0x9, 0x1, 0x1}, {0xd, 0x6, 0x0, 0x6}, {0xffffff01, 0xffff, 0x1, 0x7}, {0x7b9, 0x400, 0xfc800000, 0xfffffcc1}, {0x7fffffff, 0x10000, 0x4, 0x6a6}, {0xc19d, 0x2, 0xcc85, 0xe}, {0xde53, 0x4000000, 0x8, 0x1}, {0x230f, 0x0, 0x3, 0x2}, {0x8, 0x1, 0xfac, 0x7bd9}, {0x101, 0x8, 0x4, 0x69}, {0x9, 0x12000000, 0x5, 0x5}, {0xb95, 0xfffffffe, 0x1, 0x3}, {0x0, 0x3, 0x29, 0x7}, {0x6, 0x81, 0x6, 0x8}, {0xfffffffc, 0x200, 0x9, 0x46}, {0x3, 0x8, 0x8, 0x401}, {0xfffffffa, 0xa7, 0x0, 0xc}, {0x6778, 0x8, 0x81, 0x401}, {0x7d, 0x5, 0x400000, 0x8}, {0x0, 0x10, 0x9, 0x8}, {0x7, 0x8, 0x8, 0x7f}, {0x57d8, 0x9, 0x46c, 0x3}, {0x2, 0xbbe, 0xffffffff, 0x81}, {0x2, 0x3, 0x0, 0x80000001}, {0xfffffffc, 0x77, 0x8, 0x8}, {0x8000, 0x866, 0x703}, {0x1, 0x2, 0x2, 0x7}, {0x6, 0x1, 0x7f, 0xa9}, {0x200, 0x7ff, 0xe}, {0x800, 0x8000, 0x5, 0x6}, {0x6, 0x6, 0x4, 0x8}, {0x7, 0x8, 0x1, 0x3}, {0x1c10, 0x7f1, 0x7, 0x9}, {0x3, 0x3, 0x6, 0x5}, {0x6, 0x1, 0x8, 0x7}, {0xf, 0x3, 0x1, 0x6}, {0x7f, 0x7, 0x6, 0x223b}, {0x1, 0x2, 0x8, 0x59d}, {0x0, 0x3bb, 0x2, 0xc}, {0x3, 0x6, 0x3, 0x7fff}, {0x80, 0x1, 0x6, 0x5}, {0x932, 0x5, 0x3b, 0xfffffa5e}, {0x3, 0x8, 0x14, 0x5}, {0x4, 0x12c, 0x80000000, 0x3}, {0x2, 0xffff, 0x5, 0x4}, {0x6, 0x8, 0x1e4, 0x800}, {0x4, 0x9, 0x5, 0x5}, {0x6, 0x1, 0x1, 0x800}, {0x7, 0x7, 0x45a, 0x6}, {0x3, 0x0, 0x57, 0x7f}, {0x9, 0x800, 0x10, 0x800}, {0x2, 0xd3, 0x80000001, 0xfffffff8}, {0x401, 0x6, 0x5, 0x4c2cf899}, {0x0, 0x3, 0x8, 0x7f}, {0x4, 0x4, 0x7f, 0x8}, {0x3, 0x6, 0xfffffff9, 0x5}, {0x800, 0xe, 0x51d, 0x40}, {0x3db, 0x6, 0x5}, {0x7fff, 0x0, 0x4, 0x880}, {0x5, 0xff, 0x6, 0x3}, {0x1, 0x2, 0x9, 0x4}, {0x1, 0xffffff27, 0x4, 0x4}, {0x4, 0xff, 0x10000, 0x3}, {0x8e, 0x0, 0x4, 0x3}, {0x2, 0x9, 0x0, 0x7}, {0xfffffffc, 0xdc7d, 0x9, 0x7}, {0x0, 0xfffffff7, 0x6, 0xfffffff9}, {0xfff, 0xffffffff, 0x4, 0xd}, {0x80000001, 0x4, 0xfffffff6, 0x6}, {0x5, 0x7f, 0x5, 0x8}, {0xfffffffd, 0x9, 0xfffffa4e, 0x7}, {0x90, 0x0, 0xe41, 0x2}, {0x292, 0xf38, 0x4, 0x6}, {0xf, 0x4, 0xe, 0x5}, {0x54b4, 0x874a, 0x4, 0x4}, {0x8, 0xe5b3400, 0x3ff, 0x7}, {0xb, 0x6, 0x4, 0x1ff}, {0x7, 0x3501, 0x2, 0x1}, {0x3cfb, 0x7e3, 0x480000, 0x7}, {0x1, 0x8, 0xa3, 0xb865}, {0x5, 0x7, 0x4, 0xffff8000}, {0x1, 0xc5, 0xea4, 0x3cc8}, {0x1, 0x7ff, 0x6, 0x3}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0xc}}, @TCA_U32_ACT={0x4}, @TCA_U32_POLICE={0x45c, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xb0, 0x18000000, 0xfbd, 0x9, 0x1000, 0x1, 0x0, 0xfffffff9, 0x1, 0x4df6867e, 0x1, 0x4, 0x657, 0x92ba, 0xa, 0x9, 0x5, 0x2, 0x3, 0x5, 0x0, 0xffffffff, 0x5, 0xc5e6, 0x14d, 0x7fffffff, 0xae, 0x3, 0x9a, 0x5655, 0xf1, 0x1, 0x3, 0x5, 0xc, 0x1, 0x80000001, 0x80000001, 0xfffffffa, 0x200, 0x2, 0x9, 0xd, 0x3, 0x100, 0x6d38, 0xffff1369, 0x0, 0x0, 0x10000, 0xf3, 0x4, 0x59546096, 0xfffffff7, 0xfffff133, 0xa41, 0x5, 0x80000000, 0xa7, 0x9, 0xb9, 0x401, 0xff, 0x2, 0x8, 0x92, 0x6, 0x0, 0x1, 0x4, 0x3ff, 0x80000000, 0x8, 0x7, 0x1, 0x5, 0x7, 0x8, 0x0, 0xf, 0x0, 0x739f, 0x7f, 0xd, 0x15e, 0xe, 0x4, 0xfff, 0x0, 0x80000000, 0x5, 0x9, 0x8, 0x1, 0x4, 0x830c, 0x3, 0xc025, 0x800, 0xff, 0x2, 0x7, 0x0, 0x400, 0x800, 0xffff1b8b, 0x3, 0x1, 0x7, 0x7, 0x9, 0x3, 0xa3, 0xffff, 0x22e3, 0x8000, 0x3, 0x8000, 0x80000000, 0x2, 0xfffffff9, 0x2, 0x401, 0x5, 0x8, 0x6, 0x7, 0xd, 0x8, 0x8, 0x100, 0x7, 0x4, 0x3, 0x5, 0x359, 0x751f, 0x2910, 0x800, 0xa3, 0x80000000, 0x800, 0x8, 0x7, 0x7, 0xad, 0xcf1, 0x3ff, 0x2b, 0x7fffffff, 0xfff, 0x2, 0x2, 0x7fff, 0xb, 0x9, 0x2, 0x100, 0x5, 0x59, 0x2, 0x80000001, 0x6, 0x7fff, 0x3, 0x5b, 0x9, 0x1, 0x0, 0x7, 0x7, 0x7, 0x8001, 0x80, 0x10000, 0x1, 0x3, 0xf, 0x8, 0x3, 0xa, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7c, 0x40, 0x7fffffff, 0x5b1, 0xfffffffb, 0x2, 0xe0000000, 0xcc2, 0x6, 0x6, 0xbf5, 0x1, 0x1, 0x6, 0x400, 0x8001, 0x84d, 0x4, 0x9, 0x1008, 0x7, 0x6, 0xc, 0x2, 0x3, 0x3, 0x0, 0x80000001, 0x4c8, 0x2, 0x2, 0x6, 0x0, 0x6, 0x2, 0x448b, 0x8, 0x38b, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x2, 0x6, 0xfff, 0x1, 0x6, 0x800, 0x7, 0x8, 0xd, 0x7, 0x89, 0x2, 0x6, 0x5, 0x2, 0x9, 0x0, 0x0, 0xe9b, 0xffffff01, 0x7, 0x5d49, 0x9, 0x10000, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x1e, 0xc, 0x1, {0x4, 0x0, 0x0, 0x9, 0x7, 0x4d}, {0x0, 0x0, 0x0, 0xfffb, 0x400, 0x2}, 0x10000, 0xe000, 0x8001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3ff}]}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0xce8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000018}, 0x4000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d"], 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x9, 0x10}, 0xfffffffffffffc2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c02fd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5f23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004800) rt_sigprocmask(0x0, &(0x7f0000000400)={[0x6]}, &(0x7f0000000380), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r7, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000140), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 540.609673ms ago: executing program 5 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 149.086918ms ago: executing program 6 (id=2682): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 147.331618ms ago: executing program 4 (id=2683): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[0x0]) 97.558699ms ago: executing program 5 (id=2684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0x3eca, 0x0, [{0x0, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0xf0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x5}, {0x1, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x82, 0xbc}, {0x40, 0x6, 0x9}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xc, '\x00', 0x42}, {0x1, 0x2}, {0x0, 0x50, 0x40}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x74, 0xfc}, {0x2, 0x2, 0x8, '\x00', 0x9}, {0x0, 0x0, 0x6}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x13}, {0x80, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0xfe, 0x0, '\x00', 0xe}, {0x10, 0x83, 0x9}]}}) 0s ago: executing program 4 (id=2685): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) kernel console output (not intermixed with test programs): 7][ T5170] usb 2-1: config 0 has no interface number 0 [ 477.198012][ T5170] usb 2-1: config 0 interface 12 has no altsetting 0 [ 477.223150][ T5170] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 477.250169][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.275242][ T5170] usb 2-1: Product: syz [ 477.288886][ T5170] usb 2-1: Manufacturer: syz [ 477.303157][ T5170] usb 2-1: SerialNumber: syz [ 477.321230][ T5170] usb 2-1: config 0 descriptor?? [ 477.346797][ T5170] f81534 2-1:0.12: required endpoints missing [ 477.563484][ T952] usb 2-1: USB disconnect, device number 22 [ 478.796413][ T5170] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 479.001594][ T5170] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 479.029452][ T5170] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 479.059005][ T5170] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.084996][ T5170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.096221][ T9651] tmpfs: Unknown parameter 'usrquota' [ 479.246253][ T952] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 479.439650][ T952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.464429][ T952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.493441][ T952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 479.529256][ T952] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 479.552396][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.581266][ T9649] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 479.597418][ T952] hub 2-1:1.0: bad descriptor, ignoring hub [ 479.612404][ T952] hub: probe of 2-1:1.0 failed with error -5 [ 479.632710][ T952] cdc_wdm 2-1:1.0: skipping garbage [ 479.645644][ T952] cdc_wdm 2-1:1.0: skipping garbage [ 479.663386][ T952] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 479.691086][ T952] cdc_wdm 2-1:1.0: Unknown control protocol [ 479.752427][ T952] usb 7-1: USB disconnect, device number 25 [ 479.926912][ T4300] usb 2-1: USB disconnect, device number 23 [ 480.870688][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 481.019934][ T9695] netlink: 'syz.5.1366': attribute type 15 has an invalid length. [ 481.064047][ T9697] x_tables: ip_tables: osf match: only valid for protocol 6 [ 481.354615][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 481.364297][ T9717] netlink: 'syz.5.1376': attribute type 2 has an invalid length. [ 481.752120][ T9729] device syzkaller0 entered promiscuous mode [ 481.758324][ T952] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 481.940917][ T952] usb 6-1: Using ep0 maxpacket: 32 [ 481.950908][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 481.950924][ T27] audit: type=1326 audit(1749763957.756:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.6.1385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x0 [ 481.979948][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.997345][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.007385][ T952] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.017189][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.027497][ T952] usb 6-1: config 0 descriptor?? [ 482.411420][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1388'. [ 482.472583][ T952] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 482.751745][ T5170] usb 6-1: USB disconnect, device number 20 [ 484.596778][ T9779] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1400'. [ 484.607839][ T9779] ksmbd: Unknown IPC event: 10, ignore. [ 484.953085][ T952] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 485.158684][ T952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.173972][ T952] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 485.185620][ T952] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 485.203786][ T952] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 485.213114][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.225985][ T952] usb 7-1: Product: syz [ 485.230271][ T952] usb 7-1: Manufacturer: syz [ 485.234896][ T952] usb 7-1: SerialNumber: syz [ 485.485042][ T952] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 485.537255][ T952] usb 7-1: USB disconnect, device number 26 [ 485.604727][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 486.386280][ T9823] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 487.016738][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 487.025723][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 487.065257][ T9860] netlink: 'syz.0.1439': attribute type 20 has an invalid length. [ 487.454358][ T9886] netlink: 'syz.5.1460': attribute type 1 has an invalid length. [ 487.521490][ T9890] ip6t_srh: unknown srh invflags 7D00 [ 487.521882][ T9886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.650099][ T9888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 487.671916][ T9888] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 487.719606][ T9888] bond3: (slave ipip0): Error -95 calling set_mac_address [ 488.251661][ T9919] binder: 9917:9919 ioctl c0306201 200000000240 returned -11 [ 488.595692][ T9934] lo speed is unknown, defaulting to 1000 [ 488.602958][ T9934] bond0 speed is unknown, defaulting to 1000 [ 490.334832][ T9961] binder: 9960:9961 ioctl c0306201 200000000240 returned -11 [ 490.763567][ T27] audit: type=1326 audit(1749763966.566:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 490.858567][ T27] audit: type=1326 audit(1749763966.566:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.001956][ T27] audit: type=1326 audit(1749763966.566:8472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 491.104459][ T27] audit: type=1326 audit(1749763966.596:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.221219][ T27] audit: type=1326 audit(1749763966.596:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.330948][ T27] audit: type=1326 audit(1749763966.596:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.427348][ T27] audit: type=1326 audit(1749763966.596:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 491.534706][ T27] audit: type=1326 audit(1749763966.596:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.636229][ T27] audit: type=1326 audit(1749763966.596:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 491.711472][ T9982] binder: 9979:9982 ioctl c0306201 200000000240 returned -11 [ 491.734756][ T27] audit: type=1326 audit(1749763966.596:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9973 comm="syz.6.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 492.582774][T10009] lo speed is unknown, defaulting to 1000 [ 492.597257][T10009] bond0 speed is unknown, defaulting to 1000 [ 492.822247][T10017] binder: 10016:10017 ioctl c0306201 200000000240 returned -11 [ 494.461018][T10057] binder: 10056:10057 ioctl c0306201 200000000240 returned -11 [ 495.046181][ T5169] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 495.250340][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 495.290487][ T5169] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 495.325232][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 495.363150][ T5169] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 495.386284][ T5169] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 495.409127][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.428992][ T5169] usb 5-1: config 0 descriptor?? [ 497.165768][ T5169] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 497.188650][ T5169] hdpvr 5-1:0.0: device init failed [ 497.233313][ T5169] hdpvr: probe of 5-1:0.0 failed with error -12 [ 497.278010][ T5169] usb 5-1: USB disconnect, device number 26 [ 497.827276][T10100] binder: 10096:10100 ioctl c0306201 200000000240 returned -11 [ 497.840732][T10094] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.858263][T10094] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 497.864514][T10094] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 497.872859][T10094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.885568][T10094] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 497.895027][T10094] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 497.910599][T10094] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.921709][T10094] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 497.942679][T10094] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 497.963372][T10094] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 497.983486][T10094] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 497.996283][T10094] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 498.005032][T10094] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.016485][T10094] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 498.025518][T10094] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 498.352643][T10105] lo speed is unknown, defaulting to 1000 [ 498.408854][T10105] bond0 speed is unknown, defaulting to 1000 [ 499.570668][T10138] netlink: 'syz.1.1535': attribute type 10 has an invalid length. [ 499.589232][T10138] bridge0: port 1(macsec0) entered blocking state [ 499.638605][T10138] bridge0: port 1(macsec0) entered disabled state [ 499.674008][T10138] device macsec0 entered promiscuous mode [ 499.756222][ T4253] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.916242][ T4253] Bluetooth: hci2: command 0x0c1a tx timeout [ 499.926388][ T5170] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 499.996292][ T4253] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.002462][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 500.076427][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.128010][ T5170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.143067][ T5170] usb 2-1: config 0 has no interfaces? [ 500.166721][ T5170] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 500.198418][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.219386][ T5170] usb 2-1: Product: syz [ 500.223786][ T5170] usb 2-1: Manufacturer: syz [ 500.229556][ T5170] usb 2-1: SerialNumber: syz [ 500.236544][ T5170] usb 2-1: config 0 descriptor?? [ 500.510109][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1535'. [ 501.189799][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.196407][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.222678][T10163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.246595][T10163] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 501.264239][T10163] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 501.273554][T10163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.313177][T10163] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 501.335274][T10163] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 501.358777][T10163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.378714][T10163] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 501.400874][T10163] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 501.428648][T10163] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 501.461272][T10163] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 501.483502][T10163] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 501.504874][T10163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 501.522667][T10163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 501.539565][T10163] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 501.912066][T10178] device vlan2 entered promiscuous mode [ 501.924664][T10178] device syz_tun entered promiscuous mode [ 502.363257][T10186] lo speed is unknown, defaulting to 1000 [ 502.377257][T10186] bond0 speed is unknown, defaulting to 1000 [ 502.900636][ T952] usb 2-1: USB disconnect, device number 24 [ 502.973897][T10196] usb usb8: usbfs: process 10196 (syz.1.1557) did not claim interface 0 before use [ 503.186462][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 503.346482][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.426570][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 503.506520][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 503.512663][ T4266] Bluetooth: hci5: command 0x0c1a tx timeout [ 503.657582][T10209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.666882][ T27] kauditd_printk_skb: 84 callbacks suppressed [ 503.666900][ T27] audit: type=1326 audit(1749763979.476:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 503.705898][T10209] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 503.728656][T10209] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 503.760221][ T27] audit: type=1326 audit(1749763979.506:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.772594][T10209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.800304][T10209] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 503.815202][ T27] audit: type=1326 audit(1749763979.506:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.815568][T10209] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 503.838245][ T27] audit: type=1326 audit(1749763979.506:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.869413][ T27] audit: type=1326 audit(1749763979.506:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.902035][ T27] audit: type=1326 audit(1749763979.506:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.929945][ T27] audit: type=1326 audit(1749763979.506:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 503.953252][T10209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.958531][ T27] audit: type=1326 audit(1749763979.506:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 503.976440][T10209] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 504.024310][T10209] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 504.039625][ T27] audit: type=1326 audit(1749763979.526:8572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 504.062748][T10209] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 504.069560][ T27] audit: type=1326 audit(1749763979.526:8573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.5.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4468d2ab19 code=0x7ffc0000 [ 504.093328][T10209] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 504.100375][T10209] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 504.108012][T10209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.114126][T10209] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 504.120614][T10209] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 504.132733][T10227] device vlan2 entered promiscuous mode [ 504.139041][T10227] device syz_tun entered promiscuous mode [ 504.378892][T10235] netlink: 'syz.4.1569': attribute type 10 has an invalid length. [ 504.397538][T10235] bridge0: port 4(macsec0) entered blocking state [ 504.410880][T10235] bridge0: port 4(macsec0) entered disabled state [ 504.537954][T10235] device macsec0 entered promiscuous mode [ 504.660874][T10249] usb usb8: usbfs: process 10249 (syz.0.1575) did not claim interface 0 before use [ 504.796372][ T5170] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 504.894761][T10253] lo speed is unknown, defaulting to 1000 [ 504.902361][T10253] bond0 speed is unknown, defaulting to 1000 [ 504.936001][T10261] device vlan3 entered promiscuous mode [ 504.941928][T10261] device syz_tun entered promiscuous mode [ 505.011534][ T5170] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.048910][ T5170] usb 5-1: config 0 has no interfaces? [ 505.075643][ T5170] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 505.125432][ T5170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.160382][ T5170] usb 5-1: Product: syz [ 505.183705][ T5170] usb 5-1: Manufacturer: syz [ 505.196417][ T5170] usb 5-1: SerialNumber: syz [ 505.207727][ T5170] usb 5-1: config 0 descriptor?? [ 505.465282][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 505.676326][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.826260][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 505.986815][ T4253] Bluetooth: hci3: command 0x0c1a tx timeout [ 506.092885][T10271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.109567][T10271] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 506.119220][T10288] binder_alloc: 10286: binder_alloc_buf, no vma [ 506.120684][T10271] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 506.148021][ T4266] Bluetooth: hci5: command 0x0c1a tx timeout [ 506.148070][ T4253] Bluetooth: hci4: command 0x0c1a tx timeout [ 506.166061][T10271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.167138][T10288] binder: 10286:10288 ioctl c0306201 200000000240 returned -11 [ 506.183547][T10271] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 506.204009][T10271] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 506.214225][T10271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 506.220690][T10271] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 506.227202][T10271] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 506.234518][T10271] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 506.240873][T10271] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 506.248734][T10271] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 506.267136][T10271] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 506.288360][T10271] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 506.301878][T10271] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 506.642540][T10298] 8021q: VLANs not supported on gre0 [ 506.705437][T10296] lo speed is unknown, defaulting to 1000 [ 506.715462][T10296] bond0 speed is unknown, defaulting to 1000 [ 507.374796][T10318] binder_alloc: 10317: binder_alloc_buf, no vma [ 507.395149][T10318] binder: 10317:10318 ioctl c0306201 200000000240 returned -11 [ 507.617343][ T5169] usb 5-1: USB disconnect, device number 27 [ 508.226390][ T4253] Bluetooth: hci3: command 0x0c1a tx timeout [ 508.226411][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 508.306342][ T4253] Bluetooth: hci4: command 0x0c1a tx timeout [ 508.306474][ T4256] Bluetooth: hci5: command 0x0c1a tx timeout [ 508.540791][T10325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.557538][T10325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 508.563527][T10325] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 508.625914][T10325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.648487][T10325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 508.664193][T10325] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 508.693431][T10325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.716342][T10325] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 508.725133][T10325] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 508.759315][T10325] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 508.786505][T10325] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 508.797453][T10325] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 508.813874][T10325] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.829713][T10325] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 508.843903][T10325] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 509.086313][T10350] binder_alloc: 10349: binder_alloc_buf, no vma [ 509.182220][T10350] binder: 10349:10350 ioctl c0306201 200000000240 returned -11 [ 509.633976][T10363] netlink: 'syz.6.1617': attribute type 10 has an invalid length. [ 509.826319][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 509.946236][ T952] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 510.181165][T10382] device lo entered promiscuous mode [ 510.211157][ T952] usb 7-1: unable to get BOS descriptor or descriptor too short [ 510.222896][ T952] usb 7-1: config 0 has no interfaces? [ 510.233965][T10382] device tunl0 entered promiscuous mode [ 510.251496][ T952] usb 7-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 510.270641][T10382] device gre0 entered promiscuous mode [ 510.276494][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.285118][ T952] usb 7-1: Product: syz [ 510.291636][ T952] usb 7-1: Manufacturer: syz [ 510.301241][ T952] usb 7-1: SerialNumber: syz [ 510.309194][T10382] device gretap0 entered promiscuous mode [ 510.320118][ T952] usb 7-1: config 0 descriptor?? [ 510.352317][T10382] device erspan0 entered promiscuous mode [ 510.391269][T10382] device ip_vti0 entered promiscuous mode [ 510.412429][T10382] device ip6_vti0 entered promiscuous mode [ 510.425645][T10382] device sit0 entered promiscuous mode [ 510.451285][T10382] device ip6tnl0 entered promiscuous mode [ 510.481730][T10382] device ip6gre0 entered promiscuous mode [ 510.509208][T10382] device ip6gretap0 entered promiscuous mode [ 510.545919][T10382] device bridge0 entered promiscuous mode [ 510.583799][T10382] device vcan0 entered promiscuous mode [ 510.611519][T10382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.620395][T10382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 510.626235][ T4256] Bluetooth: hci2: command 0x0c1a tx timeout [ 510.635246][T10382] device bond0 entered promiscuous mode [ 510.652296][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.683862][T10382] device team0 entered promiscuous mode [ 510.700092][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.706197][ T4256] Bluetooth: hci3: command 0x0c1a tx timeout [ 510.728972][T10382] device dummy0 entered promiscuous mode [ 510.750701][T10382] device nlmon0 entered promiscuous mode [ 510.779255][T10382] device caif0 entered promiscuous mode [ 510.787030][ T4256] Bluetooth: hci5: command 0x0c1a tx timeout [ 510.795364][T10382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.854681][ T4302] lo speed is unknown, defaulting to 1000 [ 510.861740][T10363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1617'. [ 510.870855][ T4256] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.993163][T10380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.020443][T10380] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.032798][T10380] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 511.050873][T10380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.064989][T10380] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.081359][T10380] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 511.096329][T10380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.111374][T10380] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 511.130806][T10380] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 511.187007][T10380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 511.203676][T10380] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 511.227302][T10380] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 511.249485][T10380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.264775][T10380] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 511.274562][T10395] fuse: Bad value for 'fd' [ 511.283960][T10395] netlink: 'syz.0.1628': attribute type 5 has an invalid length. [ 511.299455][T10380] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 511.503446][T10398] netlink: 'syz.5.1629': attribute type 12 has an invalid length. [ 511.549684][T10398] netlink: 'syz.5.1629': attribute type 29 has an invalid length. [ 511.588646][T10398] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1629'. [ 512.129123][T10408] tipc: Enabling of bearer rejected, failed to enable media [ 512.226245][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 512.362852][T10421] binder: BINDER_SET_CONTEXT_MGR already set [ 512.376514][T10421] binder: 10419:10421 ioctl 4018620d 200000000040 returned -16 [ 512.408136][T10423] device lo entered promiscuous mode [ 512.428933][T10421] binder: 10419:10421 ioctl c0306201 200000000240 returned -11 [ 512.441023][T10423] device tunl0 entered promiscuous mode [ 512.462999][T10423] device gre0 entered promiscuous mode [ 512.526652][ T4302] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 512.538642][T10423] device gretap0 entered promiscuous mode [ 512.557619][T10423] device erspan0 entered promiscuous mode [ 512.592647][T10423] device ip_vti0 entered promiscuous mode [ 512.605591][T10423] device ip6_vti0 entered promiscuous mode [ 512.621515][T10423] device sit0 entered promiscuous mode [ 512.639290][T10423] device ip6tnl0 entered promiscuous mode [ 512.657963][T10423] device ip6gre0 entered promiscuous mode [ 512.714076][T10423] device syz_tun entered promiscuous mode [ 512.722691][T10423] device ip6gretap0 entered promiscuous mode [ 512.741803][T10423] device vcan0 entered promiscuous mode [ 512.748428][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.755917][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 512.764140][T10423] device bond0 entered promiscuous mode [ 512.773258][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.777426][ T4302] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.791520][T10423] device team0 entered promiscuous mode [ 512.804604][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.832237][ T4302] usb 5-1: config 0 has no interface number 0 [ 512.845112][T10423] device dummy0 entered promiscuous mode [ 512.846886][ T4302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 512.876189][ T4302] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 512.900638][ T4302] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 512.912850][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.924337][ T4302] usb 5-1: config 0 descriptor?? [ 512.933682][T10408] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 512.951764][ T4302] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 512.995635][T10423] batman_adv: batadv0: Interface activated: dummy0 [ 513.015107][T10423] device nlmon0 entered promiscuous mode [ 513.031778][T10423] device caif0 entered promiscuous mode [ 513.038192][T10423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.106398][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 513.106423][ T4256] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.266248][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 513.266267][ T4253] Bluetooth: hci5: command 0x0c1a tx timeout [ 513.332230][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 513.332240][ T27] audit: type=1326 audit(1749763989.136:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.1.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 513.393586][ T5170] usb 7-1: USB disconnect, device number 27 [ 513.446922][ T27] audit: type=1326 audit(1749763989.176:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.1.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 513.485176][T10436] lo speed is unknown, defaulting to 1000 [ 513.503665][T10436] bond0 speed is unknown, defaulting to 1000 [ 513.522690][ T27] audit: type=1326 audit(1749763989.176:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.1.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 513.547323][ T27] audit: type=1326 audit(1749763989.176:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.1.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 513.571058][ T27] audit: type=1326 audit(1749763989.176:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10432 comm="syz.1.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 513.598294][T10440] fuse: Bad value for 'fd' [ 513.730314][T10429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.748857][T10429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 513.769569][T10429] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 513.795102][T10429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.806290][T10429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 513.818564][T10429] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 513.854257][T10429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.882992][T10429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 513.894281][T10429] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 513.907914][T10429] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 513.914547][T10429] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 513.943068][T10429] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 513.981160][T10429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 514.019113][T10429] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 514.051467][T10429] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 514.236752][T10455] binder_alloc: 10454: binder_alloc_buf, no vma [ 514.840605][ T27] audit: type=1326 audit(1749763990.646:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 514.903878][T10468] device tunl0 entered promiscuous mode [ 514.929310][T10468] device gre0 entered promiscuous mode [ 514.943464][ T27] audit: type=1326 audit(1749763990.646:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 514.985919][T10468] device gretap0 entered promiscuous mode [ 515.014687][T10468] device erspan0 entered promiscuous mode [ 515.031586][T10468] device ip_vti0 entered promiscuous mode [ 515.040969][ T27] audit: type=1326 audit(1749763990.646:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 515.077049][T10468] device ip6_vti0 entered promiscuous mode [ 515.092936][T10468] device sit0 entered promiscuous mode [ 515.106198][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 515.129023][T10468] device ip6tnl0 entered promiscuous mode [ 515.138461][T10468] device ip6gre0 entered promiscuous mode [ 515.154024][T10468] device bridge0 entered promiscuous mode [ 515.172056][ T27] audit: type=1326 audit(1749763990.646:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 515.205082][T10468] device vcan0 entered promiscuous mode [ 515.220577][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.247020][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 515.283763][ T27] audit: type=1326 audit(1749763990.646:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.6.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 515.313279][T10468] device bond0 entered promiscuous mode [ 515.350570][T10468] device bond_slave_0 entered promiscuous mode [ 515.405785][T10468] device bond_slave_1 entered promiscuous mode [ 515.509759][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.542786][T10468] device team0 entered promiscuous mode [ 515.600939][T10468] device team_slave_0 entered promiscuous mode [ 515.639650][T10468] device team_slave_1 entered promiscuous mode [ 515.683695][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.815358][T10468] device dummy0 entered promiscuous mode [ 515.826341][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.906294][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.986274][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 515.992308][ T4256] Bluetooth: hci5: command 0x0c1a tx timeout [ 516.143443][T10468] batman_adv: batadv0: Interface activated: dummy0 [ 516.165041][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 516.177069][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 516.189546][T10468] device nlmon0 entered promiscuous mode [ 516.379633][T10468] device caif0 entered promiscuous mode [ 516.409994][T10468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.681319][ T5169] usb 5-1: USB disconnect, device number 28 [ 516.769708][T10477] lo speed is unknown, defaulting to 1000 [ 516.779521][T10477] bond0 speed is unknown, defaulting to 1000 [ 517.053912][T10497] binder_alloc: 10496: binder_alloc_buf, no vma [ 517.186311][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.604732][T10506] lo speed is unknown, defaulting to 1000 [ 517.634682][T10506] bond0 speed is unknown, defaulting to 1000 [ 517.906258][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 517.986344][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 518.066372][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 518.070951][ T4256] Bluetooth: hci5: command 0x0406 tx timeout [ 518.486399][T10533] tipc: Started in network mode [ 518.492340][T10533] tipc: Node identity 7f000001, cluster identity 4711 [ 518.499757][T10533] tipc: Enabling of bearer rejected, failed to enable media [ 518.536853][T10535] binder_alloc: 10534: binder_alloc_buf, no vma [ 518.828989][T10543] 8021q: VLANs not supported on gre0 [ 519.026221][ T5169] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 519.109000][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 519.109010][ T27] audit: type=1326 audit(1749763994.916:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 519.180371][T10546] lo speed is unknown, defaulting to 1000 [ 519.209264][T10546] bond0 speed is unknown, defaulting to 1000 [ 519.266310][ T4256] Bluetooth: hci1: command 0x0406 tx timeout [ 519.275672][ T5169] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.305308][ T5169] usb 7-1: config 0 has no interface number 0 [ 519.325600][ T27] audit: type=1326 audit(1749763994.946:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 519.351830][ T5169] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 519.394703][ T27] audit: type=1326 audit(1749763994.946:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 519.402795][ T5169] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 519.466182][ T27] audit: type=1326 audit(1749763994.946:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 519.538414][ T27] audit: type=1326 audit(1749763994.946:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 519.614509][ T5169] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 519.662033][ T5169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.695300][ T5169] usb 7-1: config 0 descriptor?? [ 519.719711][T10533] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 519.729986][ T5169] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 520.105866][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1684'. [ 520.386267][ T5402] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 520.576938][ T5402] usb 2-1: Using ep0 maxpacket: 16 [ 520.583829][ T5402] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.609696][ T5402] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 520.632639][ T5402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.643231][ T5402] usb 2-1: config 0 descriptor?? [ 521.027700][T10572] lo speed is unknown, defaulting to 1000 [ 521.058777][T10572] bond0 speed is unknown, defaulting to 1000 [ 521.067679][ T5402] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 521.088910][ T5402] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 521.108124][ T5402] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 521.125827][ T5402] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 521.145771][ T5402] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 521.163828][ T5402] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 521.494110][ T27] audit: type=1326 audit(1749763997.296:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 521.517967][ T4302] usb 2-1: USB disconnect, device number 25 [ 521.555851][ T27] audit: type=1326 audit(1749763997.326:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 521.596816][ T27] audit: type=1326 audit(1749763997.336:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 521.648775][ T27] audit: type=1326 audit(1749763997.336:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10586 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 522.067586][ T4302] usb 7-1: USB disconnect, device number 28 [ 522.162814][ T27] audit: type=1326 audit(1749763997.966:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.1.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 522.886249][ T4302] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 523.089944][ T4302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.110322][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 523.160930][ T4302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.192425][ T4302] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 523.264773][ T4302] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.285688][ T4302] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.332221][ T4302] usb 5-1: Manufacturer: syz [ 523.372215][ T4302] usb 5-1: config 0 descriptor?? [ 523.815165][T10627] binder: BINDER_SET_CONTEXT_MGR already set [ 523.826319][ T4302] rc_core: IR keymap rc-hauppauge not found [ 523.832585][ T4302] Registered IR keymap rc-empty [ 523.843382][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 523.853684][T10627] binder: 10626:10627 ioctl 4018620d 200000000040 returned -16 [ 523.888792][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 523.928946][ T4302] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 523.945194][ T4302] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 523.966969][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.011718][T10633] lo speed is unknown, defaulting to 1000 [ 524.026337][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.056825][T10633] bond0 speed is unknown, defaulting to 1000 [ 524.076713][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.116538][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.146421][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.186506][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.216542][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.246503][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.286316][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.333281][ T27] kauditd_printk_skb: 680 callbacks suppressed [ 524.333297][ T27] audit: type=1326 audit(1749764000.136:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 524.336266][ T4302] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 524.379864][ T27] audit: type=1326 audit(1749764000.176:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 524.446267][ T27] audit: type=1326 audit(1749764000.176:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 524.507521][ T4302] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.516884][ T4302] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.533256][ T27] audit: type=1326 audit(1749764000.176:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 524.641699][T10646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.650941][ T27] audit: type=1326 audit(1749764000.176:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10639 comm="syz.1.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 524.676466][T10646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.791021][T10648] 8021q: VLANs not supported on gre0 [ 525.082893][T10655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1716'. [ 525.891573][T10669] binder: BINDER_SET_CONTEXT_MGR already set [ 525.906511][T10669] binder: 10667:10669 ioctl 4018620d 200000000040 returned -16 [ 525.953598][T10669] binder: 10667:10669 ioctl c0306201 200000000240 returned -11 [ 526.251514][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 526.458141][T10680] binder: BINDER_SET_CONTEXT_MGR already set [ 526.464331][T10680] binder: 10676:10680 ioctl 4018620d 200000000040 returned -16 [ 526.505471][ T5169] usb 5-1: USB disconnect, device number 29 [ 526.589300][T10684] usb usb8: usbfs: process 10684 (syz.5.1729) did not claim interface 0 before use [ 526.659951][T10688] device vlan2 entered promiscuous mode [ 526.964201][ T27] audit: type=1326 audit(1749764002.766:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10696 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 527.096298][ T27] audit: type=1326 audit(1749764002.796:9329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10696 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 527.197539][ T27] audit: type=1326 audit(1749764002.796:9330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10696 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 527.313212][ T27] audit: type=1326 audit(1749764002.796:9331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10696 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 527.413385][ T27] audit: type=1326 audit(1749764002.796:9332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10696 comm="syz.1.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 528.424970][T10719] usb usb8: usbfs: process 10719 (syz.6.1740) did not claim interface 0 before use [ 528.453704][T10719] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 529.336175][ T27] kauditd_printk_skb: 2321 callbacks suppressed [ 529.336187][ T27] audit: type=1326 audit(1749764005.136:11654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.402925][ T27] audit: type=1326 audit(1749764005.176:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.456118][ T27] audit: type=1326 audit(1749764005.176:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.505944][ T27] audit: type=1326 audit(1749764005.176:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.529004][ T27] audit: type=1326 audit(1749764005.176:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.551724][ T27] audit: type=1326 audit(1749764005.176:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.587184][ T27] audit: type=1326 audit(1749764005.176:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.629103][ T27] audit: type=1326 audit(1749764005.176:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.681622][ T27] audit: type=1326 audit(1749764005.176:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 529.755937][ T27] audit: type=1326 audit(1749764005.176:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10681 comm="syz.0.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 530.038326][T10731] binder: BINDER_SET_CONTEXT_MGR already set [ 530.069965][T10731] binder: 10730:10731 ioctl 4018620d 200000000040 returned -16 [ 531.393625][T10741] lo speed is unknown, defaulting to 1000 [ 531.404318][T10746] binder: BINDER_SET_CONTEXT_MGR already set [ 531.423775][T10741] bond0 speed is unknown, defaulting to 1000 [ 531.436426][T10746] binder: 10745:10746 ioctl 4018620d 200000000040 returned -16 [ 531.455095][T10746] binder: 10745:10746 ioctl c0306201 200000000240 returned -11 [ 531.650395][T10750] device vlan3 entered promiscuous mode [ 532.060116][T10757] binder: BINDER_SET_CONTEXT_MGR already set [ 532.120595][T10757] binder: 10756:10757 ioctl 4018620d 200000000040 returned -16 [ 533.398376][T10774] lo speed is unknown, defaulting to 1000 [ 533.427262][T10774] bond0 speed is unknown, defaulting to 1000 [ 534.315296][T10787] binder: 10786:10787 ioctl c0306201 200000000240 returned -11 [ 534.348866][ T27] kauditd_printk_skb: 985 callbacks suppressed [ 534.348884][ T27] audit: type=1326 audit(1749764010.156:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.543331][ T27] audit: type=1326 audit(1749764010.186:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.691571][ T27] audit: type=1326 audit(1749764010.186:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.786536][ T27] audit: type=1326 audit(1749764010.186:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.846337][ T27] audit: type=1326 audit(1749764010.186:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.882631][ T27] audit: type=1326 audit(1749764010.186:12654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.930824][ T27] audit: type=1326 audit(1749764010.186:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.936654][T10793] device vlan3 entered promiscuous mode [ 534.958964][ T27] audit: type=1326 audit(1749764010.186:12656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 534.982186][ T27] audit: type=1326 audit(1749764010.186:12657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 535.163551][ T27] audit: type=1326 audit(1749764010.186:12658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff48332ab19 code=0x7ffc0000 [ 535.528332][T10805] lo speed is unknown, defaulting to 1000 [ 535.649083][T10809] netlink: 'syz.1.1771': attribute type 5 has an invalid length. [ 535.705985][T10805] bond0 speed is unknown, defaulting to 1000 [ 536.286196][T10818] binder: 10817:10818 ioctl c0306201 200000000240 returned -11 [ 536.470586][T10822] lo speed is unknown, defaulting to 1000 [ 536.515265][T10822] bond0 speed is unknown, defaulting to 1000 [ 537.114422][T10837] device vlan2 entered promiscuous mode [ 537.534404][T10849] binder: 10848:10849 ioctl c0306201 200000000240 returned -11 [ 537.684182][T10854] netlink: 'syz.5.1786': attribute type 5 has an invalid length. [ 537.739854][T10858] binder: BINDER_SET_CONTEXT_MGR already set [ 537.760801][T10858] binder: 10855:10858 ioctl 4018620d 200000000040 returned -16 [ 537.837214][T10858] binder: 10855:10858 ioctl c0306201 200000000240 returned -11 [ 538.814672][T10879] lo speed is unknown, defaulting to 1000 [ 538.835951][T10879] bond0 speed is unknown, defaulting to 1000 [ 538.931759][T10884] lo speed is unknown, defaulting to 1000 [ 539.034773][T10884] bond0 speed is unknown, defaulting to 1000 [ 539.946368][T10889] device vlan2 entered promiscuous mode [ 539.972769][ T27] kauditd_printk_skb: 573 callbacks suppressed [ 539.972784][ T27] audit: type=1326 audit(1749764015.766:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.5.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 540.073221][ T27] audit: type=1326 audit(1749764015.776:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.5.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 540.127313][ T27] audit: type=1326 audit(1749764015.776:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.5.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 540.217718][ T27] audit: type=1326 audit(1749764015.776:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.5.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 540.267687][T10893] binder: BINDER_SET_CONTEXT_MGR already set [ 540.293358][T10893] binder: 10892:10893 ioctl 4018620d 200000000040 returned -16 [ 540.332499][ T27] audit: type=1326 audit(1749764015.776:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.5.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 540.354536][T10893] binder: 10892:10893 ioctl c0306201 200000000240 returned -11 [ 540.427938][T10902] binder: BINDER_SET_CONTEXT_MGR already set [ 540.438667][T10902] binder: 10901:10902 ioctl 4018620d 200000000040 returned -16 [ 540.880005][T10920] lo speed is unknown, defaulting to 1000 [ 540.890569][T10920] bond0 speed is unknown, defaulting to 1000 [ 541.074425][T10925] lo speed is unknown, defaulting to 1000 [ 541.104202][T10925] bond0 speed is unknown, defaulting to 1000 [ 541.384542][ T27] audit: type=1326 audit(1749764017.186:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 541.469389][ T27] audit: type=1326 audit(1749764017.186:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 541.605019][ T27] audit: type=1326 audit(1749764017.216:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 541.676227][ T27] audit: type=1326 audit(1749764017.216:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 541.740361][T10935] device vlan2 entered promiscuous mode [ 541.857829][ T27] audit: type=1326 audit(1749764017.216:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 541.946758][T10938] binder: BINDER_SET_CONTEXT_MGR already set [ 541.985609][T10938] binder: 10937:10938 ioctl 4018620d 200000000040 returned -16 [ 542.254415][T10943] binder: BINDER_SET_CONTEXT_MGR already set [ 542.275024][T10943] binder: 10942:10943 ioctl 4018620d 200000000040 returned -16 [ 543.223455][T10970] binder: BINDER_SET_CONTEXT_MGR already set [ 543.255666][T10970] binder: 10969:10970 ioctl 4018620d 200000000040 returned -16 [ 543.279841][T10972] lo speed is unknown, defaulting to 1000 [ 543.287409][T10972] bond0 speed is unknown, defaulting to 1000 [ 543.768957][T10984] binder: 10983:10984 ioctl c0306201 200000000240 returned -11 [ 543.844113][T10979] lo speed is unknown, defaulting to 1000 [ 543.871809][T10979] bond0 speed is unknown, defaulting to 1000 [ 545.212256][T11015] binder: 11014:11015 ioctl c0306201 200000000240 returned -11 [ 545.834996][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 545.835016][ T27] audit: type=1326 audit(1749764021.636:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 545.937952][ T27] audit: type=1326 audit(1749764021.636:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 545.962915][ T27] audit: type=1326 audit(1749764021.636:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 545.987131][ T27] audit: type=1326 audit(1749764021.636:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 546.013601][ T27] audit: type=1326 audit(1749764021.636:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 546.373338][T11042] lo speed is unknown, defaulting to 1000 [ 546.382622][T11042] bond0 speed is unknown, defaulting to 1000 [ 546.645139][T11043] lo speed is unknown, defaulting to 1000 [ 546.659287][T11043] bond0 speed is unknown, defaulting to 1000 [ 547.509613][T11057] binder: 11056:11057 ioctl c0306201 200000000240 returned -11 [ 547.555908][ T27] audit: type=1326 audit(1749764023.356:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 547.635453][ T27] audit: type=1326 audit(1749764023.356:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 547.726510][ T27] audit: type=1326 audit(1749764023.386:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 547.790133][ T27] audit: type=1326 audit(1749764023.386:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 547.824212][ T27] audit: type=1326 audit(1749764023.386:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 548.137688][T11078] lo speed is unknown, defaulting to 1000 [ 548.155930][T11078] bond0 speed is unknown, defaulting to 1000 [ 548.333082][T11089] binder: 11088:11089 ioctl c0306201 200000000240 returned -11 [ 549.098804][T11100] usb usb8: usbfs: process 11100 (syz.1.1877) did not claim interface 0 before use [ 549.135978][T11100] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 549.408877][T11103] lo speed is unknown, defaulting to 1000 [ 549.455959][T11103] bond0 speed is unknown, defaulting to 1000 [ 549.854058][T11120] binder: 11118:11120 ioctl c0306201 200000000240 returned -11 [ 550.210652][T11135] lo speed is unknown, defaulting to 1000 [ 550.273055][T11135] bond0 speed is unknown, defaulting to 1000 [ 551.548850][T11156] binder: 11154:11156 ioctl c0306201 200000000240 returned -11 [ 552.257881][T11171] 8021q: VLANs not supported on ip6gre0 [ 552.290357][T11169] lo speed is unknown, defaulting to 1000 [ 552.313413][T11169] bond0 speed is unknown, defaulting to 1000 [ 552.525596][T11174] lo speed is unknown, defaulting to 1000 [ 552.553499][T11174] bond0 speed is unknown, defaulting to 1000 [ 553.892917][T11193] binder: 11192:11193 ioctl c0306201 200000000240 returned -11 [ 554.713205][T11207] 8021q: VLANs not supported on ip6gre0 [ 554.882615][T11209] lo speed is unknown, defaulting to 1000 [ 554.889795][T11209] bond0 speed is unknown, defaulting to 1000 [ 555.301876][T11219] lo speed is unknown, defaulting to 1000 [ 555.338519][T11219] bond0 speed is unknown, defaulting to 1000 [ 555.619379][T11228] binder: 11227:11228 ioctl c0306201 200000000240 returned -11 [ 556.130306][T11242] 8021q: VLANs not supported on ip6gre0 [ 556.864196][T11253] lo speed is unknown, defaulting to 1000 [ 556.924290][T11253] bond0 speed is unknown, defaulting to 1000 [ 558.089324][T11269] binder: 11268:11269 ioctl c0306201 200000000240 returned -11 [ 558.412606][T11277] lo speed is unknown, defaulting to 1000 [ 558.435391][T11277] bond0 speed is unknown, defaulting to 1000 [ 558.994548][T11284] 8021q: VLANs not supported on ip6gre0 [ 560.205571][T11309] lo speed is unknown, defaulting to 1000 [ 560.225566][T11312] binder: 11310:11312 ioctl 4018620d 0 returned -22 [ 560.246948][T11309] bond0 speed is unknown, defaulting to 1000 [ 560.268755][T11312] binder: 11310:11312 ioctl c0306201 200000000240 returned -11 [ 561.497244][T11333] 8021q: VLANs not supported on ip6gre0 [ 561.682913][T11337] lo speed is unknown, defaulting to 1000 [ 561.703400][T11339] binder: 11338:11339 ioctl 4018620d 0 returned -22 [ 561.710505][T11337] bond0 speed is unknown, defaulting to 1000 [ 561.727492][T11339] binder: 11338:11339 ioctl c0306201 200000000240 returned -11 [ 562.629969][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.636638][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.008354][T11374] 8021q: VLANs not supported on ip6gre0 [ 563.052565][T11368] lo speed is unknown, defaulting to 1000 [ 563.111068][T11368] bond0 speed is unknown, defaulting to 1000 [ 563.961908][T11387] lo speed is unknown, defaulting to 1000 [ 563.971425][T11387] bond0 speed is unknown, defaulting to 1000 [ 564.494937][T11403] 8021q: VLANs not supported on sit0 [ 564.942138][T11416] lo speed is unknown, defaulting to 1000 [ 564.963696][T11416] bond0 speed is unknown, defaulting to 1000 [ 565.134083][T11425] binder: 11424:11425 ioctl 4018620d 0 returned -22 [ 566.061062][T11449] lo speed is unknown, defaulting to 1000 [ 566.122831][T11449] bond0 speed is unknown, defaulting to 1000 [ 566.466602][T11453] 8021q: VLANs not supported on sit0 [ 566.635535][T11457] binder: 11456:11457 ioctl 4018620d 0 returned -22 [ 567.665358][T11480] binder: BINDER_SET_CONTEXT_MGR already set [ 567.704211][T11480] binder: 11479:11480 ioctl 4018620d 200000000040 returned -16 [ 567.743459][T11480] binder: 11479:11480 ioctl c0306201 200000000240 returned -11 [ 568.038645][T11486] lo speed is unknown, defaulting to 1000 [ 568.058628][T11486] bond0 speed is unknown, defaulting to 1000 [ 568.427824][T11495] 8021q: VLANs not supported on sit0 [ 568.684475][T11499] binder: 11497:11499 ioctl 4018620d 0 returned -22 [ 568.929074][T11507] lo speed is unknown, defaulting to 1000 [ 568.977418][T11507] bond0 speed is unknown, defaulting to 1000 [ 569.889266][T11526] binder: BINDER_SET_CONTEXT_MGR already set [ 569.920220][T11526] binder: 11525:11526 ioctl 4018620d 200000000040 returned -16 [ 569.965934][T11526] binder: 11525:11526 ioctl c0306201 200000000240 returned -11 [ 570.492350][T11537] binder: BINDER_SET_CONTEXT_MGR already set [ 570.504814][T11537] binder: 11534:11537 ioctl 4018620d 200000000040 returned -16 [ 570.657947][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2037'. [ 570.904052][T11553] lo speed is unknown, defaulting to 1000 [ 570.930251][T11553] bond0 speed is unknown, defaulting to 1000 [ 571.087136][T11559] binder: BINDER_SET_CONTEXT_MGR already set [ 571.093196][T11559] binder: 11558:11559 ioctl 4018620d 200000000040 returned -16 [ 571.136787][T11559] binder: 11558:11559 ioctl c0306201 200000000240 returned -11 [ 571.808699][T11577] binder: BINDER_SET_CONTEXT_MGR already set [ 571.846813][T11577] binder: 11576:11577 ioctl 4018620d 200000000040 returned -16 [ 572.718834][T11600] binder: 11599:11600 ioctl c0306201 0 returned -14 [ 572.769512][T11600] binder: 11599:11600 ioctl c0306201 200000000240 returned -11 [ 573.049843][T11606] lo speed is unknown, defaulting to 1000 [ 573.091057][T11606] bond0 speed is unknown, defaulting to 1000 [ 573.733132][T11612] binder: BINDER_SET_CONTEXT_MGR already set [ 573.773462][T11612] binder: 11611:11612 ioctl 4018620d 200000000040 returned -16 [ 574.243421][T11624] 8021q: VLANs not supported on ip6gre0 [ 574.677901][T11634] binder: 11633:11634 ioctl c0306201 0 returned -14 [ 574.714693][T11634] binder: BINDER_SET_CONTEXT_MGR already set [ 574.755574][T11634] binder: 11633:11634 ioctl 4018620d 200000000040 returned -16 [ 574.785432][T11634] binder: 11633:11634 ioctl c0306201 200000000240 returned -11 [ 575.063717][T11642] lo speed is unknown, defaulting to 1000 [ 575.076147][ T4701] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 575.090685][T11642] bond0 speed is unknown, defaulting to 1000 [ 575.269068][ T4701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.287416][T11651] binder: 11650:11651 ioctl c0306201 0 returned -14 [ 575.301949][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 575.321320][T11651] binder: BINDER_SET_CONTEXT_MGR already set [ 575.329888][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 575.342335][T11651] binder: 11650:11651 ioctl 4018620d 200000000040 returned -16 [ 575.352256][ T4701] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 575.407704][ T4701] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 575.452468][ T4701] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 575.480024][ T4701] usb 6-1: Manufacturer: syz [ 575.505738][ T4701] usb 6-1: config 0 descriptor?? [ 576.039985][ T4701] rc_core: IR keymap rc-hauppauge not found [ 576.047944][ T4701] Registered IR keymap rc-empty [ 576.069367][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.126170][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.186737][ T4701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 576.224051][ T4701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 576.299987][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.356263][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.386577][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.416432][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.448281][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.486030][T11679] binder: 11678:11679 ioctl c0306201 0 returned -14 [ 576.508544][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.536962][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.566527][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.597890][T11679] binder: 11678:11679 ioctl c0306201 200000000240 returned -11 [ 576.608938][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.647453][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 576.703978][T11685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.713032][ T4701] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 576.727466][ T4701] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 576.745628][T11685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.181151][T11691] binder: 11690:11691 ioctl c0306201 0 returned -14 [ 577.470241][T11702] lo speed is unknown, defaulting to 1000 [ 577.522460][T11702] bond0 speed is unknown, defaulting to 1000 [ 578.583529][ T7980] usb 6-1: USB disconnect, device number 21 [ 578.643559][T11718] binder: 11716:11718 ioctl c0306201 200000000240 returned -11 [ 578.653019][T11719] usb usb8: usbfs: process 11719 (syz.1.2094) did not claim interface 0 before use [ 578.901775][T11729] binder: 11728:11729 ioctl c0306201 0 returned -14 [ 578.979893][T11729] binder: BINDER_SET_CONTEXT_MGR already set [ 579.016324][T11729] binder: 11728:11729 ioctl 4018620d 200000000040 returned -16 [ 580.042756][T11754] binder: 11753:11754 ioctl c0306201 200000000240 returned -11 [ 580.626284][ T4701] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 580.837414][ T4701] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.884718][ T4701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 580.932711][ T4701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 580.980731][ T4701] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 581.041410][ T4701] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 581.065126][ T4701] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 581.095563][ T4701] usb 7-1: Manufacturer: syz [ 581.113553][ T4701] usb 7-1: config 0 descriptor?? [ 581.506728][ T4701] rc_core: IR keymap rc-hauppauge not found [ 581.512778][ T4701] Registered IR keymap rc-empty [ 581.535163][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 581.587487][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 581.626544][ T4701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 581.710144][ T4701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 581.790473][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 581.859217][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 581.918213][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 581.996271][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.036223][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.087771][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.146627][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.176305][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.216291][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.266276][ T4701] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 582.304942][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.317407][ T4701] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 582.346586][ T4701] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 582.366457][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.840531][T11801] lo speed is unknown, defaulting to 1000 [ 582.902219][T11801] bond0 speed is unknown, defaulting to 1000 [ 583.092602][T11814] 8021q: VLANs not supported on ip6gre0 [ 584.039927][T11840] binder: 11839:11840 ioctl c0306201 200000000240 returned -11 [ 584.233414][T11849] 8021q: VLANs not supported on ip6gre0 [ 584.599770][ T7980] usb 7-1: USB disconnect, device number 29 [ 584.634569][T11857] usb usb8: usbfs: process 11857 (syz.1.2149) did not claim interface 0 before use [ 585.343970][T11888] 8021q: VLANs not supported on ip6gre0 [ 585.492655][T11886] lo speed is unknown, defaulting to 1000 [ 585.517344][T11886] bond0 speed is unknown, defaulting to 1000 [ 585.598058][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 585.598071][ T27] audit: type=1326 audit(1749764061.406:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 585.730512][ T27] audit: type=1326 audit(1749764061.436:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 585.788562][ T27] audit: type=1326 audit(1749764061.436:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 585.852729][ T27] audit: type=1326 audit(1749764061.436:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 585.918320][ T27] audit: type=1326 audit(1749764061.436:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 586.928610][ T27] audit: type=1326 audit(1749764062.736:13277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 587.049311][ T27] audit: type=1326 audit(1749764062.766:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 587.203631][ T27] audit: type=1326 audit(1749764062.766:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 587.311094][ T27] audit: type=1326 audit(1749764062.766:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 587.372237][ T27] audit: type=1326 audit(1749764062.766:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.6.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48338e929 code=0x7ffc0000 [ 587.760379][T11941] lo speed is unknown, defaulting to 1000 [ 587.769742][T11941] bond0 speed is unknown, defaulting to 1000 [ 588.296156][T11948] lo speed is unknown, defaulting to 1000 [ 588.304079][T11948] bond0 speed is unknown, defaulting to 1000 [ 588.839603][T11961] netlink: 'syz.1.2185': attribute type 18 has an invalid length. [ 588.962574][T11970] device vlan2 entered promiscuous mode [ 589.101930][T11974] binder: 11973:11974 ioctl 4018620d 0 returned -22 [ 589.119705][T11974] binder: 11973:11974 ioctl c0306201 200000000240 returned -11 [ 590.601447][T12005] binder: 12003:12005 ioctl 4018620d 0 returned -22 [ 590.631112][T12005] binder: 12003:12005 ioctl c0306201 200000000240 returned -11 [ 590.672023][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 590.672036][ T27] audit: type=1326 audit(1749764066.476:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 590.776152][ T27] audit: type=1326 audit(1749764066.506:13349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 590.840248][ T27] audit: type=1326 audit(1749764066.516:13350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 590.891140][ T27] audit: type=1326 audit(1749764066.516:13351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 590.919161][ T27] audit: type=1326 audit(1749764066.516:13352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12007 comm="syz.0.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 590.951889][ T27] audit: type=1326 audit(1749764066.756:13353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 590.961400][T12020] lo speed is unknown, defaulting to 1000 [ 591.002800][ T27] audit: type=1326 audit(1749764066.766:13354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 591.033554][ T27] audit: type=1326 audit(1749764066.766:13355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 591.068187][T12020] bond0 speed is unknown, defaulting to 1000 [ 591.155574][ T27] audit: type=1326 audit(1749764066.766:13356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 591.206187][ T7980] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 591.239800][ T27] audit: type=1326 audit(1749764066.766:13357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 591.406345][ T7980] usb 1-1: Using ep0 maxpacket: 16 [ 591.412880][ T7980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.435247][ T7980] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 591.461347][ T7980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.486367][ T7980] usb 1-1: config 0 descriptor?? [ 591.898171][ T7980] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 591.908655][ T7980] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 591.921479][ T7980] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 591.937593][ T7980] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 591.945391][ T7980] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 591.995708][T12043] netlink: 'syz.5.2215': attribute type 18 has an invalid length. [ 591.998634][ T7980] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 592.162671][ T7980] usb 1-1: USB disconnect, device number 23 [ 592.830486][T12051] binder: 12050:12051 ioctl 4018620d 0 returned -22 [ 592.871011][T12051] binder: 12050:12051 ioctl c0306201 200000000240 returned -11 [ 593.806174][T12074] 8021q: VLANs not supported on ip6gre0 [ 594.066273][ T4701] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 594.260015][ T4701] usb 2-1: Using ep0 maxpacket: 16 [ 594.267470][ T4701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.295941][ T4701] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 594.322401][ T4701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.353674][ T4701] usb 2-1: config 0 descriptor?? [ 594.709738][T12104] 8021q: VLANs not supported on ip6gre0 [ 594.785923][ T4701] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 594.807571][ T4701] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 594.835115][ T4701] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 594.871900][ T4701] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 594.890835][ T4701] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 594.918649][ T4701] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 595.024253][ T4701] usb 2-1: USB disconnect, device number 26 [ 595.042945][T12109] netlink: 'syz.4.2239': attribute type 18 has an invalid length. [ 595.574607][T12122] binder: 12120:12122 ioctl 4018620d 0 returned -22 [ 596.014684][T12124] device lo left promiscuous mode [ 596.059975][T12124] device tunl0 left promiscuous mode [ 596.085798][T12124] device gre0 left promiscuous mode [ 596.222464][T12124] device gretap0 left promiscuous mode [ 596.290078][T12124] device erspan0 left promiscuous mode [ 596.505847][T12124] device ip_vti0 left promiscuous mode [ 596.611107][T12124] device ip6_vti0 left promiscuous mode [ 596.770802][T12124] device sit0 left promiscuous mode [ 596.918990][T12124] device ip6tnl0 left promiscuous mode [ 596.926707][ T27] kauditd_printk_skb: 438 callbacks suppressed [ 596.926727][ T27] audit: type=1326 audit(1749764072.726:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 596.975948][T12124] device ip6gre0 left promiscuous mode [ 596.998393][ T27] audit: type=1326 audit(1749764072.726:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 597.041992][ T27] audit: type=1326 audit(1749764072.766:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 597.077582][T12124] device bridge0 left promiscuous mode [ 597.092044][T12124] device vcan0 left promiscuous mode [ 597.105481][ T27] audit: type=1326 audit(1749764072.766:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 597.128483][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.135582][T12124] device bond0 left promiscuous mode [ 597.141112][T12124] device bond_slave_0 left promiscuous mode [ 597.147781][T12124] device bond_slave_1 left promiscuous mode [ 597.171030][T12124] device team0 left promiscuous mode [ 597.176652][T12124] device team_slave_0 left promiscuous mode [ 597.182780][ T27] audit: type=1326 audit(1749764072.766:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 597.206634][T12124] device team_slave_1 left promiscuous mode [ 597.220781][T12124] batman_adv: batadv0: Interface deactivated: dummy0 [ 597.228603][T12124] device dummy0 left promiscuous mode [ 597.241384][T12124] device nlmon0 left promiscuous mode [ 597.254520][T12124] device caif0 left promiscuous mode [ 597.278804][T12124] device veth3 left promiscuous mode [ 597.295691][T12143] 8021q: VLANs not supported on ip6gre0 [ 597.720553][T12161] binder: 12159:12161 ioctl 4018620d 0 returned -22 [ 597.826646][ T5170] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 598.026164][ T5170] usb 2-1: Using ep0 maxpacket: 16 [ 598.032633][ T5170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.071664][ T5170] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 598.109836][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.141310][ T5170] usb 2-1: config 0 descriptor?? [ 598.295245][ T27] audit: type=1326 audit(1749764074.096:13801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f338e32ab19 code=0x7ffc0000 [ 598.341654][ T27] audit: type=1326 audit(1749764074.146:13802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f338e32ab19 code=0x7ffc0000 [ 598.448291][ T27] audit: type=1326 audit(1749764074.176:13803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f338e32ab19 code=0x7ffc0000 [ 598.566798][ T27] audit: type=1326 audit(1749764074.176:13804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f338e32ab19 code=0x7ffc0000 [ 598.593531][ T5170] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 598.611223][ T5170] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 598.632820][ T5170] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 598.662213][ T5170] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 598.691780][ T5170] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 598.699858][ T5170] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 598.704773][ T27] audit: type=1326 audit(1749764074.176:13805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.4.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f338e32ab19 code=0x7ffc0000 [ 598.750466][T12174] binder: 12173:12174 ioctl c0306201 0 returned -14 [ 598.806341][T12174] binder: 12173:12174 ioctl c0306201 200000000240 returned -11 [ 598.809616][ T5170] usb 2-1: USB disconnect, device number 27 [ 599.752031][T12189] 8021q: VLANs not supported on ip6gre0 [ 600.101037][T12201] binder: 12198:12201 ioctl 4018620d 0 returned -22 [ 600.158077][T12203] binder: 12202:12203 ioctl c0306201 0 returned -14 [ 600.201049][T12203] binder: 12202:12203 ioctl c0306201 200000000240 returned -11 [ 600.897397][ T7980] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 601.029109][T12230] 8021q: VLANs not supported on ip6gre0 [ 601.086218][ T7980] usb 5-1: Using ep0 maxpacket: 16 [ 601.100205][ T7980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.123486][ T7980] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 601.136150][ T7980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.157945][ T7980] usb 5-1: config 0 descriptor?? [ 601.572059][ T7980] usbhid 5-1:0.0: can't add hid device: -71 [ 601.584236][ T7980] usbhid: probe of 5-1:0.0 failed with error -71 [ 601.619991][ T7980] usb 5-1: USB disconnect, device number 30 [ 601.964666][T12242] binder: 12241:12242 ioctl c0306201 0 returned -14 [ 602.117062][ T27] kauditd_printk_skb: 777 callbacks suppressed [ 602.117079][ T27] audit: type=1326 audit(1749764077.926:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.157919][T12247] binder: 12246:12247 ioctl c0306201 200000000240 returned -11 [ 602.206431][ T27] audit: type=1326 audit(1749764077.956:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.296172][ T27] audit: type=1326 audit(1749764077.956:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.386188][ T27] audit: type=1326 audit(1749764077.956:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.502934][ T27] audit: type=1326 audit(1749764077.956:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.620210][ T27] audit: type=1326 audit(1749764077.956:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.729065][ T27] audit: type=1326 audit(1749764077.956:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.861126][ T27] audit: type=1326 audit(1749764077.956:14590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.943275][ T27] audit: type=1326 audit(1749764077.956:14591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 602.966312][ T27] audit: type=1326 audit(1749764077.956:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce2972ab19 code=0x7ffc0000 [ 603.639210][T12277] binder: 12276:12277 ioctl c0306201 0 returned -14 [ 603.846469][T12285] binder: 12281:12285 ioctl c0306201 200000000240 returned -11 [ 604.059913][T12290] binder: 12288:12290 ioctl c0306201 200000000240 returned -11 [ 604.098148][ T5170] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 604.286391][ T5170] usb 5-1: Using ep0 maxpacket: 16 [ 604.294749][ T5170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.324228][T12297] binder: BINDER_SET_CONTEXT_MGR already set [ 604.354907][ T5170] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 604.382212][T12297] binder: 12295:12297 ioctl 4018620d 200000000040 returned -16 [ 604.412433][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.482120][ T5170] usb 5-1: config 0 descriptor?? [ 604.948517][ T5170] usbhid 5-1:0.0: can't add hid device: -71 [ 604.955833][ T5170] usbhid: probe of 5-1:0.0 failed with error -71 [ 604.978932][ T5170] usb 5-1: USB disconnect, device number 31 [ 605.042416][T12308] lo speed is unknown, defaulting to 1000 [ 605.057374][T12308] bond0 speed is unknown, defaulting to 1000 [ 605.420778][T12320] binder: 12319:12320 ioctl c0306201 0 returned -14 [ 605.864181][T12334] binder: 12333:12334 ioctl c0306201 200000000240 returned -11 [ 606.118611][T12337] 8021q: VLANs not supported on ip6gre0 [ 607.046779][ T7980] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 607.266350][ T7980] usb 5-1: Using ep0 maxpacket: 16 [ 607.273359][ T7980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.343071][ T7980] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 607.403463][ T7980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.438419][ T7980] usb 5-1: config 0 descriptor?? [ 607.865923][ T7980] usbhid 5-1:0.0: can't add hid device: -71 [ 607.889528][ T7980] usbhid: probe of 5-1:0.0 failed with error -71 [ 607.900816][ T4701] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 607.907671][ T7980] usb 5-1: USB disconnect, device number 32 [ 607.983625][T12371] 8021q: VLANs not supported on ip6gre0 [ 608.107903][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.136224][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.176734][ T4701] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 608.195608][T12376] lo speed is unknown, defaulting to 1000 [ 608.213565][T12376] bond0 speed is unknown, defaulting to 1000 [ 608.231910][ T4701] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 608.366144][ T952] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 608.405012][ T4701] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 608.446363][ T4701] usb 6-1: Manufacturer: syz [ 608.452967][T12379] binder: 12378:12379 ioctl c0306201 200000000240 returned -11 [ 608.462336][ T4701] usb 6-1: config 0 descriptor?? [ 608.566861][ T952] usb 7-1: Using ep0 maxpacket: 32 [ 608.584029][ T952] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 608.611862][ T952] usb 7-1: config 0 has no interface number 0 [ 608.627730][ T952] usb 7-1: config 0 interface 184 has no altsetting 0 [ 608.667341][ T952] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 608.690365][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.736136][ T952] usb 7-1: Product: syz [ 608.742621][ T952] usb 7-1: Manufacturer: syz [ 608.760024][ T952] usb 7-1: SerialNumber: syz [ 608.788662][ T952] usb 7-1: config 0 descriptor?? [ 608.816831][ T952] smsc75xx v1.0.0 [ 608.820590][ T952] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 608.841414][ T952] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 609.384008][T12373] batman_adv: batadv0: Removing interface: dummy0 [ 609.497856][T12367] syz.5.2334 (12367): drop_caches: 2 [ 609.622865][T12367] syz.5.2334 (12367): drop_caches: 2 [ 609.725032][ T4701] usbhid 6-1:0.0: can't add hid device: -71 [ 609.743607][ T4701] usbhid: probe of 6-1:0.0 failed with error -71 [ 609.754450][ T4701] usb 6-1: USB disconnect, device number 22 [ 610.452934][ T27] kauditd_printk_skb: 1574 callbacks suppressed [ 610.452947][ T27] audit: type=1326 audit(1749764086.256:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 610.501995][T12410] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 610.508524][T12410] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 610.524696][T12405] device batadv1 entered promiscuous mode [ 610.550348][T12410] vhci_hcd vhci_hcd.0: Device attached [ 610.587065][ T27] audit: type=1326 audit(1749764086.296:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 610.636422][T12407] 8021q: VLANs not supported on ip6gre0 [ 610.640155][T12415] binder: 12414:12415 ioctl c0306201 200000000240 returned -11 [ 610.711563][ T27] audit: type=1326 audit(1749764086.296:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 610.752650][T12411] vhci_hcd: connection closed [ 610.752845][ T4585] vhci_hcd: stop threads [ 610.762418][ T4585] vhci_hcd: release socket [ 610.785184][ T4585] vhci_hcd: disconnect device [ 610.797188][ T27] audit: type=1326 audit(1749764086.296:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 610.821721][ T27] audit: type=1326 audit(1749764086.296:16171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12408 comm="syz.5.2347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4468d8e929 code=0x7ffc0000 [ 610.844963][ T952] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 610.862761][ T952] usb 41-1: enqueue for inactive port 0 [ 610.898775][ T27] audit: type=1326 audit(1749764086.686:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 610.934487][T12419] tipc: Enabled bearer , priority 10 [ 610.951371][ T952] vhci_hcd: vhci_device speed not set [ 610.957795][ T27] audit: type=1326 audit(1749764086.686:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 610.958112][T12419] tipc: Bearer : already 2 bearers with priority 10 [ 611.014219][ T27] audit: type=1326 audit(1749764086.696:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 611.051934][T12419] tipc: Bearer : trying with adjusted priority [ 611.070421][T12419] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 611.071234][ T27] audit: type=1326 audit(1749764086.696:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 611.079899][T12419] tipc: Enabled bearer , priority 9 [ 611.124835][ T27] audit: type=1326 audit(1749764086.696:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2978e929 code=0x7ffc0000 [ 611.482054][T12441] 8021q: VLANs not supported on ip6gre0 [ 611.547365][ T5170] usb 7-1: USB disconnect, device number 30 [ 611.557563][ T7980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 611.620152][T12446] binder: 12445:12446 ioctl c0306201 200000000240 returned -11 [ 611.768044][ T7980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.794490][ T7980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.814668][ T7980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.868995][ T7980] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 611.887547][ T7980] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 611.905867][ T7980] usb 2-1: Manufacturer: syz [ 611.940347][ T7980] usb 2-1: config 0 descriptor?? [ 611.951090][T12459] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2368'. [ 612.158555][ T7980] usbhid 2-1:0.0: can't add hid device: -71 [ 612.164651][ T7980] usbhid: probe of 2-1:0.0 failed with error -71 [ 612.196750][ T7980] usb 2-1: USB disconnect, device number 28 [ 612.277593][T12469] 8021q: VLANs not supported on ip6gre0 [ 612.566358][ T5170] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 612.756658][ T5170] usb 1-1: Using ep0 maxpacket: 16 [ 612.769913][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.838528][ T5170] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 612.898908][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.951690][ T5170] usb 1-1: config 0 descriptor?? [ 613.294388][T12499] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2386'. [ 613.412149][ T5170] usbhid 1-1:0.0: can't add hid device: -71 [ 613.421163][ T5170] usbhid: probe of 1-1:0.0 failed with error -71 [ 613.433933][ T5170] usb 1-1: USB disconnect, device number 24 [ 613.559719][T12508] lo speed is unknown, defaulting to 1000 [ 613.627335][T12508] bond0 speed is unknown, defaulting to 1000 [ 614.802828][T12544] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2400'. [ 615.516222][ T5170] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 615.706152][ T5170] usb 5-1: Using ep0 maxpacket: 16 [ 615.714098][ T5170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.759109][ T5170] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 615.800935][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.818056][ T5170] usb 5-1: config 0 descriptor?? [ 616.231267][ T5170] usbhid 5-1:0.0: can't add hid device: -71 [ 616.246334][ T5170] usbhid: probe of 5-1:0.0 failed with error -71 [ 616.280966][ T5170] usb 5-1: USB disconnect, device number 33 [ 616.577189][T12582] device batadv1 entered promiscuous mode [ 616.665576][T12585] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 616.672121][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 616.706427][T12585] vhci_hcd vhci_hcd.0: Device attached [ 616.768984][T12586] vhci_hcd: connection closed [ 616.770421][ T4585] vhci_hcd: stop threads [ 616.792741][ T4585] vhci_hcd: release socket [ 616.808839][ T4585] vhci_hcd: disconnect device [ 616.848835][T12588] lo speed is unknown, defaulting to 1000 [ 616.868544][T12588] bond0 speed is unknown, defaulting to 1000 [ 617.479828][T12606] 8021q: VLANs not supported on ip6gre0 [ 618.015447][T12622] lo speed is unknown, defaulting to 1000 [ 618.050436][T12622] bond0 speed is unknown, defaulting to 1000 [ 619.226164][ T5402] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 619.428357][ T5402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.455241][ T5402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.500911][ T4701] lo speed is unknown, defaulting to 1000 [ 619.528974][ T5402] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.595937][ T5402] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 619.622660][T12648] lo speed is unknown, defaulting to 1000 [ 619.646578][ T5402] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 619.654642][ T5402] usb 6-1: Manufacturer: syz [ 619.715821][ T5402] usb 6-1: config 0 descriptor?? [ 619.727162][T12648] bond0 speed is unknown, defaulting to 1000 [ 619.804396][T12657] binder: 12656:12657 ioctl c0306201 200000000240 returned -11 [ 619.930480][ T5402] usbhid 6-1:0.0: can't add hid device: -71 [ 619.951211][ T5402] usbhid: probe of 6-1:0.0 failed with error -71 [ 619.990837][ T5402] usb 6-1: USB disconnect, device number 23 [ 621.292798][T12686] binder: 12685:12686 ioctl c0306201 200000000240 returned -11 [ 621.782872][T12701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.823357][T12701] batman_adv: batadv0: Interface deactivated: dummy0 [ 621.857676][T12701] batman_adv: batadv0: Removing interface: dummy0 [ 621.870951][T12704] binder: 12703:12704 ioctl c0306201 0 returned -14 [ 621.879700][T12701] device macsec0 left promiscuous mode [ 621.886116][T12701] bridge0: port 1(macsec0) entered disabled state [ 622.536357][T12730] 8021q: VLANs not supported on ip6gre0 [ 623.713805][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 623.713815][ T27] audit: type=1326 audit(1749764099.516:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 623.802422][T12754] batman_adv: batadv0: Removing interface: dummy0 [ 623.838240][T12754] device bridge_slave_0 left promiscuous mode [ 623.861922][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.886099][ T27] audit: type=1326 audit(1749764099.556:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 623.998531][T12754] device bridge_slave_1 left promiscuous mode [ 624.055726][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.065610][ T27] audit: type=1326 audit(1749764099.556:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 624.069451][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.095122][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.119415][T12754] bond0: (slave bond_slave_0): Releasing backup interface [ 624.174081][T12754] bond0: (slave bond_slave_1): Releasing backup interface [ 624.265029][ T27] audit: type=1326 audit(1749764099.556:16190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 624.381867][ T27] audit: type=1326 audit(1749764099.556:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12757 comm="syz.1.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 624.424775][T12754] team0: Port device team_slave_0 removed [ 624.456451][T12754] team0: Port device team_slave_1 removed [ 624.462400][T12754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.517043][T12754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.586858][T12754] device macsec0 left promiscuous mode [ 624.603425][T12754] bridge0: port 3(macsec0) entered disabled state [ 624.631979][T12754] bond2: (slave ip6gretap1): Releasing backup interface [ 624.669258][T12754] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 8a:3d:94:30:66:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 624.701894][T12754] bond2: (slave veth3): Releasing backup interface [ 624.717917][T12766] 8021q: VLANs not supported on ip6gre0 [ 624.883714][T12775] lo speed is unknown, defaulting to 1000 [ 624.897173][T12775] bond0 speed is unknown, defaulting to 1000 [ 625.124409][ T27] audit: type=1326 audit(1749764100.926:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 625.147309][ T27] audit: type=1326 audit(1749764100.946:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 625.170330][ T27] audit: type=1326 audit(1749764100.976:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 625.226378][ T27] audit: type=1326 audit(1749764100.976:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 625.350988][ T27] audit: type=1326 audit(1749764100.976:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.2488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f338e38e929 code=0x7ffc0000 [ 626.324578][T12814] 8021q: VLANs not supported on ip6gre0 [ 629.346888][ T5170] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 629.549567][ T5170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.574122][ T5170] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.610035][ T5170] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.664971][ T5170] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 629.714808][ T5170] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 629.734886][ T5170] usb 2-1: Manufacturer: syz [ 629.750931][ T5170] usb 2-1: config 0 descriptor?? [ 629.990821][ T5170] usbhid 2-1:0.0: can't add hid device: -71 [ 629.997753][ T5170] usbhid: probe of 2-1:0.0 failed with error -71 [ 630.023517][ T5170] usb 2-1: USB disconnect, device number 29 [ 630.906455][T12920] lo speed is unknown, defaulting to 1000 [ 630.974247][T12920] bond0 speed is unknown, defaulting to 1000 [ 631.676299][ T4300] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 631.887699][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.926395][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.960482][ T4300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.003229][ T4300] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 632.026196][ T4300] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 632.034897][ T4300] usb 2-1: Manufacturer: syz [ 632.056556][ T4300] usb 2-1: config 0 descriptor?? [ 632.295479][ T4300] usbhid 2-1:0.0: can't add hid device: -71 [ 632.309654][ T4300] usbhid: probe of 2-1:0.0 failed with error -71 [ 632.402823][ T4300] usb 2-1: USB disconnect, device number 30 [ 633.131357][T12976] 8021q: VLANs not supported on ip6gre0 [ 634.086437][ T4300] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 634.290051][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.304222][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.317758][ T4300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.341972][ T4300] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 634.351683][ T4300] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 634.361777][ T4300] usb 2-1: Manufacturer: syz [ 634.367966][ T4300] usb 2-1: config 0 descriptor?? [ 634.582246][ T4300] usbhid 2-1:0.0: can't add hid device: -71 [ 634.613340][ T4300] usbhid: probe of 2-1:0.0 failed with error -71 [ 634.650162][ T4300] usb 2-1: USB disconnect, device number 31 [ 635.215499][T13014] 8021q: VLANs not supported on ip6gre0 [ 635.236319][ T5170] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 635.275561][T13017] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2567'. [ 635.437810][ T5170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.523007][ T5170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 635.585406][ T5170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 635.636282][ T5170] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 635.676870][ T5170] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 635.716245][ T5170] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 635.744627][ T5170] usb 5-1: Manufacturer: syz [ 635.777138][ T5170] usb 5-1: config 0 descriptor?? [ 636.089713][T13035] lo speed is unknown, defaulting to 1000 [ 636.122149][T13035] bond0 speed is unknown, defaulting to 1000 [ 636.229935][ T5170] rc_core: IR keymap rc-hauppauge not found [ 636.235912][ T5170] Registered IR keymap rc-empty [ 636.260857][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.306420][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.356973][ T5170] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 636.374343][ T5170] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 636.438845][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.546386][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.616193][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.666213][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.706267][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.746446][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.786209][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.826205][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.876561][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.906270][ T5170] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 636.966845][ T5170] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.002535][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.013242][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.033457][ T5170] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.122485][T13055] 8021q: VLANs not supported on ip6gre0 [ 638.376703][ T952] usb 5-1: USB disconnect, device number 34 [ 638.591002][T13089] lo speed is unknown, defaulting to 1000 [ 638.672515][T13089] bond0 speed is unknown, defaulting to 1000 [ 639.036997][ T27] audit: type=1326 audit(1749764114.846:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 639.077168][ T27] audit: type=1326 audit(1749764114.886:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.150432][ T27] audit: type=1326 audit(1749764114.886:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.196581][ T27] audit: type=1326 audit(1749764114.886:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.266380][ T27] audit: type=1326 audit(1749764114.886:16201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.355836][ T27] audit: type=1326 audit(1749764114.886:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.418540][ T27] audit: type=1326 audit(1749764114.886:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.512180][ T27] audit: type=1326 audit(1749764114.886:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.598415][ T27] audit: type=1326 audit(1749764114.886:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.696776][ T27] audit: type=1326 audit(1749764114.886:16206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 639.793897][T13122] 8021q: VLANs not supported on ip6gre0 [ 640.812941][T13154] lo speed is unknown, defaulting to 1000 [ 640.843584][T13154] bond0 speed is unknown, defaulting to 1000 [ 644.190005][ T27] kauditd_printk_skb: 1463 callbacks suppressed [ 644.190023][ T27] audit: type=1326 audit(1749764119.996:17670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47c98e929 code=0x7ffc0000 [ 644.219319][ T952] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 644.286550][ T27] audit: type=1326 audit(1749764120.036:17671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.309425][ T27] audit: type=1326 audit(1749764120.046:17672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.339267][ T27] audit: type=1326 audit(1749764120.046:17673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.363828][ T27] audit: type=1326 audit(1749764120.046:17674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.427367][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.450008][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.461973][ T27] audit: type=1326 audit(1749764120.046:17675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.531884][ T952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.552105][ T27] audit: type=1326 audit(1749764120.046:17676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.581844][ T27] audit: type=1326 audit(1749764120.046:17677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.615912][ T27] audit: type=1326 audit(1749764120.046:17678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.676630][ T27] audit: type=1326 audit(1749764120.046:17679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd47c92ab19 code=0x7ffc0000 [ 644.756265][ T952] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 644.765525][ T952] usb 6-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 644.773779][ T952] usb 6-1: Manufacturer: syz [ 644.780537][ T952] usb 6-1: config 0 descriptor?? [ 644.998268][T13220] syz.5.2638 (13220): drop_caches: 2 [ 645.039079][T13220] syz.5.2638 (13220): drop_caches: 2 [ 645.077773][ T952] usbhid 6-1:0.0: can't add hid device: -71 [ 645.094753][ T952] usbhid: probe of 6-1:0.0 failed with error -71 [ 645.174453][ T952] usb 6-1: USB disconnect, device number 24 [ 646.246142][ T4701] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 646.439390][ T4701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.457994][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 646.479287][ T4701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.506135][ T4701] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 646.527531][ T4701] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 646.546283][ T4701] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.575269][ T4701] usb 6-1: Manufacturer: syz [ 646.581118][ T4701] usb 6-1: config 0 descriptor?? [ 646.916144][ T4701] rc_core: IR keymap rc-hauppauge not found [ 646.922431][ T4701] Registered IR keymap rc-empty [ 646.944566][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.036458][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.096600][ T4701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 647.126946][ T4701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 647.185367][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.266451][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.306390][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.366228][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.406360][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.446388][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.449540][T13297] 8021q: VLANs not supported on ip6gre0 [ 647.486211][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.526337][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.586233][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.626209][ T4701] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 647.667371][ T4701] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 647.712270][ T4701] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.780465][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.790013][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.556274][ T952] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 648.756115][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 648.765260][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.794690][ T952] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 648.829759][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.843754][ T952] usb 2-1: config 0 descriptor?? [ 649.248970][T13334] 8021q: VLANs not supported on ip6gre0 [ 649.261948][ T952] usbhid 2-1:0.0: can't add hid device: -71 [ 649.272846][ T952] usbhid: probe of 2-1:0.0 failed with error -71 [ 649.345131][ T952] usb 2-1: USB disconnect, device number 32 [ 649.446163][ T4701] usb 6-1: USB disconnect, device number 25 [ 650.091318][ T4253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.101944][ T4253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.145660][ T4253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.155012][ T4253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.164605][ T4253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 650.173054][ T4253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.360065][T13346] lo speed is unknown, defaulting to 1000 [ 650.466553][ C0] ------------[ cut here ]------------ [ 650.472497][ C0] refcount_t: addition on 0; use-after-free. [ 650.478938][ C0] WARNING: CPU: 0 PID: 4580 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 650.488317][ C0] Modules linked in: [ 650.492265][ C0] CPU: 0 PID: 4580 Comm: kworker/u4:30 Not tainted 6.1.141-syzkaller #0 [ 650.500667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 650.510804][ C0] Workqueue: netns cleanup_net [ 650.515632][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 650.521801][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 650.541513][ C0] RSP: 0018:ffffc90000007688 EFLAGS: 00010246 [ 650.547668][ C0] RAX: b40616fe250d9300 RBX: 0000000000000002 RCX: ffff888054f19dc0 [ 650.555681][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 650.563811][ C0] RBP: ffffc900000077e8 R08: dffffc0000000000 R09: fffff52000000e61 [ 650.571858][ C0] R10: fffff52000000e61 R11: 1ffff92000000e60 R12: ffff88805992b880 [ 650.579900][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888028bfdc48 [ 650.587949][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 650.596966][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.603595][ C0] CR2: 000000110c393189 CR3: 000000007aff7000 CR4: 00000000003526f0 [ 650.611643][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.619690][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.627733][ C0] Call Trace: [ 650.631044][ C0] [ 650.633915][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 650.639040][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 650.644288][ C0] ? skb_clone+0x21b/0x370 [ 650.648781][ C0] ? tipc_crypto_clone_msg+0x33/0x160 [ 650.654203][ C0] tipc_crypto_clone_msg+0x91/0x160 [ 650.659484][ C0] tipc_crypto_xmit+0x1928/0x2300 [ 650.664596][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 650.669906][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 650.675160][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 650.680526][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 650.685874][ C0] tipc_disc_timeout+0x568/0x6b0 [ 650.690889][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 650.696172][ C0] call_timer_fn+0x1a0/0x670 [ 650.700792][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 650.706070][ C0] ? call_timer_fn+0xc1/0x670 [ 650.710777][ C0] ? __run_timers+0x7c0/0x7c0 [ 650.715504][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 650.720871][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 650.721910][T13346] bond0 speed is unknown, defaulting to 1000 [ 650.726133][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 650.726196][ C0] __run_timers+0x525/0x7c0 [ 650.726229][ C0] ? detach_timer+0x350/0x350 [ 650.726254][ C0] ? lock_chain_count+0x20/0x20 [ 650.726286][ C0] run_timer_softirq+0x63/0xf0 [ 650.726311][ C0] handle_softirqs+0x2a1/0x920 [ 650.761255][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 650.766193][ C0] ? do_softirq+0x200/0x200 [ 650.770750][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 650.776114][ C0] __irq_exit_rcu+0x12f/0x220 [ 650.780848][ C0] ? irq_exit_rcu+0x20/0x20 [ 650.785407][ C0] irq_exit_rcu+0x5/0x20 [ 650.789734][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 650.795437][ C0] [ 650.798436][ C0] [ 650.801408][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 650.807585][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 650.814135][ C0] Code: 74 05 e8 ce 97 6d f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 13 3e f7 65 8b 05 97 d4 e8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 650.833839][ C0] RSP: 0018:ffffc90004baf4e0 EFLAGS: 00000206 [ 650.839978][ C0] RAX: b40616fe250d9300 RBX: 0000000000000a06 RCX: b40616fe250d9300 [ 650.848031][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 650.856074][ C0] RBP: ffffc90004baf568 R08: dffffc0000000000 R09: fffffbfff2117066 [ 650.864087][ C0] R10: fffffbfff2117066 R11: 1ffffffff2117065 R12: dffffc0000000000 [ 650.872151][ C0] R13: dffffc0000000000 R14: ffff888063b427c0 R15: 1ffff92000975e9c [ 650.880204][ C0] ? _raw_spin_unlock+0x40/0x40 [ 650.885096][ C0] ? trace_sched_wakeup+0x5d/0x160 [ 650.890309][ C0] try_to_wake_up+0x64c/0x1080 [ 650.895137][ C0] wake_up_q+0x78/0xc0 [ 650.899323][ C0] __mutex_unlock_slowpath+0x406/0x6a0 [ 650.904933][ C0] ? mutex_unlock+0x10/0x10 [ 650.909523][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 650.914598][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 650.919885][ C0] ? slab_free_freelist_hook+0x131/0x1a0 [ 650.925572][ C0] __rtnl_unlock+0x64/0xe0 [ 650.930099][ C0] netdev_run_todo+0x2b7/0xd80 [ 650.935010][ C0] ? netdev_refcnt_read+0x50/0x50 [ 650.940127][ C0] ? bpf_offload_dev_netdev_register+0xd90/0xd90 [ 650.946541][ C0] ? _raw_spin_unlock+0x24/0x40 [ 650.951455][ C0] ? simple_release_fs+0x98/0xd0 [ 650.956471][ C0] nsim_destroy+0xb2/0x150 [ 650.960941][ C0] __nsim_dev_port_del+0x155/0x1c0 [ 650.966165][ C0] nsim_dev_reload_destroy+0x283/0x480 [ 650.971688][ C0] nsim_dev_reload_down+0x86/0xb0 [ 650.976891][ C0] devlink_reload+0x1f1/0x660 [ 650.981643][ C0] ? devlink_resources_validate+0xc0/0xc0 [ 650.987449][ C0] ? devlinks_xa_find_get+0x27/0x330 [ 650.992792][ C0] ? devlinks_xa_find_get+0x319/0x330 [ 650.998237][ C0] ? devlinks_xa_find_get+0x27/0x330 [ 651.003590][ C0] devlink_pernet_pre_exit+0x116/0x270 [ 651.009142][ C0] ? mutex_unlock+0x10/0x10 [ 651.013698][ C0] ? devlink_trap_notify+0x1b0/0x1b0 [ 651.019080][ C0] ? cttimeout_net_pre_exit+0x20d/0x230 [ 651.024692][ C0] cleanup_net+0x57b/0xb80 [ 651.029175][ C0] ? ops_free_list+0x3b0/0x3b0 [ 651.033987][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 651.039966][ C0] ? _raw_spin_unlock+0x40/0x40 [ 651.044882][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 651.050169][ C0] ? process_one_work+0x7a1/0x1160 [ 651.053934][T13346] chnl_net:caif_netlink_parms(): no params data found [ 651.055303][ C0] process_one_work+0x898/0x1160 [ 651.055349][ C0] ? worker_detach_from_pool+0x240/0x240 [ 651.072782][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 651.077886][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 651.083310][ C0] ? kthread_data+0x4b/0xc0 [ 651.087895][ C0] worker_thread+0xaa2/0x1250 [ 651.092680][ C0] kthread+0x29d/0x330 [ 651.096852][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 651.101906][ C0] ? kthread_blkcg+0xd0/0xd0 [ 651.106565][ C0] ret_from_fork+0x1f/0x30 [ 651.111043][ C0] [ 651.114055][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.121335][ C0] CPU: 0 PID: 4580 Comm: kworker/u4:30 Not tainted 6.1.141-syzkaller #0 [ 651.129697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.139919][ C0] Workqueue: netns cleanup_net [ 651.144719][ C0] Call Trace: [ 651.148002][ C0] [ 651.150859][ C0] dump_stack_lvl+0x168/0x22e [ 651.155544][ C0] ? memcpy+0x3c/0x60 [ 651.159529][ C0] ? show_regs_print_info+0x12/0x12 [ 651.164731][ C0] ? load_image+0x3b0/0x3b0 [ 651.169246][ C0] panic+0x2c9/0x710 [ 651.173577][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 651.178081][ C0] ? ret_from_fork+0x1f/0x30 [ 651.182745][ C0] __warn+0x2f8/0x4f0 [ 651.186204][ C1] ------------[ cut here ]------------ [ 651.186212][ C1] refcount_t: saturated; leaking memory. [ 651.186488][ C1] WARNING: CPU: 1 PID: 4542 at lib/refcount.c:22 refcount_warn_saturate+0x153/0x1a0 [ 651.186519][ C1] Modules linked in: [ 651.186528][ C1] CPU: 1 PID: 4542 Comm: kworker/u4:17 Not tainted 6.1.141-syzkaller #0 [ 651.186545][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.186554][ C1] Workqueue: events_unbound toggle_allocation_gate [ 651.186574][ C1] RIP: 0010:refcount_warn_saturate+0x153/0x1a0 [ 651.186595][ C1] Code: 09 01 48 c7 c7 80 d1 be 8a e8 59 30 45 fd 0f 0b eb 8c e8 a0 1d 79 fd c6 05 a5 72 e2 09 01 48 c7 c7 80 d1 be 8a e8 3d 30 45 fd <0f> 0b e9 6d ff ff ff e8 81 1d 79 fd c6 05 8a 72 e2 09 01 48 c7 c7 [ 651.186608][ C1] RSP: 0018:ffffc900001e0688 EFLAGS: 00010246 [ 651.186622][ C1] RAX: b913cca1ee708c00 RBX: 0000000000000001 RCX: ffff888055318000 [ 651.186635][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 651.186645][ C1] RBP: ffffc900001e07e8 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 651.186657][ C1] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffff88805992b880 [ 651.186668][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888058192048 [ 651.186680][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 651.186695][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.186707][ C1] CR2: 0000001b2d910ff8 CR3: 000000000c68e000 CR4: 00000000003526e0 [ 651.186723][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.186735][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.186746][ C1] Call Trace: [ 651.186752][ C1] [ 651.186759][ C1] tipc_crypto_xmit+0x17a9/0x2300 [ 651.186799][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 651.186825][ C1] ? skb_clone+0x21b/0x370 [ 651.186845][ C1] ? tipc_crypto_clone_msg+0x33/0x160 [ 651.186870][ C1] tipc_crypto_clone_msg+0x91/0x160 [ 651.186904][ C1] tipc_crypto_xmit+0x1928/0x2300 [ 651.186942][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 651.186972][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 651.186995][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 651.187016][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 651.187046][ C1] tipc_disc_timeout+0x568/0x6b0 [ 651.187070][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.187101][ C1] call_timer_fn+0x1a0/0x670 [ 651.187117][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.187133][ C1] ? call_timer_fn+0xc1/0x670 [ 651.187148][ C1] ? __run_timers+0x7c0/0x7c0 [ 651.187171][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 651.187193][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 651.187207][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.187226][ C1] __run_timers+0x525/0x7c0 [ 651.187252][ C1] ? detach_timer+0x350/0x350 [ 651.187272][ C1] ? lock_chain_count+0x20/0x20 [ 651.187299][ C1] run_timer_softirq+0x63/0xf0 [ 651.187323][ C1] handle_softirqs+0x2a1/0x920 [ 651.187352][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 651.187379][ C1] ? do_softirq+0x200/0x200 [ 651.187404][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 651.187429][ C1] __irq_exit_rcu+0x12f/0x220 [ 651.187450][ C1] ? irq_exit_rcu+0x20/0x20 [ 651.187481][ C1] irq_exit_rcu+0x5/0x20 [ 651.187500][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 651.187523][ C1] [ 651.187528][ C1] [ 651.187534][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.187549][ C1] RIP: 0010:smp_call_function_many_cond+0xe80/0x1270 [ 651.187567][ C1] Code: 1f 89 de 83 e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 de e5 0a 00 eb e5 44 89 [ 651.187580][ C1] RSP: 0018:ffffc900054bf800 EFLAGS: 00000293 [ 651.187593][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888055318000 [ 651.187605][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 651.187614][ C1] RBP: ffffc900054bf960 R08: dffffc0000000000 R09: fffffbfff2117049 [ 651.187626][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 1ffff110171c85ad [ 651.187637][ C1] R13: ffff8880b8f3bb40 R14: 0000000000000000 R15: ffff8880b8e42d68 [ 651.187671][ C1] ? text_poke_sync+0x20/0x20 [ 651.187694][ C1] ? smp_call_function_many+0x30/0x30 [ 651.187709][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 651.187727][ C1] ? text_poke+0x90/0x90 [ 651.187745][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 651.187762][ C1] ? text_poke_loc_init+0xd6/0x570 [ 651.187786][ C1] ? text_poke_sync+0x20/0x20 [ 651.187803][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 651.187819][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 651.187838][ C1] text_poke_bp_batch+0x2b0/0x7d0 [ 651.187862][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 651.187880][ C1] ? text_poke_loc_init+0x570/0x570 [ 651.187911][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 651.187936][ C1] text_poke_finish+0x16/0x30 [ 651.187954][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 651.187969][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 651.187990][ C1] static_key_enable+0x16/0x20 [ 651.188006][ C1] toggle_allocation_gate+0xb4/0x430 [ 651.188024][ C1] ? show_object+0xa0/0xa0 [ 651.188043][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 651.188066][ C1] ? read_lock_is_recursive+0x10/0x10 [ 651.188084][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 651.188106][ C1] ? _raw_spin_unlock+0x40/0x40 [ 651.188129][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 651.188152][ C1] ? process_one_work+0x7a1/0x1160 [ 651.188169][ C1] process_one_work+0x898/0x1160 [ 651.188198][ C1] ? worker_detach_from_pool+0x240/0x240 [ 651.188219][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 651.188239][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 651.188260][ C1] ? kthread_data+0x4b/0xc0 [ 651.188285][ C1] worker_thread+0xaa2/0x1250 [ 651.188327][ C1] kthread+0x29d/0x330 [ 651.188346][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 651.188361][ C1] ? kthread_blkcg+0xd0/0xd0 [ 651.188384][ C1] ret_from_fork+0x1f/0x30 [ 651.188417][ C1] [ 651.188427][ C1] irq event stamp: 8968666 [ 651.188433][ C1] hardirqs last enabled at (8968668): [] vprintk_store+0x995/0xc90 [ 651.188457][ C1] hardirqs last disabled at (8968669): [] vprintk_store+0x14e/0xc90 [ 651.188479][ C1] softirqs last enabled at (8968430): [] __irq_exit_rcu+0x12f/0x220 [ 651.188504][ C1] softirqs last disabled at (8968437): [] __irq_exit_rcu+0x12f/0x220 [ 651.188528][ C1] ---[ end trace 0000000000000000 ]--- [ 651.188547][ C1] ------------[ cut here ]------------ [ 651.188552][ C1] refcount_t: underflow; use-after-free. [ 651.188811][ C1] WARNING: CPU: 1 PID: 4542 at lib/refcount.c:28 refcount_warn_saturate+0x11b/0x1a0 [ 651.188837][ C1] Modules linked in: [ 651.188845][ C1] CPU: 1 PID: 4542 Comm: kworker/u4:17 Tainted: G W 6.1.141-syzkaller #0 [ 651.188861][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.188869][ C1] Workqueue: events_unbound toggle_allocation_gate [ 651.188894][ C1] RIP: 0010:refcount_warn_saturate+0x11b/0x1a0 [ 651.188914][ C1] Code: 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd 0f 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be 8a e8 75 30 45 fd <0f> 0b eb a8 e8 bc 1d 79 fd c6 05 c0 72 e2 09 01 48 c7 c7 80 d1 be [ 651.188926][ C1] RSP: 0018:ffffc900001e0688 EFLAGS: 00010246 [ 651.188938][ C1] RAX: b913cca1ee708c00 RBX: 0000000000000003 RCX: ffff888055318000 [ 651.188949][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 651.188959][ C1] RBP: ffffc900001e07e8 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 651.188971][ C1] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: 00000000c0000000 [ 651.188982][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88805992b880 [ 651.188993][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 651.189007][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.189018][ C1] CR2: 0000001b2d910ff8 CR3: 000000000c68e000 CR4: 00000000003526e0 [ 651.189033][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.189042][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.189053][ C1] Call Trace: [ 651.189057][ C1] [ 651.189063][ C1] tipc_crypto_xmit+0x18f4/0x2300 [ 651.189101][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 651.189126][ C1] ? skb_clone+0x21b/0x370 [ 651.189146][ C1] ? tipc_crypto_clone_msg+0x33/0x160 [ 651.189171][ C1] tipc_crypto_clone_msg+0x91/0x160 [ 651.189196][ C1] tipc_crypto_xmit+0x1928/0x2300 [ 651.189234][ C1] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 651.189265][ C1] tipc_bearer_xmit_skb+0x242/0x3f0 [ 651.189286][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 651.189308][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 651.189339][ C1] tipc_disc_timeout+0x568/0x6b0 [ 651.189361][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.189393][ C1] call_timer_fn+0x1a0/0x670 [ 651.189408][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.189424][ C1] ? call_timer_fn+0xc1/0x670 [ 651.189438][ C1] ? __run_timers+0x7c0/0x7c0 [ 651.189461][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 651.189481][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 651.189495][ C1] ? tipc_disc_init_msg+0x570/0x570 [ 651.189514][ C1] __run_timers+0x525/0x7c0 [ 651.189539][ C1] ? detach_timer+0x350/0x350 [ 651.189560][ C1] ? lock_chain_count+0x20/0x20 [ 651.189585][ C1] run_timer_softirq+0x63/0xf0 [ 651.189607][ C1] handle_softirqs+0x2a1/0x920 [ 651.189634][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 651.189660][ C1] ? do_softirq+0x200/0x200 [ 651.189685][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 651.189709][ C1] __irq_exit_rcu+0x12f/0x220 [ 651.189730][ C1] ? irq_exit_rcu+0x20/0x20 [ 651.189761][ C1] irq_exit_rcu+0x5/0x20 [ 651.189780][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 651.189802][ C1] [ 651.189807][ C1] [ 651.189813][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 651.189829][ C1] RIP: 0010:smp_call_function_many_cond+0xe80/0x1270 [ 651.189846][ C1] Code: 1f 89 de 83 e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 de e5 0a 00 eb e5 44 89 [ 651.189859][ C1] RSP: 0018:ffffc900054bf800 EFLAGS: 00000293 [ 651.189872][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888055318000 [ 651.189890][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 651.189900][ C1] RBP: ffffc900054bf960 R08: dffffc0000000000 R09: fffffbfff2117049 [ 651.189912][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 1ffff110171c85ad [ 651.189923][ C1] R13: ffff8880b8f3bb40 R14: 0000000000000000 R15: ffff8880b8e42d68 [ 651.189957][ C1] ? text_poke_sync+0x20/0x20 [ 651.189980][ C1] ? smp_call_function_many+0x30/0x30 [ 651.189995][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 651.190013][ C1] ? text_poke+0x90/0x90 [ 651.190031][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 651.190048][ C1] ? text_poke_loc_init+0xd6/0x570 [ 651.190072][ C1] ? text_poke_sync+0x20/0x20 [ 651.190089][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 651.190105][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 651.190124][ C1] text_poke_bp_batch+0x2b0/0x7d0 [ 651.190147][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 651.190166][ C1] ? text_poke_loc_init+0x570/0x570 [ 651.190190][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 651.190214][ C1] text_poke_finish+0x16/0x30 [ 651.190231][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 651.190247][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 651.190266][ C1] static_key_enable+0x16/0x20 [ 651.190283][ C1] toggle_allocation_gate+0xb4/0x430 [ 651.190301][ C1] ? show_object+0xa0/0xa0 [ 651.190320][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 651.190343][ C1] ? read_lock_is_recursive+0x10/0x10 [ 651.190361][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 651.190383][ C1] ? _raw_spin_unlock+0x40/0x40 [ 651.190405][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 651.190429][ C1] ? process_one_work+0x7a1/0x1160 [ 651.190445][ C1] process_one_work+0x898/0x1160 [ 651.190475][ C1] ? worker_detach_from_pool+0x240/0x240 [ 651.190495][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 651.190515][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 651.190536][ C1] ? kthread_data+0x4b/0xc0 [ 651.190561][ C1] worker_thread+0xaa2/0x1250 [ 651.190602][ C1] kthread+0x29d/0x330 [ 651.190621][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 651.190636][ C1] ? kthread_blkcg+0xd0/0xd0 [ 651.190659][ C1] ret_from_fork+0x1f/0x30 [ 651.190691][ C1] [ 651.190696][ C1] irq event stamp: 8968886 [ 651.190702][ C1] hardirqs last enabled at (8968888): [] vprintk_store+0x995/0xc90 [ 651.190724][ C1] hardirqs last disabled at (8968889): [] vprintk_store+0x14e/0xc90 [ 651.190747][ C1] softirqs last enabled at (8968430): [] __irq_exit_rcu+0x12f/0x220 [ 651.190771][ C1] softirqs last disabled at (8968437): [] __irq_exit_rcu+0x12f/0x220 [ 651.190796][ C1] ---[ end trace 0000000000000000 ]--- [ 652.460618][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 652.466116][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 652.471585][ C0] report_bug+0x2ba/0x4f0 [ 652.475921][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 652.481406][ C0] handle_bug+0x3a/0x70 [ 652.485574][ C0] exc_invalid_op+0x16/0x40 [ 652.490082][ C0] asm_exc_invalid_op+0x16/0x20 [ 652.494931][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 652.501005][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 652.520613][ C0] RSP: 0018:ffffc90000007688 EFLAGS: 00010246 [ 652.526694][ C0] RAX: b40616fe250d9300 RBX: 0000000000000002 RCX: ffff888054f19dc0 [ 652.534668][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 652.542726][ C0] RBP: ffffc900000077e8 R08: dffffc0000000000 R09: fffff52000000e61 [ 652.550704][ C0] R10: fffff52000000e61 R11: 1ffff92000000e60 R12: ffff88805992b880 [ 652.558678][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888028bfdc48 [ 652.566665][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 652.572128][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 652.577541][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 652.582843][ C0] ? skb_clone+0x21b/0x370 [ 652.587261][ C0] ? tipc_crypto_clone_msg+0x33/0x160 [ 652.592646][ C0] tipc_crypto_clone_msg+0x91/0x160 [ 652.597851][ C0] tipc_crypto_xmit+0x1928/0x2300 [ 652.602894][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 652.608104][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 652.613397][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 652.618699][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 652.623998][ C0] tipc_disc_timeout+0x568/0x6b0 [ 652.628946][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 652.634162][ C0] call_timer_fn+0x1a0/0x670 [ 652.638844][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 652.644043][ C0] ? call_timer_fn+0xc1/0x670 [ 652.648718][ C0] ? __run_timers+0x7c0/0x7c0 [ 652.653486][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 652.658730][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 652.663928][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 652.669130][ C0] __run_timers+0x525/0x7c0 [ 652.673649][ C0] ? detach_timer+0x350/0x350 [ 652.678331][ C0] ? lock_chain_count+0x20/0x20 [ 652.683188][ C0] run_timer_softirq+0x63/0xf0 [ 652.687960][ C0] handle_softirqs+0x2a1/0x920 [ 652.692736][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 652.697613][ C0] ? do_softirq+0x200/0x200 [ 652.702125][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 652.707335][ C0] __irq_exit_rcu+0x12f/0x220 [ 652.712040][ C0] ? irq_exit_rcu+0x20/0x20 [ 652.716568][ C0] irq_exit_rcu+0x5/0x20 [ 652.720824][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 652.726502][ C0] [ 652.729436][ C0] [ 652.732404][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 652.738389][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 652.744898][ C0] Code: 74 05 e8 ce 97 6d f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 13 3e f7 65 8b 05 97 d4 e8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 652.764504][ C0] RSP: 0018:ffffc90004baf4e0 EFLAGS: 00000206 [ 652.770574][ C0] RAX: b40616fe250d9300 RBX: 0000000000000a06 RCX: b40616fe250d9300 [ 652.778548][ C0] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 652.786525][ C0] RBP: ffffc90004baf568 R08: dffffc0000000000 R09: fffffbfff2117066 [ 652.794499][ C0] R10: fffffbfff2117066 R11: 1ffffffff2117065 R12: dffffc0000000000 [ 652.802562][ C0] R13: dffffc0000000000 R14: ffff888063b427c0 R15: 1ffff92000975e9c [ 652.810552][ C0] ? _raw_spin_unlock+0x40/0x40 [ 652.815494][ C0] ? trace_sched_wakeup+0x5d/0x160 [ 652.820614][ C0] try_to_wake_up+0x64c/0x1080 [ 652.825395][ C0] wake_up_q+0x78/0xc0 [ 652.829465][ C0] __mutex_unlock_slowpath+0x406/0x6a0 [ 652.834924][ C0] ? mutex_unlock+0x10/0x10 [ 652.839430][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 652.844455][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 652.849754][ C0] ? slab_free_freelist_hook+0x131/0x1a0 [ 652.855396][ C0] __rtnl_unlock+0x64/0xe0 [ 652.859827][ C0] netdev_run_todo+0x2b7/0xd80 [ 652.864600][ C0] ? netdev_refcnt_read+0x50/0x50 [ 652.869635][ C0] ? bpf_offload_dev_netdev_register+0xd90/0xd90 [ 652.875977][ C0] ? _raw_spin_unlock+0x24/0x40 [ 652.880837][ C0] ? simple_release_fs+0x98/0xd0 [ 652.885777][ C0] nsim_destroy+0xb2/0x150 [ 652.890210][ C0] __nsim_dev_port_del+0x155/0x1c0 [ 652.895327][ C0] nsim_dev_reload_destroy+0x283/0x480 [ 652.900838][ C0] nsim_dev_reload_down+0x86/0xb0 [ 652.905869][ C0] devlink_reload+0x1f1/0x660 [ 652.910563][ C0] ? devlink_resources_validate+0xc0/0xc0 [ 652.916289][ C0] ? devlinks_xa_find_get+0x27/0x330 [ 652.921586][ C0] ? devlinks_xa_find_get+0x319/0x330 [ 652.926963][ C0] ? devlinks_xa_find_get+0x27/0x330 [ 652.932255][ C0] devlink_pernet_pre_exit+0x116/0x270 [ 652.937720][ C0] ? mutex_unlock+0x10/0x10 [ 652.942224][ C0] ? devlink_trap_notify+0x1b0/0x1b0 [ 652.947530][ C0] ? cttimeout_net_pre_exit+0x20d/0x230 [ 652.953079][ C0] cleanup_net+0x57b/0xb80 [ 652.957503][ C0] ? ops_free_list+0x3b0/0x3b0 [ 652.962290][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 652.968186][ C0] ? _raw_spin_unlock+0x40/0x40 [ 652.973041][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 652.978244][ C0] ? process_one_work+0x7a1/0x1160 [ 652.983358][ C0] process_one_work+0x898/0x1160 [ 652.988307][ C0] ? worker_detach_from_pool+0x240/0x240 [ 652.993951][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 652.998980][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 653.004356][ C0] ? kthread_data+0x4b/0xc0 [ 653.008873][ C0] worker_thread+0xaa2/0x1250 [ 653.013837][ C0] kthread+0x29d/0x330 [ 653.017913][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 653.022949][ C0] ? kthread_blkcg+0xd0/0xd0 [ 653.027553][ C0] ret_from_fork+0x1f/0x30 [ 653.032070][ C0] [ 653.035381][ C0] Kernel Offset: disabled [ 653.039902][ C0] Rebooting in 86400 seconds..